npm - decocms - Versions diffs - 4.55.3 → 4.55.4 - Mend

decocms 4.55.3 → 4.55.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (225) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2655,5 +2655,5 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var B$1,QC,$$4,uS$,N$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",G$4,u$,c$,$6,cS$=24,JC,qJ;var tS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(B$1||(B$1={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return i(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),i(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return D0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),D0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function H0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){H0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function p(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),H0(l0,S0,l0),H0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),H0(l0,S0,K),_0(l0,l0,j0),H0(S0,S0,l0),H0(l0,j0,o0),H0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),H0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return p(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return p(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function E6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function c5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function o$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function z9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),E6(K0[4],K0[5],K0[6]),a$[P0],b0[P0%16]),Y0[7]=N1(l0,c5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var hG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function R8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=hG[K0];z9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),z9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function V6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),H0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),H0(o,o,j0),H0(Y0,g[3],m[3]),H0(Y0,Y0,U),H0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),H0(g[0],b0,l0),H0(g[1],S0,P0),H0(g[2],P0,l0),H0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function I5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),H0(h,m[0],Y0),H0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function X9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),V6(m,g),V6(g,g),e4(g,m,o)}function j9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),H0(h[3],F,H),X9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);R8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,j9(Y0,o),I5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var q8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function M8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*q8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*q8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*q8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function Z6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;M8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];R8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];R8(b0,g.subarray(32),h+32),Z6(b0),j9(j0,b0),I5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];R8(K0,g,h+64),Z6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return M8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),H0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),H0(P0,l0,b0),H0(h,P0,Y0),H0(h,h,K0),V0(h,h),H0(h,h,Y0),H0(h,h,K0),H0(h,h,K0),H0(g[0],h,K0),Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))H0(g[0],g[0],N);if(Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return H0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(R8(b0,g,h),Z6(b0),X9(l0,P0,b0),j9(P0,m.subarray(32)),V6(l0,P0),I5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,m6=24,a6=32,p8=16,$5=32,C=32,u=32,c=32,I=32,r=m6,y0=a6,d0=p8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:R8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:m6,crypto_secretbox_ZEROBYTES:a6,crypto_secretbox_BOXZEROBYTES:p8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:q8,pack25519:m0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:I0,pow2523:V0,add:V6,set25519:A0,modL:M8,scalarmult:X9,scalarbase:j9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==m6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(a6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+a6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(p8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(p8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+p8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(a6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=m6,$.secretbox.overheadLength=p8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return p(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return R8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];v$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];v$(K0)})}()})(typeof Fg<"u"&&X6Z?X6Z:globalThis.nacl=globalThis.nacl||{});QC=typeof Fg<"u"&&X6Z?X6Z:globalThis.nacl,$$4={fromSeed:QC.sign.keyPair.fromSeed,sign:QC.sign.detached,verify:QC.sign.detached.verify,randomBytes:QC.randomBytes,scalarBaseMultiply:QC.scalarMult.base,seal:QC.box,open:QC.box.open};G$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})($6||($6={}));JC=[120,107,118,49];Z$4($$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(qJ||(qJ={}))});function z$1($){try{$?.clear?.()}catch{}}async function rS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=nS$($),W=E$1(J.sub),K=L$1(new TextEncoder().encode(Z)),w=dS$();try{let U=await iS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:qJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(pS$(U,w))}finally{z$1(w),z$1(K),z$1(W)}}var oS$=O(()=>{tS$()});function N$4($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function aS$(){let $=new y1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=D1();if(!Y.natsTunnelPublicEnabled)return Z.json(j$1(),503);if(!Y.natsPublicUrl)return Z.json(j$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(j$1(),503)}let Q=RJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await rS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:yS$(Q),userId:X,allowedConnectionTypes:N$4(Y.natsPublicUrl)})}return Z.json(gS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var j$1=()=>({error:"link session unavailable"});var sS$=O(()=>{l6();B8();hS$();oS$()});async function D$4($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function E$4($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new jN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function L$4($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},B$4),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=fn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function z$4($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<eS$){await N8($V$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<eS$){await N8($V$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var B$4=90000,O$4=15000,ZV$=()=>{let $=new y1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=g1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=ow({orgId:Y.id,virtualMcpId:Q,branch:J}),w=by({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await kY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&cW(w5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return iQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),iQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},O$4);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await D$4(F,w)){await E$4({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await L$4({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await z$4({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},eS$=60000,$V$=500;var GV$=O(()=>{l6();YC();TY();u5();WE0();xn();WV();M90();TX()});function P$4($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function A$4($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(j$4)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var j$4=1e4,T$4=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},XV$=()=>{let $=new y1;return $.use("*",T$4),$.get("/",async(Z)=>{let G=D1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await A$4(X,Y);return Z.json({apps:P$4(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var YV$=O(()=>{l6();B8()});import{z as v1}from"zod";function BK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function b$4($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function f$4($,Z,G){try{return JSON.parse($)}catch{throw new WV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function x$4($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:f$4(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function v$4($){let Z=$.map((G)=>{let X=G.function.parameters?FY(G.function.parameters):FY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function y$4($){if(!$)return;return{openai:{response_format:$}}}function g$4(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function QV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function JV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var I$4=256,R$4,q$4,M$4,k$4,S$4,V$4,C$4,_$4,WV$,KV$,wV$;var UV$=O(()=>{D6();l6();YC();R$4=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),q$4=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),M$4=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(q$4).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),k$4=v1.object({type:v1.literal("text")}),S$4=v1.object({type:v1.literal("json_object")}),V$4=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),C$4=v1.union([k$4,S$4,V$4]),_$4=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(M$4),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(R$4).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:C$4.optional(),user:v1.string().optional()});WV$=class WV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};KV$=new y1;KV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(BK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(BK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(BK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=_$4.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(BK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=b$4(Q.model);if(!J)return $.json(BK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(BK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(BK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=x$4(Q.messages),H=Q.tools?v$4(Q.tools):void 0,N=y$4(Q.response_format),B=g$4(),D=Math.floor(Date.now()/1000);if(Q.stream)return iQ($,async(E)=>{let L=QV$(U,F,H,Q,N,$.req.raw.signal);try{let z=VQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=I$4)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:JV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=QV$(U,F,H,Q,N,$.req.raw.signal),L=await HN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:JV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(BK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(BK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(BK(Y.message,"server_error"),500)}});wV$=KV$});var HV$;var FV$=O(()=>{HV$={name:"decocms",version:"4.55.3",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function u$4(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??c$4}}var NV$,c$4="https://ph.studio.decocms.com",BV$;var OV$=O(()=>{l6();_b0();gN();rG();B8();Me0();FV$();NV$=new y1;NV$.get("/",($)=>{let Z={version:HV$.version,theme:h_1(),...cO().logo&&{logo:cO().logo},...fQ()&&{internalUrl:he()},...D1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!D1().firecrawlApiKey,auth:xT$(),posthog:u$4(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!fQ()&&D1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});BV$=NV$});function DV$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var EV$,d$4,l$4,LV$;var zV$=O(()=>{l6();S3();bv();Lb();EV$=new y1,d$4=["range","if-none-match","if-modified-since"],l$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];EV$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(my($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await mn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&k3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return DV$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of d$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of l$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),DV$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});LV$=EV$});var tt=_((KC)=>{var m$4=KC&&KC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),i$4=KC&&KC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))m$4(Z,$,G)};Object.defineProperty(KC,"__esModule",{value:!0});i$4(iX(),KC)});var AV$=_((jV$)=>{Object.defineProperty(jV$,"__esModule",{value:!0});jV$.version=void 0;jV$.version="3.4.0"});var RV$=_((OK)=>{var n$4=OK&&OK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(OK,"__esModule",{value:!0});OK.NodeTransport=OK.VERSION=void 0;OK.nodeResolveHost=s$4;var m4=tt(),p$4=u0("net"),P$1=u0("tls"),t$4=u0("path"),TV$=u0("fs"),r$4=n$4(u0("dns")),o$4=AV$();OK.VERSION=o$4.version;var a$4="nats.js";class IV${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=a$4,this.version=OK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,p$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,t$4.resolve)($),!(0,TV$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,TV$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,P$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,P$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof P$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}OK.NodeTransport=IV$;function s$4($){let Z=(0,m4.deferred)();return r$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var VV$=_((SV$)=>{Object.defineProperty(SV$,"__esModule",{value:!0});SV$.connect=e$4;var qV$=RV$(),MV$=tt(),kV$=tt();function e$4($={}){if((0,kV$.hasWsProtocol)($))return Promise.reject(kV$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,MV$.setTransportFactory)({factory:()=>{return new qV$.NodeTransport},dnsResolveFn:qV$.nodeResolveHost}),MV$.NatsConnectionImpl.connect($)}});var CV$=_((VU)=>{var Z84=VU&&VU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),G84=VU&&VU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))Z84(Z,$,G)};Object.defineProperty(VU,"__esModule",{value:!0});VU.connect=void 0;var X84=VV$();Object.defineProperty(VU,"connect",{enumerable:!0,get:function(){return X84.connect}});G84(tt(),VU)});function xV$($){let Z=$?.connectFn??W84,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:J84,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=cX(Q84,Y84,B-1,2,0.5);await N8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?_V$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=fV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function W84($){return bV$.connect($)}var _V$,bV$,fV$,Y84=100,Q84=3000,J84=3000;var vV$=O(()=>{u5();_V$=k(hg(),1),bV$=k(CV$(),1),fV$=k(CB(),1)});function Hg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function A$1($,Z){return`${$}.${Z}`}class T$1{cache;constructor($){this.cache=Hg({ttlMs:$?.ttlMs??K84,maxSize:$?.maxSize??w84})}async get($,Z){return this.cache.get(A$1($,Z))??null}async set($,Z,G){this.cache.set(A$1($,Z),G)}async invalidate($,Z){this.cache.delete(A$1($,Z))}teardown(){this.cache.clear()}}var K84=600000,w84=5000;var yV$=()=>{};function jL0($,Z){return`${$}:${Z}`}function I$1($){let Z=Hg({ttlMs:$?.ttlMs??U84,maxSize:$?.maxSize??F84}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(gV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(jL0(K,w))},set(K,w,U){Z.set(jL0(K,w),U)},invalidate(K,w){Z.delete(jL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(gV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(jL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var gV$="studio.ai-provider-keys.invalidate",U84=30000,F84=5000;var hV$=()=>{};class R$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var cV$=($)=>{let Z;return()=>Z??