npm - decocms - Versions diffs - 4.46.0 → 4.46.2 - Mend

decocms 4.46.0 → 4.46.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (222) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2601,5 +2601,5 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var e11,sV,N14,US$,s11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",O14,c$,h$,e8,wS$=24,eV,AJ;var ES$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(e11||(e11={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function q(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return q(g,m,h,o,!1),0}function M(g,m,h,o){return q(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return t(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return M(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return M(l0,K0,b0,V),t(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return O0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function F0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){F0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function n(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,S0,l0),F0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),F0(l0,S0,K),_0(l0,l0,j0),F0(S0,S0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return n(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return n(o,h,m),M(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function B6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],b0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),r$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var yG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function I8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=yG[K0];L9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),F0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),F0(o,o,j0),F0(Y0,g[3],m[3]),F0(Y0,Y0,U),F0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),F0(g[0],b0,l0),F0(g[1],S0,P0),F0(g[2],P0,l0),F0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function T5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),F0(h,m[0],Y0),F0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function Z9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),M6(m,g),M6(g,g),e4(g,m,o)}function z9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),Z9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);I8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),T5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var R8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function q8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*R8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*R8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*R8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function $6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;q8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];I8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];I8(b0,g.subarray(32),h+32),$6(b0),z9(j0,b0),T5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];I8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return q8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),F0(P0,l0,b0),F0(h,P0,Y0),F0(h,h,K0),V0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(I8(b0,g,h),$6(b0),Z9(l0,P0,b0),z9(P0,m.subarray(32)),M6(l0,P0),T5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,d6=24,o6=32,n8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=n8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:I8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:n8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:R8,pack25519:m0,unpack25519:N0,M:F0,A:_0,S:Q0,Z:I0,pow2523:V0,add:M6,set25519:A0,modL:q8,scalarmult:Z9,scalarbase:z9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==d6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(n8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(n8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+n8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=n8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return I8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof Xg<"u"&&_$Z?_$Z:globalThis.nacl=globalThis.nacl||{});sV=typeof Xg<"u"&&_$Z?_$Z:globalThis.nacl,N14={fromSeed:sV.sign.keyPair.fromSeed,sign:sV.sign.detached,verify:sV.sign.detached.verify,randomBytes:sV.randomBytes,scalarBaseMultiply:sV.scalarMult.base,seal:sV.box,open:sV.box.open};O14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));eV=[120,107,118,49];B14(N14);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function Y$1($){try{$?.clear?.()}catch{}}async function LS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=OS$($),W=G$1(J.sub),K=X$1(new TextEncoder().encode(Z)),w=FS$();try{let U=await BS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(DS$(U,w))}finally{Y$1(w),Y$1(K),Y$1(W)}}var zS$=O(()=>{ES$()});function q14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function jS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(Q$1(),503);if(!Y.natsPublicUrl)return Z.json(Q$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(Q$1(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await LS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:JS$(Q),userId:X,allowedConnectionTypes:q14(Y.natsPublicUrl)})}return Z.json(WS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var Q$1=()=>({error:"link session unavailable"});var PS$=O(()=>{m6();j8();KS$();zS$()});async function S14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function V14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new DN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function C14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},M14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function _14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<AS$){await h8(TS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<AS$){await h8(TS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var M14=90000,k14=15000,IS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ry({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},k14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await S14(F,w)){await V14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await C14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await _14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},AS$=60000,TS$=500;var RS$=O(()=>{m6();aV();PY();G9();iD0();qn();zv();E90();qQ()});function f14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function x14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(b14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var b14=1e4,v14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},qS$=()=>{let $=new g1;return $.use("*",v14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await x14(X,Y);return Z.json({apps:f14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var MS$=O(()=>{m6();j8()});import{z as v1}from"zod";function UK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function n14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function p14($,Z,G){try{return JSON.parse($)}catch{throw new VS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function t14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:p14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function r14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function o14($){if(!$)return;return{openai:{response_format:$}}}function a14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function kS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function SS$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var y14=256,g14,h14,c14,u14,d14,l14,m14,i14,VS$,CS$,_S$;var bS$=O(()=>{y6();m6();aV();g14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),h14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),c14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(h14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),u14=v1.object({type:v1.literal("text")}),d14=v1.object({type:v1.literal("json_object")}),l14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),m14=v1.union([u14,d14,l14]),i14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(c14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(g14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:m14.optional(),user:v1.string().optional()});VS$=class VS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};CS$=new g1;CS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(UK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(UK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(UK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=i14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(UK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=n14(Q.model);if(!J)return $.json(UK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(UK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(UK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=t14(Q.messages),H=Q.tools?r14(Q.tools):void 0,N=o14(Q.response_format),B=a14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=kS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",q=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=y14)await q()}else if(S.type==="tool-call"){await q();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await q(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:SS$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await q(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=kS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:SS$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(UK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(UK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(UK(Y.message,"server_error"),500)}});_S$=CS$});var xS$;var fS$=O(()=>{xS$={name:"decocms",version:"4.46.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function $$4(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??e14}}var vS$,e14="https://ph.studio.decocms.com",yS$;var gS$=O(()=>{m6();Db0();fN();pG();j8();Ne0();fS$();vS$=new g1;vS$.get("/",($)=>{let Z={version:xS$.version,theme:I_1(),...vO().logo&&{logo:vO().logo},...SQ()&&{internalUrl:Me()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:wT$(),posthog:$$4(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});yS$=vS$});function hS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var cS$,Z$4,G$4,uS$;var dS$=O(()=>{m6();I3();Rv();Fb();cS$=new g1,Z$4=["range","if-none-match","if-modified-since"],G$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];cS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(vy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await _n(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return hS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of Z$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of G$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),hS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});uS$=cS$});var vt=_((ZC)=>{var X$4=ZC&&ZC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),Y$4=ZC&&ZC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))X$4(Z,$,G)};Object.defineProperty(ZC,"__esModule",{value:!0});Y$4(dX(),ZC)});var iS$=_((lS$)=>{Object.defineProperty(lS$,"__esModule",{value:!0});lS$.version=void 0;lS$.version="3.4.0"});var tS$=_((FK)=>{var Q$4=FK&&FK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(FK,"__esModule",{value:!0});FK.NodeTransport=FK.VERSION=void 0;FK.nodeResolveHost=F$4;var m4=vt(),J$4=u0("net"),J$1=u0("tls"),W$4=u0("path"),nS$=u0("fs"),K$4=Q$4(u0("dns")),w$4=iS$();FK.VERSION=w$4.version;var U$4="nats.js";class pS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=U$4,this.version=FK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,J$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,W$4.resolve)($),!(0,nS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,nS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,J$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,J$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof J$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}FK.NodeTransport=pS$;function F$4($){let Z=(0,m4.deferred)();return K$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var eS$=_((sS$)=>{Object.defineProperty(sS$,"__esModule",{value:!0});sS$.connect=H$4;var rS$=tS$(),oS$=vt(),aS$=vt();function H$4($={}){if((0,aS$.hasWsProtocol)($))return Promise.reject(aS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,oS$.setTransportFactory)({factory:()=>{return new rS$.NodeTransport},dnsResolveFn:rS$.nodeResolveHost}),oS$.NatsConnectionImpl.connect($)}});var $V$=_((kU)=>{var B$4=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),O$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))B$4(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var D$4=eS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return D$4.connect}});O$4(vt(),kU)});function YV$($){let Z=$?.connectFn??j$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:z$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(L$4,E$4,B-1,2,0.5);await h8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?ZV$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=XV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function j$4($){return GV$.connect($)}var ZV$,GV$,XV$,E$4=100,L$4=3000,z$4=3000;var QV$=O(()=>{G9();ZV$=k(Cg(),1),GV$=k($V$(),1),XV$=k(MB(),1)});function Yg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function W$1($,Z){return`${$}.${Z}`}class K$1{cache;constructor($){this.cache=Yg({ttlMs:$?.ttlMs??P$4,maxSize:$?.maxSize??A$4})}async get($,Z){return this.cache.get(W$1($,Z))??null}async set($,Z,G){this.cache.set(W$1($,Z),G)}async invalidate($,Z){this.cache.delete(W$1($,Z))}teardown(){this.cache.clear()}}var P$4=600000,A$4=5000;var JV$=()=>{};function YL0($,Z){return`${$}:${Z}`}function w$1($){let Z=Yg({ttlMs:$?.ttlMs??T$4,maxSize:$?.maxSize??I$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(WV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(YL0(K,w))},set(K,w,U){Z.set(YL0(K,w),U)},invalidate(K,w){Z.delete(YL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(WV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(YL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var WV$="studio.ai-provider-keys.invalidate",T$4=30000,I$4=5000;var KV$=()=>{};class U$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var wV$=($)=>{let Z;return()=>Z??=$()},F$1,H$1;var UV$=O(()=>{F5();F$1=wV$(()=>N8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),H$1=wV$(()=>N8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function C$4(){return{name:lw,subjects:[`${bl0}.