decocms 4.39.1 → 4.40.0

package/dist/server/server.js

@@ -1070,7 +1070,7 @@ ${w}`:w;return{...J,description:U,inputExamples:G?void 0:J.inputExamples}});retu
 `)},flush($){$.enqueue(`data: [DONE]
 
 `)}})}},El0={"content-type":"text/event-stream","cache-control":"no-cache",connection:"keep-alive","x-vercel-ai-ui-message-stream":"v1","x-accel-buffering":"no"};gi=H1.record(H1.string(),BE.optional()),Ll0=C0(()=>H0(H1.union([H1.strictObject({type:H1.literal("text-start"),id:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("text-delta"),id:H1.string(),delta:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("text-end"),id:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("error"),errorText:H1.string()}),H1.strictObject({type:H1.literal("tool-input-start"),toolCallId:H1.string(),toolName:H1.string(),providerExecuted:H1.boolean().optional(),providerMetadata:H$.optional(),toolMetadata:gi.optional(),dynamic:H1.boolean().optional(),title:H1.string().optional()}),H1.strictObject({type:H1.literal("tool-input-delta"),toolCallId:H1.string(),inputTextDelta:H1.string()}),H1.strictObject({type:H1.literal("tool-input-available"),toolCallId:H1.string(),toolName:H1.string(),input:H1.unknown(),providerExecuted:H1.boolean().optional(),providerMetadata:H$.optional(),toolMetadata:gi.optional(),dynamic:H1.boolean().optional(),title:H1.string().optional()}),H1.strictObject({type:H1.literal("tool-input-error"),toolCallId:H1.string(),toolName:H1.string(),input:H1.unknown(),providerExecuted:H1.boolean().optional(),providerMetadata:H$.optional(),toolMetadata:gi.optional(),dynamic:H1.boolean().optional(),errorText:H1.string(),title:H1.string().optional()}),H1.strictObject({type:H1.literal("tool-approval-request"),approvalId:H1.string(),toolCallId:H1.string(),signature:H1.string().optional()}),H1.strictObject({type:H1.literal("tool-output-available"),toolCallId:H1.string(),output:H1.unknown(),providerExecuted:H1.boolean().optional(),providerMetadata:H$.optional(),toolMetadata:gi.optional(),dynamic:H1.boolean().optional(),preliminary:H1.boolean().optional()}),H1.strictObject({type:H1.literal("tool-output-error"),toolCallId:H1.string(),errorText:H1.string(),providerExecuted:H1.boolean().optional(),providerMetadata:H$.optional(),toolMetadata:gi.optional(),dynamic:H1.boolean().optional()}),H1.strictObject({type:H1.literal("tool-output-denied"),toolCallId:H1.string()}),H1.strictObject({type:H1.literal("reasoning-start"),id:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("reasoning-delta"),id:H1.string(),delta:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("reasoning-end"),id:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("source-url"),sourceId:H1.string(),url:H1.string(),title:H1.string().optional(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("source-document"),sourceId:H1.string(),mediaType:H1.string(),title:H1.string(),filename:H1.string().optional(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.literal("file"),url:H1.string(),mediaType:H1.string(),providerMetadata:H$.optional()}),H1.strictObject({type:H1.custom(($)=>typeof $==="string"&&$.startsWith("data-"),{message:'Type must start with "data-"'}),id:H1.string().optional(),data:H1.unknown(),transient:H1.boolean().optional()}),H1.strictObject({type:H1.literal("start-step")}),H1.strictObject({type:H1.literal("finish-step")}),H1.strictObject({type:H1.literal("start"),messageId:H1.string().optional(),messageMetadata:H1.unknown().optional()}),H1.strictObject({type:H1.literal("finish"),finishReason:H1.enum(["stop","length","content-filter","tool-calls","error","other"]).optional(),messageMetadata:H1.unknown().optional()}),H1.strictObject({type:H1.literal("abort"),reason:H1.string().optional()}),H1.strictObject({type:H1.literal("message-metadata"),messageMetadata:H1.unknown()})])));$$6=TQ;Z$6=ui;X$6=h3({prefix:"aitxt",size:24}),Y$6={file:!0,source:!0,"text-start":!0,"text-end":!0,"text-delta":!0,"reasoning-start":!0,"reasoning-end":!0,"reasoning-delta":!0,"tool-input-start":!0,"tool-input-end":!0,"tool-input-delta":!0,"tool-approval-request":!0,"tool-call":!0,"tool-result":!0,"tool-error":!0,"stream-start":!1,"response-metadata":!1,finish:!1,error:!1,raw:!1};LX=E0.record(E0.string(),BE.optional()),w$6=C0(()=>H0(E0.array(E0.object({id:E0.string(),role:E0.enum(["system","user","assistant"]),metadata:E0.unknown().optional(),parts:E0.array(E0.union([E0.object({type:E0.literal("text"),text:E0.string(),state:E0.enum(["streaming","done"]).optional(),providerMetadata:H$.optional()}),E0.object({type:E0.literal("reasoning"),text:E0.string(),state:E0.enum(["streaming","done"]).optional(),providerMetadata:H$.optional()}),E0.object({type:E0.literal("source-url"),sourceId:E0.string(),url:E0.string(),title:E0.string().optional(),providerMetadata:H$.optional()}),E0.object({type:E0.literal("source-document"),sourceId:E0.string(),mediaType:E0.string(),title:E0.string(),filename:E0.string().optional(),providerMetadata:H$.optional()}),E0.object({type:E0.literal("file"),mediaType:E0.string(),filename:E0.string().optional(),url:E0.string(),providerMetadata:H$.optional()}),E0.object({type:E0.literal("step-start")}),E0.object({type:E0.string().startsWith("data-"),id:E0.string().optional(),data:E0.unknown()}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("input-streaming"),input:E0.unknown().optional(),providerExecuted:E0.boolean().optional(),callProviderMetadata:H$.optional(),output:E0.never().optional(),errorText:E0.never().optional(),approval:E0.never().optional()}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("input-available"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.never().optional()}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("approval-requested"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.never().optional(),reason:E0.never().optional(),signature:E0.string().optional()})}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("approval-responded"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.boolean(),reason:E0.string().optional(),signature:E0.string().optional()})}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-available"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.unknown(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),resultProviderMetadata:H$.optional(),preliminary:E0.boolean().optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!0),reason:E0.string().optional(),signature:E0.string().optional()}).optional()}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-error"),input:E0.unknown().optional(),rawInput:E0.unknown().optional(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.string(),callProviderMetadata:H$.optional(),resultProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!0),reason:E0.string().optional(),signature:E0.string().optional()}).optional()}),E0.object({type:E0.literal("dynamic-tool"),toolName:E0.string(),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-denied"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!1),reason:E0.string().optional(),signature:E0.string().optional()})}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("input-streaming"),providerExecuted:E0.boolean().optional(),callProviderMetadata:H$.optional(),input:E0.unknown().optional(),output:E0.never().optional(),errorText:E0.never().optional(),approval:E0.never().optional()}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("input-available"),providerExecuted:E0.boolean().optional(),input:E0.unknown(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.never().optional()}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("approval-requested"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.never().optional(),reason:E0.never().optional(),signature:E0.string().optional()})}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("approval-responded"),input:E0.unknown(),providerExecuted:E0.boolean().optional(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.boolean(),reason:E0.string().optional(),signature:E0.string().optional()})}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-available"),providerExecuted:E0.boolean().optional(),input:E0.unknown(),output:E0.unknown(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),resultProviderMetadata:H$.optional(),preliminary:E0.boolean().optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!0),reason:E0.string().optional(),signature:E0.string().optional()}).optional()}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-error"),providerExecuted:E0.boolean().optional(),input:E0.unknown().optional(),rawInput:E0.unknown().optional(),output:E0.never().optional(),errorText:E0.string(),callProviderMetadata:H$.optional(),resultProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!0),reason:E0.string().optional(),signature:E0.string().optional()}).optional()}),E0.object({type:E0.string().startsWith("tool-"),toolCallId:E0.string(),toolMetadata:LX.optional(),state:E0.literal("output-denied"),providerExecuted:E0.boolean().optional(),input:E0.unknown(),output:E0.never().optional(),errorText:E0.never().optional(),callProviderMetadata:H$.optional(),approval:E0.object({id:E0.string(),approved:E0.literal(!1),reason:E0.string().optional(),signature:E0.string().optional()})})])).nonempty("Message must contain at least one part")})).nonempty("Messages array must not be empty")));L$6=g50,z$6={type:"no-schema",jsonSchema:async()=>{return},async validatePartialResult({value:$,textDelta:Z}){return{success:!0,value:{partial:$,textDelta:Z}}},async validateFinalResult($,Z){return $===void 0?{success:!1,error:new jX({message:"No object generated: response did not match schema.",text:Z.text,response:Z.response,usage:Z.usage,finishReason:Z.finishReason})}:{success:!0,value:$}},createElementStream(){throw new H6({functionality:"element streams in no-schema mode"})}};T$6=h3({prefix:"aiobj",size:24});k$6=h3({prefix:"aiobj",size:24});C$6=class extends QN{constructor({data:$,mediaType:Z}){super({data:$,mediaType:Z});let G="mp3";if(Z){let X=Z.split("/");if(X.length===2){if(Z!=="audio/mpeg")G=X[1]}}if(!G)throw Error("Audio format must be provided or determinable from media type");this.format=G}};f$6={word:/\S+\s+/m,line:/\n+/m};v$6=Rl0();$86=w6$,F6$=`vercel.ai.error.${U6$}`,Z86=Symbol.for(F6$),N6$=class extends T6{constructor({modelId:$,modelType:Z,providerId:G,availableProviders:X,message:Y=`No such provider: ${G} (available providers: ${X.join()})`}){super({errorName:U6$,modelId:$,modelType:Z,message:Y});this[H6$]=!0,this.providerId=G,this.availableProviders=X}static isInstance($){return L1.hasMarker($,F6$)}};H6$=Z86;G86=B6$;Q86=Rl0();D6$=class extends kl0{constructor($={}){super($)}processResponseStream($){return Iw({stream:$,schema:Ll0}).pipeThrough(new TransformStream({async transform(Z,G){if(!Z.success)throw Z.error;G.enqueue(Z.value)}}))}};D86=class extends kl0{constructor($={}){super($)}processResponseStream($){return O86({stream:$.pipeThrough(new TextDecoderStream)})}}});function h50($){return{type:"data-title-result",data:{title:$},transient:!0}}function Vl0($){return $.type==="data-title-input"}function Cl0($){return $.type==="data-title-result"}async function*E6$($,Z){let G=Z.persistTitle??((Y,Q)=>Z.ctx.storage.threads.update(Y,{title:Q}).then(()=>{})),X=!1;for await(let Y of $){if(Vl0(Y)){console.warn("[title-interceptor] harness emitted deprecated data-title-input chunk; ignoring");continue}if(Cl0(Y)){if(X){console.warn("[title-interceptor] harness emitted multiple data-title-result chunks; ignoring extra");continue}if(X=!0,Z.currentThreadTitle!==Pw)continue;let Q=Y.data.title;if(!Q)continue;await G(Z.threadId,Q).catch((J)=>{console.error("[title-interceptor] persist failed for thread",Z.threadId,J)});try{await Z.onTitleUpdated?.(Q)}catch(J){console.error("[title-interceptor] onTitleUpdated callback failed",J)}if(!Z.isStreamFinished())try{Z.writer.write({type:"data-thread-title",data:{title:Q},transient:!0})}catch(J){console.error("[title-interceptor] writer.write failed",J)}continue}yield Y}}function L6$($,Z){let G=Z.persistTitle??((Y,Q)=>Z.ctx.storage.threads.update(Y,{title:Q}).then(()=>{})),X=!1;return $.pipeThrough(new TransformStream({async transform(Y,Q){if(Vl0(Y)){console.warn("[title-interceptor] harness emitted deprecated data-title-input chunk; ignoring");return}if(Cl0(Y)){if(X){console.warn("[title-interceptor] harness emitted multiple data-title-result chunks; ignoring extra");return}if(X=!0,Z.currentThreadTitle!==Pw)return;let J=Y.data.title;if(!J)return;await G(Z.threadId,J).catch((W)=>{console.error("[title-interceptor] persist failed for thread",Z.threadId,W)});try{await Z.onTitleUpdated?.(J)}catch(W){console.error("[title-interceptor] onTitleUpdated callback failed",W)}if(!Z.isStreamFinished())try{Z.writer.write({type:"data-thread-title",data:{title:J},transient:!0})}catch(W){console.error("[title-interceptor] writer.write failed",W)}return}Q.enqueue(Y)}}))}var z6$=O(()=>{kH()});function E86($){let Z=$[Symbol.asyncIterator]();return new ReadableStream({async pull(G){try{let{value:X,done:Y}=await Z.next();if(Y)G.close();else G.enqueue(X)}catch(X){G.error(X)}},async cancel(G){await Z.return?.(G)}})}function L86($,Z){let G=$.getReader(),X=!1,Y=()=>{if(X)return;X=!0,G.releaseLock()};return new ReadableStream({async pull(Q){try{let{done:J,value:W}=await G.read();if(J)Y(),Q.close();else Q.enqueue(W)}catch(J){Z(),Y(),Q.error(J)}},async cancel(Q){await G.cancel(Q),Y()}})}function z86($){let Z=$.metadata?.usage;if(!Z||typeof Z!=="object"||Array.isArray(Z))return null;let G=Z,X=(Y)=>typeof Y==="number"?Y:0;return{...G,inputTokens:X(G.inputTokens),outputTokens:X(G.outputTokens),totalTokens:X(G.totalTokens)}}function c50($){let Z=[],G=!1,X=!1,Y=!1,Q=!0,J=$.errorMessageId??crypto.randomUUID(),W,K=new Promise((z)=>{W=z});if(!$.chunks&&!$.chunkStream)throw Error("consumeHarnessStream requires chunks or chunkStream");let w=$.chunks?async function*(){try{yield*$.chunks}catch(z){throw Y=!0,z}}():null,U=$.chunkStream?L86($.chunkStream,()=>{Y=!0}):null,F=$.originalMessages?.at(-1),H=!$.generateMessageId&&F?.role==="assistant"?F.id:void 0,N=new Map,B=null,D=(z)=>{if($.generateMessageId){let j=N.get(z);if(j===void 0)j=$.generateMessageId(),N.set(z,j);return j}if(B===null)B=z;return H&&z===B?H:z},E=(z)=>({...z,id:D(z.id)});return{uiStream:Al0({originalMessages:$.originalMessages,execute:({writer:z})=>{let j={ctx:null,isStreamFinished:()=>G,currentThreadTitle:$.title.currentThreadTitle,threadId:$.title.threadId,writer:z,onTitleUpdated:$.title.onTitleUpdated,persistTitle:$.title.persistTitle};if(U){z.merge(L6$(U,j));return}let P=E6$(w,j);z.merge(E86(P))},onStepFinish:({responseMessage:z})=>{let j=E(z);Z.push($.persistence.emitStepParts(j).catch((P)=>{Q=!1,console.error("[consume-harness-stream] emitStepParts failed",P)})),Z.push(Promise.resolve($.hooks?.onStep?.(j)).catch((P)=>console.error("[consume-harness-stream] onStep hook failed",P)))},onFinish:async({responseMessage:z,finishReason:j})=>{G=!0,await Promise.allSettled(Z);let P=E(z);if(!X){if(j)P.metadata={...P.metadata??{},finishReason:j};await $.persistence.emitFinal(P).catch((M)=>{Q=!1,console.error("[consume-harness-stream] emitFinal failed",M)})}let A=z86(P);if(A)await Promise.resolve($.hooks?.onUsage?.(A)).catch((M)=>console.error("[consume-harness-stream] onUsage hook failed",M));if(!Y)await Promise.resolve($.hooks?.onFinish?.(P,j,{persistenceOk:Q})).catch((M)=>console.error("[consume-harness-stream] onFinish hook failed",M));W()},onError:(z)=>{G=!0;let j=z instanceof Error?z.message:String(z);if(!X)X=!0,Z.push($.persistence.emitError(J,j).catch((P)=>{Q=!1,console.error("[consume-harness-stream] emitError failed",P)})),Z.push(Promise.resolve($.hooks?.onError?.(z)).catch((P)=>console.error("[consume-harness-stream] onError hook failed",P)));return $.sanitizeErrorText?$.sanitizeErrorText(z):j}}),whenComplete:K,isStreamFinished:()=>G}}var _l0=O(()=>{y6();z6$()});function j86($){return{type:"data-user-message",data:$}}function j6$($){if(!$||typeof $!=="object")return!1;return $.type==="data-user-message"}async function P6$($,Z,G){if(!$)return;try{await $.publishRawChunk(Z,j86(G))}catch{}}function A6$($){return Y0$($)||j6$($)}async function P86($){let Z=$.getReader();try{while(!0){let{done:G}=await Z.read();if(G)break}}finally{Z.releaseLock()}}function A86($,Z){let G=$.getReader(),X=!1,Y=()=>{if(X)return;X=!0,G.releaseLock()};return new ReadableStream({async pull(Q){try{let{done:J,value:W}=await G.read();if(J)Y(),Q.close();else Q.enqueue(W)}catch(J){Z(J),Y(),Q.error(J)}},async cancel(Q){await G.cancel(Q),Y()}})}async function T6$($){if(!$.chunks&&!$.chunkStream)throw Error("projectChunks requires chunks or chunkStream");let Z=null,G=!1,X=void 0,Y={inputTokens:0,outputTokens:0,totalTokens:0},Q=[],J=null,W=(B)=>{if(J===null)J=B;throw B},K=$.chunks?async function*(){try{for await(let B of $.chunks){if(A6$(B))continue;yield B}}catch(B){throw Z=B,B}}():void 0,w=$.chunkStream?A86($.chunkStream,(B)=>{Z=B}).pipeThrough(new TransformStream({transform(B,D){if(!A6$(B))D.enqueue(B)}})):void 0,U={emitStepParts:(B)=>$.persistence.emitStepParts(B).catch(W),emitFinal:(B)=>$.persistence.emitFinal(B).catch(W),emitError:(B,D)=>$.persistence.emitError(B,D).catch(W)},{uiStream:F,whenComplete:H}=c50({chunks:K,chunkStream:w,originalMessages:$.originalMessages??[],title:$.title?{currentThreadTitle:$.title.currentThreadTitle,threadId:$.title.threadId,persistTitle:$.title.persistTitle}:{currentThreadTitle:void 0,threadId:"projector",persistTitle:async()=>{}},persistence:U,sanitizeErrorText:$.sanitizeErrorText,errorMessageId:$.errorMessageId,generateMessageId:$.generateMessageId,hooks:{onUsage:(B)=>{Y={inputTokens:B.inputTokens,outputTokens:B.outputTokens,totalTokens:B.totalTokens}},onError:()=>{G=!0},onFinish:(B,D)=>{X=D,Q=Array.isArray(B.parts)?B.parts.filter((E)=>E!=null&&typeof E==="object"&&("type"in E)):[]}}});if(await P86(F).catch(()=>{}),await H,J!==null)throw J;if(Z!==null)throw Z;return{failed:G&&X===void 0,finishReason:X,usage:Y,finalParts:Q}}var I6$=O(()=>{_l0();Vi()});function R6$($){return $>786432}var pi=786432;function I86($){if(/[.