=$()},q$1,M$1;var uV$=O(()=>{H5();q$1=cV$(()=>O8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),M$1=cV$(()=>O8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function L84(){return{name:nw,subjects:[`${rl0}.>`],storage:MJ.StorageType.File,max_age:B84,max_bytes:D84,max_msgs_per_subject:E84,discard:MJ.DiscardPolicy.Old,retention:MJ.RetentionPolicy.Limits,duplicate_window:O84,num_replicas:1}}class mV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function dV$($){let Z=lV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function A84($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,N84().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class k$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await MJ.jetstreamManager($),G=L84();try{await Z.streams.info(nw),await Z.streams.update(nw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(nw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=A84(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=t6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=al0(w,{runId:Z}),H=performance.now()-U;if(q$1().record(H),M$1().add(1,{"org.id":X??"unknown"}),P84?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?dV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),j84)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=al0(Z,{runId:$,dedup:G});if(q$1().record(performance.now()-Y),M$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:dV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=p6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?MJ.DeliverPolicy.New:MJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=BN($),W;try{W=await(await X.consumers.get(nw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=Z90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(s50()).pipeThrough(e50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(nw,{filter:BN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var MJ,lV$,H84=($)=>{let Z;return()=>Z??=$()},N84,B84=86400000000000,O84=120000000000,D84=4294967296,E84=500000,z84,j84,P84;var iV$=O(()=>{el0();G90();sl0();H5();uV$();MJ=k(CB(),1),lV$=k(hg(),1),N84=H84(()=>O8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));z84=process.env.STREAM_ENCODE_TRACE==="1",j84=process.env.DECOPILOT_STREAM_TRACE==="1";P84=z84?new mV$:null});import{z as G8}from"zod";var nV$,pV$,DK,S$1,tV$,rV$,oV$,aV$,T84,sV$,eV$,$C$,ZC$,GC$,I84,XC$,B4Z,R84,q84=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},YC$=($)=>{return new TextEncoder().encode(JSON.stringify($))},QC$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?R84[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${q84(Y.error)}`);return Y.data};var JC$=O(()=>{nV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),pV$=G8.array(G8.tuple([G8.string(),G8.string()])),DK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),S$1=G8.string().min(1),tV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:DK,method:G8.string().min(1),url:G8.string().min(1),headers:pV$,replySubject:S$1,bodySubject:S$1.optional(),abortSubject:S$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),rV$=G8.object({type:G8.literal("request.chunk"),requestId:DK,seq:G8.number().int().nonnegative(),data:nV$}),oV$=G8.object({type:G8.literal("request.end"),requestId:DK,seq:G8.number().int().nonnegative()}),aV$=G8.object({type:G8.literal("request.error"),requestId:DK,code:G8.string().min(1),message:G8.string()}),T84=G8.union([rV$,oV$,aV$]),sV$=G8.object({type:G8.literal("response.ack"),requestId:DK}),eV$=G8.object({type:G8.literal("response.start"),requestId:DK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:pV$}),$C$=G8.object({type:G8.literal("response.chunk"),requestId:DK,seq:G8.number().int().nonnegative(),data:nV$}),ZC$=G8.object({type:G8.literal("response.end"),requestId:DK,seq:G8.number().int().nonnegative()}),GC$=G8.object({type:G8.literal("response.error"),requestId:DK,code:G8.string().min(1),message:G8.string()}),I84=G8.union([sV$,eV$,$C$,ZC$,GC$]),XC$=G8.object({type:G8.literal("abort"),requestId:DK,reason:G8.string().optional()}),B4Z=G8.union([tV$,T84,I84,XC$]),R84={"request.start":tV$,"request.chunk":rV$,"request.end":oV$,"request.error":aV$,"response.ack":sV$,"response.start":eV$,"response.chunk":$C$,"response.end":ZC$,"response.error":GC$,abort:XC$}});var M84=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},k84=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},S84=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},V84=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},WC$=($)=>{return M84(btoa(S84($)))},KC$=($)=>{return V84(atob(k84($)))},C84;var wC$=O(()=>{C84=class C84{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*u84($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class r84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var _84=30000,b84=1000,f84=65536,pQ,x84=($)=>{return"connection"in $},v84=($)=>{let Z=x84($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??_84,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??b84,maxChunkBytes:Z.maxChunkBytes??f84,diagnostics:Z.diagnostics}},UC$=($)=>{return Array.from($.entries())},y84=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},g84=($,Z,G)=>{if(y84(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return UC$(G.headers);return UC$(G.headers)},FC$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},h84=()=>{return crypto.randomUUID().replaceAll("-","")},c84=($)=>{try{$?.unsubscribe()}catch{}},d84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},l84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},OB=($,Z,G)=>{$.publish(Z,YC$(G))},m84=($)=>{return $.type.startsWith("response.")},V$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},i84=($)=>{if($==="idle")return new pQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new pQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},HC$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(i84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=QC$(W.value.data);if(!m84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},n84=async($)=>{let Z=!1;while(!0){let G=await HC$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new pQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new pQ(G.value.code,G.value.message);throw new pQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},p84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){OB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of u84(J,$.maxChunkBytes)){if(X)return;OB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:WC$(W)}),G++}}}catch(Q){if(X)return;OB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},t84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await HC$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new pQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(KC$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new pQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){OB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},DB=($)=>{let Z=v84($);return d84(Z.maxChunkBytes),async(G,X)=>{let Y=xS$(G),Q=new Request(G,X),J=h84(),W=vS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new pQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,c84(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new pQ("tunnel_aborted",V$1(Q.signal));OB(Z.connection,W.abort,{type:"abort",requestId:J,reason:V$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new pQ("tunnel_aborted",V$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new pQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);OB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:g84(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};OB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)OB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?p84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await n84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(l84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:FC$(P.headers)});return new Response(t84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:FC$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var NC$=O(()=>{JC$();wC$();DL0();pQ=class pQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var PL0=O(()=>{NC$()});function BC$($){let Z=$.createFetch??o84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return C$1;let Q=RJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return C$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return C$1}}}var C$1,o84=($,Z)=>DB({connection:$,firstFrameTimeoutMs:Z});var OC$=O(()=>{PL0();nt();C$1={online:!1,capabilities:[]}});async function*a84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function DC$($){let Z=$.createFetch??((G)=>DB({connection:G,idleTimeoutMs:s84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=RJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*a84(U)}}var s84=45000;var EC$=O(()=>{PL0();nt()});import{z as kJ}from"zod";function LC$($){return JSON.stringify($)}var l4Z;var zC$=O(()=>{l4Z=kJ.discriminatedUnion("type",[kJ.object({type:kJ.literal("cancel"),runId:kJ.string()}),kJ.object({type:kJ.literal("cancel_req"),reqId:kJ.string()}),kJ.object({type:kJ.literal("keep_alive")}),kJ.object({type:kJ.literal("shutdown")})])});function jC$($){let Z=$.createFetch??((G)=>DB({connection:G,idleTimeoutMs:e84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=RJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function PC$($){let Z=$.createFetch??DB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=RJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:LC$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var e84=45000;var AC$=O(()=>{PL0();zC$();nt()});function AL0($,Z,G,X){if(!X)return!1;return $.emit(Z,M3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var TC$=O(()=>{c8()});class _$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as $64,rm as TL0}from"fs/promises";import{join as IL0}from"path";async function RL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-Z64),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await wC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await IC$($,Y,Z);else if(!Y.startsWith(".")){let Q=IL0($,Y),J=await wC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await IC$(Q,K,Z)}if((await wC(Q)).length===0)await TL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function IC$($,Z,G){let X=0,Y=IL0($,Z),Q=await wC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=IL0(Y,W),w=await wC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=IL0(K,F);await TL0(N,{recursive:!0,force:!0}),X++}}if((await wC(K)).length===0)await TL0(K,{recursive:!0,force:!0})}if((await wC(Y)).length===0)await TL0(Y,{recursive:!0,force:!0});return X}async function wC($){try{return(await $64($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var Z64=30;var b$1=()=>{};import{DBOS as f$1,SchedulerMode as G64}from"@dbos-inc/dbos-sdk";async function Y64(){let $=[rQ(),FC(),PK()],Z=0;for(let G of $)try{Z+=await RL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function Q64($,Z){await f$1.runStep(()=>Y64(),{name:"monitoringRetention"})}function qC$(){if(RC$)return;RC$=!0;let $=f$1.registerWorkflow(Q64,{name:"monitoringRetentionWorkflow"});f$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:X64,mode:G64.ExactlyOncePerIntervalWhenActive})}var X64="23 4 * * *",RC$=!1;var MC$=O(()=>{uX();b$1()});function kC$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await oH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Xu0($.db,Z,X.role);return Y.boundAuth=Gu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new RD(G,void 0,Y.boundAuth,X.role,"self"),_40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var SC$=O(()=>{qD();Ui()});function J64(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function K64(){for(let $ of W64)$()}function VC$($){let Z=[...x$1.logs,$];x$1={...x$1,logs:Z.length>500?Z.slice(-500):Z},K64()}function v$1(){return w64}var x$1,W64,w64=!1;var y$1=O(()=>{x$1=J64(),W64=new Set});import{EventEmitter as U64}from"events";var g$1;var CC$=O(()=>{y$1();g$1=new U64;g$1.on("request",($)=>{VC$($)})});function _C$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Ng(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Ng(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Ng(H.method)}${s4.reset}`}}catch{}}let W=Ng(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Ng(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=H64(X),w=J?"\u25C0":"\u2190";if(!v$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=F64(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!v$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);g$1.emit("request",{method:X,path:Ng(Y),status:F,duration:U,timestamp:new Date})}}}var s4,F64=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},H64=($)=>{return s4[$]||s4.reset},Ng=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var bC$=O(()=>{y$1();CC$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as yC$}from"crypto";import{mkdir as N64,readdir as B64,rm as fC$,stat as gC$}from"fs/promises";import{join as c$1,relative as O64}from"path";import{z as P$}from"zod";function cC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return c$1(D64,Z)}function uC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function h$1($,Z){let G=cC$($),X=uC$(Z);return c$1(G,X)}function E64($,Z,G,X){let Y=D1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return yC$("sha256",Y).update(Q).digest("hex")}function vC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=E64(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${uC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function dC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${yC$("md5","etag").update(X).digest("hex")}"`}async function lC$($,Z,G,X,Y){try{let Q=await B64($,{withFileTypes:!0});for(let J of Q){let W=c$1($,J.name),w=O64(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await lC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await gC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:dC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function mC$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=cC$(X);await N64(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await lC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=h$1(X,Q.key),W=await gC$(J);return{contentType:v01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:dC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??xC$;return{url:vC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??xC$;return{url:vC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=h$1(X,Q.key);try{return await fC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=h$1(X,K);try{await fC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function u$1($,Z,G){let X=mC$(Z,G),Y=new ww({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:E5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new _Y({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),pW(Y,Q,$,"mcp:dev-assets")}async function iC$($,Z,G,X){let Q=mC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var D64="./data/assets",xC$=3600,hC$,nC$;var pC$=O(()=>{B8();rn();l6();Du();yv();EG();vE0();hC$=new y1;hC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return u$1($.req.raw,Z,X)});nC$=hC$});var tC$={};G6(tC$,{mountDevRoutes:()=>L64});function L64($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return u$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await iC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",nC$);let G=new y1;G.use("*",mQ({mountPath:"/api/dev-assets"})),G.route("/",xE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var rC$=O(()=>{l6();S01();vE0();pC$()});var oC$=O(()=>{Ru0();qu0();WE()});var qL0=O(()=>{oC$()});var sC$={};G6(sC$,{streamAgent:()=>aC$,createDecopilotClient:()=>j64});async function z64($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (D6(),il0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function aC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (D6(),il0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await z64(F.body);return Q({stream:H})}function j64($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return aC$(Y,X,W,Q,J)}}}import{z as hX}from"zod";function eC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=P64.