decocms 4.429.9 → 4.429.11

package/dist/server/migrate-dbos.js

@@ -1,4 +1,4 @@
 // @bun
-var M=import.meta.require;var R="13";function q(w){return{name:"decocms",systemDatabaseUrl:w.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:w.poolSize,runAdminServer:!1,executorID:w.executorID,applicationVersion:R,...w.listenQueues!==void 0?{listenQueues:w.listenQueues}:{}}}function X(w,h={}){let{signal:c}=h;if(c?.aborted)return Promise.reject(c.reason);return new Promise((J,y)=>{let f=()=>{clearTimeout(+d),y(c?.reason)},d=P(()=>{c?.removeEventListener("abort",f),J()},w);c?.addEventListener("abort",f,{once:!0})})}var k=2147483647;function P(w,h){if(h=Math.trunc(Math.max(h,0)||0),h<=k){let f=Number(setTimeout(w,h));return{valueOf:()=>f}}let c=Date.now(),J,y=()=>{let f=h-(Date.now()-c);J=f>k?Number(setTimeout(y,k)):Number(setTimeout(w,f))};return y(),{valueOf:()=>J}}import A from"pg";var i=8314027461559302n,p=600000,u=500;async function G(w,h){let{databaseUrl:c,lockTimeoutMs:J=p}=w,y=w.log??((z)=>console.log(z)),f=new A.Client({connectionString:c});await f.connect();let m=Date.now(),d=!1;try{while(!d){if(d=(await f.query("SELECT pg_try_advisory_lock($1) AS locked",[i.toString()])).rows[0]?.locked===!0,d)break;if(Date.now()-m>=J)throw Error(`Timed out after ${J}ms waiting for the DBOS migration lock. Another process is still migrating the dbos schema; this pod will restart and retry.`);await X(u)}let z=Date.now()-m;if(z>1000)y(`[dbos] waited ${z}ms for the migration lock; another process migrated first`);return await h()}finally{if(d)try{await f.query("SELECT pg_advisory_unlock($1)",[i.toString()])}catch{}await f.end().catch(()=>{})}}import{homedir as g}from"os";var I=new Set(["all","worker","api"]);function t(w){let h=(w??"").trim();return I.has(h)?h:"all"}var n=new Set(["production","development","test"]);function V(w){let h=(w??"").trim();return n.has(h)?h:"development"}function W(w){return w==="true"||w==="1"}function U(w,h,c){if(h===void 0||h==="")return;let J=Number(h);if(!Number.isSafeInteger(J)||J<=0)throw Error(`${w} must be a positive integer`);if(c!==void 0&&J>c)throw Error(`${w} must be at most ${c}`);return J}function o(w,h,c,J){return U(w,h,J)??c}function l(w){let h={};for(let c of(w??"").split(",")){let J=c.trim();if(!J)continue;let y=J.indexOf("="),f=y>0?J.slice(0,y).trim():"",m=y>0?J.slice(y+1).trim():"";if(!f||!m){console.warn(`STRIPE_PLAN_PRICE_IDS: ignoring unparseable entry "${J}" \u2014 expected price_xxx=planId`);continue}h[f]=m}return h}function v(w,h,c,J){if(h===void 0||h==="")return c;let y=Number(h);if(!Number.isSafeInteger(y)||y<0)throw Error(`${w} must be a non-negative integer`);if(J!==void 0&&y>J)throw Error(`${w} must be at most ${J}`);return y}function Y(w,h){if(w===void 0||w==="")return h;return w==="true"||w==="1"}function O(w){if(!w)return null;try{let c=new URL(w).hostname.replace(/^\[|\]$/g,"");if(c==="localhost"||c==="127.0.0.1"||c==="::1")return null;return w}catch{return null}}function r(w){return w===void 0||w===""||w==="true"||w==="1"}function N(w,h){return w||h}function L(w,h){let c=w.home||h.DATA_DIR||h.DECOCMS_HOME||`${g()}/deco`,J=w.localMode,y=w.nodeEnv||V(h.NODE_ENV),f=h.NATS_URL||"nats://localhost:4222",m=h.VOICE_CONVERSATION_PROVIDER?.trim()||"elevenlabs",d={nodeEnv:y,port:o("PORT",w.port||h.PORT,3000,65535),baseUrl:w.baseUrl||h.BASE_URL,publicUrl:N(h.STUDIO_PUBLIC_URL,h.MESH_PUBLIC_URL),dataDir:c,voiceConversationProvider:m==="elevenlabs"||m==="openai"?m:null,openaiLiveApiKey:h.OPENAI_LIVE_API_KEY,openaiLiveModel:h.OPENAI_LIVE_MODEL?.trim()||"gpt-live-1",openaiLiveVoice:h.OPENAI_LIVE_VOICE?.trim()||"marin",elevenlabsApiKey:h.ELEVENLABS_API_KEY,elevenlabsVoiceId:h.ELEVENLABS_VOICE_ID||"JBFqnCBsd6RMkjVDRZzb",elevenlabsVoiceModel:h.ELEVENLABS_VOICE_MODEL||"eleven_v4_turbo",elevenlabsConversationModel:h.ELEVENLABS_CONVERSATION_MODEL?.trim()||"gemini-2.5-flash",databasePgSsl:W(h.DATABASE_PG_SSL),databasePoolMax:o("DATABASE_POOL_MAX",h.DATABASE_POOL_MAX,5),dbosPoolSize:o("DBOS_POOL_SIZE",h.DBOS_POOL_SIZE,5),betterAuthSecret:h.BETTER_AUTH_SECRET||"",encryptionKey:h.ENCRYPTION_KEY||"",studioJwtSecret:N(h.STUDIO_JWT_SECRET,h.MESH_JWT_SECRET),localMode:J,disableRateLimit:W(h.DISABLE_RATE_LIMIT),jiraAllowLocalSiteUrl:W(h.JIRA_ALLOW_LOCAL_SITE_URL),jiraSettleSeconds:o("JIRA_SETTLE_SECONDS",h.JIRA_SETTLE_SECONDS,60,3600),studioProvisionSecretKey:h.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(h.