npm - decocms - Versions diffs - 4.58.1 → 4.58.2 - Mend

decocms 4.58.1 → 4.58.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (227) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2655,7 +2655,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var I$1,UC,q$4,ZV$,T$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",k$4,d$,u$,Z6,$V$=24,FC,kJ;var KV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(I$1||(I$1={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function E(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function D(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=E(o,4*S0),b0[1+S0]=E(h,4*S0),b0[6+S0]=E(m,4*S0),b0[11+S0]=E(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-E(o,4*S0)|0,b0[6+S0]=b0[6+S0]-E(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function n(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return n(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),n(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function E0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),K1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)K1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(K1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return E0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),E0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function H0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){H0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function p(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),H0(l0,S0,l0),H0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),H0(l0,S0,K),_0(l0,l0,j0),H0(S0,S0,l0),H0(l0,j0,o0),H0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),K1=Y0.subarray(16);return X0($1,$1),H0(K1,K1,$1),m0(g,K1),0}function $0(g,m){return p(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return p(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function B1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function j1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function q$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function L6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function A4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function u5(g){return j1(q$(g,28),q$(g,34),q$(g,39))}function e(g){return j1(q$(g,14),q$(g,18),q$(g,41))}function W1(g){return j1(q$(g,1),q$(g,8),i0(g,7))}function a$(g){return j1(q$(g,19),q$(g,61),i0(g,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function j9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=D(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=D(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=B1(K0[7],e(K0[4]),L6(K0[4],K0[5],K0[6]),s$[P0],b0[P0%16]),Y0[7]=B1(l0,u5(K0[0]),A4(K0[0],K0[1],K0[2])),Y0[3]=B1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=B1(b0[S0],b0[(S0+9)%16],W1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=B1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var uG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=uG[K0];j9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),j9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function _6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),H0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),H0(o,o,j0),H0(Y0,g[3],m[3]),H0(Y0,Y0,U),H0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),H0(g[0],b0,l0),H0(g[1],S0,P0),H0(g[2],P0,l0),H0(g[3],b0,S0)}function $5(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function R5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),H0(h,m[0],Y0),H0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function Y9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,$5(g,m,o),_6(m,g),_6(g,g),$5(g,m,o)}function P9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),H0(h[3],F,H),Y9(g,h,m)}function f1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);q8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,P9(Y0,o),R5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*M8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*M8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*M8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function G6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;k8(g,m)}function f$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];q8(b0,g.subarray(32),h+32),G6(b0),P9(j0,b0),R5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];q8(K0,g,h+64),G6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return k8(g.subarray(32),S0),g0}function U8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),H0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),H0(P0,l0,b0),H0(h,P0,Y0),H0(h,h,K0),V0(h,h),H0(h,h,Y0),H0(h,h,K0),H0(h,h,K0),H0(g[0],h,K0),Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))H0(g[0],g[0],N);if(Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return H0(g[3],g[0],g[1]),0}function z7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(U8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(q8(b0,g,h),G6(b0),Y9(l0,P0,b0),P9(P0,m.subarray(32)),_6(l0,P0),R5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var k$=32,i6=24,s6=32,t8=16,Z5=32,C=32,u=32,c=32,I=32,r=i6,y0=s6,d0=t8,J1=64,U1=32,y1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:n,crypto_stream_salsa20:f,crypto_onetimeauth:E0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:f1,crypto_sign_open:z7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:J1,crypto_sign_PUBLICKEYBYTES:U1,crypto_sign_SECRETKEYBYTES:y1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:w,L:M8,pack25519:m0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:I0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Y9,scalarbase:P9};function u1(g,m){if(g.length!==k$)throw Error("bad key size");if(m.length!==i6)throw Error("bad nonce size")}function L$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function X$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){X$(g,m,h),u1(h,m);var o=new Uint8Array(s6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+s6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(t8)},$.secretbox.open=function(g,m,h){X$(g,m,h),u1(h,m);var o=new Uint8Array(t8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+t8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=t8,$.scalarMult=function(g,m){if(X$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var h=new Uint8Array(Z5);return p(h,g,m),h},$.scalarMult.base=function(g){if(X$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array(Z5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){X$(g,m),L$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(X$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(X$(g,m),m.length!==y1)throw Error("bad secret key size");var h=new Uint8Array(J1+g.length);return f$(h,g,g.length,m),h},$.sign.open=function(g,m){if(X$(g,m),m.length!==U1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=z7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(J1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(X$(g,m,h),m.length!==J1)throw Error("bad signature size");if(h.length!==U1)throw Error("bad public key size");var o=new Uint8Array(J1+g.length),Y0=new Uint8Array(J1+g.length),K0;for(K0=0;K0<J1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+J1]=g[K0];return z7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(U1),m=new Uint8Array(y1);return f1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(X$(g),g.length!==y1)throw Error("bad secret key size");var m=new Uint8Array(U1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(X$(g),g.length!==_1)throw Error("bad seed size");var m=new Uint8Array(U1),h=new Uint8Array(y1);for(var o=0;o<32;o++)h[o]=g[o];return f1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=U1,$.sign.secretKeyLength=y1,$.sign.seedLength=_1,$.sign.signatureLength=J1,$.hash=function(g){X$(g);var m=new Uint8Array(Y8);return q8(m,g,g.length),m},$.hash.hashLength=Y8,$.verify=function(g,m){if(X$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];y$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];y$(K0)})}()})(typeof Dg<"u"&&l6Z?l6Z:globalThis.nacl=globalThis.nacl||{});UC=typeof Dg<"u"&&l6Z?l6Z:globalThis.nacl,q$4={fromSeed:UC.sign.keyPair.fromSeed,sign:UC.sign.detached,verify:UC.sign.detached.verify,randomBytes:UC.randomBytes,scalarBaseMultiply:UC.scalarMult.base,seal:UC.box,open:UC.box.open};k$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));FC=[120,107,118,49];M$4(q$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(kJ||(kJ={}))});function S$1($){try{$?.clear?.