>`],storage:TJ.StorageType.File,max_age:M$4,max_bytes:S$4,max_msgs_per_subject:V$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:k$4,num_replicas:1}}class NV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function FV$($){let Z=HV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function x$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,q$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class N$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=C$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=x$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=b6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=xl0(w,{runId:Z}),H=performance.now()-U;if(F$1().record(H),H$1().add(1,{"org.id":X??"unknown"}),f$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?FV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),b$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=xl0(Z,{runId:$,dedup:G});if(F$1().record(performance.now()-Y),H$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:FV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=_6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=i50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(d50()).pipeThrough(l50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,HV$,R$4=($)=>{let Z;return()=>Z??=$()},q$4,M$4=86400000000000,k$4=120000000000,S$4=4294967296,V$4=500000,_$4,b$4,f$4;var BV$=O(()=>{yl0();n50();vl0();F5();UV$();TJ=k(MB(),1),HV$=k(Cg(),1),q$4=R$4(()=>N8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));_$4=process.env.STREAM_ENCODE_TRACE==="1",b$4=process.env.DECOPILOT_STREAM_TRACE==="1";f$4=_$4?new NV$:null});import{z as G8}from"zod";var OV$,DV$,HK,B$1,EV$,LV$,zV$,jV$,v$4,PV$,AV$,TV$,IV$,RV$,y$4,qV$,l8Z,g$4,h$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},MV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},kV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?g$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${h$4(Y.error)}`);return Y.data};var SV$=O(()=>{OV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),DV$=G8.array(G8.tuple([G8.string(),G8.string()])),HK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),B$1=G8.string().min(1),EV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:HK,method:G8.string().min(1),url:G8.string().min(1),headers:DV$,replySubject:B$1,bodySubject:B$1.optional(),abortSubject:B$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),LV$=G8.object({type:G8.literal("request.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:OV$}),zV$=G8.object({type:G8.literal("request.end"),requestId:HK,seq:G8.number().int().nonnegative()}),jV$=G8.object({type:G8.literal("request.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),v$4=G8.union([LV$,zV$,jV$]),PV$=G8.object({type:G8.literal("response.ack"),requestId:HK}),AV$=G8.object({type:G8.literal("response.start"),requestId:HK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:DV$}),TV$=G8.object({type:G8.literal("response.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:OV$}),IV$=G8.object({type:G8.literal("response.end"),requestId:HK,seq:G8.number().int().nonnegative()}),RV$=G8.object({type:G8.literal("response.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),y$4=G8.union([PV$,AV$,TV$,IV$,RV$]),qV$=G8.object({type:G8.literal("abort"),requestId:HK,reason:G8.string().optional()}),l8Z=G8.union([EV$,v$4,y$4,qV$]),g$4={"request.start":EV$,"request.chunk":LV$,"request.end":zV$,"request.error":jV$,"response.ack":PV$,"response.start":AV$,"response.chunk":TV$,"response.end":IV$,"response.error":RV$,abort:qV$}});var c$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},u$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},d$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},l$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},VV$=($)=>{return c$4(btoa(d$4($)))},CV$=($)=>{return l$4(atob(u$4($)))},m$4;var _V$=O(()=>{m$4=class m$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*$84($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class K84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var i$4=30000,n$4=1000,p$4=65536,dQ,t$4=($)=>{return"connection"in $},r$4=($)=>{let Z=t$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??i$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??n$4,maxChunkBytes:Z.maxChunkBytes??p$4,diagnostics:Z.diagnostics}},bV$=($)=>{return Array.from($.entries())},o$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},a$4=($,Z,G)=>{if(o$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return bV$(G.headers);return bV$(G.headers)},fV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},s$4=()=>{return crypto.randomUUID().replaceAll("-","")},e$4=($)=>{try{$?.unsubscribe()}catch{}},Z84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},G84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},FB=($,Z,G)=>{$.publish(Z,MV$(G))},X84=($)=>{return $.type.startsWith("response.")},O$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},Y84=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},xV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(Y84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=kV$(W.value.data);if(!X84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},Q84=async($)=>{let Z=!1;while(!0){let G=await xV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},J84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){FB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of $84(J,$.maxChunkBytes)){if(X)return;FB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:VV$(W)}),G++}}}catch(Q){if(X)return;FB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},W84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await xV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(CV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){FB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},HB=($)=>{let Z=r$4($);return Z84(Z.maxChunkBytes),async(G,X)=>{let Y=YS$(G),Q=new Request(G,X),J=s$4(),W=QS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,e$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",O$1(Q.signal));FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:O$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",O$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:a$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};FB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)FB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?J84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await Q84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(G84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:fV$(P.headers)});return new Response(W84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:fV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var vV$=O(()=>{SV$();_V$();$L0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var QL0=O(()=>{vV$()});function yV$($){let Z=$.createFetch??w84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return D$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return D$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return D$1}}}var D$1,w84=($,Z)=>HB({connection:$,firstFrameTimeoutMs:Z});var gV$=O(()=>{QL0();ft();D$1={online:!1,capabilities:[]}});async function*U84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function hV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:F84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*U84(U)}}var F84=45000;var cV$=O(()=>{QL0();ft()});import{z as IJ}from"zod";function uV$($){return JSON.stringify($)}var L6Z;var dV$=O(()=>{L6Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function lV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:H84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function mV$($){let Z=$.createFetch??HB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:uV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var H84=45000;var iV$=O(()=>{QL0();dV$();ft()});function JL0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var nV$=O(()=>{t8()});class E$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as N84,rm as WL0}from"fs/promises";import{join as KL0}from"path";async function wL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-B84),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await GC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await pV$($,Y,Z);else if(!Y.startsWith(".")){let Q=KL0($,Y),J=await GC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await pV$(Q,K,Z)}if((await GC(Q)).length===0)await WL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function pV$($,Z,G){let X=0,Y=KL0($,Z),Q=await GC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=KL0(Y,W),w=await GC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=KL0(K,F);await WL0(N,{recursive:!0,force:!0}),X++}}if((await GC(K)).length===0)await WL0(K,{recursive:!0,force:!0})}if((await GC(Y)).length===0)await WL0(Y,{recursive:!0,force:!0});return X}async function GC($){try{return(await N84($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var B84=30;var L$1=()=>{};import{DBOS as z$1,SchedulerMode as O84}from"@dbos-inc/dbos-sdk";async function E84(){let $=[mQ(),YC(),EK()],Z=0;for(let G of $)try{Z+=await wL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function L84($,Z){await z$1.runStep(()=>E84(),{name:"monitoringRetention"})}function rV$(){if(tV$)return;tV$=!0;let $=z$1.registerWorkflow(L84,{name:"monitoringRetentionWorkflow"});z$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:D84,mode:O84.ExactlyOncePerIntervalWhenActive})}var D84="23 4 * * *",tV$=!1;var oV$=O(()=>{gX();L$1()});function aV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await uc0($.db,Z,X.role);return Y.boundAuth=cc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new PD(G,void 0,Y.boundAuth,X.role,"self"),A40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var sV$=O(()=>{AD();Gi()});function z84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function P84(){for(let $ of j84)$()}function eV$($){let Z=[...j$1.logs,$];j$1={...j$1,logs:Z.length>500?Z.slice(-500):Z},P84()}function P$1(){return A84}var j$1,j84,A84=!1;var A$1=O(()=>{j$1=z84(),j84=new Set});import{EventEmitter as T84}from"events";var T$1;var $C$=O(()=>{A$1();T$1=new T84;T$1.on("request",($)=>{eV$($)})});function ZC$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Qg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Qg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Qg(H.method)}${s4.reset}`}}catch{}}let W=Qg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Qg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=R84(X),w=J?"\u25C0":"\u2190";if(!P$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=I84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!P$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);T$1.emit("request",{method:X,path:Qg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,I84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},R84=($)=>{return s4[$]||s4.reset},Qg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var GC$=O(()=>{A$1();$C$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as JC$}from"crypto";import{mkdir as q84,readdir as M84,rm as XC$,stat as WC$}from"fs/promises";import{join as R$1,relative as k84}from"path";import{z as P$}from"zod";function wC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return R$1(S84,Z)}function UC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function I$1($,Z){let G=wC$($),X=UC$(Z);return R$1(G,X)}function V84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return JC$("sha256",Y).update(Q).digest("hex")}function QC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=V84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${UC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function FC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${JC$("md5","etag").update(X).digest("hex")}"`}async function HC$($,Z,G,X,Y){try{let Q=await M84($,{withFileTypes:!0});for(let J of Q){let W=R$1($,J.name),w=k84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await HC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await WC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:FC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function NC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=wC$(X);await q84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await HC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=I$1(X,Q.key),W=await WC$(J);return{contentType:P01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:FC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??YC$;return{url:QC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??YC$;return{url:QC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=I$1(X,Q.key);try{return await XC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=I$1(X,K);try{await XC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function q$1($,Z,G){let X=NC$(Z,G),Y=new Qw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:D5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new SY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),lW(Y,Q,$,"mcp:dev-assets")}async function BC$($,Z,G,X){let Q=NC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var S84="./data/assets",YC$=3600,KC$,OC$;var DC$=O(()=>{j8();vn();m6();wu();Sv();OG();jE0();KC$=new g1;KC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return q$1($.req.raw,Z,X)});OC$=KC$});var EC$={};Z6(EC$,{mountDevRoutes:()=>C84});function C84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return q$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await BC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",OC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",zE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var LC$=O(()=>{m6();B01();jE0();DC$()});var zC$=O(()=>{wu0();Uu0();YE()});var UL0=O(()=>{zC$()});var PC$={};Z6(PC$,{streamAgent:()=>jC$,createDecopilotClient:()=>b84});async function _84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Sl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function jC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Sl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await _84(F.body);return Q({stream:H})}function b84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return jC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function AC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=f84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var f84,O4Z,x84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},k$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},FL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},v84=($,Z,G)=>{let X=FL0($,Z,G);return new Proxy(bx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},y84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => PC$);return J(X,Z.token,$,Y,Q)}}},M$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>M$1(G,Z));if(typeof $==="object"){if(x84($))return y84($,Z);if(k$1($))return v84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=M$1(Y,Z);return G}return $},TC$=($)=>{return M$1($.state,$)};var Jg=O(()=>{UL0();f84=new Map;O4Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var g84,IC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},h84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=IC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},RC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=IC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??g84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},qC$=($,Z,G)=>{let X=new Headers($.headers);return h84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var MC$=O(()=>{g84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function kC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function c84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function SC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function VC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function CC$($){return{handleProtectedResourceMetadata:(w)=>{let U=NK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=NK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=NK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=SC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?VC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??NK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=SC$(z),P=NK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof S$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=VC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!c84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=kC$(32),H=U.token_endpoint_auth_method!