*>\s]/.test($))throw Error("Invalid NATS subject token")}function UN($){return I86($),`${bl0}.${$}`}function q6$($){let Z=`${$.runId}:${$.fenceToken}:${$.seq}`;return $.fragmentIndex===void 0?Z:`${Z}:frag:${$.fragmentIndex}`}function R86($){return`${$.runId}:${$.fenceToken}:done:${$.finalSeq}`}function M6$($){if(!$)return null;let Z=Number($);return Number.isInteger(Z)&&Z>0?Z:null}function q86($){if(!$)return null;let Z=Number($);return Number.isInteger(Z)&&Z>=0?Z:null}function M86($){if(!$)return null;let Z=$.split(":"),[G,X,Y,Q,J]=Z;if(!G||!X||!Y)return null;if(Y==="done"){let K=M6$(Q);return Z.length===4&&K!==null?{kind:"done",runId:G,fenceToken:X,finalSeq:K}:null}if(Y==="ckpt")return null;let W=M6$(Y);if(W===null)return null;if(Z.length===3)return{kind:"chunk",runId:G,fenceToken:X,seq:W,fragmentIndex:null};if(Z.length===5&&Q==="frag"){let K=q86(J);return K===null?null:{kind:"chunk",runId:G,fenceToken:X,seq:W,fragmentIndex:K}}return null}function xl0($,Z){let G=UN(Z.runId),X=fl0.encode(JSON.stringify({p:$}));if(X.length>T86)return[];if(X.length<=pi)return[{subject:G,data:X,msgId:Z.dedup?q6$({runId:Z.runId,...Z.dedup}):void 0}];let Y=Math.ceil(X.length/pi),Q=[];for(let J=0;J<Y;J++)Q.push({subject:G,data:X.slice(J*pi,(J+1)*pi),headers:{[k6$]:String(J),[S6$]:String(Y)},msgId:Z.dedup?q6$({runId:Z.runId,...Z.dedup,fragmentIndex:J}):void 0});return Q}function V6$($){return{subject:UN($.runId),data:fl0.encode(JSON.stringify({done:!0,finalSeq:$.finalSeq})),msgId:R86($)}}function C6$($){return{subject:UN($),data:fl0.encode(JSON.stringify({done:!0}))}}function k86($){let Z=$.reduce((Y,Q)=>Y+(Q?.length??0),0),G=new Uint8Array(Z),X=0;for(let Y of $){if(!Y)continue;G.set(Y,X),X+=Y.length}return G}function u50(){let $=null;return new TransformStream({transform(Z,G){let X=Z.headers?.get(S6$);if(!X){G.enqueue(Z);return}let Y=Number(X),Q=Number(Z.headers?.get(k6$)??"0");if(Q===0)$={total:Y,received:0,parts:Array(Y)};else if(!$||$.total!==Y)return;if(!$.parts[Q])$.received++;if($.parts[Q]=Z.data,$.received<$.total)return;let J=k86($.parts);$=null,G.enqueue({subject:Z.subject,data:J,headers:Z.headers})}})}function S86($){return typeof $==="number"&&Number.isInteger($)&&$>0}function C86($){let Z=M86($.headers?.get("Nats-Msg-Id")||void 0),G;try{G=JSON.parse(V86.decode($.data))}catch{return null}if(!G||typeof G!=="object")return null;let X=G;if(X.done===!0)return{kind:"done",runId:Z?.kind==="done"?Z.runId:null,fenceToken:Z?.kind==="done"?Z.fenceToken:null,envelopeFinalSeq:S86(X.finalSeq)?X.finalSeq:null,msgIdFinalSeq:Z?.kind==="done"?Z.finalSeq:null};if("p"in X)return{kind:"chunk",seq:Z?.kind==="chunk"?Z.seq:null,runId:Z?.kind==="chunk"?Z.runId:null,fenceToken:Z?.kind==="chunk"?Z.fenceToken:null,chunk:X.p};return null}function d50(){return new TransformStream({transform($,Z){let G=C86($);if(G)Z.enqueue(G)}})}var bl0="decopilot.stream",k6$="Dp-Frag-Idx",S6$="Dp-Frag-Total",T86=33554432,fl0,V86;var vl0=O(()=>{fl0=new TextEncoder;V86=new TextDecoder});var lw="DECOPILOT_STREAMS";var yl0=()=>{};function _6$($,Z){return new TransformStream({transform(G,X){if(G.runId!==$||G.fenceToken!==Z)return;X.enqueue(G)}})}function b6$(){let $=1;return new TransformStream({transform(Z,G){if(Z.kind==="done"){G.enqueue(Z);return}if(Z.seq===null){G.error(Error("projector chunk missing seq"));return}if(Z.seq<$)return;if(Z.seq>$){G.error(new ti($,Z.seq));return}$++,G.enqueue(Z)}})}function f6$($){let Z=$.getReader(),G=!1,X=0,Y=()=>{if(G)return;G=!0,Z.releaseLock()};return new ReadableStream({async pull(Q){for(;;){let{done:J,value:W}=await Z.read();if(J){await Z.cancel(),Y(),Q.error(Error("reader stopped before done"));return}let K=W;if(K.kind==="done"){if(!(K.envelopeFinalSeq!=null&&K.envelopeFinalSeq===K.msgIdFinalSeq))continue;if(K.envelopeFinalSeq!==X){await Z.cancel(),Y(),Q.error(new ti(X+1,null));return}await Z.cancel(),Y(),Q.close();return}X=K.seq??X,Q.enqueue(K.chunk);return}},async cancel(Q){await Z.cancel(Q),Y()}})}function _86($){if(Symbol.asyncIterator in $)return $[Symbol.asyncIterator]();let Z=$[Symbol.iterator]();return{next:async()=>Z.next(),return:async(G)=>Z.return?Z.return(G):{done:!0,value:G}}}function m50($){let Z=_86($.messages),G=$.idleTimeoutMs,X=!1,Y=(Q)=>{if(X)return;X=!0,Z.return?.(Q).catch(()=>{}),$.onCancel?.()};return new ReadableStream({async pull(Q){if(G===void 0){let{done:U,value:F}=await Z.next();if(U){Q.close();return}Q.enqueue(F);return}let J=new AbortController,W=Z.next().then((U)=>{return J.abort(),U}),K=h8(G,{signal:J.signal}).then(()=>"idle").catch(()=>"cancelled"),w=await Promise.race([W,K]);if(w==="idle"){Q.error(new l50(G));return}if(w==="cancelled")return;if(w.done){Q.close();return}Q.enqueue(w.value)},async cancel(Q){Y(Q)}})}var l50,ti;var i50=O(()=>{Z9();l50=class l50 extends Error{idleTimeoutMs;constructor($){super("producer produced no output before timeout");this.idleTimeoutMs=$;this.name="StreamIdleTimeoutError"}};ti=class ti extends Error{expectedSeq;gotSeq;constructor($,Z){super(Z===null?`missing seq ${$} (stream ended at the fenced done)`:`missing seq ${$} (next delivered is ${Z})`);this.expectedSeq=$;this.gotSeq=Z;this.name="StreamGapError"}}});function b86($){let G=m50({messages:$.messages,idleTimeoutMs:$.idleTimeoutMs,onCancel:$.onDone}).pipeThrough(u50()).pipeThrough(d50()).pipeThrough(_6$($.runId,$.fenceToken)).pipeThrough(b6$());return f6$(G)}async function v6$($){let G=await(await $.js.consumers.get(lw,{filter_subjects:UN($.runId),deliver_policy:x6$.DeliverPolicy.All})).consume();async function*X(){try{for await(let Y of G)yield{subject:Y.subject,data:Y.data,headers:Y.headers}}finally{G.stop()}}return b86({messages:X(),runId:$.runId,fenceToken:$.fenceToken,idleTimeoutMs:$.idleTimeoutMs,onDone:()=>G.stop()})}var x6$;var y6$=O(()=>{yl0();i50();vl0();x6$=k(MB(),1)});function hl0($){let Z=$.type;if(typeof Z!=="string")return!1;if(Z==="text"||Z==="reasoning")return $.state!=="streaming";if(Z==="step-start")return!1;if(Z.startsWith("tool-")||Z==="dynamic-tool")return $.state==="approval-requested"||Z==="tool-user_ask"&&$.state==="input-available"||$.state==="output-available"||$.state==="output-error"||$.state==="output-denied";return!0}function gl0($){let Z=$.type??"";if(Z==="reasoning")return"reasoning";if(Z==="file")return"file";if(Z.startsWith("tool-")||Z==="dynamic-tool")return $.state==="output-available"||$.state==="output-error"||$.state==="output-denied"?"tool_result":"tool_call";return"text"}class cl0{ctx;base;seqByPart=new Map;emitted=new Set;finished=new Set;partKeyByRowId=new Map;finishMessageIdByRowId=new Map;nextSeq=0;constructor($){this.ctx=$;this.base=$.baseTimeMs??Date.now()}hasEmittedContentFor($){let Z=`${$}#`;for(let G of this.emitted)if(G.startsWith(Z))return!0;return!1}seqFor($){let Z=this.seqByPart.get($);if(Z!==void 0)return Z;let G=this.nextSeq++;return this.seqByPart.set($,G),G}row($,Z,G,X,Y,Q=null){return{id:`${this.ctx.runId}:${$}:${G}`,seq:G,org_id:this.ctx.orgId,thread_id:this.ctx.threadId,run_id:this.ctx.runId,message_id:$,role:Z,kind:X,payload:Y,payload_ref:null,metadata:Q,created_at:new Date(this.base+G).toISOString()}}emitMessageParts($){let Z=$.parts??[],G=[];for(let X=0;X<Z.length;X++){let Y=Z[X];if(!hl0(Y))continue;let Q=`${$.id}#${X}`;if(this.emitted.has(Q))continue;let J=this.seqFor(Q),W=this.row($.id,$.role,J,gl0(Y),Y);this.partKeyByRowId.set(W.id,Q),G.push(W)}return G}emitRequestMessageParts($){let Z=$.parts??[],G=[];for(let X=0;X<Z.length;X++){let Y=Z[X],Q=`${$.id}#${X}`,J=this.seqFor(Q),W=this.row($.id,$.role,J,gl0(Y),Y);this.partKeyByRowId.set(W.id,Q),G.push(W)}return G}markFinished($,Z,G=null){if(this.finished.has($))return[];let X=this.seqFor(`${$}#finish`),Y=this.row($,Z,X,"finish",{},G);return this.finishMessageIdByRowId.set(Y.id,$),[Y]}markRequestFinished($,Z,G=null){let X=this.seqFor(`${$}#finish`),Y=this.row($,Z,X,"finish",{},G);return this.finishMessageIdByRowId.set(Y.id,$),[Y]}acknowledge($){for(let Z of $){let G=this.partKeyByRowId.get(Z.id);if(G!==void 0)this.emitted.add(G);let X=this.finishMessageIdByRowId.get(Z.id);if(X!==void 0)this.finished.add(X)}}emitUserMessage($){return[...this.emitMessageParts($),...this.markFinished($.id,$.role,$.metadata??null)]}emitRequestMessage($){return[...this.emitRequestMessageParts($),...this.markRequestFinished($.id,$.role,$.metadata??null)]}emitStepParts($){return this.emitMessageParts($)}emitFinal($){let Z=this.emitMessageParts($);if(Z.length===0&&!this.hasEmittedContentFor($.id))return Z;return[...Z,...this.markFinished($.id,$.role,$.metadata??null)]}emitFinalSnapshot($){let Z=$.parts??[],G=[];for(let Q=0;Q<Z.length;Q++){let J=Z[Q];if(!hl0(J))continue;let W=`${$.id}#${Q}`,K=this.seqFor(W),w=this.row($.id,$.role,K,gl0(J),J);this.partKeyByRowId.set(w.id,W),G.push(w)}if(G.length===0&&!this.hasEmittedContentFor($.id))return G;let X=this.seqFor(`${$.id}#finish`),Y=this.row($.id,$.role,X,"finish",{},$.metadata??null);return this.finishMessageIdByRowId.set(Y.id,$.id),[...G,Y]}emitError($,Z){let G=`${$}#error`,X=[];if(!this.emitted.has(G)){let Y=this.seqFor(G),Q=this.row($,"assistant",Y,"error",{type:"text",text:`Error: ${Z}`});this.partKeyByRowId.set(Q.id,G),X.push(Q)}return[...X,...this.markFinished($,"assistant")]}}class XJ{ctx;builder;constructor($){this.ctx=$;this.builder=new cl0($)}async appendBuiltRows($){await this.ctx.storage.appendParts($),this.builder.acknowledge($)}async emitUserMessage($){await this.appendBuiltRows(this.builder.emitUserMessage($))}async emitRequestMessage($){let Z=this.builder.emitRequestMessage($);await this.ctx.storage.replaceMessageParts(this.ctx.threadId,$.id,Z),this.builder.acknowledge(Z)}async emitStepParts($){await this.appendBuiltRows(this.builder.emitStepParts($))}async emitFinal($){await this.appendBuiltRows(this.builder.emitFinal($))}async replaceFinal($){let Z=this.builder.emitFinalSnapshot($);await this.ctx.storage.replaceMessageParts(this.ctx.threadId,$.id,Z),this.builder.acknowledge(Z)}async emitError($,Z){await this.appendBuiltRows(this.builder.emitError($,Z))}}var ri=()=>{};async function f86($){let G=($.requestMessageId?await $.messageParts.maxCreatedAtMsForMessage($.runId,$.requestMessageId):null)??await $.messageParts.maxCreatedAtMsForRun($.runId);return new XJ({storage:$.messageParts,orgId:$.orgId,threadId:$.runId,runId:$.runId,baseTimeMs:(G??Date.now())+1})}async function g6$($){let Z=await f86($),G=$.replaceFinal?(X)=>Z.replaceFinal(X):(X)=>Z.emitFinal(X);return{emitStepParts:(X)=>Z.emitStepParts(X),emitFinal:G,emitError:(X,Y)=>Z.emitError(X,Y)}}var h6$=O(()=>{ri()});function n50($,Z){x86.add(1,{"org.id":Z??"unknown"})}var x86;var c6$=O(()=>{F5();x86=N8.createCounter("decopilot.projector.poison_runs",{description:"Number of decopilot runs that exhausted retries and were sent to the DLQ",unit:"{runs}"})});class ul0{intervalMs;lastBumpMs=new Map;constructor($=3000){this.intervalMs=$}shouldBump($,Z=Date.now()){let G=this.lastBumpMs.get($);if(G!==void 0&&Z-G<this.intervalMs)return!1;return this.lastBumpMs.set($,Z),!0}clear($){this.lastBumpMs.delete($)}}function u6$($,Z,G,X){return $.pipeThrough(new TransformStream({transform(Y,Q){if(G.shouldBump(Z))X();Q.enqueue(Y)},flush(){G.clear(Z)}}))}function p50($,Z=[]){if($==="stop")return Z.filter((Y)=>Y.type==="text"&&Y.text).map((Y)=>Y.text).join(`
-`).replace(/https?:\/\/[^\s)>\]]+/g,"").includes("?")?"requires_action":"completed";if($==="tool-calls"){let G=Z.some((Y)=>Y.type==="tool-user_ask"&&Y.state==="input-available"),X=Z.some((Y)=>Y.state==="approval-requested");return G||X?"requires_action":"completed"}return"failed"}function FN($,Z){return`error-${$}:${Z}`}function t50($){return{id:$.id,role:$.role,parts:$.parts,metadata:$.metadata??void 0}}var dl0=()=>{};function v86($){return`liveness: no stream events for ${Math.round($/60000)}m`}function ml0($){return $.runFenceToken!==null&&$.runFenceToken!==$.fenceToken}function d6$($){ll0=$}function l6$(){if(!ll0)throw Error("[projector-workflow] runtime not initialized \u2014 setProjectorWorkflowRuntime() must run before workflows fire");return ll0}function m6$(){return l6$()}async function i6$($,Z,G){let X=l6$(),Y=X.getJetStream();if(!Y)throw Error("JetStream unavailable");let Q=(await X.messageParts.loadWindow($.runId,{limit:500})).messages.map(t50);return{chunkCount:0,attempts:1,outcome:await T6$({chunkStream:u6$(await v6$({js:Y,runId:$.runId,fenceToken:$.fenceToken,idleTimeoutMs:$.idleTimeoutMs}),$.runId,y86,()=>{X.bumpProgress({runId:$.runId,orgId:Z}).catch(()=>{})}),persistence:await g6$({messageParts:X.messageParts,orgId:Z,runId:$.runId,requestMessageId:$.messageId,replaceFinal:!0}),originalMessages:Q,errorMessageId:FN($.runId,$.fenceToken),title:{threadId:$.runId,currentThreadTitle:G,persistTitle:async(W,K)=>{await X.persistTitle($.runId,Z,K),await X.onTitleUpdated({runId:$.runId,orgId:Z,title:K})}}})}}async function n6$($,Z,G){let X=await g86($,Z);if("skip"in X)return;let Y=X.row.orgId,Q=X.row.createdBy??$.runId,J=X.row.title;try{let{outcome:W}=await G($,Y,J),K=W?.failed?"failed":W?.finishReason==null?"completed":p50(W.finishReason,W.finalParts);if(K==="failed"){let w=W?.finishReason?`harness reported an error: ${W.finishReason}`:"harness reported an error";if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,w,"harness"))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:w,kind:"harness"})}else if(K==="requires_action")await Z.markRunRequiresAction($.runId,Y),await Z.clearSynthesizedError($.runId,$.fenceToken);else{if(await Z.completeRunIfNotCompleted($.runId,Y))await Z.recordCompleted({runId:$.runId,orgId:Y,distinctId:Q,usage:W?.usage??{inputTokens:0,outputTokens:0,totalTokens:0}});await Z.clearSynthesizedError($.runId,$.fenceToken)}await Z.purgeRun($.runId,$.fenceToken)}catch(W){if(W instanceof ti){let H=`stream truncated before projection could replay it: ${W.message}`;if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,H,"projection"))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:H,kind:"projection"});await Z.purgeRun($.runId,$.fenceToken);return}let K=W instanceof l50;if(K){let H=await Z.resolveRun($.runId).catch(()=>null);if(H!==null&&H.runFenceToken===$.fenceToken&&["completed","failed","requires_action"].includes(H.status)){await Z.purgeRun($.runId,$.fenceToken);return}}let w=K?v86(W.idleTimeoutMs):W instanceof Error?W.message:String(W),U=K?"liveness":"projection";if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,w,U))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:w,kind:U});throw W}}async function g86($,Z){let G=await Z.resolveRun($.runId);if(!G)return{skip:"missing"};if(ml0({status:G.status,runFenceToken:G.runFenceToken,fenceToken:$.fenceToken}))return{skip:"stale",row:G};if(G.version!==2)return{skip:"legacy-v1",row:G};return{row:G}}var ll0=null,y86;var il0=O(()=>{I6$();y6$();i50();h6$();c6$();dl0();y86=new ul0});function p6$($,Z){switch($.type){case"START":{let G={type:"RUN_STARTED",taskId:$.taskId,orgId:$.orgId,userId:$.userId,abortController:$.abortController,runConfig:$.runConfig,podId:$.podId,messageId:$.messageId};if(Z?.status.tag==="running")return[{type:"PREVIOUS_RUN_ABORTED",taskId:$.taskId,orgId:Z.orgId},G];return[G]}case"STEP_DONE":{if(Z?.status.tag!=="running")return[];return[{type:"STEP_COMPLETED",taskId:$.taskId,orgId:Z.orgId,stepCount:Z.status.stepCount+1}]}case"FINISH":{if(Z==null||Z.status.tag!=="running")return[];let{stepCount:G}=Z.status;if($.threadStatus==="completed")return[{type:"RUN_COMPLETED",taskId:$.taskId,orgId:Z.orgId,stepCount:G}];if($.threadStatus==="requires_action")return[{type:"RUN_REQUIRES_ACTION",taskId:$.taskId,orgId:Z.orgId,stepCount:G}];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:"error"}]}case"CANCEL":{if(Z?.status.tag!=="running")return[];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:"cancelled"}]}case"RESUME":{if(Z?.status.tag==="running")return[];return[{type:"RUN_RESUMED",taskId:$.taskId,orgId:$.orgId,userId:$.userId,abortController:$.abortController,podId:$.podId}]}case"FORCE_FAIL":{if($.reason==="ghost")return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z?.orgId??$.orgId,reason:$.reason}];if(Z?.status.tag!=="running")return[];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:$.reason}]}}}function t6$($,Z,G=new Date){switch(Z.type){case"RUN_STARTED":return{taskId:Z.taskId,orgId:Z.orgId,userId:Z.userId,status:{tag:"running",abortController:Z.abortController,stepCount:0,startedAt:G}};case"RUN_RESUMED":return{taskId:Z.taskId,orgId:Z.orgId,userId:Z.userId,status:{tag:"running",abortController:Z.abortController,stepCount:0,startedAt:G}};case"STEP_COMPLETED":if($?.status.tag!=="running")return $;return{...$,status:{...$.status,stepCount:Z.stepCount}};case"RUN_COMPLETED":return;case"RUN_REQUIRES_ACTION":return;case"RUN_FAILED":return;case"PREVIOUS_RUN_ABORTED":return}}async function r6$($,Z,G,X){let{storage:Y,sseHub:Q}=X,J=await Y.get($,Z);Q.emit(Z,A3($,G,{virtualMcpId:J?.virtual_mcp_id??void 0,createdBy:J?.created_by,triggerId:J?.trigger_id,title:J?.title,branch:J?.branch??null,createdAt:J?.created_at,updatedAt:J?.updated_at})),Q.emit(Z,Wu($,G))}async function c86($,Z){let{storage:G,sseHub:X}=Z;switch($.type){case"RUN_STARTED":{await G.update($.taskId,$.orgId,{status:"in_progress",run_config:$.runConfig??null,run_started_at:new Date().toISOString(),last_progress_at:null,failure_reason:null,failure_kind:null});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"in_progress",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at,messageId:$.messageId}));return}case"RUN_RESUMED":{await G.update($.taskId,$.orgId,{run_started_at:new Date().toISOString()});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"in_progress",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at}));return}case"STEP_COMPLETED":X.emit($.orgId,B10($.taskId,$.stepCount));return;case"RUN_COMPLETED":await r6$($.taskId,$.orgId,"completed",Z);return;case"RUN_REQUIRES_ACTION":await r6$($.taskId,$.orgId,"requires_action",Z);return;case"RUN_FAILED":{if($.reason==="ghost"){if(!await G.forceFailIfInProgress($.taskId,$.orgId))return;await G.update($.taskId,$.orgId,{run_config:null,run_started_at:null})}else await G.update($.taskId,$.orgId,{status:"failed",run_config:null,run_started_at:null,...