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((z)=>z.trim().toLowerCase()).filter(Boolean),taskBoardAdminOrgIds:(h.STUDIO_ADMIN_ORG_IDS??"").split(",").map((z)=>z.trim()).filter(Boolean),deploymentAdminToken:h.DEPLOYMENT_ADMIN_TOKEN||void 0,clickhouseUrl:h.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:U("CLICKHOUSE_MAX_MEMORY_USAGE",h.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:h.MONITORING_OTLP_ENDPOINT,otelServiceName:h.OTEL_SERVICE_NAME||"studio",natsCredsPath:h.NATS_CREDS,configPath:h.CONFIG_PATH||"./config.json",aiGatewayEnabled:W(h.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:h.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:h.DECO_AI_GATEWAY_ADMIN_TOKEN,stripeWebhookSecret:h.STRIPE_WEBHOOK_SECRET,stripeSecretKey:h.STRIPE_SECRET_KEY,stripeOrgPriceId:h.STRIPE_ORG_PRICE_ID,stripePlanPriceIds:l(h.STRIPE_PLAN_PRICE_IDS),stripePortalConfigurationId:h.STRIPE_PORTAL_CONFIGURATION_ID,stripeTopupProductId:h.STRIPE_TOPUP_PRODUCT_ID,topupFeePercent:v("STUDIO_TOPUP_FEE_PERCENT",h.STUDIO_TOPUP_FEE_PERCENT,15,100),taskQuotaEnforced:W(h.STUDIO_TASK_QUOTA_ENFORCED),freeTaskExecutions:o("STUDIO_FREE_TASKS",h.STUDIO_FREE_TASKS,3),monthlyTaskExecutions:o("STUDIO_MONTHLY_TASKS",h.STUDIO_MONTHLY_TASKS,10),maxRunsPerTask:o("STUDIO_MAX_RUNS_PER_TASK",h.STUDIO_MAX_RUNS_PER_TASK,5),enableDecoImport:W(h.ENABLE_DECO_IMPORT),hostingControlPlaneGa:W(h.HOSTING_CONTROL_PLANE_GA),monitorGa:W(h.MONITOR_GA),plansEnabled:W(h.STUDIO_PLANS_ENABLED),mcpCacheEnabled:Y(h.MCP_CACHE_ENABLED,y!=="development"),orgFsPublicSetsJson:h.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:W(h.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:o("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",h.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:o("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",h.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),taskBoardReviewSweeperEnabled:Y(h.TASK_BOARD_REVIEW_SWEEPER_ENABLED,!0),sandboxMaxConcurrentHostedRuns:o("SANDBOX_MAX_CONCURRENT_HOSTED_RUNS",h.SANDBOX_MAX_CONCURRENT_HOSTED_RUNS,12),s3Endpoint:h.S3_ENDPOINT,s3Bucket:h.S3_BUCKET,s3Region:h.S3_REGION||"auto",s3AccessKeyId:h.S3_ACCESS_KEY_ID,s3SecretAccessKey:h.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:r(h.S3_FORCE_PATH_STYLE),monitoringS3Bucket:h.MONITORING_S3_BUCKET,monitoringS3Endpoint:h.MONITORING_S3_ENDPOINT,monitoringS3Region:h.MONITORING_S3_REGION,monitoringS3AccessKeyId:h.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:h.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:h.MONITORING_S3_PREFIX,duckdbExtensionDirectory:h.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:h.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:U("DUCKDB_THREADS",h.DUCKDB_THREADS),isCli:!0,noTui:w.noTui===!0,podName:h.POD_NAME||crypto.randomUUID(),dispatchRole:t(N(h.STUDIO_DISPATCH_ROLE,h.MESH_DISPATCH_ROLE)),agentSandboxEnabled:W(h.STUDIO_AGENT_SANDBOX_ENABLED),sandboxStickyHeadRefEnabled:W(h.SANDBOX_STICKY_HEAD_REF),taskBoardRerunReusesPrBranch:Y(h.TASK_BOARD_RERUN_REUSES_PR_BRANCH,!0),sandboxReleaseOnRunEndEnabled:W(h.SANDBOX_RELEASE_ON_RUN_END),sandboxReleaseGraceMs:o("SANDBOX_RELEASE_GRACE_MS",h.SANDBOX_RELEASE_GRACE_MS,120000),decoSupabaseUrl:h.DECO_SUPABASE_URL,decoSupabaseServiceKey:h.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:h.FIRECRAWL_API_KEY,controlplaneRestUrl:h.CONTROLPLANE_REST_URL,controlplaneServiceToken:h.CONTROLPLANE_SERVICE_TOKEN,analyticsDataUrl:h.ANALYTICS_URL,analyticsMasterToken:h.ANALYTICS_MASTER_TOKEN,clickhouseAnalyticsUrl:h.CLICKHOUSE_ANALYTICS_ADDRESS,clickhouseAnalyticsUsername:h.CLICKHOUSE_ANALYTICS_USERNAME||"admin_monitor",clickhouseAnalyticsPassword:h.CLICKHOUSE_ANALYTICS_PASSWORD,oneDollarStatsApiKey:h.ONEDOLLAR_BACKEND_API_KEY,reportsInternalApiUrl:N(h.REPORTS_INTERNAL_API_URL,h.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:N(h.REPORTS_INTERNAL_API_KEY,h.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:h.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:h.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:h.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:h.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:h.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:h.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:h.