()}catch{}}async function wV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=JV$($),W=M$1(J.sub),K=k$1(new TextEncoder().encode(Z)),w=GV$();try{let U=await QV$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:kJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(WV$(U,w))}finally{S$1(w),S$1(K),S$1(W)}}var UV$=O(()=>{KV$()});function h$4($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function FV$(){let $=new v1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(V$1(),503);if(!Y.natsPublicUrl)return Z.json(V$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(V$1(),503)}let Q=MJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await wV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:aS$(Q),userId:X,allowedConnectionTypes:h$4(Y.natsPublicUrl)})}return Z.json(sS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var V$1=()=>({error:"link session unavailable"});var HV$=O(()=>{I6();F8();eS$();UV$()});async function d$4($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function l$4($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new AN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function m$4($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},c$4),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=hn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function i$4($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<NV$){await O8(BV$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<NV$){await O8(BV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var c$4=90000,u$4=15000,OV$=()=>{let $=new v1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=h1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=aw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=hy({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let D=await SY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&uW(U5(U),X,J,H),E=!!B&&B.sandboxHandle===w;if(!F)return nQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),nQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},u$4);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await d$4(F,w)){await l$4({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await m$4({stream:D,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await i$4({stream:D,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},NV$=60000,BV$=500;var EV$=O(()=>{I6();wC();IY();d5();BD0();cn();HV();f90();IX()});function p$4($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function t$4($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(n$4)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var n$4=1e4,r$4=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},DV$=()=>{let $=new v1;return $.use("*",r$4),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await t$4(X,Y);return Z.json({apps:p$4(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var LV$=O(()=>{I6();F8()});import{z as g1}from"zod";function OK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function Q84($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function J84($,Z,G){try{return JSON.parse($)}catch{throw new PV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function W84($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:J84(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function K84($){let Z=$.map((G)=>{let X=G.function.parameters?HY(G.function.parameters):HY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function w84($){if(!$)return;return{openai:{response_format:$}}}function U84(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function zV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function jV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var o$4=256,a$4,s$4,e$4,$84,Z84,G84,X84,Y84,PV$,AV$,TV$;var IV$=O(()=>{D6();I6();wC();a$4=g1.object({type:g1.literal("function"),function:g1.object({name:g1.string(),description:g1.string().optional(),parameters:g1.record(g1.string(),g1.unknown()).optional()})}),s$4=g1.object({id:g1.string(),type:g1.literal("function"),function:g1.object({name:g1.string(),arguments:g1.string()})}),e$4=g1.discriminatedUnion("role",[g1.object({role:g1.literal("system"),content:g1.string(),name:g1.string().optional()}),g1.object({role:g1.literal("user"),content:g1.union([g1.string(),g1.array(g1.union([g1.object({type:g1.literal("text"),text:g1.string()}),g1.object({type:g1.literal("image_url"),image_url:g1.object({url:g1.string(),detail:g1.string().optional()})})]))]),name:g1.string().optional()}),g1.object({role:g1.literal("assistant"),content:g1.string().nullable().optional(),name:g1.string().optional(),tool_calls:g1.array(s$4).optional()}),g1.object({role:g1.literal("tool"),content:g1.string(),tool_call_id:g1.string()})]),$84=g1.object({type:g1.literal("text")}),Z84=g1.object({type:g1.literal("json_object")}),G84=g1.object({type:g1.literal("json_schema"),json_schema:g1.object({name:g1.string(),description:g1.string().optional(),schema:g1.record(g1.string(),g1.unknown()),strict:g1.boolean().optional()})}),X84=g1.union([$84,Z84,G84]),Y84=g1.object({model:g1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:g1.array(e$4),stream:g1.boolean().optional().default(!1),temperature:g1.number().min(0).max(2).optional(),max_tokens:g1.number().positive().optional(),top_p:g1.number().min(0).max(1).optional(),frequency_penalty:g1.number().min(-2).max(2).optional(),presence_penalty:g1.number().min(-2).max(2).optional(),stop:g1.union([g1.string(),g1.array(g1.string())]).optional(),tools:g1.array(a$4).optional(),tool_choice:g1.union([g1.literal("auto"),g1.literal("none"),g1.literal("required"),g1.object({type:g1.literal("function"),function:g1.object({name:g1.string()})})]).optional(),response_format:X84.optional(),user:g1.string().optional()});PV$=class PV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};AV$=new v1;AV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(OK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(OK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(OK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=Y84.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(OK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=Q84(Q.model);if(!J)return $.json(OK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(OK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(OK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=W84(Q.messages),H=Q.tools?K84(Q.tools):void 0,N=w84(Q.response_format),B=U84(),E=Math.floor(Date.now()/1000);if(Q.stream)return nQ($,async(D)=>{let L=zV$(U,F,H,Q,N,$.req.raw.signal);try{let z=CQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=o$4)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:jV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=zV$(U,F,H,Q,N,$.req.raw.signal),L=await BN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:jV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(OK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(OK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(OK(Y.message,"server_error"),500)}});TV$=AV$});var qV$;var RV$=O(()=>{qV$={name:"decocms",version:"4.58.1",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function N84(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??H84}}var MV$,H84="https://ph.studio.decocms.com",kV$;var SV$=O(()=>{I6();cb0();cN();NG();F8();ye0();RV$();MV$=new v1;MV$.get("/",($)=>{let Z={version:qV$.version,theme:a_1(),...lO().logo&&{logo:lO().logo},...xQ()&&{internalUrl:ie()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:oT$(),posthog:N84(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!xQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});kV$=MV$});function ML0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function CV$($){return(ML0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function _V$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(ML0($))}&sz=${Z}`}function VV$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function bV$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?VV$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):VV$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{z as X1}from"zod";var NC,B84,O84,E84,D84,fV$;var