$.reason==="reaped"?{failure_reason:h86,failure_kind:"stall"}:{}});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"failed",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at})),X.emit($.orgId,Wu($.taskId,"failed"));return}case"PREVIOUS_RUN_ABORTED":return}}async function o6$($,Z){for(let{event:G}of $)await c86(G,Z)}var h86="Run stalled \u2014 no progress within the idle timeout window";var a6$=O(()=>{t8()});function s6$($){return $.now-$.lastProgressAt>$.idleTimeoutMs}function e6$($){return Math.max($.persistedLastProgressAt??Number.NEGATIVE_INFINITY,$.currentRunStartedAt)}class pl0{deps;clock;states=new Map;reaperTimer=null;constructor($,Z=()=>new Date){this.deps=$;this.clock=Z;this.reaperTimer=setInterval(()=>{this.reapStaleRuns().catch((G)=>{console.error("[RunRegistry] Reaper sweep failed",G)})},u86)}async execute($){let Z=this.dispatch($);return await this.react(Z),Z}dispatch($){let Z=this.states.get($.taskId),G=p6$($,Z),X=[];for(let Y of G){let Q=this.states.get(Y.taskId);if(Y.type==="PREVIOUS_RUN_ABORTED"||Y.type==="RUN_FAILED"){if(Q?.status.tag==="running")Q.status.abortController.abort()}let J=t6$(Q,Y,this.clock());if(J===void 0)this.states.delete(Y.taskId);else this.states.set(Y.taskId,J);if(X.push({event:Y,state:J}),d86.has(Y.type))$4$().add(1,{"org.id":Y.orgId});else if(l86.has(Y.type)&&Q?.status.tag==="running")$4$().add(-1,{"org.id":Y.orgId})}return X}react($){return o6$($,this.deps)}getAbortSignal($){let Z=this.states.get($);if(Z?.status.tag==="running")return Z.status.abortController.signal;return null}isRunning($){return this.states.get($)?.status.tag==="running"}async stopAll(){for(let[,$]of this.states)if($.status.tag==="running")$.status.abortController.abort();this.states.clear()}dispose(){if(this.reaperTimer)clearInterval(this.reaperTimer),this.reaperTimer=null}async reapStaleRuns(){let $=this.clock().getTime(),Z=[...this.states].filter(([,G])=>G.status.tag==="running");for(let[G,X]of Z){if(this.states.get(G)?.status.tag!=="running")continue;let Q;try{let W=await this.deps.storage.getProgress(G,X.orgId);Q=e6$({persistedLastProgressAt:W?.lastProgressAt??null,currentRunStartedAt:X.status.startedAt.getTime()})}catch(W){console.warn(`[RunRegistry] Reaper progress read failed for ${G}; skipping`,W);continue}if(!s6$({lastProgressAt:Q,now:$,idleTimeoutMs:r50}))continue;let J=await this.deps.storage.get(G,X.orgId).catch(()=>null);if(J&&J.status!=="in_progress"){let W=this.states.get(G);if(W?.status.tag==="running")W.status.abortController.abort();this.states.delete(G);continue}console.warn(`[RunRegistry] Reaping stuck run for thread ${G} (idle > ${r50/60000}m) ...`),m86().add(1,{"org.id":X.orgId,reason:"idle_timeout"}),await this.execute({type:"FORCE_FAIL",taskId:G,reason:"reaped"}).catch((W)=>{console.error("[RunRegistry] Reaper execute failed",W)})}}}var u86=300000,nl0,r50,d86,l86,Z4$=($)=>{let Z;return()=>Z??=$()},$4$,m86;var tl0=O(()=>{a6$();F5();nl0=Number(process.env.RUN_IDLE_TIMEOUT_MS),r50=Number.isFinite(nl0)&&nl0>0?nl0:600000,d86=new Set(["RUN_STARTED","RUN_RESUMED"]),l86=new Set(["RUN_COMPLETED","RUN_FAILED","RUN_REQUIRES_ACTION","PREVIOUS_RUN_ABORTED"]),$4$=Z4$(()=>N8.createUpDownCounter("decopilot.stream.inflight",{description:"Number of in-flight decopilot stream requests",unit:"{requests}"})),m86=Z4$(()=>N8.createCounter("decopilot.run.reaped",{description:"Number of decopilot runs force-failed by the progress-based reaper",unit:"{runs}"}))});async function G4$($){let{runId:Z}=$,G=m6$(),X=await G.resolveRun(Z),Y=$.fenceToken??X?.runFenceToken;if(!X||X.version!==2||Y==null)return;if(ml0({status:X.status,runFenceToken:X.runFenceToken,fenceToken:Y}))return;if(!G.getJetStream())throw Error("JetStream unavailable for consume step");await n6$({runId:Z,fenceToken:Y,messageId:$.messageId,idleTimeoutMs:$.idleTimeoutMs??r50},G,i6$)}var X4$=O(()=>{il0();tl0()});function rl0($){let Z=Math.max(1,$),G=0,X=[];return{async acquire(){if(G<Z)G++;else await new Promise((Q)=>X.push(Q));let Y=!1;return()=>{if(Y)return;Y=!0;let Q=X.shift();if(Q)Q();else G--}},get active(){return G},get pending(){return X.length}}}var i86,Y4$=()=>i86.acquire();var ol0=O(()=>{i86=rl0(Number(process.env.DECOPILOT_MAX_CONCURRENT_SUBAGENTS??4))});var al0,o50,HN,Q4$=()=>({active:HN.active,pending:HN.pending,max:o50}),J4$=()=>{if(HN.active>=o50)console.log("[hostedHarness] run parked at concurrency cap",{active:HN.active,pending:HN.pending,max:o50});return HN.acquire()};var sl0=O(()=>{ol0();F5();al0=Number(process.env.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS),o50=Number.isFinite(al0)&&al0>0?al0:3,HN=rl0(o50);N8.createObservableGauge("hosted_runs.active",{description:"Hosted agent-loop runs executing on this pod",unit:"{runs}"}).addCallback(($)=>$.observe(HN.active));N8.createObservableGauge("hosted_runs.pending",{description:"Hosted agent-loop runs parked waiting for a slot on this pod",unit:"{runs}"}).addCallback(($)=>$.observe(HN.pending))});import{DBOS as oi}from"@dbos-inc/dbos-sdk";function Zm0($){el0=$}function W4$(){if(!el0)throw Error("[hostedHarness] runtime not initialized \u2014 setHostedHarnessRuntime() must run before workflows fire");return el0}async function n86($,Z){let G=W4$(),{request:X}=$,Y=Z??await G.meshContextFactory(X.organizationId,X.userId);if(!Y)throw Error("user membership lost mid-dispatch");if(X.runMetadata)Y.metadata.runMetadata=X.runMetadata;let Q=new AbortController,J=await J4$();try{await G.dispatchRunFn({...X,abortSignal:Q.signal},Y,G.deps)}finally{J()}}function p86($,Z,G,X=1){let Y=G instanceof Error?G.message:String(G);return{messageId:FN($,Z),errorChunk:{type:"error",errorText:Y},seq:X,finalSeq:X}}function t86($){if(!($ instanceof Error))return;let Z=$.lastAckSeq;return typeof Z==="number"?Z+1:void 0}async function r86($,Z){let G=W4$(),{streamBuffer:X}=G.deps,{messageId:Y,errorChunk:Q,seq:J,finalSeq:W}=p86($.runId,$.fenceToken,Z,t86(Z));if(!X){console.error(`[hostedHarness] no streamBuffer configured; dropping terminal error for run=${$.runId} fence=${$.fenceToken} messageId=${Y}`);return}if(!await X.publishRawChunk($.runId,Q,{fenceToken:$.fenceToken,seq:J})){console.error(`[hostedHarness] failed to publish terminal error chunk for run=${$.runId} fence=${$.fenceToken} messageId=${Y}`);return}await X.publishDone($.runId,$.fenceToken,W)}async function o86($){try{await oi.runStep(()=>n86($),{name:"runHostedHarness",retriesAllowed:!1})}catch(Z){await oi.runStep(()=>r86($,Z),{name:"publishHostedHarnessFailure",retriesAllowed:!0}).catch((G)=>{console.error(`[hostedHarness] could not publish terminal error for run=${$.runId} fence=${$.fenceToken}`,G)})}}function K4$($,Z){return`decopilot-hosted:${$}:${Z}`}async function w4$($){return{workflowID:(await oi.startWorkflow(a86,{workflowID:K4$($.runId,$.fenceToken),queueName:DK,enqueueOptions:{queuePartitionKey:$.threadId}})($)).workflowID}}async function Gm0($,Z){await oi.cancelWorkflow(K4$($,Z))}var $m0=1,el0=null,a86;var Xm0=O(()=>{sl0();a86=oi.registerWorkflow(o86,{name:"hostedHarnessWorkflow",maxRecoveryAttempts:1000})});import{DBOS as ox}from"@dbos-inc/dbos-sdk";function s86($){if($.harnessId==="decopilot")return"cluster";if($.isLinkCapable&&$.sandboxProviderKind==="user-desktop")return"sandbox";if(($.harnessId==="claude-code"||$.harnessId==="codex")&&$.sandboxProviderKind==="agent-sandbox")throw Error(`not implemented: CLI harness "${$.harnessId}" on an agent-sandbox (cloud-CLI is a planned follow-up)`);return"cluster"}function Jm0($){Ym0=$}function e86(){if(!Ym0)throw Error("[threadGate] runtime not initialized \u2014 setThreadGateRuntime() must run before workflows fire");return Ym0}function $66($,Z=O50){let G=$.runFenceToken;if(G)return{runFenceToken:G,claimedRequest:$,shouldPersistFence:!1};let X=Z();return{runFenceToken:X,claimedRequest:{...$,runFenceToken:X},shouldPersistFence:!0}}async function Z66($){let Z=e86(),{request:G}=$,X=G.taskId??$.threadId;if(X0$({harnessId:G.harnessId,sandboxProviderKind:G.target?.sandboxProviderKind}))await cw(Z.deps.streamBuffer,X,"starting-run");let Y=await Z.meshContextFactory(G.organizationId,G.userId);if(!Y)throw Error("user membership lost mid-dispatch");let Q=Z.workPublisher,J=Z.prepareLinkWorkFn!=null&&Q!=null,W=s86({isLinkCapable:J,sandboxProviderKind:G.target?.sandboxProviderKind,harnessId:G.harnessId}),K=G.taskId??$.threadId,{runFenceToken:w,claimedRequest:U,shouldPersistFence:F}=$66(G);if(F)await Y.storage.threads.setRunFence(K,w);if(W==="cluster")return{runFenceToken:w,hostedEnqueue:{runId:X,fenceToken:w,threadId:$.threadId,request:U}};let H=$.timeoutMs??Z.runTimeoutMs,N=new AbortController,B=H!=null?setTimeout(()=>N.abort(),H):null;try{let{taskId:D,runFenceToken:E,harnessInput:L,messagesRef:z,sandboxConfig:j,orgSlug:P}=await Z.prepareLinkWorkFn({...U,abortSignal:N.signal},Y,Z.deps);if(E!==w)throw Error(`prepareLinkWorkFn returned fence ${E}; expected ${w}`);let A={runId:D,threadId:G.taskId??$.threadId,orgId:G.organizationId,userId:G.userId,runFenceToken:E,harnessInput:L,...j?{sandbox:j}:{},orgSlug:P,...z?{messagesRef:z}:{}};try{await Q.publish(G.userId,A,{signal:N.signal})}catch(M){return console.error(`[thread-gate] link work publish failed for run=${D}; marking failed`,M),await Y.storage.threads.forceFailIfInProgress(D),{runFenceToken:w}}}finally{if(B!==null)clearTimeout(B)}return{runFenceToken:w}}async function G66($){if($.source!=="user-message")return;let{request:Z}=$;r1.capture({distinctId:Z.userId,event:"chat_message_started",groups:{organization:Z.organizationId},properties:{organization_id:Z.organizationId,agent_id:Z.agent,mode:Z.mode,thread_id:Z.taskId??$.threadId,credential_id:Z.models.credentialId}})}async function X66($,Z){if($.source!=="user-message")return;let{request:G}=$;r1.capture({distinctId:G.userId,event:"chat_message_failed",groups:{organization:G.organizationId},properties:{organization_id:G.organizationId,thread_id:G.taskId??$.threadId,agent_id:G.agent,model_id:G.models.thinking.id,mode:G.mode,error_category:"setup",error_message:Z}})}async function a50($){await ox.runStep(()=>G66($),{name:"trackMessageStarted"});let Z;try{let Y=$.request.target?.sandboxProviderKind!=="user-desktop";if(Z=await ox.runStep(()=>Z66($),{name:"dispatchRunAndWait",retriesAllowed:Y}),Z.hostedEnqueue)await w4$(Z.hostedEnqueue)}catch(Y){let Q=Y instanceof Error?Y.message:String(Y);throw await ox.runStep(()=>X66($,Q),{name:"trackMessageFailed"}),Y}let G=$.request.taskId??$.threadId,X="messages"in $.request?void 0:$.request.messageId;return await ox.runStep(()=>G4$({runId:G,fenceToken:Z.runFenceToken,messageId:X}),{name:"consumeRunProjection"}),{taskId:$.request.taskId??$.threadId}}async function Y66($){return a50($)}async function ax($,Z){return{workflowID:(await ox.startWorkflow(Q66,{queueName:lQ,enqueueOptions:{queuePartitionKey:$.threadId},workflowID:Z?.workflowID})($)).workflowID}}var Qm0=1,Ym0=null,Q66;var U4$=O(()=>{v4();Vi();X4$();Xm0();Q66=ox.registerWorkflow(Y66,{name:"threadGateWorkflow",maxRecoveryAttempts:1000})});var ai=O(()=>{U4$();Xm0()});async function Wm0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),J66)})])}finally{if(X)clearTimeout(X)}}function W66($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function Km0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function mw($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((U)=>U.id===Y.keyId)){let U=await Wm0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:Km0(U,Y.modelId,Y.title)}}if(Q.length===0)throw new sx(Z);let J={};await Promise.all(Q.map(async(U)=>{J[U.id]=await Wm0($,U.id,G).catch(()=>[])}));let W=Q.map((U)=>({id:U.id,providerId:U.providerId,label:U.label,presetId:U.presetId,createdBy:U.createdBy,createdAt:U.createdAt})),K=p_0(W,J),w=W66(Z,K);if(!w)throw new sx(Z);return{credentialId:w.keyId,modelId:w.modelId,modelMeta:Km0(J[w.keyId]??[],w.modelId,w.title)}}async function F4$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await Wm0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:Km0(Y,G)}}async function RQ($,Z){try{return await mw($,Z)}catch(G){if(G instanceof sx)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var sx,J66=5000;var si=O(()=>{t8();sx=class sx extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});import{z as K66}from"zod";function iw($){return $==="cluster"?"agent-sandbox":$}function wm0($){return`${$.userId}:${$.projectRef}`}var w66;var s50=O(()=>{w66=K66.enum(["agent-sandbox","user-desktop"])});class e50{map=new Map;async run($,Z){let G=this.map.get($);if(G)return G;let X=Z();this.map.set($,X);try{return await X}finally{this.map.delete($)}}}function $90($,Z,G,X){if(!$)return X(null);if(!$.withLock)return X($);return $.withLock(Z,G,X)}import{createHash as U66}from"crypto";function H66($,Z=16){return U66("sha256").update(wm0($)).digest("hex").slice(0,Z)}function NN($,Z){let G=H66($),X=N66(Z);return X?`${X}-${G}`:`s-${G}`}function N66($){if(!$)return"";return($.split("/").pop()??"").toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,F66).replace(/-+$/g,"")}var F66=24;var H4$=O(()=>{s50()});function Z90($,Z){let G=$.replace(/\/+$/,"");if(G.includes("{handle}"))return`${G.replace("{handle}",Z)}/`;try{let X=new URL(G);return X.hostname=`${Z}.${X.hostname}`,`${X.toString()}/`}catch{return`${G}/${Z}/`}}function nw($){let Z=$?.userName?.trim();if(!Z||N4$.test(Z))return null;let G=$?.userEmail?.trim();if(!G||N4$.test(G))return{userName:Z};if(!B66.test(G))return{userName:Z};return{userName:Z,userEmail:G}}var N4$,B66;var G90=O(()=>{N4$=/[\r\n<>]/,B66=/^[^\s@<>]+@[^\s@<>]+\.[^\s@<>]+$/});function Um0($){let Z=$.repo,G=Z?{repository:{cloneUrl:Z.cloneUrl,repoName:Z.displayName??O66(Z.cloneUrl),...Z.branch?{branch:Z.branch}:{}},identity:{userName:Z.userName,userEmail:Z.userEmail}}:void 0,X=$.tenant,Y=nw({userName:X?.userName,userEmail:X?.userEmail})??void 0,Q=$.packageManager?{name:$.packageManager.name,...$.packageManager.path?{path:$.packageManager.path}:{}}:void 0,J=Q?{packageManager:Q,runtime:$.runtime,...$.port!==void 0?{port:$.port}:{}}:void 0;if(!G&&!J&&!Y)return null;return{...G?{git:G}:{},...Y?{operator:Y}:{},...J?{application:J}:{}}}function O66($){try{let Z=new URL($);return Z.pathname.replace(/^\/+/,"").replace(/\.git$/,"")||Z.hostname}catch{return $}}var B4$=O(()=>{G90()});function D66($){try{return new URL($).username.length>0}catch{return!1}}function Fm0($){let Z=$.repo?.cloneUrl;if(!Z||!D66(Z))return null;return{git:{repository:{cloneUrl:Z}}}}var X90=O(()=>{H4$();B4$()});function pw($){if("threadId"in $){if(!$.threadId)throw Error("composeSandboxRef: threadId required");return`thread:${$.threadId}`}if(!$.orgId||!$.virtualMcpId||!$.branch)throw Error("composeSandboxRef: orgId, virtualMcpId and branch are all required for agent refs");return`agent:${$.orgId}:${$.virtualMcpId}:${$.branch}`}function E66($){return(typeof $.timeout==="number"&&$.timeout>0?Math.min($.timeout,120000):30000)+15000}function L66($,Z){if($.aborted)return Z.catch(()=>{}),Promise.reject($.reason??Error("aborted"));return new Promise((G,X)=>{let Y=()=>{Z.catch(()=>{}),X($.reason??Error("aborted"))};$.addEventListener("abort",Y,{once:!0}),Z.then(G,X).finally(()=>{$.removeEventListener("abort",Y)})})}async function z66($,Z,G,X,Y="POST",Q){let J=Q?.timeoutMs??E66(X??{}),W=AbortSignal.timeout(J),K=Q?.signal?AbortSignal.any([Q.signal,W]):W,w,U;try{let H={method:Y,headers:new Headers({"content-type":"application/json"}),body:null,signal:K};if(Y!=="GET"&&X!==null)H.body=JSON.stringify(X);({res:w,rawText:U}=await L66(K,(async()=>{let N=await $.proxyDaemonRequest(Z,G,H);return{res:N,rawText:await N.text()}})()))}catch(H){if(Q?.signal?.aborted)throw H;if(W.aborted)throw Error(`Sandbox ${Y} ${G} timed out after ${Math.round(J/1000)}s \u2014 the sandbox may be overloaded or its filesystem stalled. Retry, or use a smaller operation.`);throw new ex(H)}let F;try{F=JSON.parse(U)}catch{console.error("[sandbox-fs-hooks] Failed to parse JSON response runner=%s path=%s status=%d rawText=%s",$.kind,G,w.status,U.slice(0,2000));let H=w.status>=500?" (server error)":w.status===0?" (no response)":"";throw Error(`Daemon ${G} returned invalid JSON (HTTP ${w.status}${H}): ${U.slice(0,800)}`)}if(!w.ok){console.error("[sandbox-fs-hooks] Non-OK response runner=%s path=%s status=%d body=%s",$.kind,G,w.status,U.slice(0,2000));let H=F.error??`Daemon ${G} failed (${w.status})`;if(w.status===404&&H==="sandbox not found")throw new ex(Error(H));throw Error(H)}return F}function j66($){let Z=[];for(let G of $.split(`