=="none"?kC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${NK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var S$1,NK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var V$1=O(()=>{S$1=class S$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as u84}from"async_hooks";var _C$,yt;var C$1=O(()=>{_C$=new u84,yt={getStore:()=>{return _C$.getStore()},run:($,Z,...G)=>_C$.run($,Z,...G)}});var fC$="SELF",NL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},xC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},bC$="::",vC$=($)=>{let Z=$.indexOf(bC$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+bC$.length);return[G,X]},d84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},yC$=($)=>{if(NL0($))return[];return Object.keys($)},l84=($,Z)=>{if(NL0($))return $.events;let G=$[Z];if(!G)return[];if(xC$(G))return G.events;return Object.keys(G)},HL0=($,Z,G)=>{if($===fC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!k$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},m84=($,Z,G)=>{let X=Z;if(NL0($)){let Q=[];for(let J of $.events){let W=vC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=HL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of yC$($)){let J=HL0(Q,X,G);if(!J)continue;let W=l84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},i84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},n84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},p84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},t84=async($,Z,G,X,Y)=>{let Q=X;if(NL0($)){let U=new Set;for(let H of $.events){let N=vC$(H);if(!N)continue;let[B,D]=N,E=HL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of yC$($)){let F=HL0(U,Q,Y);if(F)J.set(F,U)}let W=i84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(xC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=n84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return p84(w)},gC$;var _$1=O(()=>{Jg();gC$={subscriptions:m84,execute:t84,parseCron:d84}});function r84($,Z){let G=FL0("self",{meshUrl:$,token:Z});return bx.forConnection(G)}function o84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function hC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=r84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(o84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var b$1=O(()=>{Jg();UL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=gt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var gt=($)=>{let Z=yt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},cC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},a84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?AC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=cC$(J);await Y(J.runtimeContext.env,{createAgent:hC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:t40,outputSchema:r40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=cC$(J);return gC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},uC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...a84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=gt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=gt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=gt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Qw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:D5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,q)=>{if(!X)X=await P(A,q);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new SY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:q}=new TransformStream;return z.body.pipeTo(q).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=yt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=gt();return j({context:B,runtimeContext:P},P)}}};var BL0=O(()=>{Bu0();OG();wu();Sv();Jg();_$1();C$1();b$1();_$1();b$1()});import{decodeJwt as dC$}from"jose";var s84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},lC$=($)=>()=>{return{...$??{}}},e84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=dC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:lC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=dC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=lC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=TC$(W),s84({env:Q,server:Z,url:X}),Q},$64,mC$=($)=>{let Z=uC$($),G=$.cors??$64,X=$.oauth,Y=X?CC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return RC$(J,G??{});let w=e84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await yt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return qC$(U,J,G??{});return U}}};var iC$=O(()=>{Jg();MC$();V$1();V$1();C$1();BL0();BL0();Jg();UL0();$64={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as f$1}from"zod";function X64($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jy,outputSchema:Py,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=nC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return nC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:vV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:f$1.object({versions:f$1.array(vV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:qD0,outputSchema:MD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:f$1.object({}),outputSchema:Ay,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function pC$($){let Z=$.db,G=new xf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=X64(G,Q.id),W=mC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var Z64=3600000,G64=500,nC$;var tC$=O(()=>{iC$();BL0();Ny0();$9();nC$=Yg({ttlMs:Z64,maxSize:G64,updateRecencyOnGet:!0})});import{sql as Y64}from"kysely";import{randomUUID as rC$}from"crypto";import{z as Q64}from"zod";async function W64($){let Z=new Date().toISOString(),G=rC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:rC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await Y64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function K64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function w64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",yV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):aC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?oC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:oC$,rateLimitWindow:J64,rateLimitMax:aC$}}async function U64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function F64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function sC$($){let{db:Z,db:G}=$,X=new vf(G),Y=new yf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await K64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await w64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await U64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Hj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:Q64.treeifyError(U.error)},400);let F=await F64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await W64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var oC$=!0,J64="hour",aC$=100;var eC$=O(()=>{v4();t8();Ty();By0();Oy0();$9()});var $_$={};Z6($_$,{createPublishRequestHandler:()=>sC$,createPublicMCPHandler:()=>pC$});var Z_$=O(()=>{tC$();eC$()});var xn0={};Z6(xn0,{watchHandler:()=>J_$,getProxyDispatch:()=>O64,createApp:()=>I64});import{readFileSync as H64}from"fs";import{PrometheusSerializer as N64}from"@opentelemetry/exporter-prometheus";import{DBOS as Wg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as z64,oAuthProtectedResourceMetadata as j64}from"better-auth/plugins";async function B64($){let Z=$.connect(),G;try{G=await Promise.race([Z,X_$(G_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),X_$(G_$)]),G.release(),!0}catch{return G.release(!0),!1}}function X_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function O64(){if(!x$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return x$1}async function D64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${SC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function E64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function I64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new K$1,J,W,K,w,U,F=null;if($.disableNats)J=w$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new yn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=YV$();let d=E1().natsCredsPath,l;if(d)try{l=H64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,l?{creds:l}:void 0);let k0=Py0()?new Hx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new vp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=w$1({getConnection:()=>F.getConnection()}),W=new U$1({getConnection:()=>F.getConnection()}),K=new N$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=yV$({getConnection:()=>F.getConnection()}),U=lV$({getConnection:()=>F.getConnection()});let N1=mV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},lA$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),zm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Kg)await Kg();Nx0(X),yp0(Y);let N={storage:new lf(Z.db),sseHub:JZ},B=new pl0(N),D=new Sl(Z.db),E=new E$1(D);E.start(),W.start((d)=>{J90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Kg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),jm1(),Y.teardown(),Nx0(null),yp0(null)};let L=new g1;if(L.use("*",Ub0({enabled:(d)=>Bb(d,"debug")==="1"})),L.use("*",_L0),L.use("/*",B_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",ZC$());L.use("*",async(d,l)=>{if(await l(),Hg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await B64(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await vL0.collect(),k0=L64.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!P64.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Wg.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=W4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",yS$),L.route("/api/auth/custom",UT$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=eo1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",uV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",uV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Xi),L.route("/",Xa1()),L.use("/oauth-proxy/:connectionId/*",uV),L.all("/oauth-proxy/:connectionId/*",Y_$);let j=async(d)=>{let k0=await A64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",uV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await T64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=hA$({ttlMs:120000}),q=await ho1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:N8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});pH.set(q);let S=new Hw(E1().encryptionKey);AR1({db:Z.db,baseUrl:cJ()});let M=f80(Z.db),V=new Pl(Z.db),t=aV$({db:Z.db});Cp0({storage:M,meshContextFactory:t}),Jm0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:Z2$,workPublisher:U}),Zm0({dispatchRunFn:eR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new lf(Z.db);m6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await Q_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return JL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return JL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return JL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,FN(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,A3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{r1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{r1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),V3$({meshContextFactory:t,systemDatabaseUrl:gf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),rV$(),TR1();let v=async(d,l,k0)=>{let v0=await M.findById(d,l);if(!v0)throw Error("Automation not found");return fp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new gy(M,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>xn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[mQ(),YC(),EK()];for(let d of a)wL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(VL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{GQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),h8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",dV),L.use("/api/:org/v1/*",dV),L.use("/api/:org/files/*",dV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/"))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",cD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:Hb0,grouped:xO()})}),L.use("/mcp/*",async(d,l)=>{GQ(d,"mcp");try{return await l()}finally{$Y(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(LC$(),jL0(EC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",MN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",rE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",VN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{GQ(d,"llm_models");try{return await l()}finally{$Y(d,"llm_models")}});let U0=H01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)x$1=hV$({getConnection:()=>F?.getConnection()??null});L.route("/api",jS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await