xV$=O(()=>{NC=X1.enum(["good","bad","neutral"]),B84=X1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},X1.object({kind:X1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:X1.coerce.string().optional(),tone:NC.optional(),muted:X1.boolean().optional(),delta:X1.coerce.string().optional(),deltaDir:X1.enum(["up","down","neutral"]).optional(),points:X1.array(X1.coerce.number()).optional(),label:X1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),O84=X1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},X1.array(B84)),E84={key:X1.coerce.string(),title:X1.coerce.string(),eyebrow:X1.coerce.string().optional(),headline:X1.coerce.string(),annotation:X1.coerce.string().optional(),methodology:X1.coerce.string().optional(),sources:X1.array(X1.object({name:X1.coerce.string(),logoUrl:X1.coerce.string()})).optional()},D84=X1.discriminatedUnion("template",[X1.object({template:X1.literal("cover"),score:X1.object({value:X1.coerce.number(),max:X1.coerce.number().optional(),grade:X1.coerce.string().optional(),label:X1.coerce.string().optional()}).optional(),brandImage:X1.coerce.string().optional(),screenshot:X1.coerce.string().optional(),mobileScreenshot:X1.coerce.string().optional()}),X1.object({template:X1.literal("cta"),ctaUrl:X1.coerce.string().optional(),ctaLabel:X1.coerce.string().optional(),bullets:X1.array(X1.coerce.string()).optional()}),X1.object({template:X1.literal("series"),points:X1.array(X1.coerce.number()).min(2),xLabels:X1.array(X1.coerce.string()).min(1),unit:X1.coerce.string().optional(),callout:X1.object({index:X1.coerce.number(),value:X1.coerce.string(),tone:NC.optional()})}),X1.object({template:X1.literal("threshold"),value:X1.coerce.string().default(""),metricLabel:X1.coerce.string().optional(),ratio:X1.coerce.number(),thresholdRatio:X1.coerce.number().optional(),thresholdLabel:X1.coerce.string().default(""),tone:NC.optional()}),X1.object({template:X1.literal("stats"),stats:X1.array(X1.object({value:X1.coerce.string(),label:X1.coerce.string(),tone:NC.optional()})).min(1)}),X1.object({template:X1.literal("bars"),items:X1.array(X1.object({value:X1.coerce.string(),label:X1.coerce.string(),ratio:X1.coerce.number(),tone:NC.optional()})).min(1)}),X1.object({template:X1.literal("gauges"),gauges:X1.array(X1.object({label:X1.coerce.string(),value:X1.coerce.string(),status:X1.enum(["good","warn","bad"]).catch("warn"),caption:X1.coerce.string().optional(),ratio:X1.coerce.number().optional()})).min(1)}),X1.object({template:X1.literal("checklist"),checks:X1.array(X1.object({label:X1.coerce.string(),status:X1.enum(["pass","fail","warn"]).catch("fail"),value:X1.coerce.string().optional()})).min(1)}),X1.object({template:X1.literal("table"),columns:X1.array(X1.object({label:X1.coerce.string(),align:X1.enum(["left","right"]).optional()})).min(1),rows:X1.array(O84).min(1),highlightRow:X1.coerce.number().optional()}),X1.object({template:X1.literal("products"),products:X1.array(X1.object({name:X1.coerce.string(),price:X1.coerce.string().optional(),image:X1.coerce.string().optional(),url:X1.coerce.string().optional()})).min(1)}),X1.object({template:X1.literal("list"),entries:X1.array(X1.object({label:X1.coerce.string(),severity:X1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:X1.coerce.number().optional()}),X1.object({template:X1.literal("keywords"),volumeLabel:X1.coerce.string().optional(),keywords:X1.array(X1.object({term:X1.coerce.string(),volume:X1.coerce.string(),position:X1.coerce.number().catch(0)})).min(1)}),X1.object({template:X1.literal("competitor"),metricLabel:X1.coerce.string().optional(),competitors:X1.array(X1.object({name:X1.coerce.string(),value:X1.coerce.string(),tone:NC.optional(),isYou:X1.boolean().optional()})).min(1)}),X1.object({template:X1.literal("scorecard"),rivalLabel:X1.coerce.string().optional(),dimensions:X1.array(X1.object({label:X1.coerce.string(),you:X1.coerce.string(),rival:X1.coerce.string().optional(),rivalName:X1.coerce.string().optional(),tone:NC.optional()})).min(1)})]),fV$=X1.object({...E84,template:D84})});function vV$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=fV$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var yV$=O(()=>{xV$()});function et($,Z){return fetch(`${XE({})}${$}`,Z)}async function C$1($,Z){let G=await et(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=vV$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var L84,Lg,gV$;var _$1=O(()=>{I6();rb();yV$();L84=new Set(["complete","errored","terminated","unknown"]),Lg=new v1;Lg.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await C$1(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});Lg.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=typeof Z.email==="string"&&Z.email.trim()?Z.email.trim():void 0,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await et("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${YE({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});Lg.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await et(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${YE({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:L84.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});Lg.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await et(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});Lg.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await et(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});gV$=Lg});import{join as z84}from"path";function CU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}async function j84($){let Z=ML0($),G=null;try{G=(await C$1($)).deck}catch{G=null}let X=G?.meta.brand?.trim()||CV$(Z),Y=G?.meta.faviconUrl||_V$(Z,128),J=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,W=G?.slides.find((H)=>{return H.template?.template==="cover"}),K=W?.template,w=typeof K?.score?.value==="number"?K.score.value:null,{title:U,description:F}=bV$({brand:X,domain:Z,score:w,verdict:W?.headline??null});return[`<title>${CU(U)}</title>`,`<meta name="description" content="${CU(F)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${CU(U)}" />`,`<meta property="og:description" content="${CU(F)}" />`,`<meta property="og:url" content="${CU(J)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${CU(U)}" />`,`<meta name="twitter:description" content="${CU(F)}" />`,`<link rel="canonical" href="${CU(J)}" />`,`<link rel="icon" href="${CU(Y)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var I$1,UC,q$4,ZV$,T$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",k$4,d$,u$,Z6,$V$=24,FC,kJ;var KV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(I$1||(I$1={}));(function($){var Z=function(g,m){this.hi=g|0,this.lo=m|0},G=function(g){var m,h=new Float64Array(16);if(g)for(m=0;m<g.length;m++)h[m]=g[m];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,m){return g<<m|g>>>32-m}function E(g,m){var h=g[m+3]&255;return h=h<<8|g[m+2]&255,h=h<<8|g[m+1]&255,h<<8|g[m+0]&255}function D(g,m){var h=g[m]<<24|g[m+1]<<16|g[m+2]<<8|g[m+3],o=g[m+4]<<24|g[m+5]<<16|g[m+6]<<8|g[m+7];return new Z(h,o)}function L(g,m,h){var o;for(o=0;o<4;o++)g[m+o]=h&255,h>>>=8}function z(g,m,h){g[m]=h.hi>>24&255,g[m+1]=h.hi>>16&255,g[m+2]=h.hi>>8&255,g[m+3]=h.hi&255,g[m+4]=h.lo>>24&255,g[m+5]=h.lo>>16&255,g[m+6]=h.lo>>8&255,g[m+7]=h.lo&255}function j(g,m,h,o,Y0){var K0,b0=0;for(K0=0;K0<Y0;K0++)b0|=g[m+K0]^h[o+K0];return(1&b0-1>>>8)-1}function P(g,m,h,o){return j(g,m,h,o,16)}function A(g,m,h,o){return j(g,m,h,o,32)}function M(g,m,h,o,Y0){var K0=new Uint32Array(16),b0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=E(o,4*S0),b0[1+S0]=E(h,4*S0),b0[6+S0]=E(m,4*S0),b0[11+S0]=E(h,16+4*S0);for(S0=0;S0<16;S0++)l0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)K0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=K0[g0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+l0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-E(o,4*S0)|0,b0[6+S0]=b0[6+S0]-E(m,4*S0)|0;for(S0=0;S0<4;S0++)L(g,4*S0,b0[5*S0]),L(g,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(g,4*S0,b0[S0]+l0[S0]|0)}function S(g,m,h,o){return M(g,m,h,o,!1),0}function q(g,m,h,o){return M(g,m,h,o,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function n(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=K0[j0];while(Y0>=64){S(P0,l0,b0,V);for(j0=0;j0<64;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(l0[j0]&255)|0,l0[j0]=S0&255,S0>>>=8;if(Y0-=64,m+=64,h)o+=64}if(Y0>0){S(P0,l0,b0,V);for(j0=0;j0<Y0;j0++)g[m+j0]=(h?h[o+j0]:0)^P0[j0]}return 0}function f(g,m,h,o,Y0){return n(g,m,null,0,h,o,Y0)}function v(g,m,h,o,Y0){var K0=new Uint8Array(32);return q(K0,o,Y0,V),f(g,m,h,o.subarray(16),K0)}function Z0(g,m,h,o,Y0,K0,b0){var l0=new Uint8Array(32);return q(l0,K0,b0,V),n(g,m,h,o,Y0,K0.subarray(16),l0)}function a(g,m){var h,o=0;for(h=0;h<17;h++)o=o+(g[h]+m[h]|0)|0,g[h]=o&255,o>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function E0(g,m,h,o,Y0,K0){var b0,l0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),K1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=K0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[o+P0];$1[P0]=1,o+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)K1[P0]=o0[P0];a(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(K1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=K0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[m+P0]=o0[P0];return 0}function W0(g,m,h,o,Y0,K0){var b0=new Uint8Array(16);return E0(b0,0,h,o,Y0,K0),P(g,m,b0,0)}function J0(g,m,h,o,Y0){var K0;if(h<32)return-1;Z0(g,0,m,0,h,o,Y0),E0(g,16,g,32,h-32,g);for(K0=0;K0<16;K0++)g[K0]=0;return 0}function s(g,m,h,o,Y0){var K0,b0=new Uint8Array(32);if(h<32)return-1;if(v(b0,0,32,o,Y0),W0(m,16,m,32,h-32,b0)!