+`).replace(/https?:\/\/[^\s)>\]]+/g,"").includes("?")?"requires_action":"completed";if($==="tool-calls"){let G=Z.some((Y)=>Y.type==="tool-user_ask"&&Y.state==="input-available"),X=Z.some((Y)=>Y.state==="approval-requested");return G||X?"requires_action":"completed"}return"failed"}function FN($,Z){return`error-${$}:${Z}`}function t50($){return{id:$.id,role:$.role,parts:$.parts,metadata:$.metadata??void 0}}var dl0=()=>{};function v86($){return`liveness: no stream events for ${Math.round($/60000)}m`}function ml0($){return $.runFenceToken!==null&&$.runFenceToken!==$.fenceToken}function d6$($){ll0=$}function l6$(){if(!ll0)throw Error("[projector-workflow] runtime not initialized \u2014 setProjectorWorkflowRuntime() must run before workflows fire");return ll0}function m6$(){return l6$()}async function i6$($,Z,G){let X=l6$(),Y=X.getJetStream();if(!Y)throw Error("JetStream unavailable");let Q=(await X.messageParts.loadWindow($.runId,{limit:500})).messages.map(t50);return{chunkCount:0,attempts:1,outcome:await T6$({chunkStream:u6$(await v6$({js:Y,runId:$.runId,fenceToken:$.fenceToken,idleTimeoutMs:$.idleTimeoutMs}),$.runId,y86,()=>{X.bumpProgress({runId:$.runId,orgId:Z}).catch(()=>{})}),persistence:await g6$({messageParts:X.messageParts,orgId:Z,runId:$.runId,requestMessageId:$.messageId,replaceFinal:!0}),originalMessages:Q,errorMessageId:FN($.runId,$.fenceToken),title:{threadId:$.runId,currentThreadTitle:G,persistTitle:async(W,K)=>{await X.persistTitle($.runId,Z,K),await X.onTitleUpdated({runId:$.runId,orgId:Z,title:K})}}})}}async function n6$($,Z,G){let X=await g86($,Z);if("skip"in X)return;let Y=X.row.orgId,Q=X.row.createdBy??$.runId,J=X.row.title;try{let{outcome:W}=await G($,Y,J),K=W?.failed?"failed":W?.finishReason==null?"completed":p50(W.finishReason,W.finalParts);if(K==="failed"){let w=W?.finishReason?`harness reported an error: ${W.finishReason}`:"harness reported an error";if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,w,"harness"))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:w,kind:"harness"})}else if(K==="requires_action")await Z.markRunRequiresAction($.runId,Y),await Z.clearSynthesizedError($.runId,$.fenceToken);else{if(await Z.completeRunIfNotCompleted($.runId,Y))await Z.recordCompleted({runId:$.runId,orgId:Y,distinctId:Q,usage:W?.usage??{inputTokens:0,outputTokens:0,totalTokens:0}});await Z.clearSynthesizedError($.runId,$.fenceToken)}await Z.purgeRun($.runId,$.fenceToken)}catch(W){if(W instanceof ti){let H=`stream truncated before projection could replay it: ${W.message}`;if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,H,"projection"))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:H,kind:"projection"});await Z.purgeRun($.runId,$.fenceToken);return}let K=W instanceof l50;if(K){let H=await Z.resolveRun($.runId).catch(()=>null);if(H!==null&&H.runFenceToken===$.fenceToken&&["completed","failed","requires_action"].includes(H.status)){await Z.purgeRun($.runId,$.fenceToken);return}}let w=K?v86(W.idleTimeoutMs):W instanceof Error?W.message:String(W),U=K?"liveness":"projection";if(n50($.runId,Y),await Z.markRunFailed($.runId,Y,w,U))await Z.recordFailed({runId:$.runId,orgId:Y,distinctId:Q,reason:w,kind:U});throw W}}async function g86($,Z){let G=await Z.resolveRun($.runId);if(!G)return{skip:"missing"};if(ml0({status:G.status,runFenceToken:G.runFenceToken,fenceToken:$.fenceToken}))return{skip:"stale",row:G};if(G.version!==2)return{skip:"legacy-v1",row:G};return{row:G}}var ll0=null,y86;var il0=O(()=>{I6$();y6$();i50();h6$();c6$();dl0();y86=new ul0});function p6$($,Z){switch($.type){case"START":{let G={type:"RUN_STARTED",taskId:$.taskId,orgId:$.orgId,userId:$.userId,abortController:$.abortController,runConfig:$.runConfig,podId:$.podId,messageId:$.messageId};if(Z?.status.tag==="running")return[{type:"PREVIOUS_RUN_ABORTED",taskId:$.taskId,orgId:Z.orgId},G];return[G]}case"STEP_DONE":{if(Z?.status.tag!=="running")return[];return[{type:"STEP_COMPLETED",taskId:$.taskId,orgId:Z.orgId,stepCount:Z.status.stepCount+1}]}case"FINISH":{if(Z==null||Z.status.tag!=="running")return[];let{stepCount:G}=Z.status;if($.threadStatus==="completed")return[{type:"RUN_COMPLETED",taskId:$.taskId,orgId:Z.orgId,stepCount:G}];if($.threadStatus==="requires_action")return[{type:"RUN_REQUIRES_ACTION",taskId:$.taskId,orgId:Z.orgId,stepCount:G}];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:"error"}]}case"CANCEL":{if(Z?.status.tag!=="running")return[];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:"cancelled"}]}case"RESUME":{if(Z?.status.tag==="running")return[];return[{type:"RUN_RESUMED",taskId:$.taskId,orgId:$.orgId,userId:$.userId,abortController:$.abortController,podId:$.podId}]}case"FORCE_FAIL":{if($.reason==="ghost")return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z?.orgId??$.orgId,reason:$.reason}];if(Z?.status.tag!=="running")return[];return[{type:"RUN_FAILED",taskId:$.taskId,orgId:Z.orgId,reason:$.reason}]}}}function t6$($,Z,G=new Date){switch(Z.type){case"RUN_STARTED":return{taskId:Z.taskId,orgId:Z.orgId,userId:Z.userId,status:{tag:"running",abortController:Z.abortController,stepCount:0,startedAt:G}};case"RUN_RESUMED":return{taskId:Z.taskId,orgId:Z.orgId,userId:Z.userId,status:{tag:"running",abortController:Z.abortController,stepCount:0,startedAt:G}};case"STEP_COMPLETED":if($?.status.tag!=="running")return $;return{...$,status:{...$.status,stepCount:Z.stepCount}};case"RUN_COMPLETED":return;case"RUN_REQUIRES_ACTION":return;case"RUN_FAILED":return;case"PREVIOUS_RUN_ABORTED":return}}async function r6$($,Z,G,X){let{storage:Y,sseHub:Q}=X,J=await Y.get($,Z);Q.emit(Z,A3($,G,{virtualMcpId:J?.virtual_mcp_id??void 0,createdBy:J?.created_by,triggerId:J?.trigger_id,title:J?.title,branch:J?.branch??null,createdAt:J?.created_at,updatedAt:J?.updated_at})),Q.emit(Z,Wu($,G))}async function c86($,Z){let{storage:G,sseHub:X}=Z;switch($.type){case"RUN_STARTED":{await G.update($.taskId,$.orgId,{status:"in_progress",run_config:$.runConfig??null,run_started_at:new Date().toISOString(),last_progress_at:null,failure_reason:null,failure_kind:null});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"in_progress",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at,messageId:$.messageId}));return}case"RUN_RESUMED":{await G.update($.taskId,$.orgId,{run_started_at:new Date().toISOString()});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"in_progress",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at}));return}case"STEP_COMPLETED":X.emit($.orgId,B10($.taskId,$.stepCount));return;case"RUN_COMPLETED":await r6$($.taskId,$.orgId,"completed",Z);return;case"RUN_REQUIRES_ACTION":await r6$($.taskId,$.orgId,"requires_action",Z);return;case"RUN_FAILED":{if($.reason==="ghost"){if(!await G.forceFailIfInProgress($.taskId,$.orgId))return;await G.update($.taskId,$.orgId,{run_config:null,run_started_at:null})}else await G.update($.taskId,$.orgId,{status:"failed",run_config:null,run_started_at:null,...$.reason==="reaped"?{failure_reason:h86,failure_kind:"stall"}:{}});let Y=await G.get($.taskId,$.orgId);X.emit($.orgId,A3($.taskId,"failed",{virtualMcpId:Y?.virtual_mcp_id??void 0,createdBy:Y?.created_by,triggerId:Y?.trigger_id,title:Y?.title,branch:Y?.branch??null,createdAt:Y?.created_at,updatedAt:Y?.updated_at})),X.emit($.orgId,Wu($.taskId,"failed"));return}case"PREVIOUS_RUN_ABORTED":return}}async function o6$($,Z){for(let{event:G}of $)await c86(G,Z)}var h86="Run stalled \u2014 no progress within the idle timeout window";var a6$=O(()=>{t8()});function s6$($){return $.now-$.lastProgressAt>$.idleTimeoutMs}function e6$($){return Math.max($.persistedLastProgressAt??Number.NEGATIVE_INFINITY,$.currentRunStartedAt)}class pl0{deps;clock;states=new Map;reaperTimer=null;constructor($,Z=()=>new Date){this.deps=$;this.clock=Z;this.reaperTimer=setInterval(()=>{this.reapStaleRuns().catch((G)=>{console.error("[RunRegistry] Reaper sweep failed",G)})},u86)}async execute($){let Z=this.dispatch($);return await this.react(Z),Z}dispatch($){let Z=this.states.get($.taskId),G=p6$($,Z),X=[];for(let Y of G){let Q=this.states.get(Y.taskId);if(Y.type==="PREVIOUS_RUN_ABORTED"||Y.type==="RUN_FAILED"){if(Q?.status.tag==="running")Q.status.abortController.abort()}let J=t6$(Q,Y,this.clock());if(J===void 0)this.states.delete(Y.taskId);else this.states.set(Y.taskId,J);if(X.push({event:Y,state:J}),d86.has(Y.type))$4$().add(1,{"org.id":Y.orgId});else if(l86.has(Y.type)&&Q?.status.tag==="running")$4$().add(-1,{"org.id":Y.orgId})}return X}react($){return o6$($,this.deps)}getAbortSignal($){let Z=this.states.get($);if(Z?.status.tag==="running")return Z.status.abortController.signal;return null}isRunning($){return this.states.get($)?.status.tag==="running"}async stopAll(){for(let[,$]of this.states)if($.status.tag==="running")$.status.abortController.abort();this.states.clear()}dispose(){if(this.reaperTimer)clearInterval(this.reaperTimer),this.reaperTimer=null}async reapStaleRuns(){let $=this.clock().getTime(),Z=[...this.states].filter(([,G])=>G.status.tag==="running");for(let[G,X]of Z){if(this.states.get(G)?.status.tag!=="running")continue;let Q;try{let W=await this.deps.storage.getProgress(G,X.orgId);Q=e6$({persistedLastProgressAt:W?.lastProgressAt??null,currentRunStartedAt:X.status.startedAt.getTime()})}catch(W){console.warn(`[RunRegistry] Reaper progress read failed for ${G}; skipping`,W);continue}if(!s6$({lastProgressAt:Q,now:$,idleTimeoutMs:r50}))continue;let J=await this.deps.storage.get(G,X.orgId).catch(()=>null);if(J&&J.status!=="in_progress"){let W=this.states.get(G);if(W?.status.tag==="running")W.status.abortController.abort();this.states.delete(G);continue}console.warn(`[RunRegistry] Reaping stuck run for thread ${G} (idle > ${r50/60000}m) ...`),m86().add(1,{"org.id":X.orgId,reason:"idle_timeout"}),await this.execute({type:"FORCE_FAIL",taskId:G,reason:"reaped"}).catch((W)=>{console.error("[RunRegistry] Reaper execute failed",W)})}}}var u86=300000,nl0,r50,d86,l86,Z4$=($)=>{let Z;return()=>Z??=$()},$4$,m86;var tl0=O(()=>{a6$();F5();nl0=Number(process.env.RUN_IDLE_TIMEOUT_MS),r50=Number.isFinite(nl0)&&nl0>0?nl0:600000,d86=new Set(["RUN_STARTED","RUN_RESUMED"]),l86=new Set(["RUN_COMPLETED","RUN_FAILED","RUN_REQUIRES_ACTION","PREVIOUS_RUN_ABORTED"]),$4$=Z4$(()=>N8.createUpDownCounter("decopilot.stream.inflight",{description:"Number of in-flight decopilot stream requests",unit:"{requests}"})),m86=Z4$(()=>N8.createCounter("decopilot.run.reaped",{description:"Number of decopilot runs force-failed by the progress-based reaper",unit:"{runs}"}))});async function G4$($){let{runId:Z}=$,G=m6$(),X=await G.resolveRun(Z),Y=$.fenceToken??X?.runFenceToken;if(!X||X.version!==2||Y==null)return;if(ml0({status:X.status,runFenceToken:X.runFenceToken,fenceToken:Y}))return;if(!G.getJetStream())throw Error("JetStream unavailable for consume step");await n6$({runId:Z,fenceToken:Y,messageId:$.messageId,idleTimeoutMs:$.idleTimeoutMs??r50},G,i6$)}var X4$=O(()=>{il0();tl0()});function rl0($){let Z=Number.isFinite($)?Math.max(1,$):1,G=0,X=[];return{async acquire(){if(G<Z)G++;else await new Promise((Q)=>X.push(Q));let Y=!1;return()=>{if(Y)return;Y=!0;let Q=X.shift();if(Q)Q();else G--}},get active(){return G},get pending(){return X.length}}}var i86,Y4$=()=>i86.acquire();var ol0=O(()=>{i86=rl0(Number(process.env.DECOPILOT_MAX_CONCURRENT_SUBAGENTS??4))});var al0,o50,HN,Q4$=()=>({active:HN.active,pending:HN.pending,max:o50}),J4$=()=>{if(HN.active>=o50)console.log("[hostedHarness] run parked at concurrency cap",{active:HN.active,pending:HN.pending,max:o50});return HN.acquire()};var sl0=O(()=>{ol0();F5();al0=Number(process.env.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS),o50=Number.isFinite(al0)&&al0>0?al0:3,HN=rl0(o50);N8.createObservableGauge("hosted_runs.active",{description:"Hosted agent-loop runs executing on this pod",unit:"{runs}"}).addCallback(($)=>$.observe(HN.active));N8.createObservableGauge("hosted_runs.pending",{description:"Hosted agent-loop runs parked waiting for a slot on this pod",unit:"{runs}"}).addCallback(($)=>$.observe(HN.pending))});import{DBOS as oi}from"@dbos-inc/dbos-sdk";function Zm0($){el0=$}function W4$(){if(!el0)throw Error("[hostedHarness] runtime not initialized \u2014 setHostedHarnessRuntime() must run before workflows fire");return el0}async function n86($,Z){let G=W4$(),{request:X}=$,Y=Z??await G.meshContextFactory(X.organizationId,X.userId);if(!Y)throw Error("user membership lost mid-dispatch");if(X.runMetadata)Y.metadata.runMetadata=X.runMetadata;let Q=new AbortController,J=await J4$();try{await G.dispatchRunFn({...X,abortSignal:Q.signal},Y,G.deps)}finally{J()}}function p86($,Z,G,X=1){let Y=G instanceof Error?G.message:String(G);return{messageId:FN($,Z),errorChunk:{type:"error",errorText:Y},seq:X,finalSeq:X}}function t86($){if(!($ instanceof Error))return;let Z=$.lastAckSeq;return typeof Z==="number"?Z+1:void 0}async function r86($,Z){let G=W4$(),{streamBuffer:X}=G.deps,{messageId:Y,errorChunk:Q,seq:J,finalSeq:W}=p86($.runId,$.fenceToken,Z,t86(Z));if(!X){console.error(`[hostedHarness] no streamBuffer configured; dropping terminal error for run=${$.runId} fence=${$.fenceToken} messageId=${Y}`);return}if(!await X.publishRawChunk($.runId,Q,{fenceToken:$.fenceToken,seq:J})){console.error(`[hostedHarness] failed to publish terminal error chunk for run=${$.runId} fence=${$.fenceToken} messageId=${Y}`);return}await X.publishDone($.runId,$.fenceToken,W)}async function o86($){try{await oi.runStep(()=>n86($),{name:"runHostedHarness",retriesAllowed:!1})}catch(Z){await oi.runStep(()=>r86($,Z),{name:"publishHostedHarnessFailure",retriesAllowed:!0}).catch((G)=>{console.error(`[hostedHarness] could not publish terminal error for run=${$.runId} fence=${$.fenceToken}`,G)})}}function K4$($,Z){return`decopilot-hosted:${$}:${Z}`}async function w4$($){return{workflowID:(await oi.startWorkflow(a86,{workflowID:K4$($.runId,$.fenceToken),queueName:DK,enqueueOptions:{queuePartitionKey:$.threadId}})($)).workflowID}}async function Gm0($,Z){await oi.cancelWorkflow(K4$($,Z))}var $m0=1,el0=null,a86;var Xm0=O(()=>{sl0();a86=oi.registerWorkflow(o86,{name:"hostedHarnessWorkflow",maxRecoveryAttempts:1000})});import{DBOS as ox}from"@dbos-inc/dbos-sdk";function s86($){if($.harnessId==="decopilot")return"cluster";if($.isLinkCapable&&$.sandboxProviderKind==="user-desktop")return"sandbox";if(($.harnessId==="claude-code"||$.harnessId==="codex")&&$.sandboxProviderKind==="agent-sandbox")throw Error(`not implemented: CLI harness "${$.harnessId}" on an agent-sandbox (cloud-CLI is a planned follow-up)`);return"cluster"}function Jm0($){Ym0=$}function e86(){if(!Ym0)throw Error("[threadGate] runtime not initialized \u2014 setThreadGateRuntime() must run before workflows fire");return Ym0}function $66($,Z=O50){let G=$.runFenceToken;if(G)return{runFenceToken:G,claimedRequest:$,shouldPersistFence:!1};let X=Z();return{runFenceToken:X,claimedRequest:{...$,runFenceToken:X},shouldPersistFence:!0}}async function Z66($){let Z=e86(),{request:G}=$,X=G.taskId??$.threadId;if(X0$({harnessId:G.harnessId,sandboxProviderKind:G.target?.sandboxProviderKind}))await cw(Z.deps.streamBuffer,X,"starting-run");let Y=await Z.meshContextFactory(G.organizationId,G.userId);if(!Y)throw Error("user membership lost mid-dispatch");let Q=Z.workPublisher,J=Z.prepareLinkWorkFn!=null&&Q!=null,W=s86({isLinkCapable:J,sandboxProviderKind:G.target?.sandboxProviderKind,harnessId:G.harnessId}),K=G.taskId??$.threadId,{runFenceToken:w,claimedRequest:U,shouldPersistFence:F}=$66(G);if(F)await Y.storage.threads.setRunFence(K,w);if(W==="cluster")return{runFenceToken:w,hostedEnqueue:{runId:X,fenceToken:w,threadId:$.threadId,request:U}};let H=$.timeoutMs??Z.runTimeoutMs,N=new AbortController,B=H!=null?setTimeout(()=>N.abort(),H):null;try{let{taskId:D,runFenceToken:E,harnessInput:L,messagesRef:z,sandboxConfig:j,orgSlug:P}=await Z.prepareLinkWorkFn({...U,abortSignal:N.signal},Y,Z.deps);if(E!==w)throw Error(`prepareLinkWorkFn returned fence ${E}; expected ${w}`);let A={runId:D,threadId:G.taskId??$.threadId,orgId:G.organizationId,userId:G.userId,runFenceToken:E,harnessInput:L,...j?{sandbox:j}:{},orgSlug:P,...z?{messagesRef:z}:{}};try{await Q.publish(G.userId,A,{signal:N.signal})}catch(M){return console.error(`[thread-gate] link work publish failed for run=${D}; marking failed`,M),await Y.storage.threads.forceFailIfInProgress(D),{runFenceToken:w}}}finally{if(B!==null)clearTimeout(B)}return{runFenceToken:w}}async function G66($){if($.source!=="user-message")return;let{request:Z}=$;r1.capture({distinctId:Z.userId,event:"chat_message_started",groups:{organization:Z.organizationId},properties:{organization_id:Z.organizationId,agent_id:Z.agent,mode:Z.mode,thread_id:Z.taskId??$.threadId,credential_id:Z.models.credentialId}})}async function X66($,Z){if($.source!=="user-message")return;let{request:G}=$;r1.capture({distinctId:G.userId,event:"chat_message_failed",groups:{organization:G.organizationId},properties:{organization_id:G.organizationId,thread_id:G.taskId??$.threadId,agent_id:G.agent,model_id:G.models.thinking.id,mode:G.mode,error_category:"setup",error_message:Z}})}async function a50($){await ox.runStep(()=>G66($),{name:"trackMessageStarted"});let Z;try{let Y=$.request.target?.sandboxProviderKind!=="user-desktop";if(Z=await ox.runStep(()=>Z66($),{name:"dispatchRunAndWait",retriesAllowed:Y}),Z.hostedEnqueue)await w4$(Z.hostedEnqueue)}catch(Y){let Q=Y instanceof Error?Y.message:String(Y);throw await ox.runStep(()=>X66($,Q),{name:"trackMessageFailed"}),Y}let G=$.request.taskId??$.threadId,X="messages"in $.request?void 0:$.request.messageId;return await ox.runStep(()=>G4$({runId:G,fenceToken:Z.runFenceToken,messageId:X}),{name:"consumeRunProjection"}),{taskId:$.request.taskId??$.threadId}}async function Y66($){return a50($)}async function ax($,Z){return{workflowID:(await ox.startWorkflow(Q66,{queueName:lQ,enqueueOptions:{queuePartitionKey:$.threadId},workflowID:Z?.workflowID})($)).workflowID}}var Qm0=1,Ym0=null,Q66;var U4$=O(()=>{v4();Vi();X4$();Xm0();Q66=ox.registerWorkflow(Y66,{name:"threadGateWorkflow",maxRecoveryAttempts:1000})});var ai=O(()=>{U4$();Xm0()});async function Wm0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),J66)})])}finally{if(X)clearTimeout(X)}}function W66($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function Km0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function mw($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((U)=>U.id===Y.keyId)){let U=await Wm0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:Km0(U,Y.modelId,Y.title)}}if(Q.length===0)throw new sx(Z);let J={};await Promise.all(Q.map(async(U)=>{J[U.id]=await Wm0($,U.id,G).catch(()=>[])}));let W=Q.map((U)=>({id:U.id,providerId:U.providerId,label:U.label,presetId:U.presetId,createdBy:U.createdBy,createdAt:U.createdAt})),K=p_0(W,J),w=W66(Z,K);if(!w)throw new sx(Z);return{credentialId:w.keyId,modelId:w.modelId,modelMeta:Km0(J[w.keyId]??[],w.modelId,w.title)}}async function F4$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await Wm0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:Km0(Y,G)}}async function RQ($,Z){try{return await mw($,Z)}catch(G){if(G instanceof sx)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var sx,J66=5000;var si=O(()=>{t8();sx=class sx extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});import{z as K66}from"zod";function iw($){return $==="cluster"?"agent-sandbox":$}function wm0($){return`${$.userId}:${$.projectRef}`}var w66;var s50=O(()=>{w66=K66.enum(["agent-sandbox","user-desktop"])});class e50{map=new Map;async run($,Z){let G=this.map.get($);if(G)return G;let X=Z();this.map.set($,X);try{return await X}finally{this.map.delete($)}}}function $90($,Z,G,X){if(!