XS$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",dV),L.route("/api",uS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",oE0()),L.route("/api",f0),L.route("/api",_S$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",aE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Tl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",DE0()),L.route("/api",n0),L.route("/api/deco-sites",T2$()),L.route("/api/deco-apps",qS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",LE0()),L.route("/api/deco-sites",N0);let _0=new g1;_0.use("*",hQ({mountPath:"/api/vm-events"})),_0.route("/",IS$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (Z_$(),$_$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",uV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",uV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0);let n=ZS$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:Y_$,watchHandler:J_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(U2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Kg?Promise.resolve(Kg()).finally(()=>{Kg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await yY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await cf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Wg.registerQueue(vY,{partitionQueue:!0,concurrency:kp0,minPollingIntervalMs:Sp0}),await Wg.registerQueue(lQ,{partitionQueue:!0,concurrency:Qm0}),await Wg.registerQueue(DK,{partitionQueue:!0,concurrency:$m0}),await Wg.registerQueue(VU,{partitionQueue:!0,concurrency:S3$}),await D01(M),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Wg.deleteQueue(d))),await Vp0(Z.pool),wg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),IR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var Q_$,G_$=5000,x$1=null,Kg=null,Y_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Mx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Yi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let M=N.searchParams.get("redirect_uri");if(M){let V=E1().baseUrl??B.origin;try{let t=new URL(M),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",M)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(VC1(J.connection_url))try{let V=await D64(Y,J.organization_id),t=E64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let M=await $.req.formData();if(M.has("resource"))M.set("resource",J.connection_url);let V=M.get("client_id"),t=M.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of M.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let M=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...M?.slug?{organization_slug:M.slug}:{},...M?.name?{organization_name:M.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),q=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[M,V]of A.headers.entries())if(!S.includes(M.toLowerCase()))q.set(M,V);if(X==="token"&&A.ok){let M=await A.text();try{let V=JSON.parse(M);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await kx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(M,{status:A.status,statusText:A.statusText,headers:q})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:q})},J_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},L64,P64,A64=()=>j64(Z4),T64=()=>z64(Z4);var vn0=O(()=>{G9();j8();RR1();pG();Fb();t8();m6();S10();O_1();Fb0();gw();Gi();Je0();R3();F5();v4();Ne0();Ee0();K2$();N01();t3();T40();B01();F2$();O01();GS$();PS$();RS$();j01();MS$();kN0();Qi();bS$();CN0();d11();gS$();dS$();u11();c11();rt();uu();QV$();XY();s80();Rl();hp0();JV$();KV$();BV$();gV$();cV$();iV$();tl0();nV$();fy0();hy0();oV$();I$0();L$1();gX();E01();ai();sl0();il0();I$0();K01();Yy0();Qy0();sV$();Ob();GC$();aV();Je0();qv();W90();Q_$=k(MB(),1);L64=new N64,P64=new Set([vY,lQ,DK,VU])});var U_$={};Z6(U_$,{resolveClientDir:()=>C64,resolveAssetPathWithTraversalCheck:()=>w_$,isPathWithinDirectory:()=>K_$,createAssetHandler:()=>_64});import{resolve as ht,dirname as R64,join as q64,extname as M64,basename as k64,sep as W_$}from"path";function S64($,Z){if($===Z||k64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${W_$}assets${W_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function K_$($,Z){let G=ht(Z),X=ht($);return X===G||X.startsWith(G+"/")}function w_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=ht(Z,G);if(!K_$(X,Z))return null;return X}function C64($,Z="../client"){let G=new URL($),X=R64(G.pathname);return ht(X,Z)}function _64($={}){let{env:Z="production",clientDir:G=V64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=w_$({requestPath:W,clientDir:G});if(!K)return null;let w=q64(K,"index.html"),U=ht(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(M64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:S64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var V64="./dist/client";var F_$=()=>{};var H_$={};Z6(H_$,{tryUpgradePreviewWs:()=>h64,tryHandlePreviewHttp:()=>g64,previewWebSocketHandler:()=>c64,parsePreviewBaseDomain:()=>y64,isPreviewWsData:()=>OL0,extractHandleFromHost:()=>v$1});function x64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function v64(){return new Response(f64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function y64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function v$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function g64($,Z){let G=v$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return ut(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get($V)&&x64($))return v64();return Y.headers.delete($V),Y}function ut($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function OL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function h64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=v$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return ut(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return ut(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return ut(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return ut(426,"upgrade failed");return}function ct($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var b64=256,f64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',c64;var N_$=O(()=>{Cn0();c64={open($){let Z=$.data;if(!OL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),ct($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{ct($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{ct($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!OL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=b64){ct($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!OL0(Z))return;ct($,Z,1000,"")}}});var E_$={};Z6(E_$,{printBanner:()=>d64,bannerLines:()=>D_$,BANNER_LINES:()=>B_$,BANNER_GRADIENT:()=>O_$});function u64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function D_$($){let Z=B_$.map((G,X)=>{let[Y,Q,J]=u64(O_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function d64($){console.log("");for(let Z of D_$($))console.log(Z);console.log("")}var B_$,O_$;var L_$=O(()=>{B_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],O_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var j_$={};Z6(j_$,{bootstrapDevLinkSession:()=>a64});import{existsSync as l64}from"fs";import{chmod as m64,mkdir as i64,rename as n64,writeFile as p64}from"fs/promises";import{dirname as t64,join as z_$}from"path";function r64($){return z_$($,"dev-link")}function o64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return z_$(r64($),"session.json")}async function a64($,Z){let G=o64($),X=u6().db,Y=SQ()?await Cn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(l64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await i64(t64(G),{recursive:!0});let W=`${G}.tmp`;return await p64(W,JSON.stringify(J,null,2),{mode:384}),await m64(W,384),await n64(W,G),{path:G,userSub:Y.id}}var P_$=O(()=>{R3();gw();fN()});G9();var i$1="4";function n$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:i$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}j8();F5();function fb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function cL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function M81(){let $=fb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:cL0($,"--cpu-prof-dir")??process.cwd(),name:cL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(cL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}lL0();var st;function v81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=BB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),st=setInterval(()=>void Z().catch(()=>{}),$),st.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(st)clearInterval(st)}}import*as yb$ from"bun:jsc";var{startSamplingProfiler:gb$,samplingProfilerStackTraces:hb$}=yb$;function y81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{gb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=hb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function g81(){M81();let $=[v81(),x81(),y81()];return()=>{for(let Z of $)Z()}}import{existsSync as Q44}from"fs";var xY=E1();R81();var{DBOS:dt,DBOSClient:s64}=await import("@dbos-inc/dbos-sdk");function q_$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var e64=[vY,lQ,DK,VU],$44=xY.dispatchRole==="worker"?e64:xY.dispatchRole==="api"?[]:void 0;dt.setConfig(n$1({systemDatabaseUrl:q_$(xY.databaseUrl,xY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:xY.podName,listenQueues:$44}));var{createApp:Z44}=await Promise.resolve().then(() => (vn0(),xn0)),{isServerPath:G44}=await Promise.resolve().then(() => (rt(),K81)),{createAssetHandler:X44,resolveClientDir:M_$}=await Promise.resolve().then(() => (F_$(),U_$)),Y44=xY.port,A_$=M_$(import.meta.url,"../client"),J44=Q44(A_$)?A_$:M_$(import.meta.url,"../dist/client"),W44=X44({clientDir:J44,isServerPath:G44}),K44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function w44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(K44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:U44,tryHandlePreviewHttp:F44,tryUpgradePreviewWs:H44,previewWebSocketHandler:y$1,isPreviewWsData:g$1}=await Promise.resolve().then(() => (N_$(),H_$)),{getOrInitSharedRunner:N44}=await Promise.resolve().then(() => (qn(),pY$)),k_$=U44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),T_$={baseDomain:k_$??"",getRunner:N44},DL0=await Z44(),h$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),I_$=process.env.DBOS_CONDUCTOR_URL?.trim();await dt.launch({...h$1?{conductorKey:h$1}:{},...h$1&&I_$?{conductorURL:I_$}:{}});console.log(`[dbos] application version: ${dt.applicationVersion}`);await DL0.initDbos();if(!xY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (L_$(),E_$));console.log("");for(let Z of $())console.log(Z)}var B44=Bun.serve({idleTimeout:0,port:Y44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(k_$){let X=await H44($,Z,T_$);if(X===void 0)return;if(X)return X;let Y=await F44($,T_$);if(Y)return Y}let G=await W44($);if(G)return w44(G);return DL0.fetch($,{server:Z})},websocket:{open($){if(g$1($.data))y$1.open($)},message($,Z){if(g$1($.data))y$1.message($,Z)},close($){if(g$1($.data))y$1.close($)}},development:!1}),O44=g81();if(xY.localMode)Promise.resolve().then(() => (fN(),WN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (P_$(),j_$)),Y=xY.baseUrl??`http://localhost:${xY.port}`,Q=await X(xY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (fN(),WN0));Z()}catch{}});var R_$=!1;async function D44($){let Z;try{Z=await s64.create({systemDatabaseUrl:q_$(xY.databaseUrl,xY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function EL0($){if(R_$)return;R_$=!0,console.log(`
+`;return new TextEncoder().encode(X)}var e11,sV,N14,US$,s11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",O14,c$,h$,e8,wS$=24,eV,AJ;var ES$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(e11||(e11={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function q(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return q(g,m,h,o,!1),0}function M(g,m,h,o){return q(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function t(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return t(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return M(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return M(l0,K0,b0,V),t(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return O0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),O0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function F0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){F0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)F0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function n(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,S0,l0),F0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),F0(l0,S0,K),_0(l0,l0,j0),F0(S0,S0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return n(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return n(o,h,m),M(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function B6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function h5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function L9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),B6(K0[4],K0[5],K0[6]),o$[P0],b0[P0%16]),Y0[7]=N1(l0,h5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),r$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var yG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function I8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=yG[K0];L9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),L9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function M6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),F0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),F0(o,o,j0),F0(Y0,g[3],m[3]),F0(Y0,Y0,U),F0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),F0(g[0],b0,l0),F0(g[1],S0,P0),F0(g[2],P0,l0),F0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function T5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),F0(h,m[0],Y0),F0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function Z9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),M6(m,g),M6(g,g),e4(g,m,o)}function z9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),Z9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);I8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,z9(Y0,o),T5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var R8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function q8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*R8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*R8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*R8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function $6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;q8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];I8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];I8(b0,g.subarray(32),h+32),$6(b0),z9(j0,b0),T5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];I8(K0,g,h+64),$6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return q8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),F0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),F0(P0,l0,b0),F0(h,P0,Y0),F0(h,h,K0),V0(h,h),F0(h,h,Y0),F0(h,h,K0),F0(h,h,K0),F0(g[0],h,K0),Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))F0(g[0],g[0],N);if(Q0(o,g[0]),F0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(I8(b0,g,h),$6(b0),Z9(l0,P0,b0),z9(P0,m.subarray(32)),M6(l0,P0),T5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,d6=24,o6=32,n8=16,$5=32,C=32,u=32,c=32,I=32,r=d6,y0=o6,d0=n8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:M,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:t,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:n,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:I8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:d6,crypto_secretbox_ZEROBYTES:o6,crypto_secretbox_BOXZEROBYTES:n8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:R8,pack25519:m0,unpack25519:N0,M:F0,A:_0,S:Q0,Z:I0,pow2523:V0,add:M6,set25519:A0,modL:q8,scalarmult:Z9,scalarbase:z9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==d6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(o6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+o6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(n8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(n8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+n8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(o6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=d6,$.secretbox.overheadLength=n8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return n(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return I8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];x$(K0)})}()})(typeof Xg<"u"&&_$Z?