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:hX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:hX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var P64,c5Z,A64=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},l$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},ML0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},T64=($,Z,G)=>{let X=ML0($,Z,G);return new Proxy(ux.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},I64=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => sC$);return J(X,Z.token,$,Y,Q)}}},d$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>d$1(G,Z));if(typeof $==="object"){if(A64($))return I64($,Z);if(l$1($))return T64($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=d$1(Y,Z);return G}return $},$_$=($)=>{return d$1($.state,$)};var Bg=O(()=>{qL0();P64=new Map;c5Z=hX.object({id:hX.string(),title:hX.string(),capabilities:hX.object({vision:hX.boolean().optional(),text:hX.boolean().optional(),tools:hX.boolean().optional(),reasoning:hX.boolean().optional()}).passthrough().optional(),provider:hX.string().optional().nullable(),limits:hX.object({contextWindow:hX.number().optional(),maxOutputTokens:hX.number().optional()}).passthrough().optional()})});var R64,Z_$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},q64=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=Z_$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},G_$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=Z_$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??R64;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},X_$=($,Z,G)=>{let X=new Headers($.headers);return q64(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var Y_$=O(()=>{R64=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function Q_$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function M64($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function J_$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function W_$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function K_$($){return{handleProtectedResourceMetadata:(w)=>{let U=EK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=EK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=EK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=EK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=J_$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=EK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?W_$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=EK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??EK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=J_$(z),P=EK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=EK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof m$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=W_$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!M64(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=Q_$(32),H=U.token_endpoint_auth_method!=="none"?Q_$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${EK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var m$1,EK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var i$1=O(()=>{m$1=class m$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as k64}from"async_hooks";var w_$,rt;var n$1=O(()=>{w_$=new k64,rt={getStore:()=>{return w_$.getStore()},run:($,Z,...G)=>w_$.run($,Z,...G)}});var F_$="SELF",SL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},H_$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},U_$="::",N_$=($)=>{let Z=$.indexOf(U_$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+U_$.length);return[G,X]},S64=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},B_$=($)=>{if(SL0($))return[];return Object.keys($)},V64=($,Z)=>{if(SL0($))return $.events;let G=$[Z];if(!G)return[];if(H_$(G))return G.events;return Object.keys(G)},kL0=($,Z,G)=>{if($===F_$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!l$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},C64=($,Z,G)=>{let X=Z;if(SL0($)){let Q=[];for(let J of $.events){let W=N_$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=kL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of B_$($)){let J=kL0(Q,X,G);if(!J)continue;let W=V64($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},_64=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},b64=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},f64=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},x64=async($,Z,G,X,Y)=>{let Q=X;if(SL0($)){let U=new Set;for(let H of $.events){let N=N_$(H);if(!N)continue;let[B,D]=N,E=kL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of B_$($)){let F=kL0(U,Q,Y);if(F)J.set(F,U)}let W=_64(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(H_$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=b64(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return f64(w)},O_$;var p$1=O(()=>{Bg();O_$={subscriptions:C64,execute:x64,parseCron:S64}});function v64($,Z){let G=ML0("self",{meshUrl:$,token:Z});return ux.forConnection(G)}function y64($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function D_$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=v64($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(y64(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var t$1=O(()=>{Bg();qL0()});import{z as KZ}from"zod";function CU($){return{...$,execute:(Z)=>{let G=ot(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var ot=($)=>{let Z=rt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},E_$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},g64=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?eC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[CU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=E_$(J);await Y(J.runtimeContext.env,{createAgent:D_$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[CU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:Y50,outputSchema:Q50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=E_$(J);return O_$.execute($.handlers,J.context.events,W,K,w)}})]:[],CU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},L_$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...g64({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=ot(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=ot();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=ot(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new ww({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:E5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new _Y;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=rt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=ot();return j({context:B,runtimeContext:P},P)}}};var VL0=O(()=>{Vu0();EG();Du();yv();Bg();p$1();n$1();t$1();p$1();t$1()});import{decodeJwt as z_$}from"jose";var h64=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},j_$=($)=>()=>{return{...$??{}}},c64=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=z_$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:j_$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=z_$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=j_$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=$_$(W),h64({env:Q,server:Z,url:X}),Q},u64,P_$=($)=>{let Z=L_$($),G=$.cors??u64,X=$.oauth,Y=X?K_$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return G_$(J,G??{});let w=c64({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await rt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return X_$(U,J,G??{});return U}}};var A_$=O(()=>{Bg();Y_$();i$1();i$1();n$1();VL0();VL0();Bg();qL0();u64={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as r$1}from"zod";function m64($,Z){let G=CU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ky,outputSchema:Sy,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=T_$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return T_$.set(w,F),F}}),X=CU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:JK,outputSchema:lV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=CU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:JK,outputSchema:r$1.object({versions:r$1.array(lV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=CU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:uD0,outputSchema:dD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=CU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:r$1.object({}),outputSchema:Vy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function I_$($){let Z=$.db,G=new df(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=m64(G,Q.id),W=P_$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var d64=3600000,l64=500,T_$;var R_$=O(()=>{A_$();VL0();Sy0();G9();T_$=Hg({ttlMs:d64,maxSize:l64,updateRecencyOnGet:!0})});import{sql as i64}from"kysely";import{randomUUID as q_$}from"crypto";import{z as n64}from"zod";async function t64($){let Z=new Date().toISOString(),G=q_$(),X=$4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:q_$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await i64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function r64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function o64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",mV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):k_$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?M_$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:M_$,rateLimitWindow:p64,rateLimitMax:k_$}}async function a64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function s64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function S_$($){let{db:Z,db:G}=$,X=new lf(G),Y=new mf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await r64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await o64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await a64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=gj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:n64.treeifyError(U.error)},400);let F=await s64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await t64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return m1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var M_$=!0,p64="hour",k_$=100;var V_$=O(()=>{I4();c8();Cy();Vy0();Cy0();G9()});var C_$={};G6(C_$,{createPublishRequestHandler:()=>S_$,createPublicMCPHandler:()=>I_$});var __$=O(()=>{R_$();V_$()});var sn0={};G6(sn0,{watchHandler:()=>y_$,getProxyDispatch:()=>G44,createApp:()=>F44});import{readFileSync as e64}from"fs";import{PrometheusSerializer as $44}from"@opentelemetry/exporter-prometheus";import{DBOS as Og}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as J44,oAuthProtectedResourceMetadata as W44}from"better-auth/plugins";async function Z44($){let Z=$.connect(),G;try{G=await Promise.race([Z,f_$(b_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),f_$(b_$)]),G.release(),!0}catch{return G.release(!0),!1}}function f_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function G44(){if(!o$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return o$1}async function X44($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${mC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function Y44($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function F44($={}){let Z=$.database??U6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new T$1,J,W,K,w,U,F=null;if($.disableNats)J=I$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new on,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=xV$();let d=D1().natsCredsPath,l;if(d)try{l=e64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(D1().natsUrls,l?{creds:l}:void 0);let k0=yy0()?new kx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new tp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=I$1({getConnection:()=>F.getConnection()}),W=new R$1({getConnection:()=>F.getConnection()}),K=new k$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=BC$({getConnection:()=>F.getConnection()}),U=jC$({getConnection:()=>F.getConnection()});let N1=PC$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((E6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",E6)})},stop:()=>i0.stop()},OT$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),ym1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Dg)await Dg();Sx0(X),rp0(Y);let N={storage:new sf(Z.db),sseHub:JZ},B=new wm0(N),D=new yl(Z.db),E=new _$1(D);E.start(),W.start((d)=>{D90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Dg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),gm1(),Y.teardown(),Sx0(null),rp0(null)};let L=new y1;if(L.use("*",qb0({enabled:(d)=>Pb(d,"debug")==="1"})),L.use("*",tL0),L.use("/*",S_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!D1().noTui)L.use("*",_C$());L.use("*",async(d,l)=>{if(await l(),jg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await Z44(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await sL0.collect(),k0=Q44.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!K44.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Og.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=A4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",BV$),L.route("/api/auth/custom",vT$),L.all("/api/auth/admin/*",hT$),L.all("/api/auth/*",async(d)=>{return await s8.handler(d.req.raw)});let z=Ea1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",tV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",tV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Fi),L.route("/",Pa1()),L.use("/oauth-proxy/:connectionId/*",tV),L.all("/oauth-proxy/:connectionId/*",x_$);let j=async(d)=>{let k0=await w44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",tV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await U44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=FT$({ttlMs:120000}),M=await Xa1({db:Z.db,auth:s8,encryption:{key:D1().encryptionKey},observability:{tracer:bU,meter:O8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});oH.set(M);let S=new Dw(D1().encryptionKey);yR1({db:Z.db,baseUrl:mJ()});let q=i80(Z.db),V=new Sl(Z.db),i=kC$({db:Z.db});lp0({storage:q,meshContextFactory:i}),Am0({meshContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:_2$,workPublisher:U}),Em0({dispatchRunFn:V2$,meshContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new sf(Z.db);Q4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await v_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return AL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return AL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return AL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,ON(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,M3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{m1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{m1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),GJ$({meshContextFactory:i,systemDatabaseUrl:ef1(D1().databaseUrl,D1().databasePgSsl),streamBuffer:K}),qC$(),gR1();let v=async(d,l,k0)=>{let v0=await q.findById(d,l);if(!v0)throw Error("Automation not found");return np0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new ny(q,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>tn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[rQ(),FC(),PK()];for(let d of a)RL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(nL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{JQ(d,N1);try{return await i0()}finally{GY(d,N1)}}},v0=await oH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),N8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",rV),L.use("/api/:org/v1/*",rV),L.use("/api/:org/files/*",rV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/")||k0.startsWith(`${ke0}/`))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let D0=new y1;D0.use("*",mQ({mountPath:"/api/org-sso"})),D0.route("/",GE0()),L.route("/api/org-sso",D0),L.get("/api/tools/management",(d)=>{return d.json({tools:kb0,grouped:hO()})}),L.use("/mcp/*",async(d,l)=>{JQ(d,"mcp");try{return await l()}finally{GY(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),k3()){let{mountDevRoutes:d}=(rC$(),vL0(tC$));d(L,W0)}let J0=new y1;J0.use("*",mQ({mountPath:"/mcp"})),J0.route("/",dN0()),L.route("/mcp",J0);let s=new y1;s.use("*",mQ({mountPath:"/mcp/self"})),s.route("/",FL0()),L.route("/mcp/self",s);let A0=new y1;A0.use("*",mQ({mountPath:"/mcp"})),A0.route("/",iN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{JQ(d,"llm_models");try{return await l()}finally{GY(d,"llm_models")}});let U0=M01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)o$1=DC$({getConnection:()=>F?.getConnection()??null});L.route("/api",aS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await fS$(i0,s8.