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY};if(d.plansEnabled&&!d.studioJwtSecret)throw Error("STUDIO_PLANS_ENABLED requires an explicit gateway JWT secret. Set STUDIO_JWT_SECRET (or its legacy alias MESH_JWT_SECRET) to the same value as the gateway's MESH_JWT_SECRET. Refusing to fall back to BETTER_AUTH_SECRET: that mismatch 401s every entitlements call, which every feature gate reads as 'no answer' and fails OPEN.");if(d.plansEnabled&&!d.studioProvisionSecretKey)throw Error("STUDIO_PLANS_ENABLED requires STUDIO_PROVISION_SECRET_KEY, set to the same value as the gateway's STUDIO_PROVISION_KEY. Without it the gateway cannot identify this server, falls back to a per-user membership callback that 401s for any user who never completed the gateway OAuth flow, and every feature gate then fails OPEN.");if(d.plansEnabled&&!d.aiGatewayEnabled)throw Error("STUDIO_PLANS_ENABLED requires DECO_AI_GATEWAY_ENABLED=true. Plans are read from the gateway; with it disabled there is no adapter to ask, so every feature gate fails OPEN on both server and client and the paid product is free fleet-wide.");if(d.plansEnabled&&Object.keys(d.stripePlanPriceIds).length>0&&!d.aiGatewayAdminToken)throw Error("STRIPE_PLAN_PRICE_IDS is set but DECO_AI_GATEWAY_ADMIN_TOKEN is not. The Stripe webhook places the paid tier through the gateway's admin API, so without the token a customer is charged and the entitlement "+"is never granted \u2014 and AI_PLAN_SET cannot repair it, it accepts only "+"'free'.");if(d.plansEnabled&&Object.keys(d.stripePlanPriceIds).length>1&&!d.stripePortalConfigurationId)console.warn("STRIPE_PLAN_PRICE_IDS maps more than one plan but STRIPE_PORTAL_CONFIGURATION_ID is unset. An org that already has a subscription cannot change tier: the account's default portal configuration lists only the legacy plans, not the tiers, so Stripe refuses the update flow. First-time checkout is unaffected.");return{settings:d,externalDatabaseUrl:O(h.DATABASE_URL),externalNatsUrl:O(f),skipMigrations:w.skipMigrations}}var $=null;function Z(){if(!$)s();return $}function s(){if($)return;let w={...process.env},h=L({port:w.PORT||"3000",home:w.DATA_DIR||w.DECOCMS_HOME||"",localMode:w.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:w.DECO_NO_TUI==="true",vitePort:w.VITE_PORT,baseUrl:w.BASE_URL},w);$=Object.freeze({...h.settings,databaseUrl:w.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(w.NATS_URL||"nats://localhost:4222").split(",").map((c)=>c.trim()).filter(Boolean)})}import{Kysely as pc,PostgresDialect as uc}from"kysely";import{Pool as Ic}from"pg";import{createContextKey as yh,metrics as Jh,propagation as gw,ROOT_CONTEXT as Iw,SpanStatusCode as tw,trace as fh}from"@opentelemetry/api";import{logs as dh,SeverityNumber as B}from"@opentelemetry/api-logs";import{OTLPLogExporter as lw}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as mh}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as sw}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as aw}from"@opentelemetry/instrumentation-runtime-node";import{context as _h,propagation as Mh,SpanKind as Ph,SpanStatusCode as Ah}from"@opentelemetry/api";var uh=globalThis.fetch;import{ExportResultCode as hw}from"@opentelemetry/core";import{ExportResultCode as F}from"@opentelemetry/core";import{mkdir as e,rename as a,writeFile as hh}from"fs/promises";import{join as Q}from"path";class j{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(w){this.basePath=w.basePath,this.flushThreshold=w.flushThreshold??1000,this.maxBufferBytes=w.maxBufferBytes??10485760,this.partitionKey=w.partitionKey;let h=w.flushIntervalMs??60000;if(h>0&&h<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((c)=>{console.error("[NDJSONExporter] Timer flush failed:",c)})},h),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(w){if(this.isShutdown)return Promise.resolve({code:F.FAILED});for(let h of w){let c=JSON.stringify(h),J=this.partitionKey?this.partitionKey(h):"";this.bufferItems.push({partition:J,json:c}),this.bufferBytes+=Buffer.byteLength(c,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:F.SUCCESS})).catch((h)=>{return console.error("[NDJSONExporter] Flush failed:",h),{code:F.FAILED}});return Promise.resolve({code:F.