==0)return-1;Z0(g,0,m,0,h,o,Y0);for(K0=0;K0<32;K0++)g[K0]=0;return 0}function A0(g,m){var h;for(h=0;h<16;h++)g[h]=m[h]|0}function U0(g){var m,h;for(h=0;h<16;h++)g[h]+=65536,m=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=m-1+37*(m-1)*(h===15?1:0),g[h]-=m*65536}function f0(g,m,h){var o,Y0=~(h-1);for(var K0=0;K0<16;K0++)o=Y0&(g[K0]^m[K0]),g[K0]^=o,m[K0]^=o}function m0(g,m){var h,o,Y0,K0=G(),b0=G();for(h=0;h<16;h++)b0[h]=m[h];U0(b0),U0(b0),U0(b0);for(o=0;o<2;o++){K0[0]=b0[0]-65517;for(h=1;h<15;h++)K0[h]=b0[h]-65535-(K0[h-1]>>16&1),K0[h-1]&=65535;K0[15]=b0[15]-32767-(K0[14]>>16&1),Y0=K0[15]>>16&1,K0[14]&=65535,f0(b0,K0,1-Y0)}for(h=0;h<16;h++)g[2*h]=b0[h]&255,g[2*h+1]=b0[h]>>8}function x0(g,m){var h=new Uint8Array(32),o=new Uint8Array(32);return m0(h,g),m0(o,m),A(h,0,o,0)}function n0(g){var m=new Uint8Array(32);return m0(m,g),m[0]&1}function N0(g,m){var h;for(h=0;h<16;h++)g[h]=m[2*h]+(m[2*h+1]<<8);g[15]&=32767}function _0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]+h[o]|0}function I0(g,m,h){var o;for(o=0;o<16;o++)g[o]=m[o]-h[o]|0}function H0(g,m,h){var o,Y0,K0=new Float64Array(31);for(o=0;o<31;o++)K0[o]=0;for(o=0;o<16;o++)for(Y0=0;Y0<16;Y0++)K0[o+Y0]+=m[o]*h[Y0];for(o=0;o<15;o++)K0[o]+=38*K0[o+16];for(o=0;o<16;o++)g[o]=K0[o];U0(g),U0(g)}function Q0(g,m){H0(g,m,m)}function X0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=253;o>=0;o--)if(Q0(h,h),o!==2&&o!==4)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function V0(g,m){var h=G(),o;for(o=0;o<16;o++)h[o]=m[o];for(o=250;o>=0;o--)if(Q0(h,h),o!==1)H0(h,h,m);for(o=0;o<16;o++)g[o]=h[o]}function p(g,m,h){var o=new Uint8Array(32),Y0=new Float64Array(80),K0,b0,l0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)o[b0]=m[b0];o[31]=m[31]&127|64,o[0]&=248,N0(Y0,h);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=l0[b0]=S0[b0]=0;l0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)K0=o[b0>>>3]>>>(b0&7)&1,f0(l0,P0,K0),f0(S0,j0,K0),_0(g0,l0,S0),I0(l0,l0,S0),_0(S0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),H0(l0,S0,l0),H0(S0,P0,g0),_0(g0,l0,S0),I0(l0,l0,S0),Q0(P0,l0),I0(S0,j0,o0),H0(l0,S0,K),_0(l0,l0,j0),H0(S0,S0,l0),H0(l0,j0,o0),H0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,K0),f0(S0,j0,K0);for(b0=0;b0<16;b0++)Y0[b0+16]=l0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var $1=Y0.subarray(32),K1=Y0.subarray(16);return X0($1,$1),H0(K1,K1,$1),m0(g,K1),0}function $0(g,m){return p(g,m,Q)}function t0(g,m){return X(m,32),$0(g,m)}function R0(g,m,h){var o=new Uint8Array(32);return p(o,h,m),q(g,Y,o,V)}var d=J0,l=s;function k0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),d(g,m,h,o,b0)}function v0(g,m,h,o,Y0,K0){var b0=new Uint8Array(32);return R0(b0,Y0,K0),l(g,m,h,o,b0)}function B1(){var g=0,m=0,h=0,o=0,Y0=65535,K0,b0,l0;for(l0=0;l0<arguments.length;l0++)K0=arguments[l0].lo,b0=arguments[l0].hi,g+=K0&Y0,m+=K0>>>16,h+=b0&Y0,o+=b0>>>16;return m+=g>>>16,h+=m>>>16,o+=h>>>16,new Z(h&Y0|o<<16,g&Y0|m<<16)}function i0(g,m){return new Z(g.hi>>>m,g.lo>>>m|g.hi<<32-m)}function j1(){var g=0,m=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,m^=arguments[h].hi;return new Z(m,g)}function q$(g,m){var h,o,Y0=32-m;if(m<32)h=g.hi>>>m|g.lo<<Y0,o=g.lo>>>m|g.hi<<Y0;else if(m<64)h=g.lo>>>m|g.hi<<Y0,o=g.hi>>>m|g.lo<<Y0;return new Z(h,o)}function L6(g,m,h){var o=g.hi&m.hi^~g.hi&h.hi,Y0=g.lo&m.lo^~g.lo&h.lo;return new Z(o,Y0)}function A4(g,m,h){var o=g.hi&m.hi^g.hi&h.hi^m.hi&h.hi,Y0=g.lo&m.lo^g.lo&h.lo^m.lo&h.lo;return new Z(o,Y0)}function u5(g){return j1(q$(g,28),q$(g,34),q$(g,39))}function e(g){return j1(q$(g,14),q$(g,18),q$(g,41))}function W1(g){return j1(q$(g,1),q$(g,8),i0(g,7))}function a$(g){return j1(q$(g,19),q$(g,61),i0(g,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function j9(g,m,h){var o=[],Y0=[],K0=[],b0=[],l0,P0,S0;for(P0=0;P0<8;P0++)o[P0]=K0[P0]=D(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)b0[P0]=D(m,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=K0[S0];l0=B1(K0[7],e(K0[4]),L6(K0[4],K0[5],K0[6]),s$[P0],b0[P0%16]),Y0[7]=B1(l0,u5(K0[0]),A4(K0[0],K0[1],K0[2])),Y0[3]=B1(Y0[3],l0);for(S0=0;S0<8;S0++)K0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=B1(b0[S0],b0[(S0+9)%16],W1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)K0[P0]=B1(K0[P0],o[P0]),o[P0]=K0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,o[P0]);return h}var uG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(g,m,h){var o=new Uint8Array(64),Y0=new Uint8Array(256),K0,b0=h;for(K0=0;K0<64;K0++)o[K0]=uG[K0];j9(o,m,h),h%=128;for(K0=0;K0<256;K0++)Y0[K0]=0;for(K0=0;K0<h;K0++)Y0[K0]=m[b0-h+K0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(b0/536870912|0,b0<<3)),j9(o,Y0,h);for(K0=0;K0<64;K0++)g[K0]=o[K0];return 0}function _6(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G(),S0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,m[1],m[0]),H0(h,h,j0),_0(o,g[0],g[1]),_0(j0,m[0],m[1]),H0(o,o,j0),H0(Y0,g[3],m[3]),H0(Y0,Y0,U),H0(K0,g[2],m[2]),_0(K0,K0,K0),I0(b0,o,h),I0(l0,K0,Y0),_0(P0,K0,Y0),_0(S0,o,h),H0(g[0],b0,l0),H0(g[1],S0,P0),H0(g[2],P0,l0),H0(g[3],b0,S0)}function $5(g,m,h){var o;for(o=0;o<4;o++)f0(g[o],m[o],h)}function R5(g,m){var h=G(),o=G(),Y0=G();X0(Y0,m[2]),H0(h,m[0],Y0),H0(o,m[1],Y0),m0(g,o),g[31]^=n0(h)<<7}function Y9(g,m,h){var o,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)o=h[Y0/8|0]>>(Y0&7)&1,$5(g,m,o),_6(m,g),_6(g,g),$5(g,m,o)}function P9(g,m){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),H0(h[3],F,H),Y9(g,h,m)}function f1(g,m,h){var o=new Uint8Array(64),Y0=[G(),G(),G(),G()],K0;if(!h)X(m,32);q8(o,m,32),o[0]&=248,o[31]&=127,o[31]|=64,P9(Y0,o),R5(g,Y0);for(K0=0;K0<32;K0++)m[K0+32]=g[K0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(g,m){var h,o,Y0,K0;for(o=63;o>=32;--o){h=0;for(Y0=o-32,K0=o-12;Y0<K0;++Y0)m[Y0]+=h-16*m[o]*M8[Y0-(o-32)],h=Math.floor((m[Y0]+128)/256),m[Y0]-=h*256;m[Y0]+=h,m[o]=0}h=0;for(Y0=0;Y0<32;Y0++)m[Y0]+=h-(m[31]>>4)*M8[Y0],h=m[Y0]>>8,m[Y0]&=255;for(Y0=0;Y0<32;Y0++)m[Y0]-=h*M8[Y0];for(o=0;o<32;o++)m[o+1]+=m[o]>>8,g[o]=m[o]&255}function G6(g){var m=new Float64Array(64),h;for(h=0;h<64;h++)m[h]=g[h];for(h=0;h<64;h++)g[h]=0;k8(g,m)}function f$(g,m,h,o){var Y0=new Uint8Array(64),K0=new Uint8Array(64),b0=new Uint8Array(64),l0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(Y0,o,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=m[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];q8(b0,g.subarray(32),h+32),G6(b0),P9(j0,b0),R5(g,j0);for(l0=32;l0<64;l0++)g[l0]=o[l0];q8(K0,g,h+64),G6(K0);for(l0=0;l0<64;l0++)S0[l0]=0;for(l0=0;l0<32;l0++)S0[l0]=b0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)S0[l0+P0]+=K0[l0]*Y0[P0];return k8(g.subarray(32),S0),g0}function U8(g,m){var h=G(),o=G(),Y0=G(),K0=G(),b0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],m),Q0(Y0,g[1]),H0(K0,Y0,w),I0(Y0,Y0,g[2]),_0(K0,g[2],K0),Q0(b0,K0),Q0(l0,b0),H0(P0,l0,b0),H0(h,P0,Y0),H0(h,h,K0),V0(h,h),H0(h,h,Y0),H0(h,h,K0),H0(h,h,K0),H0(g[0],h,K0),Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))H0(g[0],g[0],N);if(Q0(o,g[0]),H0(o,o,K0),x0(o,Y0))return-1;if(n0(g[0])===m[31]>>7)I0(g[0],J,g[0]);return H0(g[3],g[0],g[1]),0}function z7(g,m,h,o){var Y0,K0=new Uint8Array(32),b0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(U8(P0,o))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=o[Y0];if(q8(b0,g,h),G6(b0),Y9(l0,P0,b0),P9(P0,m.subarray(32)),_6(l0,P0),R5(K0,l0),h-=64,A(m,0,K0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=m[Y0+64];return h}var k$=32,i6=24,s6=32,t8=16,Z5=32,C=32,u=32,c=32,I=32,r=i6,y0=s6,d0=t8,J1=64,U1=32,y1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:n,crypto_stream_salsa20:f,crypto_onetimeauth:E0,crypto_onetimeauth_verify:W0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:p,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:k0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:f1,crypto_sign_open:z7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:r,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:J1,crypto_sign_PUBLICKEYBYTES:U1,crypto_sign_SECRETKEYBYTES:y1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:w,L:M8,pack25519:m0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:I0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Y9,scalarbase:P9};function u1(g,m){if(g.length!