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",rV),L.route("/api",LV$);let f0=new y1;f0.use("*",mQ({mountPath:"/api"})),f0.route("/",HL0()),L.route("/api",f0),L.route("/api",wV$);let m0=new y1;m0.use("*",mQ({mountPath:"/api"})),m0.route("/",NL0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Cl(Z.db),n0=new y1;n0.use("*",mQ({mountPath:"/api"})),n0.route("/",_E0()),L.route("/api",n0),L.route("/api/deco-sites",$q$()),L.route("/api/deco-apps",XV$());let N0=new y1;N0.use("*",mQ({mountPath:"/api/deco-sites"})),N0.route("/",fE0()),L.route("/api/deco-sites",N0);let _0=new y1;_0.use("*",mQ({mountPath:"/api/vm-events"})),_0.route("/",ZV$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:H0}=await Promise.resolve().then(() => (__$(),C_$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=H0(Q0);L.use("/org/:orgRef/registry/publish-request",tV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",tV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0),L.route(ke0,cT$());let p=_S$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:k3(),mcpAuth:W0,oauthProxyHandler:x_$,watchHandler:y_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",p),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(u2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Dg?Promise.resolve(Dg()).finally(()=>{Dg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await cY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await Zx1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Og.registerQueue(hY,{partitionQueue:!0,concurrency:cp0,minPollingIntervalMs:up0}),await Og.registerQueue(tQ,{partitionQueue:!0,concurrency:Pm0}),await Og.registerQueue(jK,{partitionQueue:!0,concurrency:Dm0}),await Og.registerQueue(_U,{partitionQueue:!0,concurrency:ZJ$}),await C01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Og.deleteQueue(d))),await dp0(Z.pool),qg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),hR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var v_$,b_$=5000,o$1=null,Dg=null,x_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await oH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await xx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Hi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=D1().baseUrl??B.origin;try{let i=new URL(q),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(iC1(J.connection_url))try{let V=await X44(Y,J.organization_id),i=Y44(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),i=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await vx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new C5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},y_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return iQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},Q44,K44,w44=()=>W44(s8),U44=()=>J44(s8);var en0=O(()=>{u5();B8();cR1();rG();Lb();c8();l6();u10();V_1();Mb0();CW();Ui();je0();wQ();H5();I4();Me0();uT$();_e0();h2$();k01();e3();b40();S01();d2$();V01();bS$();sS$();GV$();x01();YV$();lN0();Ni();UV$();nN0();X$1();OV$();zV$();G$1();Z$1();Wr();tu();vV$();QY();w60();bl();ap0();yV$();hV$();iV$();OC$();EC$();AC$();Um0();TC$();oy0();Zg0();MC$();v$0();b$1();uX();_01();Qn();Bm0();Wm0();v$0();T01();jy0();Py0();SC$();Ab();bC$();YC();je0();fv();E90();v_$=k(CB(),1);Q44=new $44,K44=new Set([hY,tQ,jK,_U])});var u_$={};G6(u_$,{resolveClientDir:()=>L44,resolveAssetPathWithTraversalCheck:()=>c_$,isPathWithinDirectory:()=>h_$,createAssetHandler:()=>z44});import{resolve as at,dirname as H44,join as N44,extname as B44,basename as O44,sep as g_$}from"path";function D44($,Z){if($===Z||O44($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${g_$}assets${g_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function h_$($,Z){let G=at(Z),X=at($);return X===G||X.startsWith(G+"/")}function c_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=at(Z,G);if(!h_$(X,Z))return null;return X}function L44($,Z="../client"){let G=new URL($),X=H44(G.pathname);return at(X,Z)}function z44($={}){let{env:Z="production",clientDir:G=E44,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=c_$({requestPath:W,clientDir:G});if(!K)return null;let w=N44(K,"index.html"),U=at(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(B44(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:D44(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var E44="./dist/client";var d_$=()=>{};var l_$={};G6(l_$,{tryUpgradePreviewWs:()=>q44,tryHandlePreviewHttp:()=>R44,previewWebSocketHandler:()=>M44,parsePreviewBaseDomain:()=>I44,isPreviewWsData:()=>CL0,extractHandleFromHost:()=>a$1});function A44($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function T44(){return new Response(P44,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function I44($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function a$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function R44($,Z){let G=a$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return et(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(JV)&&A44($))return T44();return Y.headers.delete(JV),Y}function et($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function CL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function q44($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=a$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return et(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return et(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return et(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return et(426,"upgrade failed");return}function st($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var j44=256,P44='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',M44;var m_$=O(()=>{tn0();M44={open($){let Z=$.data;if(!CL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),st($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{st($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{st($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!CL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=j44){st($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!CL0(Z))return;st($,Z,1000,"")}}});var t_$={};G6(t_$,{printBanner:()=>S44,bannerLines:()=>p_$,BANNER_LINES:()=>i_$,BANNER_GRADIENT:()=>n_$});function k44($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function p_$($){let Z=i_$.map((G,X)=>{let[Y,Q,J]=k44(n_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function S44($){console.log("");for(let Z of p_$($))console.log(Z);console.log("")}var i_$,n_$;var r_$=O(()=>{i_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],n_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var a_$={};G6(a_$,{bootstrapDevLinkSession:()=>g44});import{existsSync as V44}from"fs";import{chmod as C44,mkdir as _44,rename as b44,writeFile as f44}from"fs/promises";import{dirname as x44,join as o_$}from"path";function v44($){return o_$($,"dev-link")}function y44($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return o_$(v44($),"session.json")}async function g44($,Z){let G=y44($),X=U6().db,Y=fQ()?await ln():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(V44(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await s8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await s8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await _44(x44(G),{recursive:!0});let W=`${G}.tmp`;return await f44(W,JSON.stringify(J,null,2),{mode:384}),await C44(W,384),await b44(W,G),{path:G,userSub:Y.id}}var s_$=O(()=>{wQ();CW();gN()});u5();var J81="4";function W81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:J81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}B8();H5();function Ff$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Gz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function d81(){let $=Ff$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Gz0($,"--cpu-prof-dir")??process.cwd(),name:Gz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Gz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Qz0();var Ur;function a81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=LB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Ur=setInterval(()=>void Z().catch(()=>{}),$),Ur.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Ur)clearInterval(Ur)}}import*as Bf$ from"bun:jsc";var{startSamplingProfiler:Of$,samplingProfilerStackTraces:Df$}=Bf$;function s81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Of$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Df$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function e81(){d81();let $=[a81(),o81(),s81()];return()=>{for(let Z of $)Z()}}import{existsSync as n44}from"fs";var gY=D1();c81();var{DBOS:$r,DBOSClient:h44}=await import("@dbos-inc/dbos-sdk");function Xb$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var c44=[hY,tQ,jK,_U],u44=gY.dispatchRole==="worker"?c44:gY.dispatchRole==="api"?[]:void 0;$r.setConfig(W81({systemDatabaseUrl:Xb$(gY.databaseUrl,gY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:gY.podName,listenQueues:u44}));var{createApp:d44}=await Promise.resolve().then(() => (en0(),sn0)),{isServerPath:l44}=await Promise.resolve().then(() => (Wr(),T81)),{createAssetHandler:m44,resolveClientDir:Yb$}=await Promise.resolve().then(() => (d_$(),u_$)),i44=gY.port,e_$=Yb$(import.meta.url,"../client"),p44=n44(e_$)?e_$:Yb$(import.meta.url,"../dist/client"),t44=m44({clientDir:p44,isServerPath:l44}),r44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function o44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(r44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:a44,tryHandlePreviewHttp:s44,tryUpgradePreviewWs:e44,previewWebSocketHandler:s$1,isPreviewWsData:e$1}=await Promise.resolve().then(() => (m_$(),l_$)),{getOrInitSharedRunner:$54}=await Promise.resolve().then(() => (xn(),KQ$)),Qb$=a44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),$b$={baseDomain:Qb$??"",getRunner:$54},_L0=await d44(),$81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Zb$=process.env.DBOS_CONDUCTOR_URL?.trim();await $r.launch({...$81?{conductorKey:$81}:{},...$81&&Zb$?{conductorURL:Zb$}:{}});console.log(`[dbos] application version: ${$r.applicationVersion}`);await _L0.initDbos();if(!gY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (r_$(),t_$));console.log("");for(let Z of $())console.log(Z)}var Z54=Bun.serve({idleTimeout:0,port:i44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Qb$){let X=await e44($,Z,$b$);if(X===void 0)return;if(X)return X;let Y=await s44($,$b$);if(Y)return Y}let G=await t44($);if(G)return o44(G);return _L0.fetch($,{server:Z})},websocket:{open($){if(e$1($.data))s$1.open($)},message($,Z){if(e$1($.data))s$1.message($,Z)},close($){if(e$1($.data))s$1.close($)}},development:!1}),G54=e81();if(gY.localMode)Promise.resolve().then(() => (gN(),AN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (s_$(),a_$)),Y=gY.baseUrl??`http://localhost:${gY.port}`,Q=await X(gY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (gN(),AN0));Z()}catch{}});var Gb$=!1;async function X54($){let Z;try{Z=await h44.create({systemDatabaseUrl:Xb$(gY.databaseUrl,gY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:tQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:tQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function bL0($){if(Gb$)return;Gb$=!0,console.log(`
+`;return new TextEncoder().encode(X)}var B$1,QC,$$4,uS$,N$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",G$4,u$,c$,$6,cS$=24,JC,qJ;var tS$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(B$1||(B$1={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function D(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function E(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=D(o,4*S0),b0[1+S0]=D(h,4*S0),b0[6+S0]=D(m,4*S0),b0[11+S0]=D(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(o,4*S0)|0,b0[6+S0]=b0[6+S0]-D(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return i(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),i(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return D0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),D0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function H0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){H0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function p(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),H0(l0,S0,l0),H0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),H0(l0,S0,K),_0(l0,l0,j0),H0(S0,S0,l0),H0(l0,j0,o0),H0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return X0($1,$1),H0(W1,W1,$1),m0(g,W1),0}function $0(g,m){return p(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return p(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function N1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function z1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function R$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function E6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function P4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function c5(g){return z1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return z1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return z1(R$(g,1),R$(g,8),i0(g,7))}function o$(g){return z1(R$(g,19),R$(g,61),i0(g,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function z9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=E(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=E(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=N1(K0[7],e(K0[4]),E6(K0[4],K0[5],K0[6]),a$[P0],b0[P0%16]),Y0[7]=N1(l0,c5(K0[0]),P4(K0[0],K0[1],K0[2])),Y0[3]=N1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=N1(b0[S0],b0[(S0+9)%16],J1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=N1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var hG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function R8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=hG[K0];z9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),z9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function V6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),H0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),H0(o,o,j0),H0(Y0,g[3],m[3]),H0(Y0,Y0,U),H0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),H0(g[0],b0,l0),H0(g[1],S0,P0),H0(g[2],P0,l0),H0(g[3],b0,S0)}function e4(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function I5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),H0(h,m[0],Y0),H0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function X9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,e4(g,m,o),V6(m,g),V6(g,g),e4(g,m,o)}function j9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),H0(h[3],F,H),X9(g,h,m)}function b1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);R8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,j9(Y0,o),I5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var q8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function M8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*q8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*q8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*q8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function Z6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;M8(g,m)}function b$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];R8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];R8(b0,g.subarray(32),h+32),Z6(b0),j9(j0,b0),I5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];R8(K0,g,h+64),Z6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return M8(g.subarray(32),S0),g0}function w8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),H0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),H0(P0,l0,b0),H0(h,P0,Y0),H0(h,h,K0),V0(h,h),H0(h,h,Y0),H0(h,h,K0),H0(h,h,K0),H0(g[0],h,K0),Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))H0(g[0],g[0],N);if(Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return H0(g[3],g[0],g[1]),0}function L7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(R8(b0,g,h),Z6(b0),X9(l0,P0,b0),j9(P0,m.subarray(32)),V6(l0,P0),I5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var M$=32,m6=24,a6=32,p8=16,$5=32,C=32,u=32,c=32,I=32,r=m6,y0=a6,d0=p8,Q1=64,w1=32,x1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:R8,crypto_sign:b$,crypto_sign_keypair:b1,crypto_sign_open:L7,crypto_secretbox_KEYBYTES:M$,crypto_secretbox_NONCEBYTES:m6,crypto_secretbox_ZEROBYTES:a6,crypto_secretbox_BOXZEROBYTES:p8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Q1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:x1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:q8,pack25519:m0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:I0,pow2523:V0,add:V6,set25519:A0,modL:M8,scalarmult:X9,scalarbase:j9};function c1(g,m){if(g.length!