_$Z:globalThis.nacl=globalThis.nacl||{});sV=typeof Xg<"u"&&_$Z?_$Z:globalThis.nacl,N14={fromSeed:sV.sign.keyPair.fromSeed,sign:sV.sign.detached,verify:sV.sign.detached.verify,randomBytes:sV.randomBytes,scalarBaseMultiply:sV.scalarMult.base,seal:sV.box,open:sV.box.open};O14=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(e8||(e8={}));eV=[120,107,118,49];B14(N14);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(AJ||(AJ={}))});function Y$1($){try{$?.clear?.()}catch{}}async function LS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=OS$($),W=G$1(J.sub),K=X$1(new TextEncoder().encode(Z)),w=FS$();try{let U=await BS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:AJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(DS$(U,w))}finally{Y$1(w),Y$1(K),Y$1(W)}}var zS$=O(()=>{ES$()});function q14($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function jS$(){let $=new g1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=E1();if(!Y.natsTunnelPublicEnabled)return Z.json(Q$1(),503);if(!Y.natsPublicUrl)return Z.json(Q$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(Q$1(),503)}let Q=PJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await LS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:JS$(Q),userId:X,allowedConnectionTypes:q14(Y.natsPublicUrl)})}return Z.json(WS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var Q$1=()=>({error:"link session unavailable"});var PS$=O(()=>{m6();j8();KS$();zS$()});async function S14($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function V14($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new DN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function C14($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},M14),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function _14($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<AS$){await h8(TS$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<AS$){await h8(TS$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var M14=90000,k14=15000,IS$=()=>{let $=new g1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=D0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=pw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ry({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await KJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&ow(ZZ(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return cQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),cQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},k14);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await S14(F,w)){await V14({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await C14({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await _14({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},AS$=60000,TS$=500;var RS$=O(()=>{m6();aV();PY();G9();iD0();qn();zv();E90();qQ()});function f14($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function x14($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(b14)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var b14=1e4,v14=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},qS$=()=>{let $=new g1;return $.use("*",v14),$.get("/",async(Z)=>{let G=E1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await x14(X,Y);return Z.json({apps:f14(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var MS$=O(()=>{m6();j8()});import{z as v1}from"zod";function UK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function n14($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function p14($,Z,G){try{return JSON.parse($)}catch{throw new VS$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function t14($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:p14(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function r14($){let Z=$.map((G)=>{let X=G.function.parameters?wY(G.function.parameters):wY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function o14($){if(!$)return;return{openai:{response_format:$}}}function a14(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function kS$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function SS$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var y14=256,g14,h14,c14,u14,d14,l14,m14,i14,VS$,CS$,_S$;var bS$=O(()=>{y6();m6();aV();g14=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),h14=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),c14=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(h14).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),u14=v1.object({type:v1.literal("text")}),d14=v1.object({type:v1.literal("json_object")}),l14=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),m14=v1.union([u14,d14,l14]),i14=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(c14),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(g14).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:m14.optional(),user:v1.string().optional()});VS$=class VS$ extends Error{constructor($){super($);this.name="MessageConversionError"}};CS$=new g1;CS$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(UK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(UK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(UK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=i14.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(UK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=n14(Q.model);if(!J)return $.json(UK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(UK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(UK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=t14(Q.messages),H=Q.tools?r14(Q.tools):void 0,N=o14(Q.response_format),B=a14(),D=Math.floor(Date.now()/1000);if(Q.stream)return cQ($,async(E)=>{let L=kS$(U,F,H,Q,N,$.req.raw.signal);try{let z=IQ(L),j=!1,P=0,A="",q=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=y14)await q()}else if(S.type==="tool-call"){await q();let M=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:M,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await q(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:SS$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await q(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=kS$(U,F,H,Q,N,$.req.raw.signal),L=await KN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:SS$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(UK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(UK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(UK(Y.message,"server_error"),500)}});_S$=CS$});var xS$;var fS$=O(()=>{xS$={name:"decocms",version:"4.46.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function $$4(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??e14}}var vS$,e14="https://ph.studio.decocms.com",yS$;var gS$=O(()=>{m6();Db0();fN();pG();j8();Ne0();fS$();vS$=new g1;vS$.get("/",($)=>{let Z={version:xS$.version,theme:I_1(),...vO().logo&&{logo:vO().logo},...SQ()&&{internalUrl:Me()},...E1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!E1().firecrawlApiKey,auth:wT$(),posthog:$$4(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!SQ()&&E1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});yS$=vS$});function hS$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var cS$,Z$4,G$4,uS$;var dS$=O(()=>{m6();I3();Rv();Fb();cS$=new g1,Z$4=["range","if-none-match","if-modified-since"],G$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];cS$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(vy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await _n(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&T3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return hS$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of Z$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of G$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),hS$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});uS$=cS$});var vt=_((ZC)=>{var X$4=ZC&&ZC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),Y$4=ZC&&ZC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))X$4(Z,$,G)};Object.defineProperty(ZC,"__esModule",{value:!0});Y$4(dX(),ZC)});var iS$=_((lS$)=>{Object.defineProperty(lS$,"__esModule",{value:!0});lS$.version=void 0;lS$.version="3.4.0"});var tS$=_((FK)=>{var Q$4=FK&&FK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(FK,"__esModule",{value:!0});FK.NodeTransport=FK.VERSION=void 0;FK.nodeResolveHost=F$4;var m4=vt(),J$4=u0("net"),J$1=u0("tls"),W$4=u0("path"),nS$=u0("fs"),K$4=Q$4(u0("dns")),w$4=iS$();FK.VERSION=w$4.version;var U$4="nats.js";class pS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=U$4,this.version=FK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,J$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,W$4.resolve)($),!(0,nS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,nS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,J$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,J$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof J$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}FK.NodeTransport=pS$;function F$4($){let Z=(0,m4.deferred)();return K$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var eS$=_((sS$)=>{Object.defineProperty(sS$,"__esModule",{value:!0});sS$.connect=H$4;var rS$=tS$(),oS$=vt(),aS$=vt();function H$4($={}){if((0,aS$.hasWsProtocol)($))return Promise.reject(aS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,oS$.setTransportFactory)({factory:()=>{return new rS$.NodeTransport},dnsResolveFn:rS$.nodeResolveHost}),oS$.NatsConnectionImpl.connect($)}});var $V$=_((kU)=>{var B$4=kU&&kU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),O$4=kU&&kU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))B$4(Z,$,G)};Object.defineProperty(kU,"__esModule",{value:!0});kU.connect=void 0;var D$4=eS$();Object.defineProperty(kU,"connect",{enumerable:!0,get:function(){return D$4.connect}});O$4(vt(),kU)});function YV$($){let Z=$?.connectFn??j$4,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:z$4,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=yX(L$4,E$4,B-1,2,0.5);await h8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?ZV$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=XV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function j$4($){return GV$.connect($)}var ZV$,GV$,XV$,E$4=100,L$4=3000,z$4=3000;var QV$=O(()=>{G9();ZV$=k(Cg(),1),GV$=k($V$(),1),XV$=k(MB(),1)});function Yg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function W$1($,Z){return`${$}.${Z}`}class K$1{cache;constructor($){this.cache=Yg({ttlMs:$?.ttlMs??P$4,maxSize:$?.maxSize??A$4})}async get($,Z){return this.cache.get(W$1($,Z))??null}async set($,Z,G){this.cache.set(W$1($,Z),G)}async invalidate($,Z){this.cache.delete(W$1($,Z))}teardown(){this.cache.clear()}}var P$4=600000,A$4=5000;var JV$=()=>{};function YL0($,Z){return`${$}:${Z}`}function w$1($){let Z=Yg({ttlMs:$?.ttlMs??T$4,maxSize:$?.maxSize??I$4}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(WV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(YL0(K,w))},set(K,w,U){Z.set(YL0(K,w),U)},invalidate(K,w){Z.delete(YL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(WV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(YL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var WV$="studio.ai-provider-keys.invalidate",T$4=30000,I$4=5000;var KV$=()=>{};class U$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var wV$=($)=>{let Z;return()=>Z??=$()},F$1,H$1;var UV$=O(()=>{F5();F$1=wV$(()=>N8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),H$1=wV$(()=>N8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function C$4(){return{name:lw,subjects:[`${bl0}.>`],storage:TJ.StorageType.File,max_age:M$4,max_bytes:S$4,max_msgs_per_subject:V$4,discard:TJ.DiscardPolicy.Old,retention:TJ.RetentionPolicy.Limits,duplicate_window:k$4,num_replicas:1}}class NV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function FV$($){let Z=HV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function x$4($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,q$4().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class N$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await TJ.jetstreamManager($),G=C$4();try{await Z.streams.info(lw),await Z.streams.update(lw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(lw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=x$4(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=b6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=xl0(w,{runId:Z}),H=performance.now()-U;if(F$1().record(H),H$1().add(1,{"org.id":X??"unknown"}),f$4?