$)return X(null);if(!$.withLock)return X($);return $.withLock(Z,G,X)}import{createHash as U66}from"crypto";function H66($,Z=16){return U66("sha256").update(wm0($)).digest("hex").slice(0,Z)}function NN($,Z){let G=H66($),X=N66(Z);return X?`${X}-${G}`:`s-${G}`}function N66($){if(!$)return"";return($.split("/").pop()??"").toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,F66).replace(/-+$/g,"")}var F66=24;var H4$=O(()=>{s50()});function Z90($,Z){let G=$.replace(/\/+$/,"");if(G.includes("{handle}"))return`${G.replace("{handle}",Z)}/`;try{let X=new URL(G);return X.hostname=`${Z}.${X.hostname}`,`${X.toString()}/`}catch{return`${G}/${Z}/`}}function nw($){let Z=$?.userName?.trim();if(!Z||N4$.test(Z))return null;let G=$?.userEmail?.trim();if(!G||N4$.test(G))return{userName:Z};if(!B66.test(G))return{userName:Z};return{userName:Z,userEmail:G}}var N4$,B66;var G90=O(()=>{N4$=/[\r\n<>]/,B66=/^[^\s@<>]+@[^\s@<>]+\.[^\s@<>]+$/});function Um0($){let Z=$.repo,G=Z?{repository:{cloneUrl:Z.cloneUrl,repoName:Z.displayName??O66(Z.cloneUrl),...Z.branch?{branch:Z.branch}:{}},identity:{userName:Z.userName,userEmail:Z.userEmail}}:void 0,X=$.tenant,Y=nw({userName:X?.userName,userEmail:X?.userEmail})??void 0,Q=$.packageManager?{name:$.packageManager.name,...$.packageManager.path?{path:$.packageManager.path}:{}}:void 0,J=Q?{packageManager:Q,runtime:$.runtime,...$.port!==void 0?{port:$.port}:{}}:void 0;if(!G&&!J&&!Y)return null;return{...G?{git:G}:{},...Y?{operator:Y}:{},...J?{application:J}:{}}}function O66($){try{let Z=new URL($);return Z.pathname.replace(/^\/+/,"").replace(/\.git$/,"")||Z.hostname}catch{return $}}var B4$=O(()=>{G90()});function D66($){try{return new URL($).username.length>0}catch{return!1}}function Fm0($){let Z=$.repo?.cloneUrl;if(!Z||!D66(Z))return null;return{git:{repository:{cloneUrl:Z}}}}var X90=O(()=>{H4$();B4$()});function pw($){if("threadId"in $){if(!$.threadId)throw Error("composeSandboxRef: threadId required");return`thread:${$.threadId}`}if(!$.orgId||!$.virtualMcpId||!$.branch)throw Error("composeSandboxRef: orgId, virtualMcpId and branch are all required for agent refs");return`agent:${$.orgId}:${$.virtualMcpId}:${$.branch}`}function E66($){return(typeof $.timeout==="number"&&$.timeout>0?Math.min($.timeout,120000):30000)+15000}function L66($,Z){if($.aborted)return Z.catch(()=>{}),Promise.reject($.reason??Error("aborted"));return new Promise((G,X)=>{let Y=()=>{Z.catch(()=>{}),X($.reason??Error("aborted"))};$.addEventListener("abort",Y,{once:!0}),Z.then(G,X).finally(()=>{$.removeEventListener("abort",Y)})})}async function z66($,Z,G,X,Y="POST",Q){let J=Q?.timeoutMs??E66(X??{}),W=AbortSignal.timeout(J),K=Q?.signal?AbortSignal.any([Q.signal,W]):W,w,U;try{let H={method:Y,headers:new Headers({"content-type":"application/json"}),body:null,signal:K};if(Y!=="GET"&&X!==null)H.body=JSON.stringify(X);({res:w,rawText:U}=await L66(K,(async()=>{let N=await $.proxyDaemonRequest(Z,G,H);return{res:N,rawText:await N.text()}})()))}catch(H){if(Q?.signal?.aborted)throw H;if(W.aborted)throw Error(`Sandbox ${Y} ${G} timed out after ${Math.round(J/1000)}s \u2014 the sandbox may be overloaded or its filesystem stalled. Retry, or use a smaller operation.`);throw new ex(H)}let F;try{F=JSON.parse(U)}catch{console.error("[sandbox-fs-hooks] Failed to parse JSON response runner=%s path=%s status=%d rawText=%s",$.kind,G,w.status,U.slice(0,2000));let H=w.status>=500?" (server error)":w.status===0?" (no response)":"";throw Error(`Daemon ${G} returned invalid JSON (HTTP ${w.status}${H}): ${U.slice(0,800)}`)}if(!w.ok){console.error("[sandbox-fs-hooks] Non-OK response runner=%s path=%s status=%d body=%s",$.kind,G,w.status,U.slice(0,2000));let H=F.error??`Daemon ${G} failed (${w.status})`;if(w.status===404&&H==="sandbox not found")throw new ex(Error(H));throw Error(H)}return F}function j66($){let Z=[];for(let G of $.split(`
 `)){if(!G)continue;let X=G.indexOf(":");if(X<0)continue;let Y=G.indexOf(":",X+1);if(Y<0)continue;let Q=G.slice(0,X),J=Number.parseInt(G.slice(X+1,Y),10);if(!Number.isFinite(J))continue;Z.push({file:Q,line:J,text:G.slice(Y+1)})}return Z}function Hm0($,Z){let{ensureHandle:G,invalidateHandle:X,canAutoRestart:Y}=Z,Q=(W)=>{let K=W instanceof Error?W.message:String(W);return Y?`Sandbox is unreachable and auto-restart did not recover it: ${K}`:"The sandbox is not running. Ask the user to start it by clicking the server button (left side of the header bar)."},J=async(W,K,w="POST",U)=>{let F=async(N)=>z66($,N,W,K,w,{signal:U,timeoutMs:Z.opTimeoutMs}),H=await G();try{return await F(H)}catch(N){if(!(N instanceof ex)||!Y){if(N instanceof ex)throw Error(Q(N.cause??N));throw N}console.warn(`[sandbox-fs-hooks] daemon ${W} unreachable \u2014 reaping sandbox and retrying once`,N.cause??N);try{await X()}catch(D){console.warn("[sandbox-fs-hooks] invalidateHandle failed",D)}let B;try{B=await G()}catch(D){throw Error(`Failed to restart sandbox: ${D instanceof Error?D.message:String(D)}`)}try{return await F(B)}catch(D){if(D instanceof ex)throw Error(Q(D.cause??D));throw D}}};return{onProxy:(W,K,w,U)=>J(W,K,w,U),onRead:async(W)=>{return(await J("/_sandbox/read",{path:W})).content},onWrite:async(W,K)=>{await J("/_sandbox/write",{path:W,content:K})},onEdit:async(W,K)=>{for(let w of K)await J("/_sandbox/edit",{path:W,old_string:w.oldText,new_string:w.newText,replace_all:w.replaceAll===!0})},onBash:async(W,K)=>{return await J("/_sandbox/bash",{command:W,...K?.cwd!==void 0?{cwd:K.cwd}:{},...K?.timeoutMs!==void 0?{timeout:K.timeoutMs}:{}})},onGlob:async(W)=>{return(await J("/_sandbox/glob",{pattern:W})).files},onGrep:async(W,K)=>{let w=await J("/_sandbox/grep",{pattern:W,output_mode:"content",...K?.path!==void 0?{path:K.path}:{},...K?.glob!==void 0?{glob:K.glob}:{},...K?.caseInsensitive?{ignore_case:!0}:{}});return j66(w.results)}}}var ex;var O4$=O(()=>{ex=class ex extends Error{code="DAEMON_UNREACHABLE";constructor($){super($ instanceof Error?$.message:"Daemon proxy failed");if($ instanceof Error)this.cause=$}}});function P66($){return $==="agent-sandbox"||$==="cluster"||$==="user-desktop"}function tw(){let $=process.env.STUDIO_SANDBOX_PROVIDER,Z=$&&$.length>0?$:"user-desktop";if(!P66(Z))throw Error(`Unknown STUDIO_SANDBOX_PROVIDER="${$}" \u2014 expected "agent-sandbox", "cluster", or "user-desktop".`);return iw(Z)}var PY=O(()=>{s50();s50();X90();O4$()});function Y90($){return iw($.sandboxProviderKind)==="user-desktop"?{sandboxProviderKind:"user-desktop"}:{sandboxProviderKind:"agent-sandbox"}}var Nm0=O(()=>{PY()});function Bm0($){let Z=new AbortController,G=$v.get($);if(!G)G=new Set,$v.set($,G);return G.add(Z),Z}function Om0($,Z){let G=$v.get($);if(!G)return;if(G.delete(Z),G.size===0)$v.delete($)}function Q90($){let Z=$v.get($);if(!Z)return;for(let G of Z)G.abort();$v.delete($)}var $v;var J90=O(()=>{$v=new Map});function Q7($){return`mesh-storage://${$}`}function ei($){if(!$.startsWith("mesh-storage://"))return null;return $.slice(15)}function Dm0(){return/mesh-storage:\/\/([^\s"'<>[\]]+)/g}var PE="https://chrome.browserless.io",AE=32000;import{z as vW}from"zod";function W90($){if($>D4$){let Z=($/1048576).toFixed(1),G=D4$/1048576;throw Error(`Reference image too large: ${Z} MB (max ${G} MB). Use a smaller image.`)}}function M66($,Z){let G;try{G=new URL($)}catch{throw Error("Invalid image URL")}if(G.protocol!=="https:"&&!(Z&&G.protocol==="http:"))throw Error("Image URL must use HTTPS");for(let X of q66)if(X.test(G.hostname))throw Error("Image URL must not point to a private network address")}async function E4$($,Z){if(!Z?.getBytes)throw Error("Object storage read is not available");if(Z.head){let{size:X}=await Z.head($);W90(X)}let G=await Z.getBytes($);return W90(G.byteLength),G}async function k66($,Z){let G=ei($);if(G!==null)return E4$(G,Z.objectStorage);let X=$.match(A66);if(X)return E4$(X[1],Z.objectStorage);if($.startsWith("data:")){let J=$.match(/^data:[^;]+;base64,(.+)$/s);if(!J)throw Error("Invalid data: URI");let W=Buffer.from(J[1],"base64");return W90(W.byteLength),W}M66($,Z.allowHttpExternalUrls===!0);let Y=await fetch($,{signal:Z.abortSignal});if(!Y.ok)throw Error(`Failed to fetch image from ${$}: ${Y.status}`);let Q=new Uint8Array(await Y.arrayBuffer());return W90(Q.byteLength),Q}async function Em0($,Z){let{provider:G,imageModelInfo:X,objectStorage:Y}=Z,Q=G.aiSdk.imageModel(X.id),J=$.referenceImages&&$.referenceImages.length>0,W=J?await Promise.all($.referenceImages.map((N)=>{let B=N.uri??N.url;if(!B)throw Error("Reference image missing uri");return k66(B,Z)})):[],K=J?{text:$.prompt,images:W}:$.prompt,w=await g50({model:Q,prompt:K,n:$.n??1,...$.aspectRatio?{aspectRatio:$.aspectRatio}:{},...Z.abortSignal?{abortSignal:Z.abortSignal}:{}});if(!Y)throw Error("Object storage is unavailable; cannot persist the generated image.");let U=$.n??1,F=w.images.length>U?w.images.slice(-U):w.images;return{success:!0,images:await Promise.all(F.map(async(N)=>{let B=N.mediaType??"image/png",D=B.split("/")[1]??"png",E=`generated-images/${crypto.randomUUID()}.${D}`,L=Uint8Array.from(atob(N.base64),(z)=>z.charCodeAt(0));return await Y.put(E,L,{contentType:B}),{uri:Q7(E),mediaType:B}})),prompt:$.prompt,model:X.id,usage:{inputTokens:w.usage.inputTokens??0,outputTokens:w.usage.outputTokens??0},usedReferenceImages:J?$.referenceImages.length:0}}function K90($,Z){return $8({description:"Generate an image from a text description, optionally using reference images. Use this when the user asks you to create, generate, draw, or design an image. If the user has attached images and wants to modify or use them as a reference, pass them as referenceImages. "+"The image is displayed automatically by the UI \u2014 do NOT include image URLs or markdown images in your response.",inputSchema:H0(TE),execute:async(G,X)=>{let Y=performance.now();try{return await Em0(G,Z)}finally{$.write({type:"data-tool-metadata",id:X.toolCallId,data:{latencyMs:performance.now()-Y}})}}})}function w90($,Z){let{objectStorage:G,toolOutputMap:X,pendingImages:Y}=Z;return $8({description:"Take a screenshot of a web page. Use this when you need to visually see a website, check its layout, verify a deployment, or inspect a page's appearance. "+"The screenshot is displayed automatically by the UI \u2014 do NOT include image URLs or markdown images in your response.",inputSchema:H0(R66),execute:async(Q,J)=>{let W=performance.now();try{let K=Z.browserlessToken??process.env.BROWSERLESS_TOKEN;if(!K)return{success:!1,error:"BROWSERLESS_TOKEN is not configured."};let w=await fetch(`${PE}/screenshot?token=${encodeURIComponent(K)}`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({url:Q.url,options:{fullPage:Q.fullPage??!1,type:"jpeg",quality:I66},viewport:T66})});if(!w.ok){let D=await w.text().catch(()=>"Unknown error");return{success:!1,error:`Browserless screenshot failed (${w.status}): ${D}`,url:Q.url}}let U=new Uint8Array(await w.arrayBuffer()),F="image/jpeg",H=`screenshots/${crypto.randomUUID()}.jpg`,N,B=null;if(G)try{await G.put(H,U,{contentType:F}),N=Q7(H),B=await G.presignedGetUrl?.(H,600)??null}catch(D){console.error("[take-screenshot] Failed to upload, using data: URI fallback",D),N=`data:${F};base64,${Buffer.from(U).toString("base64")}`}else N=`data:${F};base64,${Buffer.from(U).toString("base64")}`;if(!B)B=N.startsWith("data:")?N:`data:${F};base64,${Buffer.from(U).toString("base64")}`;return Y.push({url:B,mediaType:F,pageUrl:Q.url}),X.set(J.toolCallId,`Screenshot of ${Q.url} stored at ${N}`),{success:!0,image:{uri:N,mediaType:F},url:Q.url}}finally{$.write({type:"data-tool-metadata",id:J.toolCallId,data:{latencyMs:performance.now()-W}})}},toModelOutput({output:Q}){if(!Q.success)return{type:"text",value:Q.error??"Screenshot failed"};return{type:"text",value:`Screenshot of ${Q.url} captured successfully. The image is attached below.`}}})}var A66,D4$=20971520,T66,I66=80,TE,R66,q66;var IE=O(()=>{y6();y6();A66=/\/api\/[^/]+\/files\/([^?#]+)/,T66={width:1280,height:800},TE=vW.object({prompt:vW.string().max(1e4).describe("Detailed description of the image to generate. Be specific about style, composition, colors, and subject matter."),referenceImages:vW.array(vW.object({uri:vW.string().describe("URI of the reference image (e.g. mesh-storage://generated-images/uuid.png).")})).optional().describe("Reference images to use as input for image-to-image generation. Pass the URI of any image from the conversation (uploaded files, previously generated images, etc.) when the user wants to modify, transform, or use an existing image as a starting point."),aspectRatio:vW.enum(["1:1","16:9","9:16","4:3","3:4","3:2","2:3"]).optional().describe("Aspect ratio for the generated image. Defaults to 1:1."),n:vW.number().int().min(1).max(4).optional().describe("Number of images to generate. Defaults to 1.")}),R66=vW.object({url:vW.string().url().describe("The URL of the web page to screenshot."),fullPage:vW.boolean().optional().describe("When true, captures the full scrollable page instead of just the viewport. Defaults to false.")}),q66=[/^127\./,/^10\./,/^172\.(1[6-9]|2\d|3[01])\./,/^192\.168\./,/^169\.254\./,/^0\./,/^\[::1\]$/,/^\[fd/,/^\[fe80:/,/^\[::ffff:/i,/^localhost$/i]});function AY($){if($ instanceof Error)return $.message;if(typeof $==="object"&&$!==null)try{return JSON.stringify($)}catch{return"[unserializable object]"}return String($)}function L4$($){let G=$.split(/\.\s+/).filter((Y)=>!/https?:\/\//i.test(Y)&&!/openrouter/i.test(Y));if(G.length===0)return $;let X=G.join(". ").trim();return X.endsWith(".")?X:`${X}.`}function z4$($){if($ instanceof Error)return{message:$.message,statusCode:$.statusCode};if(typeof $==="object"&&$!==null){let Z=$,G=typeof Z.message==="string"?Z.message:AY($),X=typeof Z.statusCode==="number"?Z.statusCode:typeof Z.code==="number"?Z.code:void 0;return{message:G,statusCode:X}}return{message:String($)}}function U90($){let{message:Z,statusCode:G}=z4$($),X=Z.toLowerCase();return G===402||X.includes("credit")||X.includes("insufficient funds")||X.includes("insufficient balance")||X.includes("billing")||X.includes("quota exceeded")||X.includes("key limit")||X.includes("payment required")}function j4$($){let{message:Z}=z4$($);if(U90($))return`[CREDITS] ${L4$(Z)}`;return L4$(Z)}function P4$($){let Z=$.indexOf(Lm0);if(Z===-1)return{baseId:$,signature:null};return{baseId:$.slice(0,Z),signature:$.slice(Z+Lm0.length)}}function S66($,Z){return`${$}${Lm0}${Z}`}function V66($,Z){return{...$,google:{...$?.google??{},thoughtSignature:Z}}}function C66($){let Z=$?.google?.thoughtSignature;return typeof Z==="string"?Z:null}function A4$($){let{baseId:Z,signature:G}=P4$($.toolCallId);if(G===null)return $;return{...$,toolCallId:Z,providerMetadata:V66($.providerMetadata,G)}}function _66($){switch($.type){case"tool-input-start":case"tool-input-delta":case"tool-input-end":{let{baseId:Z,signature:G}=P4$($.id);return G===null?$:{...$,id:Z}}case"tool-call":return A4$($);default:return $}}function b66($){let Z=new Map;for(let X of $.prompt){if(X.role!=="assistant")continue;for(let Y of X.content){if(Y.type!=="tool-call")continue;let Q=C66(Y.providerOptions);if(Q)Z.set(Y.toolCallId,Q)}}if(Z.size===0)return $;let G=$.prompt.map((X)=>{if(X.role!=="assistant"&&X.role!=="tool")return X;let Y=X.content.map((Q)=>{if(Q.type!=="tool-call"&&Q.type!=="tool-result")return Q;let J=Z.get(Q.toolCallId);return J?{...Q,toolCallId:S66(Q.toolCallId,J)}:Q});return{...X,content:Y}});return{...$,prompt:G}}function f66(){return{specificationVersion:"v3",transformParams:async({params:$})=>b66($),wrapStream:async({doStream:$})=>{let{stream:Z,...G}=await $();return{...G,stream:Z.pipeThrough(new TransformStream({transform(X,Y){Y.enqueue(_66(X))}}))}},wrapGenerate:async({doGenerate:$})=>{let Z=await $(),G=Z.content.map((X)=>X.type==="tool-call"?A4$(X):X);return{...Z,content:G}}}}function T4$($){return jE({model:$,middleware:f66()})}var Lm0="__thought__";var I4$=O(()=>{y6()});function v66($,Z){return jE({model:$,middleware:{specificationVersion:"v3",wrapStream:async({doStream:X,params:Y})=>{try{return await X()}catch(Q){if(!U90(Q))throw Q;return Z.doStream(Y)}},wrapGenerate:async({doGenerate:X,params:Y})=>{try{return await X()}catch(Q){if(!U90(Q))throw Q;return Z.doGenerate(Y)}}}})}function F90($,Z){let G={};if(Z.capabilities?.reasoning!==!1)G.reasoning={enabled:!0,effort:"medium"};let X=$.info?.id==="openrouter"&&Z.id!==zm0;if(X)G.models=[Z.id,zm0];let Y=(W,K)=>K&&Object.keys(K).length>0?$.aiSdk.languageModel(W,K):$.aiSdk.languageModel(W),Q=Y(Z.id,G),J=X?v66(Q,Y(zm0)):Q;return $.info?.id&&x66.has($.info.id)?T4$(J):J}var zm0="openrouter/free",x66;var jm0=O(()=>{y6();I4$();x66=new Set(["openai-compatible","openrouter","deco","llmapi"])});function R4$($,Z){let G=$?.maxOutputTokens??32768,X=$?.contextWindow;if(!X)return G;let Y=X-Z*2;return Math.max(1024,Math.min(G,Y))}var H90=300000;import{z as Pm0}from"zod";function N90($){let{toolOutputMap:Z}=$;return $8({description:"Filter a tool output that was too large to display inline. Returns all lines matching the given regular expression pattern (grep-like). You may call this tool multiple times with different patterns to extract different pieces of information.",inputExamples:[{input:{tool_call_id:"id_1",pattern:"error|warning"}},{input:{tool_call_id:"id_2",pattern:'"status":\\s*"failed"'}}],inputSchema:H0(Pm0.object({tool_call_id:Pm0.string(),pattern:Pm0.string().min(1).describe("Regular expression pattern to filter tool output lines. Returns all matching lines.")})),execute:async({tool_call_id:G,pattern:X})=>{if(!Z.has(G))return{result:`Tool output not found for tool call id: ${G}. Available ids: ${[...Z.keys()].join(", ")||"(none)"}`,matchCount:0,totalLines:0};let Y=Z.get(G),Q;try{Q=new RegExp(X)}catch{return{result:`Invalid regex pattern: ${X}`,matchCount:0,totalLines:0}}let J=Y.split(`
 `),W=J.filter((U)=>Q.test(U)),K=W.join(`
 `),w=p7(K);if(w>BN){let U=kG(K);return{result:`Output is still too long (${w} tokens), use a more specific pattern to reduce output.