==M$)throw Error("bad key size");if(m.length!==m6)throw Error("bad nonce size")}function E$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(a6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+a6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(p8)},$.secretbox.open=function(g,m,h){G$(g,m,h),c1(h,m);var o=new Uint8Array(p8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+p8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(a6)},$.secretbox.keyLength=M$,$.secretbox.nonceLength=m6,$.secretbox.overheadLength=p8,$.scalarMult=function(g,m){if(G$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return p(h,g,m),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array($5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){G$(g,m),E$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(G$(g,m),m.length!==x1)throw Error("bad secret key size");var h=new Uint8Array(Q1+g.length);return b$(h,g,g.length,m),h},$.sign.open=function(g,m){if(G$(g,m),m.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=L7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(Q1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(G$(g,m,h),m.length!==Q1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var o=new Uint8Array(Q1+g.length),Y0=new Uint8Array(Q1+g.length),K0;for(K0=0;K0<Q1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+Q1]=g[K0];return L7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),m=new Uint8Array(x1);return b1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==x1)throw Error("bad secret key size");var m=new Uint8Array(w1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var m=new Uint8Array(w1),h=new Uint8Array(x1);for(var o=0;o<32;o++)h[o]=g[o];return b1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=x1,$.sign.seedLength=C1,$.sign.signatureLength=Q1,$.hash=function(g){G$(g);var m=new Uint8Array(X8);return R8(m,g,g.length),m},$.hash.hashLength=X8,$.verify=function(g,m){if(G$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];v$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];v$(K0)})}()})(typeof Fg<"u"&&X6Z?X6Z:globalThis.nacl=globalThis.nacl||{});QC=typeof Fg<"u"&&X6Z?X6Z:globalThis.nacl,$$4={fromSeed:QC.sign.keyPair.fromSeed,sign:QC.sign.detached,verify:QC.sign.detached.verify,randomBytes:QC.randomBytes,scalarBaseMultiply:QC.scalarMult.base,seal:QC.box,open:QC.box.open};G$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})($6||($6={}));JC=[120,107,118,49];Z$4($$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(qJ||(qJ={}))});function z$1($){try{$?.clear?.()}catch{}}async function rS$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=nS$($),W=E$1(J.sub),K=L$1(new TextEncoder().encode(Z)),w=dS$();try{let U=await iS$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:qJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(pS$(U,w))}finally{z$1(w),z$1(K),z$1(W)}}var oS$=O(()=>{tS$()});function N$4($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function aS$(){let $=new y1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=D1();if(!Y.natsTunnelPublicEnabled)return Z.json(j$1(),503);if(!Y.natsPublicUrl)return Z.json(j$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(j$1(),503)}let Q=RJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await rS$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:yS$(Q),userId:X,allowedConnectionTypes:N$4(Y.natsPublicUrl)})}return Z.json(gS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var j$1=()=>({error:"link session unavailable"});var sS$=O(()=>{l6();B8();hS$();oS$()});async function D$4($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function E$4($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new jN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function L$4($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},B$4),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=fn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function z$4($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<eS$){await N8($V$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<eS$){await N8($V$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var B$4=90000,O$4=15000,ZV$=()=>{let $=new y1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=g1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=ow({orgId:Y.id,virtualMcpId:Q,branch:J}),w=by({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await kY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&cW(w5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return iQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),iQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},O$4);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await D$4(F,w)){await E$4({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await L$4({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await z$4({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},eS$=60000,$V$=500;var GV$=O(()=>{l6();YC();TY();u5();WE0();xn();WV();M90();TX()});function P$4($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function A$4($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(j$4)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var j$4=1e4,T$4=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},XV$=()=>{let $=new y1;return $.use("*",T$4),$.get("/",async(Z)=>{let G=D1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await A$4(X,Y);return Z.json({apps:P$4(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var YV$=O(()=>{l6();B8()});import{z as v1}from"zod";function BK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function b$4($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function f$4($,Z,G){try{return JSON.parse($)}catch{throw new WV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function x$4($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:f$4(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function v$4($){let Z=$.map((G)=>{let X=G.function.parameters?FY(G.function.parameters):FY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function y$4($){if(!$)return;return{openai:{response_format:$}}}function g$4(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function QV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function JV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var I$4=256,R$4,q$4,M$4,k$4,S$4,V$4,C$4,_$4,WV$,KV$,wV$;var UV$=O(()=>{D6();l6();YC();R$4=v1.object({type:v1.literal("function"),function:v1.object({name:v1.string(),description:v1.string().optional(),parameters:v1.record(v1.string(),v1.unknown()).optional()})}),q$4=v1.object({id:v1.string(),type:v1.literal("function"),function:v1.object({name:v1.string(),arguments:v1.string()})}),M$4=v1.discriminatedUnion("role",[v1.object({role:v1.literal("system"),content:v1.string(),name:v1.string().optional()}),v1.object({role:v1.literal("user"),content:v1.union([v1.string(),v1.array(v1.union([v1.object({type:v1.literal("text"),text:v1.string()}),v1.object({type:v1.literal("image_url"),image_url:v1.object({url:v1.string(),detail:v1.string().optional()})})]))]),name:v1.string().optional()}),v1.object({role:v1.literal("assistant"),content:v1.string().nullable().optional(),name:v1.string().optional(),tool_calls:v1.array(q$4).optional()}),v1.object({role:v1.literal("tool"),content:v1.string(),tool_call_id:v1.string()})]),k$4=v1.object({type:v1.literal("text")}),S$4=v1.object({type:v1.literal("json_object")}),V$4=v1.object({type:v1.literal("json_schema"),json_schema:v1.object({name:v1.string(),description:v1.string().optional(),schema:v1.record(v1.string(),v1.unknown()),strict:v1.boolean().optional()})}),C$4=v1.union([k$4,S$4,V$4]),_$4=v1.object({model:v1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:v1.array(M$4),stream:v1.boolean().optional().default(!1),temperature:v1.number().min(0).max(2).optional(),max_tokens:v1.number().positive().optional(),top_p:v1.number().min(0).max(1).optional(),frequency_penalty:v1.number().min(-2).max(2).optional(),presence_penalty:v1.number().min(-2).max(2).optional(),stop:v1.union([v1.string(),v1.array(v1.string())]).optional(),tools:v1.array(R$4).optional(),tool_choice:v1.union([v1.literal("auto"),v1.literal("none"),v1.literal("required"),v1.object({type:v1.literal("function"),function:v1.object({name:v1.string()})})]).optional(),response_format:C$4.optional(),user:v1.string().optional()});WV$=class WV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};KV$=new y1;KV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(BK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(BK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(BK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=_$4.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(BK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=b$4(Q.model);if(!J)return $.json(BK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(BK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(BK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=x$4(Q.messages),H=Q.tools?v$4(Q.tools):void 0,N=y$4(Q.response_format),B=g$4(),D=Math.floor(Date.now()/1000);if(Q.stream)return iQ($,async(E)=>{let L=QV$(U,F,H,Q,N,$.req.raw.signal);try{let z=VQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=I$4)await M()}else if(S.type==="tool-call"){await M();let q=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:JV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=QV$(U,F,H,Q,N,$.req.raw.signal),L=await HN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:JV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(BK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(BK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(BK(Y.message,"server_error"),500)}});wV$=KV$});var HV$;var FV$=O(()=>{HV$={name:"decocms",version:"4.55.4",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function u$4(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??c$4}}var NV$,c$4="https://ph.studio.decocms.com",BV$;var OV$=O(()=>{l6();_b0();gN();rG();B8();Me0();FV$();NV$=new y1;NV$.get("/",($)=>{let Z={version:HV$.version,theme:h_1(),...cO().logo&&{logo:cO().logo},...fQ()&&{internalUrl:he()},...D1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!D1().firecrawlApiKey,auth:xT$(),posthog:u$4(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!fQ()&&D1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});BV$=NV$});function DV$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var EV$,d$4,l$4,LV$;var zV$=O(()=>{l6();S3();bv();Lb();EV$=new y1,d$4=["range","if-none-match","if-modified-since"],l$4=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];EV$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(my($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await mn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&k3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return DV$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of d$4){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of l$4){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),DV$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});LV$=EV$});var tt=_((KC)=>{var m$4=KC&&KC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),i$4=KC&&KC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))m$4(Z,$,G)};Object.defineProperty(KC,"__esModule",{value:!0});i$4(iX(),KC)});var AV$=_((jV$)=>{Object.defineProperty(jV$,"__esModule",{value:!0});jV$.version=void 0;jV$.version="3.4.0"});var RV$=_((OK)=>{var n$4=OK&&OK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(OK,"__esModule",{value:!0});OK.NodeTransport=OK.VERSION=void 0;OK.nodeResolveHost=s$4;var m4=tt(),p$4=u0("net"),P$1=u0("tls"),t$4=u0("path"),TV$=u0("fs"),r$4=n$4(u0("dns")),o$4=AV$();OK.VERSION=o$4.version;var a$4="nats.js";class IV${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=a$4,this.version=OK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,p$4.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,t$4.resolve)($),!(0,TV$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,TV$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,P$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,P$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof P$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}OK.NodeTransport=IV$;function s$4($){let Z=(0,m4.deferred)();return r$4.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var VV$=_((SV$)=>{Object.defineProperty(SV$,"__esModule",{value:!0});SV$.connect=e$4;var qV$=RV$(),MV$=tt(),kV$=tt();function e$4($={}){if((0,kV$.hasWsProtocol)($))return Promise.reject(kV$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,MV$.setTransportFactory)({factory:()=>{return new qV$.NodeTransport},dnsResolveFn:qV$.nodeResolveHost}),MV$.NatsConnectionImpl.connect($)}});var CV$=_((VU)=>{var Z84=VU&&VU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),G84=VU&&VU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))Z84(Z,$,G)};Object.defineProperty(VU,"__esModule",{value:!0});VU.connect=void 0;var X84=VV$();Object.defineProperty(VU,"connect",{enumerable:!0,get:function(){return X84.connect}});G84(tt(),VU)});function xV$($){let Z=$?.connectFn??W84,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:J84,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=cX(Q84,Y84,B-1,2,0.5);await N8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?_V$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=fV$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function W84($){return bV$.connect($)}var _V$,bV$,fV$,Y84=100,Q84=3000,J84=3000;var vV$=O(()=>{u5();_V$=k(hg(),1),bV$=k(CV$(),1),fV$=k(CB(),1)});function Hg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function A$1($,Z){return`${$}.