==k$)throw Error("bad key size");if(m.length!==i6)throw Error("bad nonce size")}function L$(g,m){if(g.length!==u)throw Error("bad public key size");if(m.length!==c)throw Error("bad secret key size")}function X$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(g){for(var m=0;m<g.length;m++)g[m]=0}$.randomBytes=function(g){var m=new Uint8Array(g);return X(m,g),m},$.secretbox=function(g,m,h){X$(g,m,h),u1(h,m);var o=new Uint8Array(s6+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+s6]=g[K0];return J0(Y0,o,o.length,m,h),Y0.subarray(t8)},$.secretbox.open=function(g,m,h){X$(g,m,h),u1(h,m);var o=new Uint8Array(t8+g.length),Y0=new Uint8Array(o.length);for(var K0=0;K0<g.length;K0++)o[K0+t8]=g[K0];if(o.length<32)return null;if(s(Y0,o,o.length,m,h)!==0)return null;return Y0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=t8,$.scalarMult=function(g,m){if(X$(g,m),g.length!==C)throw Error("bad n size");if(m.length!==Z5)throw Error("bad p size");var h=new Uint8Array(Z5);return p(h,g,m),h},$.scalarMult.base=function(g){if(X$(g),g.length!==C)throw Error("bad n size");var m=new Uint8Array(Z5);return $0(m,g),m},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox(g,m,Y0)},$.box.before=function(g,m){X$(g,m),L$(g,m);var h=new Uint8Array(I);return R0(h,g,m),h},$.box.after=$.secretbox,$.box.open=function(g,m,h,o){var Y0=$.box.before(h,o);return $.secretbox.open(g,m,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),m=new Uint8Array(c);return t0(g,m),{publicKey:g,secretKey:m}},$.box.keyPair.fromSecretKey=function(g){if(X$(g),g.length!==c)throw Error("bad secret key size");var m=new Uint8Array(u);return $0(m,g),{publicKey:m,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=r,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,m){if(X$(g,m),m.length!==y1)throw Error("bad secret key size");var h=new Uint8Array(J1+g.length);return f$(h,g,g.length,m),h},$.sign.open=function(g,m){if(X$(g,m),m.length!==U1)throw Error("bad public key size");var h=new Uint8Array(g.length),o=z7(h,g,g.length,m);if(o<0)return null;var Y0=new Uint8Array(o);for(var K0=0;K0<Y0.length;K0++)Y0[K0]=h[K0];return Y0},$.sign.detached=function(g,m){var h=$.sign(g,m),o=new Uint8Array(J1);for(var Y0=0;Y0<o.length;Y0++)o[Y0]=h[Y0];return o},$.sign.detached.verify=function(g,m,h){if(X$(g,m,h),m.length!==J1)throw Error("bad signature size");if(h.length!==U1)throw Error("bad public key size");var o=new Uint8Array(J1+g.length),Y0=new Uint8Array(J1+g.length),K0;for(K0=0;K0<J1;K0++)o[K0]=m[K0];for(K0=0;K0<g.length;K0++)o[K0+J1]=g[K0];return z7(Y0,o,o.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(U1),m=new Uint8Array(y1);return f1(g,m),{publicKey:g,secretKey:m}},$.sign.keyPair.fromSecretKey=function(g){if(X$(g),g.length!==y1)throw Error("bad secret key size");var m=new Uint8Array(U1);for(var h=0;h<m.length;h++)m[h]=g[32+h];return{publicKey:m,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(X$(g),g.length!==_1)throw Error("bad seed size");var m=new Uint8Array(U1),h=new Uint8Array(y1);for(var o=0;o<32;o++)h[o]=g[o];return f1(m,h,!0),{publicKey:m,secretKey:h}},$.sign.publicKeyLength=U1,$.sign.secretKeyLength=y1,$.sign.seedLength=_1,$.sign.signatureLength=J1,$.hash=function(g){X$(g);var m=new Uint8Array(Y8);return q8(m,g,g.length),m},$.hash.hashLength=Y8,$.verify=function(g,m){if(X$(g,m),g.length===0||m.length===0)return!1;if(g.length!==m.length)return!1;return j(g,0,m,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var m=65536;$.setPRNG(function(h,o){var Y0,K0=new Uint8Array(o);for(Y0=0;Y0<o;Y0+=m)g.getRandomValues(K0.subarray(Y0,Y0+Math.min(o-Y0,m)));for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];y$(K0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,o){var Y0,K0=g.randomBytes(o);for(Y0=0;Y0<o;Y0++)h[Y0]=K0[Y0];y$(K0)})}()})(typeof Dg<"u"&&l6Z?l6Z:globalThis.nacl=globalThis.nacl||{});UC=typeof Dg<"u"&&l6Z?l6Z:globalThis.nacl,q$4={fromSeed:UC.sign.keyPair.fromSeed,sign:UC.sign.detached,verify:UC.sign.detached.verify,randomBytes:UC.randomBytes,scalarBaseMultiply:UC.scalarMult.base,seal:UC.box,open:UC.box.open};k$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));FC=[120,107,118,49];M$4(q$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(kJ||(kJ={}))});function S$1($){try{$?.clear?.()}catch{}}async function wV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=JV$($),W=M$1(J.sub),K=k$1(new TextEncoder().encode(Z)),w=GV$();try{let U=await QV$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:kJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(WV$(U,w))}finally{S$1(w),S$1(K),S$1(W)}}var UV$=O(()=>{KV$()});function h$4($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function FV$(){let $=new v1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(V$1(),503);if(!Y.natsPublicUrl)return Z.json(V$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(V$1(),503)}let Q=MJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await wV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:aS$(Q),userId:X,allowedConnectionTypes:h$4(Y.natsPublicUrl)})}return Z.json(sS$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var V$1=()=>({error:"link session unavailable"});var HV$=O(()=>{I6();F8();eS$();UV$()});async function d$4($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function l$4($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new AN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function m$4($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},c$4),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=hn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function i$4($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<NV$){await O8(BV$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<NV$){await O8(BV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var c$4=90000,u$4=15000,OV$=()=>{let $=new v1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=h1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=aw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=hy({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let D=await SY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&uW(U5(U),X,J,H),E=!!B&&B.sandboxHandle===w;if(!F)return nQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),nQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},u$4);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await d$4(F,w)){await l$4({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await m$4({stream:D,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await i$4({stream:D,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},NV$=60000,BV$=500;var EV$=O(()=>{I6();wC();IY();d5();BD0();cn();HV();f90();IX()});function p$4($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function t$4($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(n$4)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var n$4=1e4,r$4=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},DV$=()=>{let $=new v1;return $.use("*",r$4),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await t$4(X,Y);return Z.json({apps:p$4(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var LV$=O(()=>{I6();F8()});import{z as g1}from"zod";function OK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function Q84($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function J84($,Z,G){try{return JSON.parse($)}catch{throw new PV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function W84($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:J84(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function K84($){let Z=$.map((G)=>{let X=G.function.parameters?HY(G.function.parameters):HY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function w84($){if(!