@@ -2600,5 +2600,5 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var s11,sV,H14,wS$,a11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",B14,c$,h$,e8,KS$=24,eV,AJ;var DS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(s11||(s11={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return t(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),t(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return O0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function F0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){F0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function n(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,S0,l0),F0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),F0(l0,S0,K),_0(l0,l0,j0),F0(S0,S0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return n(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return n(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function B6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],b0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),r$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var yG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function I8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=yG[K0];L9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),F0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),F0(o,o,j0),F0(Y0,g[3],m[3]),F0(Y0,Y0,U),F0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),F0(g[0],b0,l0),F0(g[1],S0,P0),F0(g[2],P0,l0),F0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function T5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),F0(h,m[0],Y0),F0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function $9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),M6(m,g),M6(g,g),e4(g,m,o)}function z9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);I8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),T5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var R8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function q8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*R8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*R8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*R8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function $6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;q8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];I8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];I8(b0,g.subarray(32),h+32),$6(b0),z9(j0,b0),T5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];I8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return q8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),F0(P0,l0,b0),F0(h,P0,Y0),F0(h,h,K0),V0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(I8(b0,g,h),$6(b0),$9(l0,P0,b0),z9(P0,m.subarray(32)),M6(l0,P0),T5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,d6=24,o6=32,n8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=n8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:I8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:n8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:R8,pack25519:m0,unpack25519:N0,M:F0,A:_0,S:Q0,Z:I0,pow2523:V0,add:M6,set25519:A0,modL:q8,scalarmult:$9,scalarbase:z9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==d6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(n8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(n8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+n8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=n8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return I8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof Xg<"u"&&C$Z?C$Z:globalThis.nacl=globalThis.nacl||{});sV=typeof Xg<"u"&&C$Z?C$Z:globalThis.nacl,H14={fromSeed:sV.sign.keyPair.fromSeed,sign:sV.sign.detached,verify:sV.sign.detached.verify,randomBytes:sV.randomBytes,scalarBaseMultiply:sV.scalarMult.base,seal:sV.box,open:sV.box.open};B14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));eV=[120,107,118,49];N14(H14);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function X$1($){try{$?.clear?.()}catch{}}async function ES$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=BS$($),W=Z$1(J.sub),K=G$1(new TextEncoder().encode(Z)),w=US$();try{let U=await NS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(OS$(U,w))}finally{X$1(w),X$1(K),X$1(W)}}var LS$=O(()=>{DS$()});function R14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function zS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(Y$1(),503);if(!Y.natsPublicUrl)return Z.json(Y$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(Y$1(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await ES$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:QS$(Q),userId:X,allowedConnectionTypes:R14(Y.natsPublicUrl)})}return Z.json(JS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var Y$1=()=>({error:"link session unavailable"});var jS$=O(()=>{m6();j8();WS$();LS$()});async function k14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function S14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new DN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function V14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},q14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function C14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<PS$){await h8(AS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<PS$){await h8(AS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var q14=90000,M14=15000,TS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ry({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},M14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await k14(F,w)){await S14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await V14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await C14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},PS$=60000,AS$=500;var IS$=O(()=>{m6();aV();PY();Z9();mD0();qn();zv();D90();qQ()});function b14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function f14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(_14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var _14=1e4,x14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},RS$=()=>{let $=new g1;return $.use("*",x14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await f14(X,Y);return Z.json({apps:b14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var qS$=O(()=>{m6();j8()});import{z as v1}from"zod";function UK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function i14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function n14($,Z,G){try{return JSON.parse($)}catch{throw new SS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function p14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:n14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function t14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function r14($){if(!$)return;return{openai:{response_format:$}}}function o14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function MS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function kS$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var v14=256,y14,g14,h14,c14,u14,d14,l14,m14,SS$,VS$,CS$;var _S$=O(()=>{y6();m6();aV();y14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),g14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),h14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(g14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),c14=v1.object({type:v1.literal("text")}),u14=v1.object({type:v1.literal("json_object")}),d14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),l14=v1.union([c14,u14,d14]),m14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(h14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(y14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:l14.optional(),user:v1.string().optional()});SS$=class SS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};VS$=new g1;VS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(UK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(UK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(UK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=m14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(UK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=i14(Q.model);if(!J)return $.json(UK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(UK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(UK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=p14(Q.messages),H=Q.tools?t14(Q.tools):void 0,N=r14(Q.response_format),B=o14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=MS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=v14)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:kS$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=MS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:kS$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(UK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(UK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(UK(Y.message,"server_error"),500)}});CS$=VS$});var fS$;var bS$=O(()=>{fS$={name:"decocms",version:"4.39.1",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function e14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??s14}}var xS$,s14="https://ph.studio.decocms.com",vS$;var yS$=O(()=>{m6();Ob0();fN();pG();j8();He0();bS$();xS$=new g1;xS$.get("/",($)=>{let Z={version:fS$.version,theme:T_1(),...vO().logo&&{logo:vO().logo},...SQ()&&{internalUrl:Me()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:KT$(),posthog:e14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});vS$=xS$});function gS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var hS$,$$4,Z$4,cS$;var uS$=O(()=>{m6();I3();Rv();Fb();hS$=new g1,$$4=["range","if-none-match","if-modified-since"],Z$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];hS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(vy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await _n(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return gS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of $$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of Z$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),gS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});cS$=hS$});var vt=_((ZC)=>{var G$4=ZC&&ZC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),X$4=ZC&&ZC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))G$4(Z,$,G)};Object.defineProperty(ZC,"__esModule",{value:!0});X$4(dX(),ZC)});var mS$=_((dS$)=>{Object.defineProperty(dS$,"__esModule",{value:!0});dS$.version=void 0;dS$.version="3.4.0"});var pS$=_((FK)=>{var Y$4=FK&&FK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(FK,"__esModule",{value:!0});FK.NodeTransport=FK.VERSION=void 0;FK.nodeResolveHost=U$4;var m4=vt(),Q$4=u0("net"),Q$1=u0("tls"),J$4=u0("path"),iS$=u0("fs"),W$4=Y$4(u0("dns")),K$4=mS$();FK.VERSION=K$4.version;var w$4="nats.js";class nS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=w$4,this.version=FK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,Q$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,J$4.resolve)($),!(0,iS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,iS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,Q$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,Q$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof Q$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}FK.NodeTransport=nS$;function U$4($){let Z=(0,m4.deferred)();return W$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var sS$=_((aS$)=>{Object.defineProperty(aS$,"__esModule",{value:!0});aS$.connect=F$4;var tS$=pS$(),rS$=vt(),oS$=vt();function F$4($={}){if((0,oS$.hasWsProtocol)($))return Promise.reject(oS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,rS$.setTransportFactory)({factory:()=>{return new tS$.NodeTransport},dnsResolveFn:tS$.nodeResolveHost}),rS$.NatsConnectionImpl.connect($)}});var eS$=_((kU)=>{var N$4=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),B$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))N$4(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var O$4=sS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return O$4.connect}});B$4(vt(),kU)});function XV$($){let Z=$?.connectFn??z$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:L$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(E$4,D$4,B-1,2,0.5);await h8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?$V$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=GV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function z$4($){return ZV$.connect($)}var $V$,ZV$,GV$,D$4=100,E$4=3000,L$4=3000;var YV$=O(()=>{Z9();$V$=k(Cg(),1),ZV$=k(eS$(),1),GV$=k(MB(),1)});function Yg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function J$1($,Z){return`${$}.${Z}`}class W$1{cache;constructor($){this.cache=Yg({ttlMs:$?.ttlMs??j$4,maxSize:$?.maxSize??P$4})}async get($,Z){return this.cache.get(J$1($,Z))??null}async set($,Z,G){this.cache.set(J$1($,Z),G)}async invalidate($,Z){this.cache.delete(J$1($,Z))}teardown(){this.cache.clear()}}var j$4=600000,P$4=5000;var QV$=()=>{};function XL0($,Z){return`${$}:${Z}`}function K$1($){let Z=Yg({ttlMs:$?.ttlMs??A$4,maxSize:$?.maxSize??T$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(JV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(XL0(K,w))},set(K,w,U){Z.set(XL0(K,w),U)},invalidate(K,w){Z.delete(XL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(JV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(XL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var JV$="studio.ai-provider-keys.invalidate",A$4=30000,T$4=5000;var WV$=()=>{};class w$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var KV$=($)=>{let Z;return()=>Z??=$()},U$1,F$1;var wV$=O(()=>{F5();U$1=KV$(()=>N8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),F$1=KV$(()=>N8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function V$4(){return{name:lw,subjects:[`${bl0}.>`],storage:TJ.StorageType.File,max_age:q$4,max_bytes:k$4,max_msgs_per_subject:S$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:M$4,num_replicas:1}}class HV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function UV$($){let Z=FV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function f$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,R$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class H$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=V$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=f$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=C6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=xl0(w,{runId:Z}),H=performance.now()-U;if(U$1().record(H),F$1().add(1,{"org.id":X??"unknown"}),b$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?UV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),_$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=xl0(Z,{runId:$,dedup:G});if(U$1().record(performance.now()-Y),F$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:UV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=V6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=m50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(u50()).pipeThrough(d50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,FV$,I$4=($)=>{let Z;return()=>Z??=$()},R$4,q$4=86400000000000,M$4=120000000000,k$4=4294967296,S$4=500000,C$4,_$4,b$4;var NV$=O(()=>{yl0();i50();vl0();F5();wV$();TJ=k(MB(),1),FV$=k(Cg(),1),R$4=I$4(()=>N8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));C$4=process.env.STREAM_ENCODE_TRACE==="1",_$4=process.env.DECOPILOT_STREAM_TRACE==="1";b$4=C$4?new HV$:null});import{z as G8}from"zod";var BV$,OV$,HK,N$1,DV$,EV$,LV$,zV$,x$4,jV$,PV$,AV$,TV$,IV$,v$4,RV$,d8Z,y$4,g$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},qV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},MV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?y$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${g$4(Y.error)}`);return Y.data};var kV$=O(()=>{BV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),OV$=G8.array(G8.tuple([G8.string(),G8.string()])),HK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),N$1=G8.string().min(1),DV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:HK,method:G8.string().min(1),url:G8.string().min(1),headers:OV$,replySubject:N$1,bodySubject:N$1.optional(),abortSubject:N$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),EV$=G8.object({type:G8.literal("request.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:BV$}),LV$=G8.object({type:G8.literal("request.end"),requestId:HK,seq:G8.number().int().nonnegative()}),zV$=G8.object({type:G8.literal("request.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),x$4=G8.union([EV$,LV$,zV$]),jV$=G8.object({type:G8.literal("response.ack"),requestId:HK}),PV$=G8.object({type:G8.literal("response.start"),requestId:HK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:OV$}),AV$=G8.object({type:G8.literal("response.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:BV$}),TV$=G8.object({type:G8.literal("response.end"),requestId:HK,seq:G8.number().int().nonnegative()}),IV$=G8.object({type:G8.literal("response.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),v$4=G8.union([jV$,PV$,AV$,TV$,IV$]),RV$=G8.object({type:G8.literal("abort"),requestId:HK,reason:G8.string().optional()}),d8Z=G8.union([DV$,x$4,v$4,RV$]),y$4={"request.start":DV$,"request.chunk":EV$,"request.end":LV$,"request.error":zV$,"response.ack":jV$,"response.start":PV$,"response.chunk":AV$,"response.end":TV$,"response.error":IV$,abort:RV$}});var h$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},c$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},u$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},d$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},SV$=($)=>{return h$4(btoa(u$4($)))},VV$=($)=>{return d$4(atob(c$4($)))},l$4;var CV$=O(()=>{l$4=class l$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*e$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class W84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var m$4=30000,i$4=1000,n$4=65536,dQ,p$4=($)=>{return"connection"in $},t$4=($)=>{let Z=p$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??m$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??i$4,maxChunkBytes:Z.maxChunkBytes??n$4,diagnostics:Z.diagnostics}},_V$=($)=>{return Array.from($.entries())},r$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},o$4=($,Z,G)=>{if(r$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return _V$(G.headers);return _V$(G.headers)},bV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},a$4=()=>{return crypto.randomUUID().replaceAll("-","")},s$4=($)=>{try{$?.unsubscribe()}catch{}},$84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},Z84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},FB=($,Z,G)=>{$.publish(Z,qV$(G))},G84=($)=>{return $.type.startsWith("response.")},B$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},X84=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},fV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(X84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=MV$(W.value.data);if(!G84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},Y84=async($)=>{let Z=!1;while(!0){let G=await fV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},Q84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){FB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of e$4(J,$.maxChunkBytes)){if(X)return;FB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:SV$(W)}),G++}}}catch(Q){if(X)return;FB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},J84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await fV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(VV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){FB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},HB=($)=>{let Z=t$4($);return $84(Z.maxChunkBytes),async(G,X)=>{let Y=XS$(G),Q=new Request(G,X),J=a$4(),W=YS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,s$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",B$1(Q.signal));FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:B$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",B$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:o$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};FB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)FB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?Q84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await Y84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(Z84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:bV$(P.headers)});return new Response(J84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:bV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var xV$=O(()=>{kV$();CV$();eE0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var YL0=O(()=>{xV$()});function vV$($){let Z=$.createFetch??K84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return O$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return O$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return O$1}}}var O$1,K84=($,Z)=>HB({connection:$,firstFrameTimeoutMs:Z});var yV$=O(()=>{YL0();ft();O$1={online:!1,capabilities:[]}});async function*w84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function gV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:U84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*w84(U)}}var U84=45000;var hV$=O(()=>{YL0();ft()});import{z as IJ}from"zod";function cV$($){return JSON.stringify($)}var E6Z;var uV$=O(()=>{E6Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function dV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:F84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function lV$($){let Z=$.createFetch??HB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:cV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var F84=45000;var mV$=O(()=>{YL0();uV$();ft()});function QL0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var iV$=O(()=>{t8()});class D$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as H84,rm as JL0}from"fs/promises";import{join as WL0}from"path";async function KL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-N84),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await GC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await nV$($,Y,Z);else if(!Y.startsWith(".")){let Q=WL0($,Y),J=await GC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await nV$(Q,K,Z)}if((await GC(Q)).length===0)await JL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function nV$($,Z,G){let X=0,Y=WL0($,Z),Q=await GC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=WL0(Y,W),w=await GC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=WL0(K,F);await JL0(N,{recursive:!0,force:!0}),X++}}if((await GC(K)).length===0)await JL0(K,{recursive:!0,force:!0})}if((await GC(Y)).length===0)await JL0(Y,{recursive:!0,force:!0});return X}async function GC($){try{return(await H84($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var N84=30;var E$1=()=>{};import{DBOS as L$1,SchedulerMode as B84}from"@dbos-inc/dbos-sdk";async function D84(){let $=[mQ(),YC(),EK()],Z=0;for(let G of $)try{Z+=await KL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function E84($,Z){await L$1.runStep(()=>D84(),{name:"monitoringRetention"})}function tV$(){if(pV$)return;pV$=!0;let $=L$1.registerWorkflow(E84,{name:"monitoringRetentionWorkflow"});L$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:O84,mode:B84.ExactlyOncePerIntervalWhenActive})}var O84="23 4 * * *",pV$=!1;var rV$=O(()=>{gX();E$1()});function oV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await cc0($.db,Z,X.role);return Y.boundAuth=hc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new PD(G,void 0,Y.boundAuth,X.role,"self"),A40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var aV$=O(()=>{AD();Gi()});function L84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function j84(){for(let $ of z84)$()}function sV$($){let Z=[...z$1.logs,$];z$1={...z$1,logs:Z.length>500?Z.slice(-500):Z},j84()}function j$1(){return P84}var z$1,z84,P84=!1;var P$1=O(()=>{z$1=L84(),z84=new Set});import{EventEmitter as A84}from"events";var A$1;var eV$=O(()=>{P$1();A$1=new A84;A$1.on("request",($)=>{sV$($)})});function $C$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Qg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Qg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Qg(H.method)}${s4.reset}`}}catch{}}let W=Qg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Qg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=I84(X),w=J?"\u25C0":"\u2190";if(!j$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=T84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!j$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);A$1.emit("request",{method:X,path:Qg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,T84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},I84=($)=>{return s4[$]||s4.reset},Qg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var ZC$=O(()=>{P$1();eV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as QC$}from"crypto";import{mkdir as R84,readdir as q84,rm as GC$,stat as JC$}from"fs/promises";import{join as I$1,relative as M84}from"path";import{z as P$}from"zod";function KC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return I$1(k84,Z)}function wC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function T$1($,Z){let G=KC$($),X=wC$(Z);return I$1(G,X)}function S84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return QC$("sha256",Y).update(Q).digest("hex")}function YC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=S84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${wC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function UC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${QC$("md5","etag").update(X).digest("hex")}"`}async function FC$($,Z,G,X,Y){try{let Q=await q84($,{withFileTypes:!0});for(let J of Q){let W=I$1($,J.name),w=M84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await FC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await JC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:UC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function HC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=KC$(X);await R84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await FC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=T$1(X,Q.key),W=await JC$(J);return{contentType:j01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:UC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??XC$;return{url:YC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??XC$;return{url:YC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=T$1(X,Q.key);try{return await GC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=T$1(X,K);try{await GC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function R$1($,Z,G){let X=HC$(Z,G),Y=new Qw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:D5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new SY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),lW(Y,Q,$,"mcp:dev-assets")}async function NC$($,Z,G,X){let Q=HC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var k84="./data/assets",XC$=3600,WC$,BC$;var OC$=O(()=>{j8();vn();m6();wu();Sv();OG();zE0();WC$=new g1;WC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return R$1($.req.raw,Z,X)});BC$=WC$});var DC$={};Z6(DC$,{mountDevRoutes:()=>V84});function V84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return R$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await NC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",BC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",LE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var EC$=O(()=>{m6();N01();zE0();OC$()});var LC$=O(()=>{wu0();Uu0();YE()});var wL0=O(()=>{LC$()});var jC$={};Z6(jC$,{streamAgent:()=>zC$,createDecopilotClient:()=>_84});async function C84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Sl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function zC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Sl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await C84(F.body);return Q({stream:H})}function _84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return zC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function PC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=b84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var b84,B4Z,f84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},M$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},UL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},x84=($,Z,G)=>{let X=UL0($,Z,G);return new Proxy(bx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},v84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => jC$);return J(X,Z.token,$,Y,Q)}}},q$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>q$1(G,Z));if(typeof $==="object"){if(f84($))return v84($,Z);if(M$1($))return x84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=q$1(Y,Z);return G}return $},AC$=($)=>{return q$1($.state,$)};var Jg=O(()=>{wL0();b84=new Map;B4Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var y84,TC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},g84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=TC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},IC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=TC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??y84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},RC$=($,Z,G)=>{let X=new Headers($.headers);return g84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var qC$=O(()=>{y84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function MC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function h84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function kC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function SC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function VC$($){return{handleProtectedResourceMetadata:(w)=>{let U=NK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=NK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=NK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=kC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?SC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??NK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=kC$(z),P=NK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof k$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=SC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!h84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=MC$(32),H=U.token_endpoint_auth_method!=="none"?MC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${NK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var k$1,NK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var S$1=O(()=>{k$1=class k$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as c84}from"async_hooks";var CC$,yt;var V$1=O(()=>{CC$=new c84,yt={getStore:()=>{return CC$.getStore()},run:($,Z,...G)=>CC$.run($,Z,...G)}});var bC$="SELF",HL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},fC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},_C$="::",xC$=($)=>{let Z=$.indexOf(_C$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+_C$.length);return[G,X]},u84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},vC$=($)=>{if(HL0($))return[];return Object.keys($)},d84=($,Z)=>{if(HL0($))return $.events;let G=$[Z];if(!G)return[];if(fC$(G))return G.events;return Object.keys(G)},FL0=($,Z,G)=>{if($===bC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!M$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},l84=($,Z,G)=>{let X=Z;if(HL0($)){let Q=[];for(let J of $.events){let W=xC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=FL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of vC$($)){let J=FL0(Q,X,G);if(!J)continue;let W=d84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},m84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},i84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},n84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},p84=async($,Z,G,X,Y)=>{let Q=X;if(HL0($)){let U=new Set;for(let H of $.events){let N=xC$(H);if(!N)continue;let[B,D]=N,E=FL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of vC$($)){let F=FL0(U,Q,Y);if(F)J.set(F,U)}let W=m84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(fC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=i84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return n84(w)},yC$;var C$1=O(()=>{Jg();yC$={subscriptions:l84,execute:p84,parseCron:u84}});function t84($,Z){let G=UL0("self",{meshUrl:$,token:Z});return bx.forConnection(G)}function r84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function gC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=t84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(r84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var _$1=O(()=>{Jg();wL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=gt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var gt=($)=>{let Z=yt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},hC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},o84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?PC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=hC$(J);await Y(J.runtimeContext.env,{createAgent:gC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:p40,outputSchema:t40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=hC$(J);return yC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},cC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...o84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=gt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=gt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=gt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Qw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:D5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new SY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=yt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=gt();return j({context:B,runtimeContext:P},P)}}};var NL0=O(()=>{Bu0();OG();wu();Sv();Jg();C$1();V$1();_$1();C$1();_$1()});import{decodeJwt as uC$}from"jose";var a84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},dC$=($)=>()=>{return{...$??{}}},s84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=uC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:dC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=uC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=dC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=AC$(W),a84({env:Q,server:Z,url:X}),Q},e84,lC$=($)=>{let Z=cC$($),G=$.cors??e84,X=$.oauth,Y=X?VC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return IC$(J,G??{});let w=s84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await yt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return RC$(U,J,G??