${Z}`}class T$1{cache;constructor($){this.cache=Hg({ttlMs:$?.ttlMs??K84,maxSize:$?.maxSize??w84})}async get($,Z){return this.cache.get(A$1($,Z))??null}async set($,Z,G){this.cache.set(A$1($,Z),G)}async invalidate($,Z){this.cache.delete(A$1($,Z))}teardown(){this.cache.clear()}}var K84=600000,w84=5000;var yV$=()=>{};function jL0($,Z){return`${$}:${Z}`}function I$1($){let Z=Hg({ttlMs:$?.ttlMs??U84,maxSize:$?.maxSize??F84}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(gV$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(jL0(K,w))},set(K,w,U){Z.set(jL0(K,w),U)},invalidate(K,w){Z.delete(jL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(gV$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(jL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var gV$="studio.ai-provider-keys.invalidate",U84=30000,F84=5000;var hV$=()=>{};class R$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var cV$=($)=>{let Z;return()=>Z??=$()},q$1,M$1;var uV$=O(()=>{H5();q$1=cV$(()=>O8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),M$1=cV$(()=>O8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function L84(){return{name:nw,subjects:[`${rl0}.>`],storage:MJ.StorageType.File,max_age:B84,max_bytes:D84,max_msgs_per_subject:E84,discard:MJ.DiscardPolicy.Old,retention:MJ.RetentionPolicy.Limits,duplicate_window:O84,num_replicas:1}}class mV${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function dV$($){let Z=lV$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function A84($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,N84().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class k$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await MJ.jetstreamManager($),G=L84();try{await Z.streams.info(nw),await Z.streams.update(nw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(nw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=A84(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=t6$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=al0(w,{runId:Z}),H=performance.now()-U;if(q$1().record(H),M$1().add(1,{"org.id":X??"unknown"}),P84?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?dV$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),j84)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=al0(Z,{runId:$,dedup:G});if(q$1().record(performance.now()-Y),M$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:dV$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=p6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?MJ.DeliverPolicy.New:MJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=BN($),W;try{W=await(await X.consumers.get(nw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=Z90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(s50()).pipeThrough(e50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(nw,{filter:BN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var MJ,lV$,H84=($)=>{let Z;return()=>Z??=$()},N84,B84=86400000000000,O84=120000000000,D84=4294967296,E84=500000,z84,j84,P84;var iV$=O(()=>{el0();G90();sl0();H5();uV$();MJ=k(CB(),1),lV$=k(hg(),1),N84=H84(()=>O8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));z84=process.env.STREAM_ENCODE_TRACE==="1",j84=process.env.DECOPILOT_STREAM_TRACE==="1";P84=z84?new mV$:null});import{z as G8}from"zod";var nV$,pV$,DK,S$1,tV$,rV$,oV$,aV$,T84,sV$,eV$,$C$,ZC$,GC$,I84,XC$,B4Z,R84,q84=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},YC$=($)=>{return new TextEncoder().encode(JSON.stringify($))},QC$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?R84[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${q84(Y.error)}`);return Y.data};var JC$=O(()=>{nV$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),pV$=G8.array(G8.tuple([G8.string(),G8.string()])),DK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),S$1=G8.string().min(1),tV$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:DK,method:G8.string().min(1),url:G8.string().min(1),headers:pV$,replySubject:S$1,bodySubject:S$1.optional(),abortSubject:S$1,deadlineUnixMs:G8.number().int().nonnegative().optional()}),rV$=G8.object({type:G8.literal("request.chunk"),requestId:DK,seq:G8.number().int().nonnegative(),data:nV$}),oV$=G8.object({type:G8.literal("request.end"),requestId:DK,seq:G8.number().int().nonnegative()}),aV$=G8.object({type:G8.literal("request.error"),requestId:DK,code:G8.string().min(1),message:G8.string()}),T84=G8.union([rV$,oV$,aV$]),sV$=G8.object({type:G8.literal("response.ack"),requestId:DK}),eV$=G8.object({type:G8.literal("response.start"),requestId:DK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:pV$}),$C$=G8.object({type:G8.literal("response.chunk"),requestId:DK,seq:G8.number().int().nonnegative(),data:nV$}),ZC$=G8.object({type:G8.literal("response.end"),requestId:DK,seq:G8.number().int().nonnegative()}),GC$=G8.object({type:G8.literal("response.error"),requestId:DK,code:G8.string().min(1),message:G8.string()}),I84=G8.union([sV$,eV$,$C$,ZC$,GC$]),XC$=G8.object({type:G8.literal("abort"),requestId:DK,reason:G8.string().optional()}),B4Z=G8.union([tV$,T84,I84,XC$]),R84={"request.start":tV$,"request.chunk":rV$,"request.end":oV$,"request.error":aV$,"response.ack":sV$,"response.start":eV$,"response.chunk":$C$,"response.end":ZC$,"response.error":GC$,abort:XC$}});var M84=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},k84=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},S84=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},V84=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},WC$=($)=>{return M84(btoa(S84($)))},KC$=($)=>{return V84(atob(k84($)))},C84;var wC$=O(()=>{C84=class C84{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*u84($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class r84{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var _84=30000,b84=1000,f84=65536,pQ,x84=($)=>{return"connection"in $},v84=($)=>{let Z=x84($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??_84,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??b84,maxChunkBytes:Z.maxChunkBytes??f84,diagnostics:Z.diagnostics}},UC$=($)=>{return Array.from($.entries())},y84=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},g84=($,Z,G)=>{if(y84(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return UC$(G.headers);return UC$(G.headers)},FC$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},h84=()=>{return crypto.randomUUID().replaceAll("-","")},c84=($)=>{try{$?.unsubscribe()}catch{}},d84=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},l84=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},OB=($,Z,G)=>{$.publish(Z,YC$(G))},m84=($)=>{return $.type.startsWith("response.")},V$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},i84=($)=>{if($==="idle")return new pQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new pQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},HC$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(i84(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=QC$(W.value.data);if(!m84(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},n84=async($)=>{let Z=!1;while(!0){let G=await HC$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new pQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new pQ(G.value.code,G.value.message);throw new pQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},p84=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){OB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of u84(J,$.maxChunkBytes)){if(X)return;OB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:WC$(W)}),G++}}}catch(Q){if(X)return;OB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},t84=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await HC$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new pQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(KC$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new pQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){OB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},DB=($)=>{let Z=v84($);return d84(Z.maxChunkBytes),async(G,X)=>{let Y=xS$(G),Q=new Request(G,X),J=h84(),W=vS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new pQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,c84(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new pQ("tunnel_aborted",V$1(Q.signal));OB(Z.connection,W.abort,{type:"abort",requestId:J,reason:V$1(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new pQ("tunnel_aborted",V$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new pQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);OB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:g84(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};OB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)OB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?p84({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await n84({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(l84(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:FC$(P.headers)});return new Response(t84({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:FC$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var NC$=O(()=>{JC$();wC$();DL0();pQ=class pQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var PL0=O(()=>{NC$()});function BC$($){let Z=$.createFetch??o84,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return C$1;let Q=RJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return C$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return C$1}}}var C$1,o84=($,Z)=>DB({connection:$,firstFrameTimeoutMs:Z});var OC$=O(()=>{PL0();nt();C$1={online:!1,capabilities:[]}});async function*a84($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function DC$($){let Z=$.createFetch??((G)=>DB({connection:G,idleTimeoutMs:s84}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=RJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*a84(U)}}var s84=45000;var EC$=O(()=>{PL0();nt()});import{z as kJ}from"zod";function LC$($){return JSON.stringify($)}var l4Z;var zC$=O(()=>{l4Z=kJ.discriminatedUnion("type",[kJ.object({type:kJ.literal("cancel"),runId:kJ.string()}),kJ.object({type:kJ.literal("cancel_req"),reqId:kJ.string()}),kJ.object({type:kJ.literal("keep_alive")}),kJ.object({type:kJ.literal("shutdown")})])});function jC$($){let Z=$.createFetch??((G)=>DB({connection:G,idleTimeoutMs:e84}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=RJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function PC$($){let Z=$.createFetch??DB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=RJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:LC$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var e84=45000;var AC$=O(()=>{PL0();zC$();nt()});function AL0($,Z,G,X){if(!X)return!1;return $.emit(Z,M3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var TC$=O(()=>{c8()});class _$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as $64,rm as TL0}from"fs/promises";import{join as IL0}from"path";async function RL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-Z64),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await wC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await IC$($,Y,Z);else if(!Y.startsWith(".")){let Q=IL0($,Y),J=await wC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await IC$(Q,K,Z)}if((await wC(Q)).length===0)await TL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function IC$($,Z,G){let X=0,Y=IL0($,Z),Q=await wC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=IL0(Y,W),w=await wC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=IL0(K,F);await TL0(N,{recursive:!0,force:!0}),X++}}if((await wC(K)).length===0)await TL0(K,{recursive:!0,force:!0})}if((await wC(Y)).length===0)await TL0(Y,{recursive:!0,force:!0});return X}async function wC($){try{return(await $64($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var Z64=30;var b$1=()=>{};import{DBOS as f$1,SchedulerMode as G64}from"@dbos-inc/dbos-sdk";async function Y64(){let $=[rQ(),FC(),PK()],Z=0;for(let G of $)try{Z+=await RL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function Q64($,Z){await f$1.runStep(()=>Y64(),{name:"monitoringRetention"})}function qC$(){if(RC$)return;RC$=!0;let $=f$1.registerWorkflow(Q64,{name:"monitoringRetentionWorkflow"});f$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:X64,mode:G64.ExactlyOncePerIntervalWhenActive})}var X64="23 4 * * *",RC$=!1;var MC$=O(()=>{uX();b$1()});function kC$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await oH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Xu0($.db,Z,X.role);return Y.boundAuth=Gu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new RD(G,void 0,Y.boundAuth,X.role,"self"),_40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var SC$=O(()=>{qD();Ui()});function J64(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function K64(){for(let $ of W64)$()}function VC$($){let Z=[...x$1.logs,$];x$1={...x$1,logs:Z.length>500?Z.slice(-500):Z},K64()}function v$1(){return w64}var x$1,W64,w64=!1;var y$1=O(()=>{x$1=J64(),W64=new Set});import{EventEmitter as U64}from"events";var g$1;var CC$=O(()=>{y$1();g$1=new U64;g$1.on("request",($)=>{VC$($)})});function _C$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Ng(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>Ng(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${E})${s4.reset}`}else if(H.method)Q=`${s4.dim}${Ng(H.method)}${s4.reset}`}}catch{}}let W=Ng(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${Ng(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=H64(X),w=J?"\u25C0":"\u2190";if(!v$1())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=F64(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!v$1())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);g$1.emit("request",{method:X,path:Ng(Y),status:F,duration:U,timestamp:new Date})}}}var s4,F64=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},H64=($)=>{return s4[$]||s4.reset},Ng=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var bC$=O(()=>{y$1();CC$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as yC$}from"crypto";import{mkdir as N64,readdir as B64,rm as fC$,stat as gC$}from"fs/promises";import{join as c$1,relative as O64}from"path";import{z as P$}from"zod";function cC$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return c$1(D64,Z)}function uC$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function h$1($,Z){let G=cC$($),X=uC$(Z);return c$1(G,X)}function E64($,Z,G,X){let Y=D1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return yC$("sha256",Y).update(Q).digest("hex")}function vC$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=E64(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${uC$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function dC$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${yC$("md5","etag").update(X).digest("hex")}"`}async function lC$($,Z,G,X,Y){try{let Q=await B64($,{withFileTypes:!0});for(let J of Q){let W=c$1($,J.name),w=O64(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await lC$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await gC$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:dC$(W,U.mtime,U.size)})}catch{}}}}catch{}}function mC$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=cC$(X);await N64(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await lC$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=h$1(X,Q.key),W=await gC$(J);return{contentType:v01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:dC$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??xC$;return{url:vC$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??xC$;return{url:vC$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=h$1(X,Q.key);try{return await fC$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=h$1(X,K);try{await fC$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function u$1($,Z,G){let X=mC$(Z,G),Y=new ww({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:E5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new _Y({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),pW(Y,Q,$,"mcp:dev-assets")}async function iC$($,Z,G,X){let Q=mC$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var D64="./data/assets",xC$=3600,hC$,nC$;var pC$=O(()=>{B8();rn();l6();Du();yv();EG();vE0();hC$=new y1;hC$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return u$1($.req.raw,Z,X)});nC$=hC$});var tC$={};G6(tC$,{mountDevRoutes:()=>L64});function L64($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return u$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await iC$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",nC$);let G=new y1;G.use("*",mQ({mountPath:"/api/dev-assets"})),G.route("/",xE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var rC$=O(()=>{l6();S01();vE0();pC$()});var oC$=O(()=>{Ru0();qu0();WE()});var qL0=O(()=>{oC$()});var sC$={};G6(sC$,{streamAgent:()=>aC$,createDecopilotClient:()=>j64});async function z64($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (D6(),il0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function aC$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (D6(),il0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await z64(F.body);return Q({stream:H})}function j64($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return aC$(Y,X,W,Q,J)}}}import{z as hX}from"zod";function eC$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=P64.