$)return;return{openai:{response_format:$}}}function U84(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function zV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function jV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var o$4=256,a$4,s$4,e$4,$84,Z84,G84,X84,Y84,PV$,AV$,TV$;var IV$=O(()=>{D6();I6();wC();a$4=g1.object({type:g1.literal("function"),function:g1.object({name:g1.string(),description:g1.string().optional(),parameters:g1.record(g1.string(),g1.unknown()).optional()})}),s$4=g1.object({id:g1.string(),type:g1.literal("function"),function:g1.object({name:g1.string(),arguments:g1.string()})}),e$4=g1.discriminatedUnion("role",[g1.object({role:g1.literal("system"),content:g1.string(),name:g1.string().optional()}),g1.object({role:g1.literal("user"),content:g1.union([g1.string(),g1.array(g1.union([g1.object({type:g1.literal("text"),text:g1.string()}),g1.object({type:g1.literal("image_url"),image_url:g1.object({url:g1.string(),detail:g1.string().optional()})})]))]),name:g1.string().optional()}),g1.object({role:g1.literal("assistant"),content:g1.string().nullable().optional(),name:g1.string().optional(),tool_calls:g1.array(s$4).optional()}),g1.object({role:g1.literal("tool"),content:g1.string(),tool_call_id:g1.string()})]),$84=g1.object({type:g1.literal("text")}),Z84=g1.object({type:g1.literal("json_object")}),G84=g1.object({type:g1.literal("json_schema"),json_schema:g1.object({name:g1.string(),description:g1.string().optional(),schema:g1.record(g1.string(),g1.unknown()),strict:g1.boolean().optional()})}),X84=g1.union([$84,Z84,G84]),Y84=g1.object({model:g1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:g1.array(e$4),stream:g1.boolean().optional().default(!1),temperature:g1.number().min(0).max(2).optional(),max_tokens:g1.number().positive().optional(),top_p:g1.number().min(0).max(1).optional(),frequency_penalty:g1.number().min(-2).max(2).optional(),presence_penalty:g1.number().min(-2).max(2).optional(),stop:g1.union([g1.string(),g1.array(g1.string())]).optional(),tools:g1.array(a$4).optional(),tool_choice:g1.union([g1.literal("auto"),g1.literal("none"),g1.literal("required"),g1.object({type:g1.literal("function"),function:g1.object({name:g1.string()})})]).optional(),response_format:X84.optional(),user:g1.string().optional()});PV$=class PV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};AV$=new v1;AV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(OK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(OK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(OK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=Y84.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(OK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=Q84(Q.model);if(!J)return $.json(OK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(OK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(OK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=W84(Q.messages),H=Q.tools?K84(Q.tools):void 0,N=w84(Q.response_format),B=U84(),E=Math.floor(Date.now()/1000);if(Q.stream)return nQ($,async(D)=>{let L=zV$(U,F,H,Q,N,$.req.raw.signal);try{let z=CQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=o$4)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:jV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=zV$(U,F,H,Q,N,$.req.raw.signal),L=await BN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:jV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(OK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(OK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(OK(Y.message,"server_error"),500)}});TV$=AV$});var qV$;var RV$=O(()=>{qV$={name:"decocms",version:"4.58.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function N84(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??H84}}var MV$,H84="https://ph.studio.decocms.com",kV$;var SV$=O(()=>{I6();cb0();cN();NG();F8();ye0();RV$();MV$=new v1;MV$.get("/",($)=>{let Z={version:qV$.version,theme:a_1(),...lO().logo&&{logo:lO().logo},...xQ()&&{internalUrl:ie()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:oT$(),posthog:N84(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!xQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});kV$=MV$});function ML0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function CV$($){return(ML0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function _V$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(ML0($))}&sz=${Z}`}function VV$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function bV$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?VV$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):VV$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{z as X1}from"zod";var NC,B84,O84,E84,D84,fV$;var xV$=O(()=>{NC=X1.enum(["good","bad","neutral"]),B84=X1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},X1.object({kind:X1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:X1.coerce.string().optional(),tone:NC.optional(),muted:X1.boolean().optional(),delta:X1.coerce.string().optional(),deltaDir:X1.enum(["up","down","neutral"]).optional(),points:X1.array(X1.coerce.number()).optional(),label:X1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),O84=X1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},X1.array(B84)),E84={key:X1.coerce.string(),title:X1.coerce.string(),eyebrow:X1.coerce.string().optional(),headline:X1.coerce.string(),annotation:X1.coerce.string().optional(),methodology:X1.coerce.string().optional(),sources:X1.array(X1.object({name:X1.coerce.string(),logoUrl:X1.coerce.string()})).optional()},D84=X1.discriminatedUnion("template",[X1.object({template:X1.literal("cover"),score:X1.object({value:X1.coerce.number(),max:X1.coerce.number().optional(),grade:X1.coerce.string().optional(),label:X1.coerce.string().optional()}).optional(),brandImage:X1.coerce.string().optional(),screenshot:X1.coerce.string().optional(),mobileScreenshot:X1.coerce.string().optional()}),X1.object({template:X1.literal("cta"),ctaUrl:X1.coerce.string().optional(),ctaLabel:X1.coerce.string().optional(),bullets:X1.array(X1.coerce.string()).optional()}),X1.object({template:X1.literal("series"),points:X1.array(X1.coerce.number()).min(2),xLabels:X1.array(X1.coerce.string()).min(1),unit:X1.coerce.string().optional(),callout:X1.object({index:X1.coerce.number(),value:X1.coerce.string(),tone:NC.optional()})}),X1.object({template:X1.literal("threshold"),value:X1.coerce.string().default(""),metricLabel:X1.coerce.string().optional(),ratio:X1.coerce.number(),thresholdRatio:X1.coerce.number().optional(),thresholdLabel:X1.coerce.string().default(""),tone:NC.optional()}),X1.object({template:X1.literal("stats"),stats:X1.array(X1.object({value:X1.coerce.string(),label:X1.coerce.string(),tone:NC.optional()})).min(1)}),X1.object({template:X1.literal("bars"),items:X1.array(X1.object({value:X1.coerce.string(),label:X1.coerce.string(),ratio:X1.coerce.number(),tone:NC.optional()})).min(1)}),X1.object({template:X1.literal("gauges"),gauges:X1.array(X1.object({label:X1.coerce.string(),value:X1.coerce.string(),status:X1.enum(["good","warn","bad"]).catch("warn"),caption:X1.coerce.string().optional(),ratio:X1.coerce.number().optional()})).min(1)}),X1.object({template:X1.literal("checklist"),checks:X1.array(X1.object({label:X1.coerce.string(),status:X1.enum(["pass","fail","warn"]).catch("fail"),value:X1.coerce.string().optional()})).min(1)}),X1.object({template:X1.literal("table"),columns:X1.array(X1.object({label:X1.coerce.string(),align:X1.enum(["left","right"]).optional()})).min(1),rows:X1.array(O84).min(1),highlightRow:X1.coerce.number().optional()}),X1.object({template:X1.literal("products"),products:X1.array(X1.object({name:X1.coerce.string(),price:X1.coerce.string().optional(),image:X1.coerce.string().optional(),url:X1.coerce.string().optional()})).min(1)}),X1.object({template:X1.literal("list"),entries:X1.array(X1.object({label:X1.coerce.string(),severity:X1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:X1.coerce.number().optional()}),X1.object({template:X1.literal("keywords"),volumeLabel:X1.coerce.string().optional(),keywords:X1.array(X1.object({term:X1.coerce.string(),volume:X1.coerce.string(),position:X1.coerce.number().catch(0)})).min(1)}),X1.object({template:X1.literal("competitor"),metricLabel:X1.coerce.string().optional(),competitors:X1.array(X1.object({name:X1.coerce.string(),value:X1.coerce.string(),tone:NC.optional(),isYou:X1.boolean().optional()})).min(1)}),X1.object({template:X1.literal("scorecard"),rivalLabel:X1.coerce.string().optional(),dimensions:X1.array(X1.object({label:X1.coerce.string(),you:X1.coerce.string(),rival:X1.coerce.string().optional(),rivalName:X1.coerce.string().optional(),tone:NC.optional()})).min(1)})]),fV$=X1.object({...E84,template:D84})});function vV$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=fV$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var yV$=O(()=>{xV$()});function et($,Z){return fetch(`${XE({})}${$}`,Z)}async function C$1($,Z){let G=await et(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=vV$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var L84,Lg,gV$;var _$1=O(()=>{I6();rb();yV$();L84=new Set(["complete","errored","terminated","unknown"]),Lg=new v1;Lg.