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let h=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=h,h}async doFlush(){if(this.bufferItems.length===0)return;let w=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let h=new Map;for(let y of w){let f=h.get(y.partition);if(!f)f=[],h.set(y.partition,f);f.push(y.json)}let c=await Promise.allSettled(Array.from(h.entries()).map(([y,f])=>this.writeNDJSON(f,y).then(()=>y))),J=c.find((y)=>y.status==="rejected");if(J){let y=new Set;for(let m of c)if(m.status==="fulfilled")y.add(m.value);let f=w.filter((m)=>!y.has(m.partition));this.bufferItems=f.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw J.reason}}async writeNDJSON(w,h){let c=new Date,J=[String(c.getUTCFullYear()),String(c.getUTCMonth()+1).padStart(2,"0"),String(c.getUTCDate()).padStart(2,"0"),String(c.getUTCHours()).padStart(2,"0")],y=h?Q(this.basePath,h,...J):Q(this.basePath,...J);if(!this.knownDirs.has(y))await e(y,{recursive:!0,mode:448}),this.knownDirs.add(y);let f=`${crypto.randomUUID()}.ndjson`,m=Q(y,`.${f}.tmp`),d=Q(y,f),z=w.join(`
+var M=import.meta.require;var R="13";function q(w){return{name:"decocms",systemDatabaseUrl:w.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:w.poolSize,runAdminServer:!1,executorID:w.executorID,applicationVersion:R,...w.listenQueues!==void 0?{listenQueues:w.listenQueues}:{}}}function X(w,h={}){let{signal:c}=h;if(c?.aborted)return Promise.reject(c.reason);return new Promise((J,y)=>{let f=()=>{clearTimeout(+d),y(c?.reason)},d=P(()=>{c?.removeEventListener("abort",f),J()},w);c?.addEventListener("abort",f,{once:!0})})}var k=2147483647;function P(w,h){if(h=Math.trunc(Math.max(h,0)||0),h<=k){let f=Number(setTimeout(w,h));return{valueOf:()=>f}}let c=Date.now(),J,y=()=>{let f=h-(Date.now()-c);J=f>k?Number(setTimeout(y,k)):Number(setTimeout(w,f))};return y(),{valueOf:()=>J}}import A from"pg";var i=8314027461559302n,p=600000,g=500;async function G(w,h){let{databaseUrl:c,lockTimeoutMs:J=p}=w,y=w.log??((z)=>console.log(z)),f=new A.Client({connectionString:c});await f.connect();let m=Date.now(),d=!1;try{while(!d){if(d=(await f.query("SELECT pg_try_advisory_lock($1) AS locked",[i.toString()])).rows[0]?.locked===!0,d)break;if(Date.now()-m>=J)throw Error(`Timed out after ${J}ms waiting for the DBOS migration lock. Another process is still migrating the dbos schema; this pod will restart and retry.`);await X(g)}let z=Date.now()-m;if(z>1000)y(`[dbos] waited ${z}ms for the migration lock; another process migrated first`);return await h()}finally{if(d)try{await f.query("SELECT pg_advisory_unlock($1)",[i.toString()])}catch{}await f.end().catch(()=>{})}}import{homedir as u}from"os";var I=new Set(["all","worker","api"]);function t(w){let h=(w??"").trim();return I.has(h)?h:"all"}var n=new Set(["production","development","test"]);function V(w){let h=(w??"").trim();return n.has(h)?h:"development"}function W(w){return w==="true"||w==="1"}function U(w,h,c){if(h===void 0||h==="")return;let J=Number(h);if(!Number.isSafeInteger(J)||J<=0)throw Error(`${w} must be a positive integer`);if(c!==void 0&&J>c)throw Error(`${w} must be at most ${c}`);return J}function N(w,h,c,J){return U(w,h,J)??c}function l(w){let h={};for(let c of(w??"").split(",")){let J=c.trim();if(!J)continue;let y=J.indexOf("="),f=y>0?J.slice(0,y).trim():"",m=y>0?J.slice(y+1).trim():"";if(!f||!m){console.warn(`STRIPE_PLAN_PRICE_IDS: ignoring unparseable entry "${J}" \u2014 expected price_xxx=planId`);continue}h[f]=m}return h}function v(w,h,c,J){if(h===void 0||h==="")return c;let y=Number(h);if(!Number.isSafeInteger(y)||y<0)throw Error(`${w} must be a non-negative integer`);if(J!==void 0&&y>J)throw Error(`${w} must be at most ${J}`);return y}function Y(w,h){if(w===void 0||w==="")return h;return w==="true"||w==="1"}function O(w){if(!w)return null;try{let c=new URL(w).hostname.replace(/^\[|\]$/g,"");if(c==="localhost"||c==="127.0.0.1"||c==="::1")return null;return w}catch{return null}}function r(w){return w===void 0||w===""||w==="true"||w==="1"}function D(w,h){return w||h}function L(w,h){let