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:hX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:hX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var P64,c5Z,A64=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},l$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},ML0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},T64=($,Z,G)=>{let X=ML0($,Z,G);return new Proxy(ux.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},I64=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => sC$);return J(X,Z.token,$,Y,Q)}}},d$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>d$1(G,Z));if(typeof $==="object"){if(A64($))return I64($,Z);if(l$1($))return T64($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=d$1(Y,Z);return G}return $},$_$=($)=>{return d$1($.state,$)};var Bg=O(()=>{qL0();P64=new Map;c5Z=hX.object({id:hX.string(),title:hX.string(),capabilities:hX.object({vision:hX.boolean().optional(),text:hX.boolean().optional(),tools:hX.boolean().optional(),reasoning:hX.boolean().optional()}).passthrough().optional(),provider:hX.string().optional().nullable(),limits:hX.object({contextWindow:hX.number().optional(),maxOutputTokens:hX.number().optional()}).passthrough().optional()})});var R64,Z_$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},q64=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=Z_$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},G_$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=Z_$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??R64;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},X_$=($,Z,G)=>{let X=new Headers($.headers);return q64(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var Y_$=O(()=>{R64=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function Q_$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function M64($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function J_$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function W_$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function K_$($){return{handleProtectedResourceMetadata:(w)=>{let U=EK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=EK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=EK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),D=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=EK(new URL(`${U.origin}/oauth/callback`)),L=E.toString(),j=J_$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=EK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?W_$(H):null;if(N){let D=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=EK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??EK(new URL(`${U.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=J_$(z),P=EK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=EK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof m$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=W_$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of U.redirect_uris)if(!M64(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=Q_$(32),H=U.token_endpoint_auth_method!=="none"?Q_$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${EK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var m$1,EK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var i$1=O(()=>{m$1=class m$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as k64}from"async_hooks";var w_$,rt;var n$1=O(()=>{w_$=new k64,rt={getStore:()=>{return w_$.getStore()},run:($,Z,...G)=>w_$.run($,Z,...G)}});var F_$="SELF",SL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},H_$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},U_$="::",N_$=($)=>{let Z=$.indexOf(U_$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+U_$.length);return[G,X]},S64=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},B_$=($)=>{if(SL0($))return[];return Object.keys($)},V64=($,Z)=>{if(SL0($))return $.events;let G=$[Z];if(!G)return[];if(H_$(G))return G.events;return Object.keys(G)},kL0=($,Z,G)=>{if($===F_$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!l$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},C64=($,Z,G)=>{let X=Z;if(SL0($)){let Q=[];for(let J of $.events){let W=N_$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=kL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of B_$($)){let J=kL0(Q,X,G);if(!J)continue;let W=V64($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},_64=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},b64=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},f64=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},x64=async($,Z,G,X,Y)=>{let Q=X;if(SL0($)){let U=new Set;for(let H of $.events){let N=N_$(H);if(!N)continue;let[B,D]=N,E=kL0(B,Q,Y);if(!E)continue;U.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of B_$($)){let F=kL0(U,Q,Y);if(F)J.set(F,U)}let W=_64(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(H_$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=b64(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return f64(w)},O_$;var p$1=O(()=>{Bg();O_$={subscriptions:C64,execute:x64,parseCron:S64}});function v64($,Z){let G=ML0("self",{meshUrl:$,token:Z});return ux.forConnection(G)}function y64($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function D_$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=v64($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(y64(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var t$1=O(()=>{Bg();qL0()});import{z as KZ}from"zod";function CU($){return{...$,execute:(Z)=>{let G=ot(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var ot=($)=>{let Z=rt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},E_$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},g64=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?eC$(KZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[CU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:KZ.object({state:Z??KZ.unknown(),scopes:KZ.array(KZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:KZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:KZ.object({baseUrl:KZ.string(),org:KZ.string(),subjectConnectionId:KZ.string(),token:KZ.string()}).optional()}),outputSchema:KZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=E_$(J);await Y(J.runtimeContext.env,{createAgent:D_$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[CU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:Y50,outputSchema:Q50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=E_$(J);return O_$.execute($.handlers,J.context.events,W,K,w)}})]:[],CU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:KZ.object({}),outputSchema:KZ.object({stateSchema:KZ.unknown(),scopes:KZ.array(KZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},L_$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...g64({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:KZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=ot(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:KZ.object({}).shape},async(E)=>{let L=ot();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=ot(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new ww({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:E5,...B&&{instructions:B}}),L=await K(N);w(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await U(B),E=new _Y;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=rt.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=ot();return j({context:B,runtimeContext:P},P)}}};var VL0=O(()=>{Vu0();EG();Du();yv();Bg();p$1();n$1();t$1();p$1();t$1()});import{decodeJwt as z_$}from"jose";var h64=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},j_$=($)=>()=>{return{...$??{}}},c64=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=z_$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:j_$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=z_$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=j_$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=$_$(W),h64({env:Q,server:Z,url:X}),Q},u64,P_$=($)=>{let Z=L_$($),G=$.cors??u64,X=$.oauth,Y=X?K_$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return G_$(J,G??{});let w=c64({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await rt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return X_$(U,J,G??{});return U}}};var A_$=O(()=>{Bg();Y_$();i$1();i$1();n$1();VL0();VL0();Bg();qL0();u64={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as r$1}from"zod";function m64($,Z){let G=CU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ky,outputSchema:Sy,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=T_$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return T_$.set(w,F),F}}),X=CU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:JK,outputSchema:lV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=CU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:JK,outputSchema:r$1.object({versions:r$1.array(lV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=CU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:uD0,outputSchema:dD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=CU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:r$1.object({}),outputSchema:Vy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function I_$($){let Z=$.db,G=new df(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=m64(G,Q.id),W=P_$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var d64=3600000,l64=500,T_$;var R_$=O(()=>{A_$();VL0();Sy0();G9();T_$=Hg({ttlMs:d64,maxSize:l64,updateRecencyOnGet:!0})});import{sql as i64}from"kysely";import{randomUUID as q_$}from"crypto";import{z as n64}from"zod";async function t64($){let Z=new Date().toISOString(),G=q_$(),X=$4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:q_$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await i64`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function r64($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function o64($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",mV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):k_$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?M_$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:M_$,rateLimitWindow:p64,rateLimitMax:k_$}}async function a64($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function s64($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function S_$($){let{db:Z,db:G}=$,X=new lf(G),Y=new mf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await r64(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await o64(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await a64(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=gj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:n64.treeifyError(U.error)},400);let F=await s64(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await t64({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return m1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var M_$=!0,p64="hour",k_$=100;var V_$=O(()=>{I4();c8();Cy();Vy0();Cy0();G9()});var C_$={};G6(C_$,{createPublishRequestHandler:()=>S_$,createPublicMCPHandler:()=>I_$});var __$=O(()=>{R_$();V_$()});var sn0={};G6(sn0,{watchHandler:()=>y_$,getProxyDispatch:()=>G44,createApp:()=>F44});import{readFileSync as e64}from"fs";import{PrometheusSerializer as $44}from"@opentelemetry/exporter-prometheus";import{DBOS as Og}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as J44,oAuthProtectedResourceMetadata as W44}from"better-auth/plugins";async function Z44($){let Z=$.connect(),G;try{G=await Promise.race([Z,f_$(b_$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),f_$(b_$)]),G.release(),!0}catch{return G.release(!0),!1}}function f_$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function G44(){if(!o$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return o$1}async function X44($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${mC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function Y44($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function F44($={}){let Z=$.database??U6(),G=!1;JZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new T$1,J,W,K,w,U,F=null;if($.disableNats)J=I$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new on,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=xV$();let d=D1().natsCredsPath,l;if(d)try{l=e64(d,"utf8")}catch(z1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,z1)}F.init(D1().natsUrls,l?{creds:l}:void 0);let k0=yy0()?new kx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new tp0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=I$1({getConnection:()=>F.getConnection()}),W=new R$1({getConnection:()=>F.getConnection()}),K=new k$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=BC$({getConnection:()=>F.getConnection()}),U=jC$({getConnection:()=>F.getConnection()});let N1=PC$({getConnection:()=>F.getConnection()}),i0=W;W={start:(z1)=>i0.start(z1),broadcast:(z1)=>i0.broadcast(z1),publishControlFrame:(z1,R$)=>{N1.publishControlFrame(z1,R$).catch((E6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",E6)})},stop:()=>i0.stop()},OT$(F),F.onReady(()=>{k0?.init().catch((z1)=>{console.error("[McpListCache] Deferred init failed:",z1)}),v0.init().catch((z1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",z1)}),J.start(),ym1(()=>F.getConnection()),K.init().catch((z1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",z1)})})}if(Dg)await Dg();Sx0(X),rp0(Y);let N={storage:new sf(Z.db),sseHub:JZ},B=new wm0(N),D=new yl(Z.db),E=new _$1(D);E.start(),W.start((d)=>{D90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Dg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),gm1(),Y.teardown(),Sx0(null),rp0(null)};let L=new y1;if(L.use("*",qb0({enabled:(d)=>Pb(d,"debug")==="1"})),L.use("*",tL0),L.use("/*",S_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!D1().noTui)L.use("*",_C$());L.use("*",async(d,l)=>{if(await l(),jg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(_Z.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(_Z.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(_Z.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await Z44(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(_Z.METRICS,async(d)=>{try{let l=await sL0.collect(),k0=Q44.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${_Z.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!K44.