{});return U}}};var mC$=O(()=>{Jg();qC$();S$1();S$1();V$1();NL0();NL0();Jg();wL0();e84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as b$1}from"zod";function G64($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jy,outputSchema:Py,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=iC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return iC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:vV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:b$1.object({versions:b$1.array(vV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:RD0,outputSchema:qD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:b$1.object({}),outputSchema:Ay,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function nC$($){let Z=$.db,G=new xf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=G64(G,Q.id),W=lC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var $64=3600000,Z64=500,iC$;var pC$=O(()=>{mC$();NL0();Hy0();e5();iC$=Yg({ttlMs:$64,maxSize:Z64,updateRecencyOnGet:!0})});import{sql as X64}from"kysely";import{randomUUID as tC$}from"crypto";import{z as Y64}from"zod";async function J64($){let Z=new Date().toISOString(),G=tC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:tC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await X64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function W64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function K64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",yV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):oC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?rC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:rC$,rateLimitWindow:Q64,rateLimitMax:oC$}}async function w64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function U64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function aC$($){let{db:Z,db:G}=$,X=new vf(G),Y=new yf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await W64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await K64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await w64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Fj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:Y64.treeifyError(U.error)},400);let F=await U64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await J64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var rC$=!0,Q64="hour",oC$=100;var sC$=O(()=>{v4();t8();Ty();Ny0();By0();e5()});var eC$={};Z6(eC$,{createPublishRequestHandler:()=>aC$,createPublicMCPHandler:()=>nC$});var $_$=O(()=>{pC$();sC$()});var xn0={};Z6(xn0,{watchHandler:()=>Q_$,getProxyDispatch:()=>B64,createApp:()=>T64});import{readFileSync as F64}from"fs";import{PrometheusSerializer as H64}from"@opentelemetry/exporter-prometheus";import{DBOS as Wg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as L64,oAuthProtectedResourceMetadata as z64}from"better-auth/plugins";async function N64($){let Z=$.connect(),G;try{G=await Promise.race([Z,G_$(Z_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),G_$(Z_$)]),G.release(),!0}catch{return G.release(!0),!1}}function G_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function B64(){if(!f$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return f$1}async function O64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${kC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function D64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function T64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new W$1,J,W,K,w,U,F=null;if($.disableNats)J=K$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new yn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=XV$();let d=E1().natsCredsPath,l;if(d)try{l=F64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,l?{creds:l}:void 0);let k0=jy0()?new Fx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new xp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=K$1({getConnection:()=>F.getConnection()}),W=new w$1({getConnection:()=>F.getConnection()}),K=new H$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=vV$({getConnection:()=>F.getConnection()}),U=dV$({getConnection:()=>F.getConnection()});let N1=lV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},dA$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),Lm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Kg)await Kg();Hx0(X),vp0(Y);let N={storage:new lf(Z.db),sseHub:JZ},B=new pl0(N),D=new Sl(Z.db),E=new D$1(D);E.start(),W.start((d)=>{Q90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Kg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),zm1(),Y.teardown(),Hx0(null),vp0(null)};let L=new g1;if(L.use("*",wb0({enabled:(d)=>Bb(d,"debug")==="1"})),L.use("*",CL0),L.use("/*",N_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",$C$());L.use("*",async(d,l)=>{if(await l(),Hg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await N64(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await xL0.collect(),k0=E64.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!j64.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Wg.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=Q4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",vS$),L.route("/api/auth/custom",wT$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=so1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",uV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",uV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Xi),L.route("/",Ga1()),L.use("/oauth-proxy/:connectionId/*",uV),L.all("/oauth-proxy/:connectionId/*",X_$);let j=async(d)=>{let k0=await P64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",uV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await A64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=gA$({ttlMs:120000}),M=await go1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:N8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});pH.set(M);let S=new Hw(E1().encryptionKey);PR1({db:Z.db,baseUrl:cJ()});let q=f80(Z.db),V=new Pl(Z.db),t=oV$({db:Z.db});Vp0({storage:q,meshContextFactory:t}),Jm0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:$2$,workPublisher:U}),Zm0({dispatchRunFn:sR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new lf(Z.db);d6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await Y_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return QL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return QL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return QL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,FN(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,A3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{r1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{r1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),S3$({meshContextFactory:t,systemDatabaseUrl:yf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),tV$(),AR1();let v=async(d,l,k0)=>{let v0=await q.findById(d,l);if(!v0)throw Error("Automation not found");return bp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new gy(q,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>xn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[mQ(),YC(),EK()];for(let d of a)KL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(SL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{GQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),h8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",dV),L.use("/api/:org/v1/*",dV),L.use("/api/:org/files/*",dV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/"))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",hD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:Fb0,grouped:xO()})}),L.use("/mcp/*",async(d,l)=>{GQ(d,"mcp");try{return await l()}finally{$Y(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(EC$(),zL0(DC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",qN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",tE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",SN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{GQ(d,"llm_models");try{return await l()}finally{$Y(d,"llm_models")}});let U0=F01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)f$1=gV$({getConnection:()=>F?.getConnection()??null});L.route("/api",zS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await GS$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",dV),L.route("/api",cS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",rE0()),L.route("/api",f0),L.route("/api",CS$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",oE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Tl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",OE0()),L.route("/api",n0),L.route("/api/deco-sites",A2$()),L.route("/api/deco-apps",RS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",EE0()),L.route("/api/deco-sites",N0);let _0=new g1;_0.use("*",hQ({mountPath:"/api/vm-events"})),_0.route("/",TS$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => ($_$(),eC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",uV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",uV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0);let n=$S$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:X_$,watchHandler:Q_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(w2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Kg?Promise.resolve(Kg()).finally(()=>{Kg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await yY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await hf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Wg.registerQueue(vY,{partitionQueue:!0,concurrency:Mp0,minPollingIntervalMs:kp0}),await Wg.registerQueue(lQ,{partitionQueue:!0,concurrency:Qm0}),await Wg.registerQueue(DK,{partitionQueue:!0,concurrency:$m0}),await Wg.registerQueue(VU,{partitionQueue:!0,concurrency:k3$}),await O01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Wg.deleteQueue(d))),await Sp0(Z.pool),Kg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),TR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var Y_$,Z_$=5000,f$1=null,Kg=null,X_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Mx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Yi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=E1().baseUrl??B.origin;try{let t=new URL(q),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(SC1(J.connection_url))try{let V=await O64(Y,J.organization_id),t=D64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),t=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await kx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},Q_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},E64,j64,P64=()=>z64(Z4),A64=()=>L64(Z4);var vn0=O(()=>{Z9();j8();IR1();pG();Fb();t8();m6();S10();B_1();Ub0();gw();Gi();Qe0();R3();F5();v4();He0();De0();W2$();H01();t3();T40();N01();U2$();B01();ZS$();jS$();IS$();z01();qS$();MN0();Qi();_S$();VN0();u11();yS$();uS$();c11();h11();rt();uu();YV$();XY();s80();Rl();gp0();QV$();WV$();NV$();yV$();hV$();mV$();tl0();iV$();by0();gy0();rV$();I$0();E$1();gX();D01();ai();sl0();il0();I$0();W01();Xy0();Yy0();aV$();Ob();ZC$();aV();Qe0();qv();J90();Y_$=k(MB(),1);E64=new H64,j64=new Set([vY,lQ,DK,VU])});var w_$={};Z6(w_$,{resolveClientDir:()=>V64,resolveAssetPathWithTraversalCheck:()=>K_$,isPathWithinDirectory:()=>W_$,createAssetHandler:()=>C64});import{resolve as ht,dirname as I64,join as R64,extname as q64,basename as M64,sep as J_$}from"path";function k64($,Z){if($===Z||M64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${J_$}assets${J_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function W_$($,Z){let G=ht(Z),X=ht($);return X===G||X.startsWith(G+"/")}function K_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=ht(Z,G);if(!W_$(X,Z))return null;return X}function V64($,Z="../client"){let G=new URL($),X=I64(G.pathname);return ht(X,Z)}function C64($={}){let{env:Z="production",clientDir:G=S64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=K_$({requestPath:W,clientDir:G});if(!K)return null;let w=R64(K,"index.html"),U=ht(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(q64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:k64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var S64="./dist/client";var U_$=()=>{};var F_$={};Z6(F_$,{tryUpgradePreviewWs:()=>g64,tryHandlePreviewHttp:()=>y64,previewWebSocketHandler:()=>h64,parsePreviewBaseDomain:()=>v64,isPreviewWsData:()=>BL0,extractHandleFromHost:()=>x$1});function f64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function x64(){return new Response(b64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function v64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function x$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function y64($,Z){let G=x$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return ut(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get($V)&&f64($))return x64();return Y.headers.delete($V),Y}function ut($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function BL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function g64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=x$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return ut(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return ut(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return ut(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return ut(426,"upgrade failed");return}function ct($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var _64=256,b64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',h64;var H_$=O(()=>{Cn0();h64={open($){let Z=$.data;if(!BL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),ct($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{ct($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{ct($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!BL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=_64){ct($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!BL0(Z))return;ct($,Z,1000,"")}}});var D_$={};Z6(D_$,{printBanner:()=>u64,bannerLines:()=>O_$,BANNER_LINES:()=>N_$,BANNER_GRADIENT:()=>B_$});function c64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function O_$($){let Z=N_$.map((G,X)=>{let[Y,Q,J]=c64(B_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function u64($){console.log("");for(let Z of O_$($))console.log(Z);console.log("")}var N_$,B_$;var E_$=O(()=>{N_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],B_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var z_$={};Z6(z_$,{bootstrapDevLinkSession:()=>o64});import{existsSync as d64}from"fs";import{chmod as l64,mkdir as m64,rename as i64,writeFile as n64}from"fs/promises";import{dirname as p64,join as L_$}from"path";function t64($){return L_$($,"dev-link")}function r64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return L_$(t64($),"session.json")}async function o64($,Z){let G=r64($),X=u6().db,Y=SQ()?await Cn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(d64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await m64(p64(G),{recursive:!0});let W=`${G}.tmp`;return await n64(W,JSON.stringify(J,null,2),{mode:384}),await l64(W,384),await i64(W,G),{path:G,userSub:Y.id}}var j_$=O(()=>{R3();gw();fN()});Z9();var m$1="4";function i$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:m$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}j8();F5();function bb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function hL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function q81(){let $=bb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:hL0($,"--cpu-prof-dir")??process.cwd(),name:hL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(hL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}dL0();var st;function x81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=BB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),st=setInterval(()=>void Z().catch(()=>{}),$),st.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(st)clearInterval(st)}}import*as vb$ from"bun:jsc";var{startSamplingProfiler:yb$,samplingProfilerStackTraces:gb$}=vb$;function v81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{yb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=gb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function y81(){q81();let $=[x81(),f81(),v81()];return()=>{for(let Z of $)Z()}}import{existsSync as Y44}from"fs";var xY=E1();I81();var{DBOS:dt,DBOSClient:a64}=await import("@dbos-inc/dbos-sdk");function R_$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var s64=[vY,lQ,DK,VU],e64=xY.dispatchRole==="worker"?s64:xY.dispatchRole==="api"?[]:void 0;dt.setConfig(i$1({systemDatabaseUrl:R_$(xY.databaseUrl,xY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:xY.podName,listenQueues:e64}));var{createApp:$44}=await Promise.resolve().then(() => (vn0(),xn0)),{isServerPath:Z44}=await Promise.resolve().then(() => (rt(),W81)),{createAssetHandler:G44,resolveClientDir:q_$}=await Promise.resolve().then(() => (U_$(),w_$)),X44=xY.port,P_$=q_$(import.meta.url,"../client"),Q44=Y44(P_$)?P_$:q_$(import.meta.url,"../dist/client"),J44=G44({clientDir:Q44,isServerPath:Z44}),W44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function K44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(W44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:w44,tryHandlePreviewHttp:U44,tryUpgradePreviewWs:F44,previewWebSocketHandler:v$1,isPreviewWsData:y$1}=await Promise.resolve().then(() => (H_$(),F_$)),{getOrInitSharedRunner:H44}=await Promise.resolve().then(() => (qn(),iY$)),M_$=w44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),A_$={baseDomain:M_$??"",getRunner:H44},OL0=await $44(),g$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),T_$=process.env.DBOS_CONDUCTOR_URL?.trim();await dt.launch({...g$1?{conductorKey:g$1}:{},...g$1&&T_$?{conductorURL:T_$}:{}});console.log(`[dbos] application version: ${dt.applicationVersion}`);await OL0.initDbos();if(!xY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (E_$(),D_$));console.log("");for(let Z of $())console.log(Z)}var N44=Bun.serve({idleTimeout:0,port:X44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(M_$){let X=await F44($,Z,A_$);if(X===void 0)return;if(X)return X;let Y=await U44($,A_$);if(Y)return Y}let G=await J44($);if(G)return K44(G);return OL0.fetch($,{server:Z})},websocket:{open($){if(y$1($.data))v$1.open($)},message($,Z){if(y$1($.data))v$1.message($,Z)},close($){if(y$1($.data))v$1.close($)}},development:!1}),B44=y81();if(xY.localMode)Promise.resolve().then(() => (fN(),JN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (j_$(),z_$)),Y=xY.baseUrl??`http://localhost:${xY.port}`,Q=await X(xY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (fN(),JN0));Z()}catch{}});var I_$=!1;async function O44($){let Z;try{Z=await a64.create({systemDatabaseUrl:R_$(xY.databaseUrl,xY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function DL0($){if(I_$)return;I_$=!0,console.log(`
+`;return new TextEncoder().encode(X)}var s11,sV,H14,wS$,a11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",B14,c$,h$,e8,KS$=24,eV,AJ;var DS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(s11||(s11={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return t(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),t(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return O0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function F0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){F0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function n(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,S0,l0),F0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),F0(l0,S0,K),_0(l0,l0,j0),F0(S0,S0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return n(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return n(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function B6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],b0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),r$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var yG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function I8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=yG[K0];L9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),F0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),F0(o,o,j0),F0(Y0,g[3],m[3]),F0(Y0,Y0,U),F0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),F0(g[0],b0,l0),F0(g[1],S0,P0),F0(g[2],P0,l0),F0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function T5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),F0(h,m[0],Y0),F0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function $9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),M6(m,g),M6(g,g),e4(g,m,o)}function z9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);I8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),T5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var R8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function q8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*R8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*R8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*R8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function $6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;q8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];I8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];I8(b0,g.subarray(32),h+32),$6(b0),z9(j0,b0),T5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];I8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return q8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),F0(P0,l0,b0),F0(h,P0,Y0),F0(h,h,K0),V0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(I8(b0,g,h),$6(b0),$9(l0,P0,b0),z9(P0,m.subarray(32)),M6(l0,P0),T5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,d6=24,o6=32,n8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=n8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:I8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:n8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:R8,pack25519:m0,unpack25519:N0,M:F0,A:_0,S:Q0,Z:I0,pow2523:V0,add:M6,set25519:A0,modL:q8,scalarmult:$9,scalarbase:z9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==d6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(n8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(n8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+n8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=n8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return I8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof Xg<"u"&&C$Z?C$Z:globalThis.nacl=globalThis.nacl||{});sV=typeof Xg<"u"&&C$Z?C$Z:globalThis.nacl,H14={fromSeed:sV.sign.keyPair.fromSeed,sign:sV.sign.detached,verify:sV.sign.detached.verify,randomBytes:sV.randomBytes,scalarBaseMultiply:sV.scalarMult.base,seal:sV.box,open:sV.box.open};B14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));eV=[120,107,118,49];N14(H14);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function X$1($){try{$?.clear?.()}catch{}}async function ES$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=BS$($),W=Z$1(J.sub),K=G$1(new TextEncoder().encode(Z)),w=US$();try{let U=await NS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(OS$(U,w))}finally{X$1(w),X$1(K),X$1(W)}}var LS$=O(()=>{DS$()});function R14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function zS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(Y$1(),503);if(!Y.natsPublicUrl)return Z.json(Y$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(Y$1(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await ES$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:QS$(Q),userId:X,allowedConnectionTypes:R14(Y.natsPublicUrl)})}return Z.json(JS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var Y$1=()=>({error:"link session unavailable"});var jS$=O(()=>{m6();j8();WS$();LS$()});async function k14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function S14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new DN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function V14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},q14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function C14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<PS$){await h8(AS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<PS$){await h8(AS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var q14=90000,M14=15000,TS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ry({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},M14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await k14(F,w)){await S14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await V14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await C14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},PS$=60000,AS$=500;var IS$=O(()=>{m6();aV();PY();Z9();mD0();qn();zv();D90();qQ()});function b14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function f14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(_14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var _14=1e4,x14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},RS$=()=>{let $=new g1;return $.use("*",x14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await f14(X,Y);return Z.json({apps:b14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var qS$=O(()=>{m6();j8()});import{z as v1}from"zod";function UK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function i14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function n14($,Z,G){try{return JSON.parse($)}catch{throw new SS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function p14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:n14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function t14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function r14($){if(!$)return;return{openai:{response_format:$}}}function o14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function MS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function kS$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var v14=256,y14,g14,h14,c14,u14,d14,l14,m14,SS$,VS$,CS$;var _S$=O(()=>{y6();m6();aV();y14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),g14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),h14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(g14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),c14=v1.object({type:v1.literal("text")}),u14=v1.object({type:v1.literal("json_object")}),d14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),l14=v1.union([c14,u14,d14]),m14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(h14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(y14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:l14.optional(),user:v1.string().optional()});SS$=class SS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};VS$=new g1;VS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(UK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(UK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(UK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=m14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(UK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=i14(Q.model);if(!J)return $.json(UK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(UK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(UK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=p14(Q.messages),H=Q.tools?t14(Q.tools):void 0,N=r14(Q.response_format),B=o14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=MS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=v14)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:kS$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=MS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:kS$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(UK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(UK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(UK(Y.message,"server_error"),500)}});CS$=VS$});var fS$;var bS$=O(()=>{fS$={name:"decocms",version:"4.40.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function e14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??s14}}var xS$,s14="https://ph.studio.decocms.com",vS$;var yS$=O(()=>{m6();Ob0();fN();pG();j8();He0();bS$();xS$=new g1;xS$.get("/",($)=>{let Z={version:fS$.version,theme:T_1(),...vO().logo&&{logo:vO().logo},...SQ()&&{internalUrl:Me()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:KT$(),posthog:e14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});vS$=xS$});function gS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var hS$,$$4,Z$4,cS$;var uS$=O(()=>{m6();I3();Rv();Fb();hS$=new g1,$$4=["range","if-none-match","if-modified-since"],Z$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];hS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(vy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await _n(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return gS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of $$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of Z$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),gS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});cS$=hS$});var vt=_((ZC)=>{var G$4=ZC&&ZC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),X$4=ZC&&ZC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))G$4(Z,$,G)};Object.defineProperty(ZC,"__esModule",{value:!0});X$4(dX(),ZC)});var mS$=_((dS$)=>{Object.defineProperty(dS$,"__esModule",{value:!0});dS$.version=void 0;dS$.version="3.4.0"});var pS$=_((FK)=>{var Y$4=FK&&FK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(FK,"__esModule",{value:!0});FK.NodeTransport=FK.VERSION=void 0;FK.nodeResolveHost=U$4;var m4=vt(),Q$4=u0("net"),Q$1=u0("tls"),J$4=u0("path"),iS$=u0("fs"),W$4=Y$4(u0("dns")),K$4=mS$();FK.VERSION=K$4.version;var w$4="nats.js";class nS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=w$4,this.version=FK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,Q$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,J$4.resolve)($),!(0,iS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,iS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,Q$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,Q$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof Q$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}FK.NodeTransport=nS$;function U$4($){let Z=(0,m4.deferred)();return W$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var sS$=_((aS$)=>{Object.defineProperty(aS$,"__esModule",{value:!0});aS$.connect=F$4;var tS$=pS$(),rS$=vt(),oS$=vt();function F$4($={}){if((0,oS$.hasWsProtocol)($))return Promise.reject(oS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,rS$.setTransportFactory)({factory:()=>{return new tS$.NodeTransport},dnsResolveFn:tS$.nodeResolveHost}),rS$.NatsConnectionImpl.connect($)}});var eS$=_((kU)=>{var N$4=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),B$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))N$4(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var O$4=sS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return O$4.connect}});B$4(vt(),kU)});function XV$($){let Z=$?.connectFn??z$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:L$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(E$4,D$4,B-1,2,0.5);await h8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?$V$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=GV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function z$4($){return ZV$.connect($)}var $V$,ZV$,GV$,D$4=100,E$4=3000,L$4=3000;var YV$=O(()=>{Z9();$V$=k(Cg(),1),ZV$=k(eS$(),1),GV$=k(MB(),1)});function Yg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function J$1($,Z){return`${$}.${Z}`}class W$1{cache;constructor($){this.cache=Yg({ttlMs:$?.ttlMs??j$4,maxSize:$?.maxSize??P$4})}async get($,Z){return this.cache.get(J$1($,Z))??null}async set($,Z,G){this.cache.set(J$1($,Z),G)}async invalidate($,Z){this.cache.delete(J$1($,Z))}teardown(){this.cache.clear()}}var j$4=600000,P$4=5000;var QV$=()=>{};function XL0($,Z){return`${$}:${Z}`}function K$1($){let Z=Yg({ttlMs:$?.ttlMs??A$4,maxSize:$?.maxSize??T$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(JV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(XL0(K,w))},set(K,w,U){Z.set(XL0(K,w),U)},invalidate(K,w){Z.delete(XL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(JV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(XL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var JV$="studio.ai-provider-keys.invalidate",A$4=30000,T$4=5000;var WV$=()=>{};class w$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var KV$=($)=>{let Z;return()=>Z??=$()},U$1,F$1;var wV$=O(()=>{F5();U$1=KV$(()=>N8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),F$1=KV$(()=>N8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function V$4(){return{name:lw,subjects:[`${bl0}.>`],storage:TJ.StorageType.File,max_age:q$4,max_bytes:k$4,max_msgs_per_subject:S$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:M$4,num_replicas:1}}class HV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function UV$($){let Z=FV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function f$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,R$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class H$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=V$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=f$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=C6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=xl0(w,{runId:Z}),H=performance.now()-U;if(U$1().record(H),F$1().add(1,{"org.id":X??"unknown"}),b$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?UV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),_$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=xl0(Z,{runId:$,dedup:G});if(U$1().record(performance.now()-Y),F$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:UV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=V6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=m50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(u50()).pipeThrough(d50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,FV$,I$4=($)=>{let Z;return()=>Z??=$()},R$4,q$4=86400000000000,M$4=120000000000,k$4=4294967296,S$4=500000,C$4,_$4,b$4;var NV$=O(()=>{yl0();i50();vl0();F5();wV$();TJ=k(MB(),1),FV$=k(Cg(),1),R$4=I$4(()=>N8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));C$4=process.env.STREAM_ENCODE_TRACE==="1",_$4=process.env.DECOPILOT_STREAM_TRACE==="1";b$4=C$4?new HV$:null});import{z as G8}from"zod";var BV$,OV$,HK,N$1,DV$,EV$,LV$,zV$,x$4,jV$,PV$,AV$,TV$,IV$,v$4,RV$,d8Z,y$4,g$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},qV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},MV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?y$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${g$4(Y.error)}`);return Y.data};var kV$=O(()=>{BV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),OV$=G8.array(G8.tuple([G8.string(),G8.string()])),HK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),N$1=G8.string().min(1),DV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:HK,method:G8.string().min(1),url:G8.string().min(1),headers:OV$,replySubject:N$1,bodySubject:N$1.optional(),abortSubject:N$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),EV$=G8.object({type:G8.literal("request.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:BV$}),LV$=G8.object({type:G8.literal("request.end"),requestId:HK,seq:G8.number().int().nonnegative()}),zV$=G8.object({type:G8.literal("request.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),x$4=G8.union([EV$,LV$,zV$]),jV$=G8.object({type:G8.literal("response.ack"),requestId:HK}),PV$=G8.object({type:G8.literal("response.start"),requestId:HK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:OV$}),AV$=G8.object({type:G8.literal("response.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:BV$}),TV$=G8.object({type:G8.literal("response.end"),requestId:HK,seq:G8.number().int().nonnegative()}),IV$=G8.object({type:G8.literal("response.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),v$4=G8.union([jV$,PV$,AV$,TV$,IV$]),RV$=G8.object({type:G8.literal("abort"),requestId:HK,reason:G8.string().optional()}),d8Z=G8.union([DV$,x$4,v$4,RV$]),y$4={"request.start":DV$,"request.chunk":EV$,"request.end":LV$,"request.error":zV$,"response.ack":jV$,"response.start":PV$,"response.chunk":AV$,"response.end":TV$,"response.error":IV$,abort:RV$}});var h$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},c$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},u$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},d$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},SV$=($)=>{return h$4(btoa(u$4($)))},VV$=($)=>{return d$4(atob(c$4($)))},l$4;var CV$=O(()=>{l$4=class l$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*e$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class W84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var m$4=30000,i$4=1000,n$4=65536,dQ,p$4=($)=>{return"connection"in $},t$4=($)=>{let Z=p$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??m$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??i$4,maxChunkBytes:Z.maxChunkBytes??n$4,diagnostics:Z.diagnostics}},_V$=($)=>{return Array.from($.entries())},r$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},o$4=($,Z,G)=>{if(r$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return _V$(G.headers);return _V$(G.headers)},bV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},a$4=()=>{return crypto.randomUUID().replaceAll("-","")},s$4=($)=>{try{$?.unsubscribe()}catch{}},$84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},Z84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},FB=($,Z,G)=>{$.publish(Z,qV$(G))},G84=($)=>{return $.type.startsWith("response.")