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?FV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),b$4)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=xl0(Z,{runId:$,dedup:G});if(F$1().record(performance.now()-Y),H$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:FV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=_6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?TJ.DeliverPolicy.New:TJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=UN($),W;try{W=await(await X.consumers.get(lw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=i50({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(d50()).pipeThrough(l50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(lw,{filter:UN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var TJ,HV$,R$4=($)=>{let Z;return()=>Z??=$()},q$4,M$4=86400000000000,k$4=120000000000,S$4=4294967296,V$4=500000,_$4,b$4,f$4;var BV$=O(()=>{yl0();n50();vl0();F5();UV$();TJ=k(MB(),1),HV$=k(Cg(),1),q$4=R$4(()=>N8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));_$4=process.env.STREAM_ENCODE_TRACE==="1",b$4=process.env.DECOPILOT_STREAM_TRACE==="1";f$4=_$4?new NV$:null});import{z as G8}from"zod";var OV$,DV$,HK,B$1,EV$,LV$,zV$,jV$,v$4,PV$,AV$,TV$,IV$,RV$,y$4,qV$,l8Z,g$4,h$4=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},MV$=($)=>{return new TextEncoder().encode(JSON.stringify($))},kV$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?g$4[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${h$4(Y.error)}`);return Y.data};var SV$=O(()=>{OV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),DV$=G8.array(G8.tuple([G8.string(),G8.string()])),HK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),B$1=G8.string().min(1),EV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:HK,method:G8.string().min(1),url:G8.string().min(1),headers:DV$,replySubject:B$1,bodySubject:B$1.optional(),abortSubject:B$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),LV$=G8.object({type:G8.literal("request.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:OV$}),zV$=G8.object({type:G8.literal("request.end"),requestId:HK,seq:G8.number().int().nonnegative()}),jV$=G8.object({type:G8.literal("request.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),v$4=G8.union([LV$,zV$,jV$]),PV$=G8.object({type:G8.literal("response.ack"),requestId:HK}),AV$=G8.object({type:G8.literal("response.start"),requestId:HK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:DV$}),TV$=G8.object({type:G8.literal("response.chunk"),requestId:HK,seq:G8.number().int().nonnegative(),data:OV$}),IV$=G8.object({type:G8.literal("response.end"),requestId:HK,seq:G8.number().int().nonnegative()}),RV$=G8.object({type:G8.literal("response.error"),requestId:HK,code:G8.string().min(1),message:G8.string()}),y$4=G8.union([PV$,AV$,TV$,IV$,RV$]),qV$=G8.object({type:G8.literal("abort"),requestId:HK,reason:G8.string().optional()}),l8Z=G8.union([EV$,v$4,y$4,qV$]),g$4={"request.start":EV$,"request.chunk":LV$,"request.end":zV$,"request.error":jV$,"response.ack":PV$,"response.start":AV$,"response.chunk":TV$,"response.end":IV$,"response.error":RV$,abort:qV$}});var c$4=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},u$4=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},d$4=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},l$4=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},VV$=($)=>{return c$4(btoa(d$4($)))},CV$=($)=>{return l$4(atob(u$4($)))},m$4;var _V$=O(()=>{m$4=class m$4{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*$84($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class K84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var i$4=30000,n$4=1000,p$4=65536,dQ,t$4=($)=>{return"connection"in $},r$4=($)=>{let Z=t$4($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??i$4,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??n$4,maxChunkBytes:Z.maxChunkBytes??p$4,diagnostics:Z.diagnostics}},bV$=($)=>{return Array.from($.entries())},o$4=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},a$4=($,Z,G)=>{if(o$4(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return bV$(G.headers);return bV$(G.headers)},fV$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},s$4=()=>{return crypto.randomUUID().replaceAll("-","")},e$4=($)=>{try{$?.unsubscribe()}catch{}},Z84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},G84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},FB=($,Z,G)=>{$.publish(Z,MV$(G))},X84=($)=>{return $.type.startsWith("response.")},O$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},Y84=($)=>{if($==="idle")return new dQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new dQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},xV$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(Y84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=kV$(W.value.data);if(!X84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},Q84=async($)=>{let Z=!1;while(!0){let G=await xV$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new dQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new dQ(G.value.code,G.value.message);throw new dQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},J84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){FB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of $84(J,$.maxChunkBytes)){if(X)return;FB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:VV$(W)}),G++}}}catch(Q){if(X)return;FB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},W84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await xV$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new dQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(CV$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new dQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){FB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},HB=($)=>{let Z=r$4($);return Z84(Z.maxChunkBytes),async(G,X)=>{let Y=YS$(G),Q=new Request(G,X),J=s$4(),W=QS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new dQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,e$4(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new dQ("tunnel_aborted",O$1(Q.signal));FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:O$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new dQ("tunnel_aborted",O$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new dQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);FB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:a$4(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};FB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)FB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?J84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await Q84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(G84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:fV$(P.headers)});return new Response(W84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:fV$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var vV$=O(()=>{SV$();_V$();$L0();dQ=class dQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var QL0=O(()=>{vV$()});function yV$($){let Z=$.createFetch??w84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return D$1;let Q=PJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return D$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return D$1}}}var D$1,w84=($,Z)=>HB({connection:$,firstFrameTimeoutMs:Z});var gV$=O(()=>{QL0();ft();D$1={online:!1,capabilities:[]}});async function*U84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function hV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:F84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=PJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*U84(U)}}var F84=45000;var cV$=O(()=>{QL0();ft()});import{z as IJ}from"zod";function uV$($){return JSON.stringify($)}var L6Z;var dV$=O(()=>{L6Z=IJ.discriminatedUnion("type",[IJ.object({type:IJ.literal("cancel"),runId:IJ.string()}),IJ.object({type:IJ.literal("cancel_req"),reqId:IJ.string()}),IJ.object({type:IJ.literal("keep_alive")}),IJ.object({type:IJ.literal("shutdown")})])});function lV$($){let Z=$.createFetch??((G)=>HB({connection:G,idleTimeoutMs:H84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function mV$($){let Z=$.createFetch??HB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=PJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:uV$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var H84=45000;var iV$=O(()=>{QL0();dV$();ft()});function JL0($,Z,G,X){if(!X)return!1;return $.emit(Z,A3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var nV$=O(()=>{t8()});class E$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as N84,rm as WL0}from"fs/promises";import{join as KL0}from"path";async function wL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-B84),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await GC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await pV$($,Y,Z);else if(!Y.startsWith(".")){let Q=KL0($,Y),J=await GC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await pV$(Q,K,Z)}if((await GC(Q)).length===0)await WL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function pV$($,Z,G){let X=0,Y=KL0($,Z),Q=await GC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=KL0(Y,W),w=await GC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=KL0(K,F);await WL0(N,{recursive:!0,force:!0}),X++}}if((await GC(K)).length===0)await WL0(K,{recursive:!0,force:!0})}if((await GC(Y)).length===0)await WL0(Y,{recursive:!0,force:!0});return X}async function GC($){try{return(await N84($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var B84=30;var L$1=()=>{};import{DBOS as z$1,SchedulerMode as O84}from"@dbos-inc/dbos-sdk";async function E84(){let $=[mQ(),YC(),EK()],Z=0;for(let G of $)try{Z+=await wL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function L84($,Z){await z$1.runStep(()=>E84(),{name:"monitoringRetention"})}function rV$(){if(tV$)return;tV$=!0;let $=z$1.registerWorkflow(L84,{name:"monitoringRetentionWorkflow"});z$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:D84,mode:O84.ExactlyOncePerIntervalWhenActive})}var D84="23 4 * * *",tV$=!1;var oV$=O(()=>{gX();L$1()});function aV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await pH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await uc0($.db,Z,X.role);return Y.boundAuth=cc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new PD(G,void 0,Y.boundAuth,X.role,"self"),A40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var sV$=O(()=>{AD();Gi()});function z84(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function P84(){for(let $ of j84)$()}function eV$($){let Z=[...j$1.logs,$];j$1={...j$1,logs:Z.length>500?Z.slice(-500):Z},P84()}function P$1(){return A84}var j$1,j84,A84=!1;var A$1=O(()=>{j$1=z84(),j84=new Set});import{EventEmitter as T84}from"events";var T$1;var $C$=O(()=>{A$1();T$1=new T84;T$1.on("request",($)=>{eV$($)})});function ZC$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Qg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Qg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Qg(H.method)}${s4.reset}`}}catch{}}let W=Qg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Qg(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=R84(X),w=J?"\u25C0":"\u2190";if(!P$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=I84(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!P$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);T$1.emit("request",{method:X,path:Qg(Y),status:F,duration:U,timestamp:new Date})}}}var s4,I84=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},R84=($)=>{return s4[$]||s4.reset},Qg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var GC$=O(()=>{A$1();$C$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as JC$}from"crypto";import{mkdir as q84,readdir as M84,rm as XC$,stat as WC$}from"fs/promises";import{join as R$1,relative as k84}from"path";import{z as P$}from"zod";function wC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return R$1(S84,Z)}function UC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function I$1($,Z){let G=wC$($),X=UC$(Z);return R$1(G,X)}function V84($,Z,G,X){let Y=E1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return JC$("sha256",Y).update(Q).digest("hex")}function QC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=V84(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${UC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function FC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${JC$("md5","etag").update(X).digest("hex")}"`}async function HC$($,Z,G,X,Y){try{let Q=await M84($,{withFileTypes:!0});for(let J of Q){let W=R$1($,J.name),w=k84(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await HC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await WC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:FC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function NC$($,Z){let X=D0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=wC$(X);await q84(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await HC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=I$1(X,Q.key),W=await WC$(J);return{contentType:P01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:FC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??YC$;return{url:QC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??YC$;return{url:QC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=I$1(X,Q.key);try{return await XC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=I$1(X,K);try{await XC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function q$1($,Z,G){let X=NC$(Z,G),Y=new Qw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:D5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new SY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),lW(Y,Q,$,"mcp:dev-assets")}async function BC$($,Z,G,X){let Q=NC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var S84="./data/assets",YC$=3600,KC$,OC$;var DC$=O(()=>{j8();vn();m6();wu();Sv();OG();jE0();KC$=new g1;KC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return q$1($.req.raw,Z,X)});OC$=KC$});var EC$={};Z6(EC$,{mountDevRoutes:()=>C84});function C84($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return q$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await BC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",OC$);let G=new g1;G.use("*",hQ({mountPath:"/api/dev-assets"})),G.route("/",zE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var LC$=O(()=>{m6();B01();jE0();DC$()});var zC$=O(()=>{wu0();Uu0();YE()});var UL0=O(()=>{zC$()});var PC$={};Z6(PC$,{streamAgent:()=>jC$,createDecopilotClient:()=>b84});async function _84($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (y6(),Sl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function jC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (y6(),Sl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await _84(F.body);return Q({stream:H})}function b84($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return jC$(Y,X,W,Q,J)}}}import{z as vX}from"zod";function AC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=f84.