c=w.home||h.DATA_DIR||h.DECOCMS_HOME||`${u()}/deco`,J=w.localMode,y=w.nodeEnv||V(h.NODE_ENV),f=h.NATS_URL||"nats://localhost:4222",m=h.VOICE_CONVERSATION_PROVIDER?.trim()||"elevenlabs",d={nodeEnv:y,port:N("PORT",w.port||h.PORT,3000,65535),baseUrl:w.baseUrl||h.BASE_URL,publicUrl:D(h.STUDIO_PUBLIC_URL,h.MESH_PUBLIC_URL),dataDir:c,voiceConversationProvider:m==="elevenlabs"||m==="openai"?m:null,openaiLiveApiKey:h.OPENAI_LIVE_API_KEY,openaiLiveModel:h.OPENAI_LIVE_MODEL?.trim()||"gpt-live-1",openaiLiveVoice:h.OPENAI_LIVE_VOICE?.trim()||"marin",elevenlabsApiKey:h.ELEVENLABS_API_KEY,elevenlabsVoiceId:h.ELEVENLABS_VOICE_ID||"JBFqnCBsd6RMkjVDRZzb",elevenlabsVoiceModel:h.ELEVENLABS_VOICE_MODEL||"eleven_v4_turbo",elevenlabsConversationModel:h.ELEVENLABS_CONVERSATION_MODEL?.trim()||"gemini-2.5-flash",databasePgSsl:W(h.DATABASE_PG_SSL),databasePoolMax:N("DATABASE_POOL_MAX",h.DATABASE_POOL_MAX,5),dbosPoolSize:N("DBOS_POOL_SIZE",h.DBOS_POOL_SIZE,5),betterAuthSecret:h.BETTER_AUTH_SECRET||"",encryptionKey:h.ENCRYPTION_KEY||"",studioJwtSecret:D(h.STUDIO_JWT_SECRET,h.MESH_JWT_SECRET),localMode:J,disableRateLimit:W(h.DISABLE_RATE_LIMIT),jiraAllowLocalSiteUrl:W(h.JIRA_ALLOW_LOCAL_SITE_URL),jiraSettleSeconds:N("JIRA_SETTLE_SECONDS",h.JIRA_SETTLE_SECONDS,60,3600),studioProvisionSecretKey:h.STUDIO_PROVISION_SECRET_KEY,deploymentAdminEmails:(h.DEPLOYMENT_ADMIN_EMAILS??"").split(",").map((z)=>z.trim().toLowerCase()).filter(Boolean),taskBoardAdminOrgIds:(h.STUDIO_ADMIN_ORG_IDS??"").split(",").map((z)=>z.trim()).filter(Boolean),deploymentAdminToken:h.DEPLOYMENT_ADMIN_TOKEN||void 0,clickhouseUrl:h.CLICKHOUSE_URL,clickhouseMaxMemoryUsage:U("CLICKHOUSE_MAX_MEMORY_USAGE",h.CLICKHOUSE_MAX_MEMORY_USAGE),monitoringOtlpEndpoint:h.MONITORING_OTLP_ENDPOINT,otelServiceName:h.OTEL_SERVICE_NAME||"studio",natsCredsPath:h.NATS_CREDS,configPath:h.CONFIG_PATH||"./config.json",aiGatewayEnabled:W(h.DECO_AI_GATEWAY_ENABLED),aiGatewayUrl:h.DECO_AI_GATEWAY_URL||"https://ai-site.deco.site",aiGatewayAdminToken:h.DECO_AI_GATEWAY_ADMIN_TOKEN,stripeWebhookSecret:h.STRIPE_WEBHOOK_SECRET,stripeSecretKey:h.STRIPE_SECRET_KEY,stripeOrgPriceId:h.STRIPE_ORG_PRICE_ID,stripePlanPriceIds:l(h.STRIPE_PLAN_PRICE_IDS),stripePortalConfigurationId:h.STRIPE_PORTAL_CONFIGURATION_ID,stripeTopupProductId:h.STRIPE_TOPUP_PRODUCT_ID,topupFeePercent:v("STUDIO_TOPUP_FEE_PERCENT",h.STUDIO_TOPUP_FEE_PERCENT,15,100),taskQuotaEnforced:W(h.STUDIO_TASK_QUOTA_ENFORCED),freeTaskExecutions:N("STUDIO_FREE_TASKS",h.STUDIO_FREE_TASKS,3),monthlyTaskExecutions:N("STUDIO_MONTHLY_TASKS",h.STUDIO_MONTHLY_TASKS,10),maxRunsPerTask:N("STUDIO_MAX_RUNS_PER_TASK",h.STUDIO_MAX_RUNS_PER_TASK,5),enableDecoImport:W(h.ENABLE_DECO_IMPORT),hostingControlPlaneGa:W(h.HOSTING_CONTROL_PLANE_GA),monitorGa:W(h.MONITOR_GA),plansEnabled:W(h.STUDIO_PLANS_ENABLED),mcpCacheEnabled:Y(h.MCP_CACHE_ENABLED,y!=="development"),orgFsPublicSetsJson:h.ORGFS_PUBLIC_SETS,orgFsMountsDisabled:W(h.DISABLE_ORGFS_MOUNTS),decopilotMaxConcurrentSubagents:N("DECOPILOT_MAX_CONCURRENT_SUBAGENTS",h.DECOPILOT_MAX_CONCURRENT_SUBAGENTS,4),decopilotMaxConcurrentHostedRuns:N("DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS",h.DECOPILOT_MAX_CONCURRENT_HOSTED_RUNS,3),taskBoardReviewSweeperEnabled:Y(h.TASK_BOARD_REVIEW_SWEEPER_ENABLED,!0),sandboxMaxConcurrentHostedRuns:N("SANDBOX_MAX_CONCURRENT_HOSTED_RUNS",h.SANDBOX_MAX_CONCURRENT_HOSTED_RUNS,12),s3Endpoint:h.S3_ENDPOINT,s3Bucket:h.S3_BUCKET,s3Region:h.S3_REGION||"auto",s3AccessKeyId:h.S3_ACCESS_KEY_ID,s3SecretAccessKey:h.S3_SECRET_ACCESS_KEY,s3ForcePathStyle:r(h.S3_FORCE_PATH_STYLE),monitoringS3Bucket:h.MONITORING_S3_BUCKET,monitoringS3Endpoint:h.MONITORING_S3_ENDPOINT,monitoringS3Region:h.MONITORING_S3_REGION,monitoringS3AccessKeyId:h.MONITORING_S3_ACCESS_KEY_ID,monitoringS3SecretAccessKey:h.MONITORING_S3_SECRET_ACCESS_KEY,monitoringS3Prefix:h.MONITORING_S3_PREFIX,duckdbExtensionDirectory:h.DUCKDB_EXTENSION_DIRECTORY||"/opt/duckdb/extensions",duckdbMemoryLimit:h.DUCKDB_MEMORY_LIMIT||void 0,duckdbThreads:U("DUCKDB_THREADS",h.DUCKDB_THREADS),isCli:!0,noTui:w.noTui===!0,podName:h.POD_NAME||crypto.randomUUID(),dispatchRole:t(D(h.STUDIO_DISPATCH_ROLE,h.MESH_DISPATCH_ROLE)),agentSandboxEnabled:W(h.STUDIO_AGENT_SANDBOX_ENABLED),sandboxStickyHeadRefEnabled:W(h.SANDBOX_STICKY_HEAD_REF),taskBoardRerunReusesPrBranch:Y(h.TASK_BOARD_RERUN_REUSES_PR_BRANCH,!0),sandboxReleaseOnRunEndEnabled:W(h.SANDBOX_RELEASE_ON_RUN_END),sandboxReleaseGraceMs:N("SANDBOX_RELEASE_GRACE_MS",h.SANDBOX_RELEASE_GRACE_MS,120000),decoSupabaseUrl:h.DECO_SUPABASE_URL,decoSupabaseServiceKey:h.DECO_SUPABASE_SERVICE_KEY,firecrawlApiKey:h.FIRECRAWL_API_KEY,controlplaneRestUrl:h.CONTROLPLANE_REST_URL,controlplaneServiceToken:h.CONTROLPLANE_SERVICE_TOKEN,analyticsDataUrl:h.ANALYTICS_URL,analyticsMasterToken:h.ANALYTICS_MASTER_TOKEN,clickhouseAnalyticsUrl:h.CLICKHOUSE_ANALYTICS_ADDRESS,clickhouseAnalyticsUsername:h.CLICKHOUSE_ANALYTICS_USERNAME||"admin_monitor",clickhouseAnalyticsPassword:h.CLICKHOUSE_ANALYTICS_PASSWORD,oneDollarStatsApiKey:h.ONEDOLLAR_BACKEND_API_KEY,reportsInternalApiUrl:D(h.REPORTS_INTERNAL_API_URL,h.COMMERCE_DISCOVERY_INTERNAL_API_URL),reportsInternalApiKey:D(h.REPORTS_INTERNAL_API_KEY,h.COMMERCE_DISCOVERY_INTERNAL_API_KEY),s3TenantBucket:h.S3_TENANT_BUCKET||"new-deco-sites-assets",s3TenantRegion:h.S3_TENANT_REGION||"us-west-2",s3TenantEndpoint:h.S3_TENANT_ENDPOINT,s3TenantPublicUrlBase:h.S3_TENANT_PUBLIC_URL_BASE||"https://decoims.com",awsS3TenantRoleArn:h.AWS_S3_TENANT_ROLE_ARN,awsS3TenantProvisionerAccessKeyId:h.AWS_S3_TENANT_PROVISIONER_ACCESS_KEY_ID,awsS3TenantProvisionerSecretAccessKey:h.AWS_S3_TENANT_PROVISIONER_SECRET_ACCESS_KEY};if(d.plansEnabled&&!d.studioJwtSecret)throw Error("STUDIO_PLANS_ENABLED requires an explicit gateway JWT secret. Set STUDIO_JWT_SECRET (or its legacy alias MESH_JWT_SECRET) to the same value as the gateway's MESH_JWT_SECRET. Refusing to fall back to BETTER_AUTH_SECRET: that mismatch 401s every entitlements call, which every feature gate reads as 'no answer' and fails OPEN.");if(d.plansEnabled&&!d.studioProvisionSecretKey)throw Error("STUDIO_PLANS_ENABLED requires STUDIO_PROVISION_SECRET_KEY, set to the same value as the gateway's STUDIO_PROVISION_KEY. Without it the gateway cannot identify this server, falls back to a per-user membership callback that 401s for any user who never completed the gateway OAuth flow, and every feature gate then fails OPEN.");if(d.plansEnabled&&!d.aiGatewayEnabled)throw Error("STUDIO_PLANS_ENABLED requires DECO_AI_GATEWAY_ENABLED=true. Plans are read from the gateway; with it disabled there is no adapter to ask, so every feature gate fails OPEN on both server and client and the paid product is free fleet-wide.");if(d.plansEnabled&&Object.keys(d.stripePlanPriceIds).length>0&&!d.aiGatewayAdminToken)throw Error("STRIPE_PLAN_PRICE_IDS is set but DECO_AI_GATEWAY_ADMIN_TOKEN is not. The Stripe webhook places the paid tier through the gateway's admin API, so without the token a customer is charged and the entitlement "+"is never granted \u2014 and AI_PLAN_SET cannot repair it, it accepts only "+"'free'.");if(d.plansEnabled&&Object.keys(d.stripePlanPriceIds).length>1&&!d.stripePortalConfigurationId)console.warn("STRIPE_PLAN_PRICE_IDS maps more than one plan but STRIPE_PORTAL_CONFIGURATION_ID is unset. An org that already has a subscription cannot change tier: the account's default portal configuration lists only the legacy plans, not the tiers, so Stripe refuses the update flow. First-time checkout is unaffected.");return{settings:d,externalDatabaseUrl:O(h.DATABASE_URL),externalNatsUrl:O(f),skipMigrations:w.skipMigrations}}var $=null;function Z(){if(!$)s();return $}function s(){if($)return;let w={...process.env},h=L({port:w.PORT||"3000",home:w.DATA_DIR||w.DECOCMS_HOME||"",localMode:w.DECOCMS_LOCAL_MODE==="true",skipMigrations:!0,noTui:w.DECO_NO_TUI==="true",vitePort:w.VITE_PORT,baseUrl:w.BASE_URL},w);$=Object.freeze({...h.settings,databaseUrl:w.DATABASE_URL||"postgresql://postgres:postgres@localhost:5432/postgres",natsUrls:(w.NATS_URL||"nats://localhost:4222").split(",").map((c)=>c.trim()).filter(Boolean)})}import{Kysely as pc,PostgresDialect as gc}from"kysely";import{Pool as Ic}from"pg";import{createContextKey as yh,metrics as Jh,propagation as uw,ROOT_CONTEXT as Iw,SpanStatusCode as tw,trace as fh}from"@opentelemetry/api";import{logs as dh,SeverityNumber as B}from"@opentelemetry/api-logs";import{OTLPLogExporter as lw}from"@opentelemetry/exporter-logs-otlp-proto";import{PrometheusExporter as mh}from"@opentelemetry/exporter-prometheus";import{OTLPTraceExporter as sw}from"@opentelemetry/exporter-trace-otlp-proto";import{RuntimeNodeInstrumentation as aw}from"@opentelemetry/instrumentation-runtime-node";import{context as _h,propagation as Mh,SpanKind as Ph,SpanStatusCode as Ah}from"@opentelemetry/api";var gh=globalThis.fetch;import{ExportResultCode as hw}from"@opentelemetry/core";import{ExportResultCode as F}from"@opentelemetry/core";import{mkdir as e,rename as a,writeFile as hh}from"fs/promises";import{join as Q}from"path";class j{bufferItems=[];bufferBytes=0;flushTimer=null;flushQueue=Promise.resolve();basePath;flushThreshold;maxBufferBytes;isShutdown=!1;knownDirs=new Set;partitionKey;constructor(w){this.basePath=w.basePath,this.flushThreshold=w.flushThreshold??1000,this.maxBufferBytes=w.maxBufferBytes??10485760,this.partitionKey=w.partitionKey;let