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await C$1(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});Lg.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=typeof Z.email==="string"&&Z.email.trim()?Z.email.trim():void 0,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await et("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${YE({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});Lg.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await et(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${YE({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:L84.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});Lg.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await et(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});Lg.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await et(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});gV$=Lg});import{join as z84}from"path";function CU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}async function j84($){let Z=ML0($),G=null;try{G=(await C$1($)).deck}catch{G=null}let X=G?.meta.brand?.trim()||CV$(Z),Y=G?.meta.faviconUrl||_V$(Z,128),J=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,W=G?.slides.find((H)=>{return H.template?.template==="cover"}),K=W?.template,w=typeof K?.score?.value==="number"?K.score.value:null,{title:U,description:F}=bV$({brand:X,domain:Z,score:w,verdict:W?.headline??null});return[`<title>${CU(U)}</title>`,`<meta name="description" content="${CU(F)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${CU(U)}" />`,`<meta property="og:description" content="${CU(F)}" />`,`<meta property="og:url" content="${CU(J)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${CU(U)}" />`,`<meta name="twitter:description" content="${CU(F)}" />`,`<link rel="canonical" href="${CU(J)}" />`,`<link rel="icon" href="${CU(Y)}" sizes="any" />`].join(`
     `)}function P84($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function hV$($){let Z=new v1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?z84($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=await j84(X);return G.html(P84(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var cV$=O(()=>{I6();F8();_$1()});function uV$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var dV$,A84,T84,lV$;var mV$=O(()=>{I6();C3();hv();Tb();dV$=new v1,A84=["range","if-none-match","if-modified-since"],T84=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];dV$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(oy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new j$(401,{message:"Authentication required"})}if(!G)throw new j$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new j$(400,{message:"Missing file key"});let Y=await on(X,Z);if(!Y)throw new j$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&V3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new j$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return uV$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of A84){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new j$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new j$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of T84){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),uV$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});lV$=dV$});var $r=_((BC)=>{var I84=BC&&BC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),R84=BC&&BC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))I84(Z,$,G)};Object.defineProperty(BC,"__esModule",{value:!0});R84(nX(),BC)});var pV$=_((iV$)=>{Object.defineProperty(iV$,"__esModule",{value:!0});iV$.version=void 0;iV$.version="3.4.0"});var oV$=_((EK)=>{var q84=EK&&EK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(EK,"__esModule",{value:!0});EK.NodeTransport=EK.VERSION=void 0;EK.nodeResolveHost=_84;var i4=$r(),M84=u0("net"),b$1=u0("tls"),k84=u0("path"),tV$=u0("fs"),S84=q84(u0("dns")),V84=pV$();EK.VERSION=V84.version;var C84="nats.js";class rV${socket;version;lang;yields=[];signal=(0,i4.deferred)();closedNotification=(0,i4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=C84,this.version=EK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,i4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw i4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new i4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new i4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,i4.deferred)(),G,X=(0,M84.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,i4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=i4.DataBuffer.concat(...this.yields),Y=(0,i4.extractProtocolMessage)(X);if(Y!=="")try{let Q=i4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,i4.deferred)();try{if($=(0,k84.resolve)($),!(0,tV$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,tV$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,i4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,i4.deferred)();try{let Y=(0,b$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,i4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,i4.deferred)();try{let X=(0,b$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,i4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,i4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof b$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,i4.render)($)}`);let Z=(0,i4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}EK.NodeTransport=rV$;function _84($){let Z=(0,i4.deferred)();return S84.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var ZC$=_(($C$)=>{Object.defineProperty($C$,"__esModule",{value:!0});$C$.connect=b84;var aV$=oV$(),sV$=$r(),eV$=$r();function b84($={}){if((0,eV$.hasWsProtocol)($))return Promise.reject(eV$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,sV$.setTransportFactory)({factory:()=>{return new aV$.NodeTransport},dnsResolveFn:aV$.nodeResolveHost}),sV$.NatsConnectionImpl.connect($)}});var GC$=_((_U)=>{var x84=_U&&_U.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),v84=_U&&_U.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))x84(Z,$,G)};Object.defineProperty(_U,"__esModule",{value:!0});_U.connect=void 0;var y84=ZC$();Object.defineProperty(_U,"connect",{enumerable:!0,get:function(){return y84.connect}});v84($r(),_U)});function JC$($){let Z=$?.connectFn??u84,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:c84,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let E=uX(h84,g84,B-1,2,0.5);await O8(E)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?XC$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=QC$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function u84($){return YC$.connect($)}var XC$,YC$,QC$,g84=100,h84=3000,c84=3000;var WC$=O(()=>{d5();XC$=k(ng(),1),YC$=k(GC$(),1),QC$=k(fB(),1)});function zg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function f$1($,Z){return`${$}.${Z}`}class x$1{cache;constructor($){this.cache=zg({ttlMs:$?.ttlMs??d84,maxSize:$?.maxSize??l84})}async get($,Z){return this.cache.get(f$1($,Z))??null}async set($,Z,G){this.cache.set(f$1($,Z),G)}async invalidate($,Z){this.cache.delete(f$1($,Z))}teardown(){this.cache.clear()}}var d84=600000,l84=5000;var KC$=()=>{};function kL0($,Z){return`${$}:${Z}`}function v$1($){let Z=zg({ttlMs:$?.ttlMs??m84,maxSize:$?.maxSize??i84}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(wC$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(kL0(K,w))},set(K,w,U){Z.set(kL0(K,w),U)},invalidate(K,w){Z.delete(kL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(wC$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(kL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var wC$="studio.ai-provider-keys.invalidate",m84=30000,i84=5000;var UC$=()=>{};class y$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var FC$=($)=>{let Z;return()=>Z??