},B$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},X84=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},fV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(X84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=MV$(W.value.data);if(!G84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},Y84=async($)=>{let Z=!1;while(!0){let G=await fV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},Q84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){FB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of e$4(J,$.maxChunkBytes)){if(X)return;FB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:SV$(W)}),G++}}}catch(Q){if(X)return;FB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},J84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await fV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(VV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){FB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},HB=($)=>{let Z=t$4($);return $84(Z.maxChunkBytes),async(G,X)=>{let Y=XS$(G),Q=new Request(G,X),J=a$4(),W=YS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,s$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",B$1(Q.signal));FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:B$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",B$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:o$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};FB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)FB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?Q84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await Y84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(Z84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:bV$(P.headers)});return new Response(J84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:bV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var xV$=O(()=>{kV$();CV$();eE0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var YL0=O(()=>{xV$()});function vV$($){let Z=$.createFetch??K84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return O$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return O$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return O$1}}}var O$1,K84=($,Z)=>HB({connection:$,firstFrameTimeoutMs:Z});var yV$=O(()=>{YL0();ft();O$1={online:!1,capabilities:[]}});async function*w84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function gV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:U84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*w84(U)}}var U84=45000;var hV$=O(()=>{YL0();ft()});import{z as IJ}from"zod";function cV$($){return JSON.stringify($)}var E6Z;var uV$=O(()=>{E6Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function dV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:F84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function lV$($){let Z=$.createFetch??HB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:cV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var F84=45000;var mV$=O(()=>{YL0();uV$();ft()});function QL0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var iV$=O(()=>{t8()});class D$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as H84,rm as JL0}from"fs/promises";import{join as WL0}from"path";async function KL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-N84),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await GC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await nV$($,Y,Z);else if(!Y.startsWith(".")){let Q=WL0($,Y),J=await GC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await nV$(Q,K,Z)}if((await GC(Q)).length===0)await JL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function nV$($,Z,G){let X=0,Y=WL0($,Z),Q=await GC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=WL0(Y,W),w=await GC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=WL0(K,F);await JL0(N,{recursive:!0,force:!0}),X++}}if((await GC(K)).length===0)await JL0(K,{recursive:!0,force:!0})}if((await GC(Y)).length===0)await JL0(Y,{recursive:!0,force:!0});return X}async function GC($){try{return(await H84($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var N84=30;var E$1=()=>{};import{DBOS as L$1,SchedulerMode as B84}from"@dbos-inc/dbos-sdk";async function D84(){let $=[mQ(),YC(),EK()],Z=0;for(let G of $)try{Z+=await KL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function E84($,Z){await L$1.runStep(()=>D84(),{name:"monitoringRetention"})}function tV$(){if(pV$)return;pV$=!0;let $=L$1.registerWorkflow(E84,{name:"monitoringRetentionWorkflow"});L$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:O84,mode:B84.ExactlyOncePerIntervalWhenActive})}var O84="23 4 * * *",pV$=!1;var rV$=O(()=>{gX();E$1()});function oV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await cc0($.db,Z,X.role);return Y.boundAuth=hc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new PD(G,void 0,Y.boundAuth,X.role,"self"),A40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var aV$=O(()=>{AD();Gi()});function L84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function j84(){for(let $ of z84)$()}function sV$($){let Z=[...z$1.logs,$];z$1={...z$1,logs:Z.length>500?Z.slice(-500):Z},j84()}function j$1(){return P84}var z$1,z84,P84=!1;var P$1=O(()=>{z$1=L84(),z84=new Set});import{EventEmitter as A84}from"events";var A$1;var eV$=O(()=>{P$1();A$1=new A84;A$1.on("request",($)=>{sV$($)})});function $C$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Qg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Qg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Qg(H.method)}${s4.reset}`}}catch{}}let W=Qg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Qg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=I84(X),w=J?"\u25C0":"\u2190";if(!j$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=T84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!j$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);A$1.emit("request",{method:X,path:Qg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,T84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},I84=($)=>{return s4[$]||s4.reset},Qg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var ZC$=O(()=>{P$1();eV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as QC$}from"crypto";import{mkdir as R84,readdir as q84,rm as GC$,stat as JC$}from"fs/promises";import{join as I$1,relative as M84}from"path";import{z as P$}from"zod";function KC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return I$1(k84,Z)}function wC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function T$1($,Z){let G=KC$($),X=wC$(Z);return I$1(G,X)}function S84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return QC$("sha256",Y).update(Q).digest("hex")}function YC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=S84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${wC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function UC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${QC$("md5","etag").update(X).digest("hex")}"`}async function FC$($,Z,G,X,Y){try{let Q=await q84($,{withFileTypes:!0});for(let J of Q){let W=I$1($,J.name),w=M84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await FC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await JC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:UC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function HC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=KC$(X);await R84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await FC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=T$1(X,Q.key),W=await JC$(J);return{contentType:j01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:UC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??XC$;return{url:YC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??XC$;return{url:YC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=T$1(X,Q.key);try{return await GC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=T$1(X,K);try{await GC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function R$1($,Z,G){let X=HC$(Z,G),Y=new Qw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:D5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new SY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),lW(Y,Q,$,"mcp:dev-assets")}async function NC$($,Z,G,X){let Q=HC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var k84="./data/assets",XC$=3600,WC$,BC$;var OC$=O(()=>{j8();vn();m6();wu();Sv();OG();zE0();WC$=new g1;WC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return R$1($.req.raw,Z,X)});BC$=WC$});var DC$={};Z6(DC$,{mountDevRoutes:()=>V84});function V84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return R$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await NC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",BC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",LE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var EC$=O(()=>{m6();N01();zE0();OC$()});var LC$=O(()=>{wu0();Uu0();YE()});var wL0=O(()=>{LC$()});var jC$={};Z6(jC$,{streamAgent:()=>zC$,createDecopilotClient:()=>_84});async function C84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Sl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function zC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Sl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await C84(F.body);return Q({stream:H})}function _84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return zC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function PC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=b84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var b84,B4Z,f84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},M$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},UL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},x84=($,Z,G)=>{let X=UL0($,Z,G);return new Proxy(bx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},v84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => jC$);return J(X,Z.token,$,Y,Q)}}},q$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>q$1(G,Z));if(typeof $==="object"){if(f84($))return v84($,Z);if(M$1($))return x84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=q$1(Y,Z);return G}return $},AC$=($)=>{return q$1($.state,$)};var Jg=O(()=>{wL0();b84=new Map;B4Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var y84,TC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},g84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=TC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},IC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=TC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??y84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},RC$=($,Z,G)=>{let X=new Headers($.headers);return g84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var qC$=O(()=>{y84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function MC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function h84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function kC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function SC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function VC$($){return{handleProtectedResourceMetadata:(w)=>{let U=NK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=NK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=NK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=kC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?SC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??NK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=kC$(z),P=NK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof k$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=SC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!h84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=MC$(32),H=U.token_endpoint_auth_method!=="none"?MC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${NK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var k$1,NK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var S$1=O(()=>{k$1=class k$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as c84}from"async_hooks";var CC$,yt;var V$1=O(()=>{CC$=new c84,yt={getStore:()=>{return CC$.getStore()},run:($,Z,...G)=>CC$.run($,Z,...G)}});var bC$="SELF",HL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},fC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},_C$="::",xC$=($)=>{let Z=$.indexOf(_C$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+_C$.length);return[G,X]},u84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},vC$=($)=>{if(HL0($))return[];return Object.keys($)},d84=($,Z)=>{if(HL0($))return $.events;let G=$[Z];if(!G)return[];if(fC$(G))return G.events;return Object.keys(G)},FL0=($,Z,G)=>{if($===bC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!M$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},l84=($,Z,G)=>{let X=Z;if(HL0($)){let Q=[];for(let J of $.events){let W=xC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=FL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of vC$($)){let J=FL0(Q,X,G);if(!J)continue;let W=d84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},m84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},i84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},n84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},p84=async($,Z,G,X,Y)=>{let Q=X;if(HL0($)){let U=new Set;for(let H of $.events){let N=xC$(H);if(!N)continue;let[B,D]=N,E=FL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of vC$($)){let F=FL0(U,Q,Y);if(F)J.set(F,U)}let W=m84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(fC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=i84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return n84(w)},yC$;var C$1=O(()=>{Jg();yC$={subscriptions:l84,execute:p84,parseCron:u84}});function t84($,Z){let G=UL0("self",{meshUrl:$,token:Z});return bx.forConnection(G)}function r84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function gC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=t84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(r84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var _$1=O(()=>{Jg();wL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=gt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var gt=($)=>{let Z=yt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},hC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},o84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?PC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=hC$(J);await Y(J.runtimeContext.env,{createAgent:gC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:p40,outputSchema:t40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=hC$(J);return yC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},cC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...o84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=gt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=gt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=gt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Qw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:D5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new SY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=yt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=gt();return j({context:B,runtimeContext:P},P)}}};var NL0=O(()=>{Bu0();OG();wu();Sv();Jg();C$1();V$1();_$1();C$1();_$1()});import{decodeJwt as uC$}from"jose";var a84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},dC$=($)=>()=>{return{...$??{}}},s84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=uC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:dC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=uC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=dC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=AC$(W),a84({env:Q,server:Z,url:X}),Q},e84,lC$=($)=>{let Z=cC$($),G=$.cors??e84,X=$.oauth,Y=X?VC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return IC$(J,G??{});let w=s84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await yt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return RC$(U,J,G??{});return U}}};var mC$=O(()=>{Jg();qC$();S$1();S$1();V$1();NL0();NL0();Jg();wL0();e84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as b$1}from"zod";function G64($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jy,outputSchema:Py,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=iC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return iC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:vV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:b$1.object({versions:b$1.array(vV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:RD0,outputSchema:qD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:b$1.object({}),outputSchema:Ay,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function nC$($){let Z=$.db,G=new xf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=G64(G,Q.id),W=lC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var $64=3600000,Z64=500,iC$;var pC$=O(()=>{mC$();NL0();Hy0();e5();iC$=Yg({ttlMs:$64,maxSize:Z64,updateRecencyOnGet:!0})});import{sql as X64}from"kysely";import{randomUUID as tC$}from"crypto";import{z as Y64}from"zod";async function J64($){let Z=new Date().toISOString(),G=tC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:tC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await X64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function W64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function K64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",yV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):oC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?rC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:rC$,rateLimitWindow:Q64,rateLimitMax:oC$}}async function w64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function U64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function aC$($){let{db:Z,db:G}=$,X=new vf(G),Y=new yf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await W64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await K64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await w64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Fj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:Y64.treeifyError(U.error)},400);let F=await U64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await J64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var rC$=!0,Q64="hour",oC$=100;var sC$=O(()=>{v4();t8();Ty();Ny0();By0();e5()});var eC$={};Z6(eC$,{createPublishRequestHandler:()=>aC$,createPublicMCPHandler:()=>nC$});var $_$=O(()=>{pC$();sC$()});var xn0={};Z6(xn0,{watchHandler:()=>Q_$,getProxyDispatch:()=>B64,createApp:()=>T64});import{readFileSync as F64}from"fs";import{PrometheusSerializer as H64}from"@opentelemetry/exporter-prometheus";import{DBOS as Wg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as L64,oAuthProtectedResourceMetadata as z64}from"better-auth/plugins";async function N64($){let Z=$.connect(),G;try{G=await Promise.race([Z,G_$(Z_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),G_$(Z_$)]),G.release(),!0}catch{return G.release(!0),!1}}function G_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function B64(){if(!f$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return f$1}async function O64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${kC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function D64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function T64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new W$1,J,W,K,w,U,F=null;if($.disableNats)J=K$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new yn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=XV$();let d=E1().natsCredsPath,l;if(d)try{l=F64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,l?{creds:l}:void 0);let k0=jy0()?new Fx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new xp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=K$1({getConnection:()=>F.getConnection()}),W=new w$1({getConnection:()=>F.getConnection()}),K=new H$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=vV$({getConnection:()=>F.getConnection()}),U=dV$({getConnection:()=>F.getConnection()});let N1=lV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},dA$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),Lm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Kg)await Kg();Hx0(X),vp0(Y);let N={storage:new lf(Z.db),sseHub:JZ},B=new pl0(N),D=new Sl(Z.db),E=new D$1(D);E.start(),W.start((d)=>{Q90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Kg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),zm1(),Y.teardown(),Hx0(null),vp0(null)};let L=new g1;if(L.use("*",wb0({enabled:(d)=>Bb(d,"debug")==="1"})),L.use("*",CL0),L.use("/*",N_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",$C$());L.use("*",async(d,l)=>{if(await l(),Hg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await N64(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await xL0.collect(),k0=E64.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!j64.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Wg.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=Q4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",vS$),L.route("/api/auth/custom",wT$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=so1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",uV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",uV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Xi),L.route("/",Ga1()),L.use("/oauth-proxy/:connectionId/*",uV),L.all("/oauth-proxy/:connectionId/*",X_$);let j=async(d)=>{let k0=await P64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",uV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await A64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=gA$({ttlMs:120000}),M=await go1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:N8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});pH.set(M);let S=new Hw(E1().encryptionKey);PR1({db:Z.db,baseUrl:cJ()});let q=f80(Z.db),V=new Pl(Z.db),t=oV$({db:Z.db});Vp0({storage:q,meshContextFactory:t}),Jm0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:$2$,workPublisher:U}),Zm0({dispatchRunFn:sR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new lf(Z.db);d6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await Y_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return QL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return QL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return QL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,FN(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,A3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{r1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{r1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),S3$({meshContextFactory:t,systemDatabaseUrl:yf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),tV$(),AR1();let v=async(d,l,k0)=>{let v0=await q.findById(d,l);if(!v0)throw Error("Automation not found");return bp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new gy(q,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>xn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[mQ(),YC(),EK()];for(let d of a)KL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(SL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{GQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),h8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",dV),L.use("/api/:org/v1/*",dV),L.use("/api/:org/files/*",dV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/"))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",hD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:Fb0,grouped:xO()})}),L.use("/mcp/*",async(d,l)=>{GQ(d,"mcp");try{return await l()}finally{$Y(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(EC$(),zL0(DC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",qN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",tE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",SN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{GQ(d,"llm_models");try{return await l()}finally{$Y(d,"llm_models")}});let U0=F01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)f$1=gV$({getConnection:()=>F?.getConnection()??null});L.route("/api",zS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await GS$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",dV),L.route("/api",cS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",rE0()),L.route("/api",f0),L.route("/api",CS$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",oE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Tl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",OE0()),L.route("/api",n0),L.route("/api/deco-sites",A2$()),L.route("/api/deco-apps",RS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",EE0()),L.route("/api/deco-sites",N0);let _0=new g1;_0.use("*",hQ({mountPath:"/api/vm-events"})),_0.route("/",TS$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => ($_$(),eC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",uV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",uV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0);let n=$S$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:X_$,watchHandler:Q_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(w2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Kg?Promise.resolve(Kg()).finally(()=>{Kg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await yY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await hf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Wg.registerQueue(vY,{partitionQueue:!0,concurrency:Mp0,minPollingIntervalMs:kp0}),await Wg.registerQueue(lQ,{partitionQueue:!0,concurrency:Qm0}),await Wg.registerQueue(DK,{partitionQueue:!0,concurrency:$m0}),await Wg.registerQueue(VU,{partitionQueue:!0,concurrency:k3$}),await O01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Wg.deleteQueue(d))),await Sp0(Z.pool),Kg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),TR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var Y_$,Z_$=5000,f$1=null,Kg=null,X_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Mx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Yi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=E1().baseUrl??B.origin;try{let t=new URL(q),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(SC1(J.connection_url))try{let V=await O64(Y,J.organization_id),t=D64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),t=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await kx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},Q_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},E64,j64,P64=()=>z64(Z4),A64=()=>L64(Z4);var vn0=O(()=>{Z9();j8();IR1();pG();Fb();t8();m6();S10();B_1();Ub0();gw();Gi();Qe0();R3();F5();v4();He0();De0();W2$();H01();t3();T40();N01();U2$();B01();ZS$();jS$();IS$();z01();qS$();MN0();Qi();_S$();VN0();u11();yS$();uS$();c11();h11();rt();uu();YV$();XY();s80();Rl();gp0();QV$();WV$();NV$();yV$();hV$();mV$();tl0();iV$();by0();gy0();rV$();I$0();E$1();gX();D01();ai();sl0();il0();I$0();W01();Xy0();Yy0();aV$();Ob();ZC$();aV();Qe0();qv();J90();Y_$=k(MB(),1);E64=new H64,j64=new Set([vY,lQ,DK,VU])});var w_$={};Z6(w_$,{resolveClientDir:()=>V64,resolveAssetPathWithTraversalCheck:()=>K_$,isPathWithinDirectory:()=>W_$,createAssetHandler:()=>C64});import{resolve as ht,dirname as I64,join as R64,extname as q64,basename as M64,sep as J_$}from"path";function k64($,Z){if($===Z||M64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${J_$}assets${J_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function W_$($,Z){let G=ht(Z),X=ht($);return X===G||X.startsWith(G+"/")}function K_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=ht(Z,G);if(!W_$(X,Z))return null;return X}function V64($,Z="../client"){let G=new URL($),X=I64(G.pathname);return ht(X,Z)}function C64($={}){let{env:Z="production",clientDir:G=S64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=K_$({requestPath:W,clientDir:G});if(!K)return null;let w=R64(K,"index.html"),U=ht(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(q64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:k64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var S64="./dist/client";var U_$=()=>{};var F_$={};Z6(F_$,{tryUpgradePreviewWs:()=>g64,tryHandlePreviewHttp:()=>y64,previewWebSocketHandler:()=>h64,parsePreviewBaseDomain:()=>v64,isPreviewWsData:()=>BL0,extractHandleFromHost:()=>x$1});function f64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function x64(){return new Response(b64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function v64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function x$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function y64($,Z){let G=x$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return ut(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get($V)&&f64($))return x64();return Y.headers.delete($V),Y}function ut($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function BL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function g64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=x$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return ut(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return ut(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return ut(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return ut(426,"upgrade failed");return}function ct($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var _64=256,b64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',h64;var H_$=O(()=>{Cn0();h64={open($){let Z=$.data;if(!BL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),ct($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{ct($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{ct($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!BL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=_64){ct($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!BL0(Z))return;ct($,Z,1000,"")}}});var D_$={};Z6(D_$,{printBanner:()=>u64,bannerLines:()=>O_$,BANNER_LINES:()=>N_$,BANNER_GRADIENT:()=>B_$});function c64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function O_$($){let Z=N_$.map((G,X)=>{let[Y,Q,J]=c64(B_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function u64($){console.log("");for(let Z of O_$($))console.log(Z);console.log("")}var N_$,B_$;var E_$=O(()=>{N_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],B_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var z_$={};Z6(z_$,{bootstrapDevLinkSession:()=>o64});import{existsSync as d64}from"fs";import{chmod as l64,mkdir as m64,rename as i64,writeFile as n64}from"fs/promises";import{dirname as p64,join as L_$}from"path";function t64($){return L_$($,"dev-link")}function r64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return L_$(t64($),"session.json")}async function o64($,Z){let G=r64($),X=u6().db,Y=SQ()?await Cn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(d64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await m64(p64(G),{recursive:!0});let W=`${G}.tmp`;return await n64(W,JSON.stringify(J,null,2),{mode:384}),await l64(W,384),await i64(W,G),{path:G,userSub:Y.id}}var j_$=O(()=>{R3();gw();fN()});Z9();var m$1="4";function i$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:m$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}j8();F5();function bb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function hL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function q81(){let $=bb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:hL0($,"--cpu-prof-dir")??process.cwd(),name:hL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(hL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}dL0();var st;function x81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=BB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),st=setInterval(()=>void Z().catch(()=>{}),$),st.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(st)clearInterval(st)}}import*as vb$ from"bun:jsc";var{startSamplingProfiler:yb$,samplingProfilerStackTraces:gb$}=vb$;function v81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{yb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=gb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function y81(){q81();let $=[x81(),f81(),v81()];return()=>{for(let Z of $)Z()}}import{existsSync as Y44}from"fs";var xY=E1();I81();var{DBOS:dt,DBOSClient:a64}=await import("@dbos-inc/dbos-sdk");function R_$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var s64=[vY,lQ,DK,VU],e64=xY.dispatchRole==="worker"?s64:xY.dispatchRole==="api"?[]:void 0;dt.setConfig(i$1({systemDatabaseUrl:R_$(xY.databaseUrl,xY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:xY.podName,listenQueues:e64}));var{createApp:$44}=await Promise.resolve().then(() => (vn0(),xn0)),{isServerPath:Z44}=await Promise.resolve().then(() => (rt(),W81)),{createAssetHandler:G44,resolveClientDir:q_$}=await Promise.resolve().then(() => (U_$(),w_$)),X44=xY.port,P_$=q_$(import.meta.url,"../client"),Q44=Y44(P_$)?P_$:q_$(import.meta.url,"../dist/client"),J44=G44({clientDir:Q44,isServerPath:Z44}),W44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function K44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(W44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:w44,tryHandlePreviewHttp:U44,tryUpgradePreviewWs:F44,previewWebSocketHandler:v$1,isPreviewWsData:y$1}=await Promise.resolve().then(() => (H_$(),F_$)),{getOrInitSharedRunner:H44}=await Promise.resolve().then(() => (qn(),iY$)),M_$=w44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),A_$={baseDomain:M_$??"",getRunner:H44},OL0=await $44(),g$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),T_$=process.env.DBOS_CONDUCTOR_URL?.trim();await dt.launch({...g$1?{conductorKey:g$1}:{},...g$1&&T_$?{conductorURL:T_$}:{}});console.log(`[dbos] application version: ${dt.applicationVersion}`);await OL0.initDbos();if(!xY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (E_$(),D_$));console.log("");for(let Z of $())console.log(Z)}var N44=Bun.serve({idleTimeout:0,port:X44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(M_$){let X=await F44($,Z,A_$);if(X===void 0)return;if(X)return X;let Y=await U44($,A_$);if(Y)return Y}let G=await J44($);if(G)return K44(G);return OL0.fetch($,{server:Z})},websocket:{open($){if(y$1($.data))v$1.open($)},message($,Z){if(y$1($.data))v$1.message($,Z)},close($){if(y$1($.data))v$1.close($)}},development:!1}),B44=y81();if(xY.localMode)Promise.resolve().then(() => (fN(),JN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (j_$(),z_$)),Y=xY.baseUrl??`http://localhost:${xY.port}`,Q=await X(xY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (fN(),JN0));Z()}catch{}});var I_$=!1;async function O44($){let Z;try{Z=await a64.create({systemDatabaseUrl:R_$(xY.databaseUrl,xY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function DL0($){if(I_$)return;I_$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{B44(),OL0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await h8(Q),await N44.stop(!0);let J=dt.executorID;await dt.shutdown(),await O44(J),await OL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>DL0("SIGTERM"));process.on("SIGINT",()=>DL0("SIGINT"));process.on("SIGHUP",()=>DL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),DL0("uncaughtException")});