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:vX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:vX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var f84,O4Z,x84=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},k$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},FL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},v84=($,Z,G)=>{let X=FL0($,Z,G);return new Proxy(bx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},y84=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => PC$);return J(X,Z.token,$,Y,Q)}}},M$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>M$1(G,Z));if(typeof $==="object"){if(x84($))return y84($,Z);if(k$1($))return v84($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=M$1(Y,Z);return G}return $},TC$=($)=>{return M$1($.state,$)};var Jg=O(()=>{UL0();f84=new Map;O4Z=vX.object({id:vX.string(),title:vX.string(),capabilities:vX.object({vision:vX.boolean().optional(),text:vX.boolean().optional(),tools:vX.boolean().optional(),reasoning:vX.boolean().optional()}).passthrough().optional(),provider:vX.string().optional().nullable(),limits:vX.object({contextWindow:vX.number().optional(),maxOutputTokens:vX.number().optional()}).passthrough().optional()})});var g84,IC$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},h84=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=IC$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},RC$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=IC$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??g84;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},qC$=($,Z,G)=>{let X=new Headers($.headers);return h84(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var MC$=O(()=>{g84=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function kC$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function c84($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function SC$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function VC$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function CC$($){return{handleProtectedResourceMetadata:(w)=>{let U=NK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=NK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=NK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=SC$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=NK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?VC$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??NK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=SC$(z),P=NK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=NK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof S$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=VC$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!c84(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=kC$(32),H=U.token_endpoint_auth_method!=="none"?kC$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${NK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var S$1,NK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var V$1=O(()=>{S$1=class S$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as u84}from"async_hooks";var _C$,yt;var C$1=O(()=>{_C$=new u84,yt={getStore:()=>{return _C$.getStore()},run:($,Z,...G)=>_C$.run($,Z,...G)}});var fC$="SELF",NL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},xC$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},bC$="::",vC$=($)=>{let Z=$.indexOf(bC$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+bC$.length);return[G,X]},d84=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},yC$=($)=>{if(NL0($))return[];return Object.keys($)},l84=($,Z)=>{if(NL0($))return $.events;let G=$[Z];if(!G)return[];if(xC$(G))return G.events;return Object.keys(G)},HL0=($,Z,G)=>{if($===fC$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!k$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},m84=($,Z,G)=>{let X=Z;if(NL0($)){let Q=[];for(let J of $.events){let W=vC$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=HL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of yC$($)){let J=HL0(Q,X,G);if(!J)continue;let W=l84($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},i84=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},n84=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},p84=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},t84=async($,Z,G,X,Y)=>{let Q=X;if(NL0($)){let U=new Set;for(let H of $.events){let N=vC$(H);if(!N)continue;let[B,D]=N,E=HL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of yC$($)){let F=HL0(U,Q,Y);if(F)J.set(F,U)}let W=i84(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(xC$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=n84(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return p84(w)},gC$;var _$1=O(()=>{Jg();gC$={subscriptions:m84,execute:t84,parseCron:d84}});function r84($,Z){let G=FL0("self",{meshUrl:$,token:Z});return bx.forConnection(G)}function o84($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function hC$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=r84($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(o84(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var b$1=O(()=>{Jg();UL0()});import{z as KZ}from"zod";function SU($){return{...$,execute:(Z)=>{let G=gt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var gt=($)=>{let Z=yt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},cC$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},a84=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?AC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[SU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=cC$(J);await Y(J.runtimeContext.env,{createAgent:hC$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[SU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:t40,outputSchema:r40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=cC$(J);return gC$.execute($.handlers,J.context.events,W,K,w)}})]:[],SU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},uC$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...a84({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=gt(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=gt();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=gt(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new Qw({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:D5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,q)=>{if(!X)X=await P(A,q);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new SY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:q}=new TransformStream;return z.body.pipeTo(q).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=yt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=gt();return j({context:B,runtimeContext:P},P)}}};var BL0=O(()=>{Bu0();OG();wu();Sv();Jg();_$1();C$1();b$1();_$1();b$1()});import{decodeJwt as dC$}from"jose";var s84=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},lC$=($)=>()=>{return{...$??{}}},e84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=dC$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:lC$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=dC$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=lC$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=TC$(W),s84({env:Q,server:Z,url:X}),Q},$64,mC$=($)=>{let Z=uC$($),G=$.cors??$64,X=$.oauth,Y=X?CC$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return RC$(J,G??{});let w=e84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await yt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return qC$(U,J,G??{});return U}}};var iC$=O(()=>{Jg();MC$();V$1();V$1();C$1();BL0();BL0();Jg();UL0();$64={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as f$1}from"zod";function X64($,Z){let G=SU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:jy,outputSchema:Py,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=nC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return nC$.set(w,F),F}}),X=SU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:vV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=SU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:GK,outputSchema:f$1.object({versions:f$1.array(vV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=SU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:qD0,outputSchema:MD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=SU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:f$1.object({}),outputSchema:Ay,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function pC$($){let Z=$.db,G=new xf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=X64(G,Q.id),W=mC$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var Z64=3600000,G64=500,nC$;var tC$=O(()=>{iC$();BL0();Ny0();$9();nC$=Yg({ttlMs:Z64,maxSize:G64,updateRecencyOnGet:!0})});import{sql as Y64}from"kysely";import{randomUUID as rC$}from"crypto";import{z as Q64}from"zod";async function W64($){let Z=new Date().toISOString(),G=rC$(),X=e6.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:rC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await Y64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function K64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function w64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",yV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):aC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?oC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:oC$,rateLimitWindow:J64,rateLimitMax:aC$}}async function U64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function F64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function sC$($){let{db:Z,db:G}=$,X=new vf(G),Y=new yf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await K64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await w64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await U64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Hj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:Q64.treeifyError(U.error)},400);let F=await F64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await W64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var oC$=!0,J64="hour",aC$=100;var eC$=O(()=>{v4();t8();Ty();By0();Oy0();$9()});var $_$={};Z6($_$,{createPublishRequestHandler:()=>sC$,createPublicMCPHandler:()=>pC$});var Z_$=O(()=>{tC$();eC$()});var xn0={};Z6(xn0,{watchHandler:()=>J_$,getProxyDispatch:()=>O64,createApp:()=>I64});import{readFileSync as H64}from"fs";import{PrometheusSerializer as N64}from"@opentelemetry/exporter-prometheus";import{DBOS as Wg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as z64,oAuthProtectedResourceMetadata as j64}from"better-auth/plugins";async function B64($){let Z=$.connect(),G;try{G=await Promise.race([Z,X_$(G_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),X_$(G_$)]),G.release(),!0}catch{return G.release(!0),!1}}function X_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function O64(){if(!x$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return x$1}async function D64($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${SC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function E64($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function I64($={}){let Z=$.database??u6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new K$1,J,W,K,w,U,F=null;if($.disableNats)J=w$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new yn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=YV$();let d=E1().natsCredsPath,l;if(d)try{l=H64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(E1().natsUrls,l?{creds:l}:void 0);let k0=Py0()?new Hx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new vp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=w$1({getConnection:()=>F.getConnection()}),W=new U$1({getConnection:()=>F.getConnection()}),K=new N$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=yV$({getConnection:()=>F.getConnection()}),U=lV$({getConnection:()=>F.getConnection()});let N1=mV$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((B6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",B6)})},stop:()=>i0.stop()},lA$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),zm1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Kg)await Kg();Nx0(X),yp0(Y);let N={storage:new lf(Z.db),sseHub:JZ},B=new pl0(N),D=new Sl(Z.db),E=new E$1(D);E.start(),W.start((d)=>{J90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Kg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),jm1(),Y.teardown(),Nx0(null),yp0(null)};let L=new g1;if(L.use("*",Ub0({enabled:(d)=>Bb(d,"debug")==="1"})),L.use("*",_L0),L.use("/*",B_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!E1().noTui)L.use("*",ZC$());L.use("*",async(d,l)=>{if(await l(),Hg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await B64(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await vL0.collect(),k0=L64.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!P64.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Wg.