h=w.flushIntervalMs??60000;if(h>0&&h<3600000){if(this.flushTimer=setInterval(()=>{this.flush().catch((c)=>{console.error("[NDJSONExporter] Timer flush failed:",c)})},h),this.flushTimer&&typeof this.flushTimer==="object"&&"unref"in this.flushTimer)this.flushTimer.unref()}}exportRows(w){if(this.isShutdown)return Promise.resolve({code:F.FAILED});for(let h of w){let c=JSON.stringify(h),J=this.partitionKey?this.partitionKey(h):"";this.bufferItems.push({partition:J,json:c}),this.bufferBytes+=Buffer.byteLength(c,"utf8")+1}if(this.bufferItems.length>=this.flushThreshold||this.bufferBytes>=this.maxBufferBytes)return this.flush().then(()=>({code:F.SUCCESS})).catch((h)=>{return console.error("[NDJSONExporter] Flush failed:",h),{code:F.FAILED}});return Promise.resolve({code:F.SUCCESS})}async shutdown(){if(this.isShutdown=!0,this.flushTimer)clearInterval(this.flushTimer),this.flushTimer=null;try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}async forceFlush(){try{await this.flushQueue}catch{}if(this.bufferItems.length>0)await this.flush()}flush(){let h=this.flushQueue.catch(()=>{}).then(()=>this.doFlush());return this.flushQueue=h,h}async doFlush(){if(this.bufferItems.length===0)return;let w=this.bufferItems;this.bufferItems=[],this.bufferBytes=0;let h=new Map;for(let y of w){let f=h.get(y.partition);if(!f)f=[],h.set(y.partition,f);f.push(y.json)}let c=await Promise.allSettled(Array.from(h.entries()).map(([y,f])=>this.writeNDJSON(f,y).then(()=>y))),J=c.find((y)=>y.status==="rejected");if(J){let y=new Set;for(let m of c)if(m.status==="fulfilled")y.add(m.value);let f=w.filter((m)=>!y.has(m.partition));this.bufferItems=f.concat(this.bufferItems),this.bufferBytes=0;for(let m of this.bufferItems)this.bufferBytes+=Buffer.byteLength(m.json,"utf8")+1;throw J.reason}}async writeNDJSON(w,h){let c=new Date,J=[String(c.getUTCFullYear()),String(c.getUTCMonth()+1).padStart(2,"0"),String(c.getUTCDate()).padStart(2,"0"),String(c.getUTCHours()).padStart(2,"0")],y=h?Q(this.basePath,h,...J):Q(this.basePath,...J);if(!this.knownDirs.has(y))await e(y,{recursive:!0,mode:448}),this.knownDirs.add(y);let f=`${crypto.randomUUID()}.ndjson`,m=Q(y,`.${f}.tmp`),d=Q(y,f),z=w.join(`
 `)+`
-`;await hh(m,z,{mode:384}),await a(m,d)}}import{ExportResultCode as fw}from"@opentelemetry/core";import{AggregationTemporality as mw,DataPointType as zw}from"@opentelemetry/sdk-metrics";import{ExportResultCode as $w}from"@opentelemetry/core";var kw=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as zc,LoggerProvider as Wc}from"@opentelemetry/sdk-logs";import{detectResources as Dc,envDetector as Nc,hostDetector as Zc,osDetector as $c,processDetector as Fc,resourceFromAttributes as Qc}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as kc}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as Uw}from"@opentelemetry/api-logs";import{NodeSDK as Uc}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as Bc,SamplingDecision as D}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as Cw}from"@opentelemetry/api";var zh="__d",Wh=yh("Current request"),oh=1;var b=(w)=>{let c=new URL(w.url).searchParams.get(zh);if(c==="")return crypto.randomUUID();if(!c)c=w.headers.get("x-trace-debug-id");return c};class T{inner;constructor(w){this.inner=w}shouldSample(w,h,c,J,y,f){let m=w.getValue(Wh);if(!m){if(this.inner)return this.inner.shouldSample(w,h,c,J,y,f);return{decision:D.RECORD_AND_SAMPLED}}let d=b(m);if(d)return{decision:D.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":d}};if(this.inner){let z=this.inner.shouldSample(w,h,c,J,y,f);if(z.decision===D.RECORD_AND_SAMPLED){let E=crypto.randomUUID();z.attributes={...z.attributes??{},"trace.debug.id":E}}return z}return{decision:D.NOT_RECORD}}toString(){return"DebugSampler"}}class _{ratio;constructor(w){this.ratio=w}shouldSample(){if(Math.random()<this.ratio)return{decision:D.RECORD_AND_SAMPLED};return{decision:D.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var Hc=new mh({preventServerStart:!0}),Cc=new T(new _(oh));var S=fh.getTracer("studio","1.0.0"),K=Jh.getMeter("studio","1.0.0"),Dh=dh.getLogger("studio","1.0.0"),x=(w,h,c)=>{let J={},y=c,f=c[c.length-1];if(f!==null&&typeof f==="object"&&!Array.isArray(f)&&!