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Og.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(_Z.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=A4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",BV$),L.route("/api/auth/custom",vT$),L.all("/api/auth/admin/*",hT$),L.all("/api/auth/*",async(d)=>{return await s8.handler(d.req.raw)});let z=Ea1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",tV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",tV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Fi),L.route("/",Pa1()),L.use("/oauth-proxy/:connectionId/*",tV),L.all("/oauth-proxy/:connectionId/*",x_$);let j=async(d)=>{let k0=await w44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",tV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await U44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=FT$({ttlMs:120000}),M=await Xa1({db:Z.db,auth:s8,encryption:{key:D1().encryptionKey},observability:{tracer:bU,meter:O8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});oH.set(M);let S=new Dw(D1().encryptionKey);yR1({db:Z.db,baseUrl:mJ()});let q=i80(Z.db),V=new Sl(Z.db),i=kC$({db:Z.db});lp0({storage:q,meshContextFactory:i}),Am0({meshContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ},prepareLinkWorkFn:_2$,workPublisher:U}),Em0({dispatchRunFn:V2$,meshContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:JZ}});let f=new sf(Z.db);Q4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await v_$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return AL0(JZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return AL0(JZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let N1=await f.markRunFailed(d,l,k0,v0);return AL0(JZ,l,d,N1),N1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,ON(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);JZ.emit(l,M3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{m1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:N1})=>{m1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),GJ$({meshContextFactory:i,systemDatabaseUrl:ef1(D1().databaseUrl,D1().databasePgSsl),streamBuffer:K}),qC$(),gR1();let v=async(d,l,k0)=>{let v0=await q.findById(d,l);if(!v0)throw Error("Automation not found");return np0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new ny(q,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>tn({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[rQ(),FC(),PK()];for(let d of a)RL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if(nL0(d.req.path))return l();let k0={measure:async(N1,i0)=>{JQ(d,N1);try{return await i0()}finally{GY(d,N1)}}},v0=await oH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),N8(30000)]).catch((z1)=>console.error("[mesh] revalidation cleanup error:",z1))}}),L.use("/api/:org/decopilot/*",rV),L.use("/api/:org/v1/*",rV),L.use("/api/:org/files/*",rV),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/")||k0.startsWith(`${ke0}/`))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let D0=new y1;D0.use("*",mQ({mountPath:"/api/org-sso"})),D0.route("/",GE0()),L.route("/api/org-sso",D0),L.get("/api/tools/management",(d)=>{return d.json({tools:kb0,grouped:hO()})}),L.use("/mcp/*",async(d,l)=>{JQ(d,"mcp");try{return await l()}finally{GY(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),k3()){let{mountDevRoutes:d}=(rC$(),vL0(tC$));d(L,W0)}let J0=new y1;J0.use("*",mQ({mountPath:"/mcp"})),J0.route("/",dN0()),L.route("/mcp",J0);let s=new y1;s.use("*",mQ({mountPath:"/mcp/self"})),s.route("/",FL0()),L.route("/mcp/self",s);let A0=new y1;A0.use("*",mQ({mountPath:"/mcp"})),A0.route("/",iN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{JQ(d,"llm_models");try{return await l()}finally{GY(d,"llm_models")}});let U0=M01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)o$1=DC$({getConnection:()=>F?.getConnection()??null});L.route("/api",aS$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await fS$(i0,s8.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",rV),L.route("/api",LV$);let f0=new y1;f0.use("*",mQ({mountPath:"/api"})),f0.route("/",HL0()),L.route("/api",f0),L.route("/api",wV$);let m0=new y1;m0.use("*",mQ({mountPath:"/api"})),m0.route("/",NL0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Cl(Z.db),n0=new y1;n0.use("*",mQ({mountPath:"/api"})),n0.route("/",_E0()),L.route("/api",n0),L.route("/api/deco-sites",$q$()),L.route("/api/deco-apps",XV$());let N0=new y1;N0.use("*",mQ({mountPath:"/api/deco-sites"})),N0.route("/",fE0()),L.route("/api/deco-sites",N0);let _0=new y1;_0.use("*",mQ({mountPath:"/api/vm-events"})),_0.route("/",ZV$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:H0}=await Promise.resolve().then(() => (__$(),C_$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=H0(Q0);L.use("/org/:orgRef/registry/publish-request",tV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",tV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0),L.route(ke0,cT$());let p=_S$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:JZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:k3(),mcpAuth:W0,oauthProxyHandler:x_$,watchHandler:y_$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",p),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(u2$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([JZ.stop(),Dg?Promise.resolve(Dg()).finally(()=>{Dg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await cY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await Zx1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Og.registerQueue(hY,{partitionQueue:!0,concurrency:cp0,minPollingIntervalMs:up0}),await Og.registerQueue(tQ,{partitionQueue:!0,concurrency:Pm0}),await Og.registerQueue(jK,{partitionQueue:!0,concurrency:Dm0}),await Og.registerQueue(_U,{partitionQueue:!0,concurrency:ZJ$}),await C01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Og.deleteQueue(d))),await dp0(Z.pool),qg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),hR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var v_$,b_$=5000,o$1=null,Dg=null,x_$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await oH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await xx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Hi(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=D1().baseUrl??B.origin;try{let i=new URL(q),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(iC1(J.connection_url))try{let V=await X44(Y,J.organization_id),i=Y44(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),i=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await vx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new C5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},y_$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return iQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!JZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{JZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),JZ.remove(X,J),U()})})})},Q44,K44,w44=()=>W44(s8),U44=()=>J44(s8);var en0=O(()=>{u5();B8();cR1();rG();Lb();c8();l6();u10();V_1();Mb0();CW();Ui();je0();wQ();H5();I4();Me0();uT$();_e0();h2$();k01();e3();b40();S01();d2$();V01();bS$();sS$();GV$();x01();YV$();lN0();Ni();UV$();nN0();X$1();OV$();zV$();G$1();Z$1();Wr();tu();vV$();QY();w60();bl();ap0();yV$();hV$();iV$();OC$();EC$();AC$();Um0();TC$();oy0();Zg0();MC$();v$0();b$1();uX();_01();Qn();Bm0();Wm0();v$0();T01();jy0();Py0();SC$();Ab();bC$();YC();je0();fv();E90();v_$=k(CB(),1);Q44=new $44,K44=new Set([hY,tQ,jK,_U])});var u_$={};G6(u_$,{resolveClientDir:()=>L44,resolveAssetPathWithTraversalCheck:()=>c_$,isPathWithinDirectory:()=>h_$,createAssetHandler:()=>z44});import{resolve as at,dirname as H44,join as N44,extname as B44,basename as O44,sep as g_$}from"path";function D44($,Z){if($===Z||O44($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${g_$}assets${g_$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function h_$($,Z){let G=at(Z),X=at($);return X===G||X.startsWith(G+"/")}function c_$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=at(Z,G);if(!h_$(X,Z))return null;return X}function L44($,Z="../client"){let G=new URL($),X=H44(G.pathname);return at(X,Z)}function z44($={}){let{env:Z="production",clientDir:G=E44,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=c_$({requestPath:W,clientDir:G});if(!K)return null;let w=N44(K,"index.html"),U=at(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(B44(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:D44(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var E44="./dist/client";var d_$=()=>{};var l_$={};G6(l_$,{tryUpgradePreviewWs:()=>q44,tryHandlePreviewHttp:()=>R44,previewWebSocketHandler:()=>M44,parsePreviewBaseDomain:()=>I44,isPreviewWsData:()=>CL0,extractHandleFromHost:()=>a$1});function A44($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function T44(){return new Response(P44,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function I44($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function a$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function R44($,Z){let G=a$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return et(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(JV)&&A44($))return T44();return Y.headers.delete(JV),Y}function et($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function CL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function q44($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=a$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return et(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return et(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return et(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return et(426,"upgrade failed");return}function st($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var j44=256,P44='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',M44;var m_$=O(()=>{tn0();M44={open($){let Z=$.data;if(!CL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),st($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{st($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{st($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!CL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=j44){st($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!CL0(Z))return;st($,Z,1000,"")}}});var t_$={};G6(t_$,{printBanner:()=>S44,bannerLines:()=>p_$,BANNER_LINES:()=>i_$,BANNER_GRADIENT:()=>n_$});function k44($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function p_$($){let Z=i_$.map((G,X)=>{let[Y,Q,J]=k44(n_$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function S44($){console.log("");for(let Z of p_$($))console.log(Z);console.log("")}var i_$,n_$;var r_$=O(()=>{i_$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],n_$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var a_$={};G6(a_$,{bootstrapDevLinkSession:()=>g44});import{existsSync as V44}from"fs";import{chmod as C44,mkdir as _44,rename as b44,writeFile as f44}from"fs/promises";import{dirname as x44,join as o_$}from"path";function v44($){return o_$($,"dev-link")}function y44($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return o_$(v44($),"session.json")}async function g44($,Z){let G=y44($),X=U6().db,Y=fQ()?await ln():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(V44(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await s8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await s8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await _44(x44(G),{recursive:!0});let W=`${G}.tmp`;return await f44(W,JSON.stringify(J,null,2),{mode:384}),await C44(W,384),await b44(W,G),{path:G,userSub:Y.id}}var s_$=O(()=>{wQ();CW();gN()});u5();var J81="4";function W81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:J81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}B8();H5();function Ff$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Gz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function d81(){let $=Ff$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Gz0($,"--cpu-prof-dir")??process.cwd(),name:Gz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Gz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Qz0();var Ur;function a81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=LB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Ur=setInterval(()=>void Z().catch(()=>{}),$),Ur.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Ur)clearInterval(Ur)}}import*as Bf$ from"bun:jsc";var{startSamplingProfiler:Of$,samplingProfilerStackTraces:Df$}=Bf$;function s81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Of$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Df$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function e81(){d81();let $=[a81(),o81(),s81()];return()=>{for(let Z of $)Z()}}import{existsSync as n44}from"fs";var gY=D1();c81();var{DBOS:$r,DBOSClient:h44}=await import("@dbos-inc/dbos-sdk");function Xb$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var c44=[hY,tQ,jK,_U],u44=gY.dispatchRole==="worker"?c44:gY.dispatchRole==="api"?[]:void 0;$r.setConfig(W81({systemDatabaseUrl:Xb$(gY.databaseUrl,gY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:gY.podName,listenQueues:u44}));var{createApp:d44}=await Promise.resolve().then(() => (en0(),sn0)),{isServerPath:l44}=await Promise.resolve().then(() => (Wr(),T81)),{createAssetHandler:m44,resolveClientDir:Yb$}=await Promise.resolve().then(() => (d_$(),u_$)),i44=gY.port,e_$=Yb$(import.meta.url,"../client"),p44=n44(e_$)?e_$:Yb$(import.meta.url,"../dist/client"),t44=m44({clientDir:p44,isServerPath:l44}),r44={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function o44($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(r44))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:a44,tryHandlePreviewHttp:s44,tryUpgradePreviewWs:e44,previewWebSocketHandler:s$1,isPreviewWsData:e$1}=await Promise.resolve().then(() => (m_$(),l_$)),{getOrInitSharedRunner:$54}=await Promise.resolve().then(() => (xn(),KQ$)),Qb$=a44(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),$b$={baseDomain:Qb$??"",getRunner:$54},_L0=await d44(),$81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Zb$=process.env.DBOS_CONDUCTOR_URL?.trim();await $r.launch({...$81?{conductorKey:$81}:{},...$81&&Zb$?{conductorURL:Zb$}:{}});console.log(`[dbos] application version: ${$r.applicationVersion}`);await _L0.initDbos();if(!gY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (r_$(),t_$));console.log("");for(let Z of $())console.log(Z)}var Z54=Bun.serve({idleTimeout:0,port:i44,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Qb$){let X=await e44($,Z,$b$);if(X===void 0)return;if(X)return X;let Y=await s44($,$b$);if(Y)return Y}let G=await t44($);if(G)return o44(G);return _L0.fetch($,{server:Z})},websocket:{open($){if(e$1($.data))s$1.open($)},message($,Z){if(e$1($.data))s$1.message($,Z)},close($){if(e$1($.data))s$1.close($)}},development:!1}),G54=e81();if(gY.localMode)Promise.resolve().then(() => (gN(),AN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (s_$(),a_$)),Y=gY.baseUrl??`http://localhost:${gY.port}`,Q=await X(gY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (gN(),AN0));Z()}catch{}});var Gb$=!1;async function X54($){let Z;try{Z=await h44.create({systemDatabaseUrl:Xb$(gY.databaseUrl,gY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:tQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:tQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function bL0($){if(Gb$)return;Gb$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{G54(),_L0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await N8(Q),await Z54.stop(!0);let J=$r.executorID;await $r.shutdown(),await X54(J),await _L0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>bL0("SIGTERM"));process.on("SIGINT",()=>bL0("SIGINT"));process.on("SIGHUP",()=>bL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),bL0("uncaughtException")});