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=W4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",yS$),L.route("/api/auth/custom",UT$),L.all("/api/auth/*",async(d)=>{return await Z4.handler(d.req.raw)});let z=eo1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",uV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",uV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Xi),L.route("/",Xa1()),L.use("/oauth-proxy/:connectionId/*",uV),L.all("/oauth-proxy/:connectionId/*",Y_$);let j=async(d)=>{let k0=await A64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",uV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await T64()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=hA$({ttlMs:120000}),q=await ho1({db:Z.db,auth:Z4,encryption:{key:E1().encryptionKey},observability:{tracer:CU,meter:N8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});pH.set(q);let S=new Hw(E1().encryptionKey);AR1({db:Z.db,baseUrl:cJ()});let M=f80(Z.db),V=new Pl(Z.db),t=aV$({db:Z.db});Cp0({storage:M,meshContextFactory:t}),Jm0({meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:Z2$,workPublisher:U}),Zm0({dispatchRunFn:eR$,meshContextFactory:t,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new lf(Z.db);m6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await Q_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return JL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return JL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return JL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,FN(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,A3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{r1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{r1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),V3$({meshContextFactory:t,systemDatabaseUrl:gf1(E1().databaseUrl,E1().databasePgSsl),streamBuffer:K}),rV$(),TR1();let v=async(d,l,k0)=>{let v0=await M.findById(d,l);if(!v0)throw Error("Automation not found");return fp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new gy(M,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>xn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[mQ(),YC(),EK()];for(let d of a)wL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(VL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{GQ(d,N1);try{return await i0()}finally{$Y(d,N1)}}},v0=await pH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),h8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",dV),L.use("/api/:org/v1/*",dV),L.use("/api/:org/files/*",dV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/"))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let O0=new g1;O0.use("*",hQ({mountPath:"/api/org-sso"})),O0.route("/",cD0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:Hb0,grouped:xO()})}),L.use("/mcp/*",async(d,l)=>{GQ(d,"mcp");try{return await l()}finally{$Y(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),T3()){let{mountDevRoutes:d}=(LC$(),jL0(EC$));d(L,W0)}let J0=new g1;J0.use("*",hQ({mountPath:"/mcp"})),J0.route("/",MN0()),L.route("/mcp",J0);let s=new g1;s.use("*",hQ({mountPath:"/mcp/self"})),s.route("/",rE0()),L.route("/mcp/self",s);let A0=new g1;A0.use("*",hQ({mountPath:"/mcp"})),A0.route("/",VN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{GQ(d,"llm_models");try{return await l()}finally{$Y(d,"llm_models")}});let U0=H01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)x$1=hV$({getConnection:()=>F?.getConnection()??null});L.route("/api",jS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await XS$(i0,Z4.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",dV),L.route("/api",uS$);let f0=new g1;f0.use("*",hQ({mountPath:"/api"})),f0.route("/",oE0()),L.route("/api",f0),L.route("/api",_S$);let m0=new g1;m0.use("*",hQ({mountPath:"/api"})),m0.route("/",aE0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Tl(Z.db),n0=new g1;n0.use("*",hQ({mountPath:"/api"})),n0.route("/",DE0()),L.route("/api",n0),L.route("/api/deco-sites",T2$()),L.route("/api/deco-apps",qS$());let N0=new g1;N0.use("*",hQ({mountPath:"/api/deco-sites"})),N0.route("/",LE0()),L.route("/api/deco-sites",N0);let _0=new g1;_0.use("*",hQ({mountPath:"/api/vm-events"})),_0.route("/",IS$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (Z_$(),$_$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",uV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",uV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0);let n=ZS$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:T3(),mcpAuth:W0,oauthProxyHandler:Y_$,watchHandler:J_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",n),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(U2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Kg?Promise.resolve(Kg()).finally(()=>{Kg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await yY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await cf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Wg.registerQueue(vY,{partitionQueue:!0,concurrency:kp0,minPollingIntervalMs:Sp0}),await Wg.registerQueue(lQ,{partitionQueue:!0,concurrency:Qm0}),await Wg.registerQueue(DK,{partitionQueue:!0,concurrency:$m0}),await Wg.registerQueue(VU,{partitionQueue:!0,concurrency:S3$}),await D01(M),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Wg.deleteQueue(d))),await Vp0(Z.pool),wg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),IR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var Q_$,G_$=5000,x$1=null,Kg=null,Y_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await pH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await Mx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Yi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let M=N.searchParams.get("redirect_uri");if(M){let V=E1().baseUrl??B.origin;try{let t=new URL(M),f=new URL(V);if(!(t.origin===f.origin||t.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",M)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(VC1(J.connection_url))try{let V=await D64(Y,J.organization_id),t=E64(V);for(let[f,v]of t)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let M=await $.req.formData();if(M.has("resource"))M.set("resource",J.connection_url);let V=M.get("client_id"),t=M.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof t==="string"&&t)P=t;let f=new URLSearchParams;for(let[v,Z0]of M.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let M=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),t={};try{t=V?JSON.parse(V):{}}catch{z=V}let f=typeof t==="object"&&t!==null&&!Array.isArray(t);if(z===void 0&&!f)z=V;if(z===void 0){let v=t,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...M?.slug?{organization_slug:M.slug}:{},...M?.name?{organization_name:M.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),q=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[M,V]of A.headers.entries())if(!S.includes(M.toLowerCase()))q.set(M,V);if(X==="token"&&A.ok){let M=await A.text();try{let V=JSON.parse(M);if(typeof V.access_token==="string"&&V.access_token){let t=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await kx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:t,clientId:j,clientSecret:P,tokenEndpoint:f};await new V5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(M,{status:A.status,statusText:A.statusText,headers:q})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:q})},J_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return cQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},L64,P64,A64=()=>j64(Z4),T64=()=>z64(Z4);var vn0=O(()=>{G9();j8();RR1();pG();Fb();t8();m6();S10();O_1();Fb0();gw();Gi();Je0();R3();F5();v4();Ne0();Ee0();K2$();N01();t3();T40();B01();F2$();O01();GS$();PS$();RS$();j01();MS$();kN0();Qi();bS$();CN0();d11();gS$();dS$();u11();c11();rt();uu();QV$();XY();s80();Rl();hp0();JV$();KV$();BV$();gV$();cV$();iV$();tl0();nV$();fy0();hy0();oV$();I$0();L$1();gX();E01();ai();sl0();il0();I$0();K01();Yy0();Qy0();sV$();Ob();GC$();aV();Je0();qv();W90();Q_$=k(MB(),1);L64=new N64,P64=new Set([vY,lQ,DK,VU])});var U_$={};Z6(U_$,{resolveClientDir:()=>C64,resolveAssetPathWithTraversalCheck:()=>w_$,isPathWithinDirectory:()=>K_$,createAssetHandler:()=>_64});import{resolve as ht,dirname as R64,join as q64,extname as M64,basename as k64,sep as W_$}from"path";function S64($,Z){if($===Z||k64($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${W_$}assets${W_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function K_$($,Z){let G=ht(Z),X=ht($);return X===G||X.startsWith(G+"/")}function w_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=ht(Z,G);if(!K_$(X,Z))return null;return X}function C64($,Z="../client"){let G=new URL($),X=R64(G.pathname);return ht(X,Z)}function _64($={}){let{env:Z="production",clientDir:G=V64,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=w_$({requestPath:W,clientDir:G});if(!K)return null;let w=q64(K,"index.html"),U=ht(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(M64(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:S64(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var V64="./dist/client";var F_$=()=>{};var H_$={};Z6(H_$,{tryUpgradePreviewWs:()=>h64,tryHandlePreviewHttp:()=>g64,previewWebSocketHandler:()=>c64,parsePreviewBaseDomain:()=>y64,isPreviewWsData:()=>OL0,extractHandleFromHost:()=>v$1});function x64($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function v64(){return new Response(f64,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function y64($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function v$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function g64($,Z){let G=v$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return ut(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get($V)&&x64($))return v64();return Y.headers.delete($V),Y}function ut($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function OL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function h64($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=v$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return ut(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return ut(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return ut(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return ut(426,"upgrade failed");return}function ct($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var b64=256,f64='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',c64;var N_$=O(()=>{Cn0();c64={open($){let Z=$.data;if(!OL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),ct($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{ct($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{ct($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!OL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=b64){ct($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!OL0(Z))return;ct($,Z,1000,"")}}});var E_$={};Z6(E_$,{printBanner:()=>d64,bannerLines:()=>D_$,BANNER_LINES:()=>B_$,BANNER_GRADIENT:()=>O_$});function u64($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function D_$($){let Z=B_$.map((G,X)=>{let[Y,Q,J]=u64(O_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function d64($){console.log("");for(let Z of D_$($))console.log(Z);console.log("")}var B_$,O_$;var L_$=O(()=>{B_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],O_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var j_$={};Z6(j_$,{bootstrapDevLinkSession:()=>a64});import{existsSync as l64}from"fs";import{chmod as m64,mkdir as i64,rename as n64,writeFile as p64}from"fs/promises";import{dirname as t64,join as z_$}from"path";function r64($){return z_$($,"dev-link")}function o64($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return z_$(r64($),"session.json")}async function a64($,Z){let G=o64($),X=u6().db,Y=SQ()?await Cn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(l64(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await Z4.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await Z4.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await i64(t64(G),{recursive:!0});let W=`${G}.tmp`;return await p64(W,JSON.stringify(J,null,2),{mode:384}),await m64(W,384),await n64(W,G),{path:G,userSub:Y.id}}var P_$=O(()=>{R3();gw();fN()});G9();var i$1="4";function n$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:i$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}j8();F5();function fb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function cL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function M81(){let $=fb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:cL0($,"--cpu-prof-dir")??process.cwd(),name:cL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(cL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}lL0();var st;function v81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=BB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),st=setInterval(()=>void Z().catch(()=>{}),$),st.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(st)clearInterval(st)}}import*as yb$ from"bun:jsc";var{startSamplingProfiler:gb$,samplingProfilerStackTraces:hb$}=yb$;function y81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{gb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=hb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function g81(){M81();let $=[v81(),x81(),y81()];return()=>{for(let Z of $)Z()}}import{existsSync as Q44}from"fs";var xY=E1();R81();var{DBOS:dt,DBOSClient:s64}=await import("@dbos-inc/dbos-sdk");function q_$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var e64=[vY,lQ,DK,VU],$44=xY.dispatchRole==="worker"?e64:xY.dispatchRole==="api"?[]:void 0;dt.setConfig(n$1({systemDatabaseUrl:q_$(xY.databaseUrl,xY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:xY.podName,listenQueues:$44}));var{createApp:Z44}=await Promise.resolve().then(() => (vn0(),xn0)),{isServerPath:G44}=await Promise.resolve().then(() => (rt(),K81)),{createAssetHandler:X44,resolveClientDir:M_$}=await Promise.resolve().then(() => (F_$(),U_$)),Y44=xY.port,A_$=M_$(import.meta.url,"../client"),J44=Q44(A_$)?A_$:M_$(import.meta.url,"../dist/client"),W44=X44({clientDir:J44,isServerPath:G44}),K44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function w44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(K44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:U44,tryHandlePreviewHttp:F44,tryUpgradePreviewWs:H44,previewWebSocketHandler:y$1,isPreviewWsData:g$1}=await Promise.resolve().then(() => (N_$(),H_$)),{getOrInitSharedRunner:N44}=await Promise.resolve().then(() => (qn(),pY$)),k_$=U44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),T_$={baseDomain:k_$??"",getRunner:N44},DL0=await Z44(),h$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),I_$=process.env.DBOS_CONDUCTOR_URL?.trim();await dt.launch({...h$1?{conductorKey:h$1}:{},...h$1&&I_$?{conductorURL:I_$}:{}});console.log(`[dbos] application version: ${dt.applicationVersion}`);await DL0.initDbos();if(!xY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (L_$(),E_$));console.log("");for(let Z of $())console.log(Z)}var B44=Bun.serve({idleTimeout:0,port:Y44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(k_$){let X=await H44($,Z,T_$);if(X===void 0)return;if(X)return X;let Y=await F44($,T_$);if(Y)return Y}let G=await W44($);if(G)return w44(G);return DL0.fetch($,{server:Z})},websocket:{open($){if(g$1($.data))y$1.open($)},message($,Z){if(g$1($.data))y$1.message($,Z)},close($){if(g$1($.data))y$1.close($)}},development:!1}),O44=g81();if(xY.localMode)Promise.resolve().then(() => (fN(),WN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (P_$(),j_$)),Y=xY.baseUrl??`http://localhost:${xY.port}`,Q=await X(xY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (fN(),WN0));Z()}catch{}});var R_$=!1;async function D44($){let Z;try{Z=await s64.create({systemDatabaseUrl:q_$(xY.databaseUrl,xY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:lQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:lQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function EL0($){if(R_$)return;R_$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{O44(),DL0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await h8(Q),await B44.stop(!0);let J=dt.executorID;await dt.shutdown(),await D44(J),await DL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>EL0("SIGTERM"));process.on("SIGINT",()=>EL0("SIGINT"));process.on("SIGHUP",()=>EL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),EL0("uncaughtException")});