(f instanceof Error)&&Object.getPrototypeOf(f)===Object.prototype)J=f,y=c.slice(0,-1);let m=y.map((d)=>{if(d instanceof Error)return`${d.name}: ${d.message}`;if(typeof d==="object")try{return JSON.stringify(d)}catch{return"[Object]"}return String(d)}).join(" ");Dh.emit({severityNumber:w,severityText:h,body:m,attributes:{"log.source":"console",...J}})},H={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...w)=>{x(B.ERROR,"ERROR",w),H.error(...w)};console.warn=(...w)=>{x(B.WARN,"WARN",w),H.warn(...w)};console.debug=(...w)=>{x(B.DEBUG,"DEBUG",w),H.debug(...w)};function C(w,h){if(!h)return w;let c=new URL(w);if(!c.searchParams.has("sslmode"))c.searchParams.set("sslmode","verify-full");return c.toString()}async function Nh(){let w=Z(),{DBOS:h}=await import("@dbos-inc/dbos-sdk");h.setConfig(q({systemDatabaseUrl:C(w.databaseUrl,w.databasePgSsl),poolSize:w.dbosPoolSize,executorID:w.podName,listenQueues:[]})),await G({databaseUrl:C(w.databaseUrl,w.databasePgSsl)},async()=>{await h.launch(),await h.shutdown()})}if(import.meta.main)(async()=>{try{await Nh(),console.log("DBOS system-schema migrations completed."),process.exit(0)}catch(w){console.error("DBOS system-schema migration failed:",w),process.exit(1)}})();export{Nh as migrateDbos};
+`;await hh(m,z,{mode:384}),await a(m,d)}}import{ExportResultCode as fw}from"@opentelemetry/core";import{AggregationTemporality as mw,DataPointType as zw}from"@opentelemetry/sdk-metrics";import{ExportResultCode as $w}from"@opentelemetry/core";var kw=Buffer.byteLength("... [TRUNCATED]","utf8");import{BatchLogRecordProcessor as zc,LoggerProvider as Wc}from"@opentelemetry/sdk-logs";import{detectResources as oc,envDetector as Dc,hostDetector as Zc,osDetector as $c,processDetector as Fc,resourceFromAttributes as Qc}from"@opentelemetry/resources";import{PeriodicExportingMetricReader as kc}from"@opentelemetry/sdk-metrics";import{NOOP_LOGGER as Uw}from"@opentelemetry/api-logs";import{NodeSDK as Uc}from"@opentelemetry/sdk-node";import{BatchSpanProcessor as Bc,SamplingDecision as o}from"@opentelemetry/sdk-trace-base";import{SpanStatusCode as Cw}from"@opentelemetry/api";var zh="__d",Wh=yh("Current request"),Nh=1;var T=(w)=>{let c=new URL(w.url).searchParams.get(zh);if(c==="")return crypto.randomUUID();if(!c)c=w.headers.get("x-trace-debug-id");return c};class b{inner;constructor(w){this.inner=w}shouldSample(w,h,c,J,y,f){let m=w.getValue(Wh);if(!m){if(this.inner)return this.inner.shouldSample(w,h,c,J,y,f);return{decision:o.RECORD_AND_SAMPLED}}let d=T(m);if(d)return{decision:o.RECORD_AND_SAMPLED,attributes:{"trace.debug.id":d}};if(this.inner){let z=this.inner.shouldSample(w,h,c,J,y,f);if(z.decision===o.RECORD_AND_SAMPLED){let E=crypto.randomUUID();z.attributes={...z.attributes??{},"trace.debug.id":E}}return z}return{decision:o.NOT_RECORD}}toString(){return"DebugSampler"}}class _{ratio;constructor(w){this.ratio=w}shouldSample(){if(Math.random()<this.ratio)return{decision:o.RECORD_AND_SAMPLED};return{decision:o.NOT_RECORD}}toString(){return`RatioSampler(${this.ratio})`}}var Hc=new mh({preventServerStart:!0}),Cc=new b(new _(Nh));var S=fh.getTracer("studio","1.0.0"),K=Jh.getMeter("studio","1.0.0"),oh=dh.getLogger("studio","1.0.0"),x=(w,h,c)=>{let J={},y=c,f=c[c.length-1];if(f!==null&&typeof f==="object"&&!Array.isArray(f)&&!(f instanceof Error)&&Object.getPrototypeOf(f)===Object.prototype)J=f,y=c.slice(0,-1);let m=y.map((d)=>{if(d instanceof Error)return`${d.name}: ${d.message}`;if(typeof d==="object")try{return JSON.stringify(d)}catch{return"[Object]"}return String(d)}).join(" ");oh.emit({severityNumber:w,severityText:h,body:m,attributes:{"log.source":"console",...J}})},H={error:console.error.bind(console),warn:console.warn.bind(console),debug:console.debug.bind(console)};console.error=(...w)=>{x(B.ERROR,"ERROR",w),H.error(...w)};console.warn=(...w)=>{x(B.WARN,"WARN",w),H.warn(...w)};console.debug=(...w)=>{x(B.DEBUG,"DEBUG",w),H.debug(...w)};function C(w,h){if(!h)return w;let c=new URL(w);if(!c.searchParams.has("sslmode"))c.searchParams.set("sslmode","verify-full");return c.toString()}async function Dh(){let w=Z(),{DBOS:h}=await import("@dbos-inc/dbos-sdk");h.setConfig(q({systemDatabaseUrl:C(w.databaseUrl,w.databasePgSsl),poolSize:w.dbosPoolSize,executorID:w.podName,listenQueues:[]})),await G({databaseUrl:C(w.databaseUrl,w.databasePgSsl)},async()=>{await h.launch(),await h.shutdown()})}if(import.meta.main)(async()=>{try{await Dh(),console.log("DBOS system-schema migrations completed."),process.exit(0)}catch(w){console.error("DBOS system-schema migration failed:",w),process.exit(1)}})();export{Dh as migrateDbos};