=$()},g$1,h$1;var HC$=O(()=>{N5();g$1=FC$(()=>E8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),h$1=FC$(()=>E8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function s84(){return{name:pw,subjects:[`${Ym0}.>`],storage:SJ.StorageType.File,max_age:t84,max_bytes:o84,max_msgs_per_subject:a84,discard:SJ.DiscardPolicy.Old,retention:SJ.RetentionPolicy.Limits,duplicate_window:r84,num_replicas:1}}class OC${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function NC$($){let Z=BC$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function G64($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,p84().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class c$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await SJ.jetstreamManager($),G=s84();try{await Z.streams.info(pw),await Z.streams.update(pw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(pw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=G64(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=J4$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Jm0(w,{runId:Z}),H=performance.now()-U;if(g$1().record(H),h$1().add(1,{"org.id":X??"unknown"}),Z64?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?NC$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((E)=>setImmediate(E))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),$64)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Jm0(Z,{runId:$,dedup:G});if(g$1().record(performance.now()-Y),h$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:NC$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=Q4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?SJ.DeliverPolicy.New:SJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=EN($),W;try{W=await(await X.consumers.get(pw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(E){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",E?.message??E),null}let U=W90({messages:async function*(){try{for await(let E of W)yield{subject:E.subject,data:E.data,headers:E.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(Y90()).pipeThrough(Q90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(E){for(;;){let{done:D,value:L}=await U.read();if(D){B(),E.close();return}let z=L;if(z.kind==="done"){if(Q){B(),E.close();return}continue}E.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(pw,{filter:EN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var SJ,BC$,n84=($)=>{let Z;return()=>Z??=$()},p84,t84=86400000000000,r84=120000000000,o84=4294967296,a84=500000,e84,$64,Z64;var EC$=O(()=>{Km0();K90();Wm0();N5();HC$();SJ=k(fB(),1),BC$=k(ng(),1),p84=n84(()=>E8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));e84=process.env.STREAM_ENCODE_TRACE==="1",$64=process.env.DECOPILOT_STREAM_TRACE==="1";Z64=e84?new OC$:null});import{z as X8}from"zod";var DC$,LC$,DK,u$1,zC$,jC$,PC$,AC$,X64,TC$,IC$,RC$,qC$,MC$,Y64,kC$,O5Z,Q64,J64=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},SC$=($)=>{return new TextEncoder().encode(JSON.stringify($))},VC$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?Q64[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${J64(Y.error)}`);return Y.data};var CC$=O(()=>{DC$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),LC$=X8.array(X8.tuple([X8.string(),X8.string()])),DK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),u$1=X8.string().min(1),zC$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:DK,method:X8.string().min(1),url:X8.string().min(1),headers:LC$,replySubject:u$1,bodySubject:u$1.optional(),abortSubject:u$1,deadlineUnixMs:X8.number().int().nonnegative().optional()}),jC$=X8.object({type:X8.literal("request.chunk"),requestId:DK,seq:X8.number().int().nonnegative(),data:DC$}),PC$=X8.object({type:X8.literal("request.end"),requestId:DK,seq:X8.number().int().nonnegative()}),AC$=X8.object({type:X8.literal("request.error"),requestId:DK,code:X8.string().min(1),message:X8.string()}),X64=X8.union([jC$,PC$,AC$]),TC$=X8.object({type:X8.literal("response.ack"),requestId:DK}),IC$=X8.object({type:X8.literal("response.start"),requestId:DK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:LC$}),RC$=X8.object({type:X8.literal("response.chunk"),requestId:DK,seq:X8.number().int().nonnegative(),data:DC$}),qC$=X8.object({type:X8.literal("response.end"),requestId:DK,seq:X8.number().int().nonnegative()}),MC$=X8.object({type:X8.literal("response.error"),requestId:DK,code:X8.string().min(1),message:X8.string()}),Y64=X8.union([TC$,IC$,RC$,qC$,MC$]),kC$=X8.object({type:X8.literal("abort"),requestId:DK,reason:X8.string().optional()}),O5Z=X8.union([zC$,X64,Y64,kC$]),Q64={"request.start":zC$,"request.chunk":jC$,"request.end":PC$,"request.error":AC$,"response.ack":TC$,"response.start":IC$,"response.chunk":RC$,"response.end":qC$,"response.error":MC$,abort:kC$}});var W64=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},K64=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},w64=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},U64=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},_C$=($)=>{return W64(btoa(w64($)))},bC$=($)=>{return U64(atob(K64($)))},F64;var fC$=O(()=>{F64=class F64{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*P64($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class S64{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var H64=30000,N64=1000,B64=65536,tQ,O64=($)=>{return"connection"in $},E64=($)=>{let Z=O64($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??H64,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??N64,maxChunkBytes:Z.maxChunkBytes??B64,diagnostics:Z.diagnostics}},xC$=($)=>{return Array.from($.entries())},D64=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},L64=($,Z,G)=>{if(D64(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return xC$(G.headers);return xC$(G.headers)},vC$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},z64=()=>{return crypto.randomUUID().replaceAll("-","")},j64=($)=>{try{$?.unsubscribe()}catch{}},A64=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},T64=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},DB=($,Z,G)=>{$.publish(Z,SC$(G))},I64=($)=>{return $.type.startsWith("response.")},d$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},R64=($)=>{if($==="idle")return new tQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new tQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},yC$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(R64(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=VC$(W.value.data);if(!I64(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},q64=async($)=>{let Z=!1;while(!0){let G=await yC$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new tQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new tQ(G.value.code,G.value.message);throw new tQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},M64=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){DB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of P64(J,$.maxChunkBytes)){if(X)return;DB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:_C$(W)}),G++}}}catch(Q){if(X)return;DB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},k64=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await yC$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new tQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(bC$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new tQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){DB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},LB=($)=>{let Z=E64($);return A64(Z.maxChunkBytes),async(G,X)=>{let Y=rS$(G),Q=new Request(G,X),J=z64(),W=oS$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,E=!1,D=(P=new tQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,j64(F),Q.body&&!E)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new tQ("tunnel_aborted",d$1(Q.signal));DB(Z.connection,W.abort,{type:"abort",requestId:J,reason:d$1(Q.signal)}),K.abort(P),D(P)};if(Q.signal.aborted)throw new tQ("tunnel_aborted",d$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new tQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);DB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),D(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:L64(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};DB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!E)DB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(E)return;E=!0,(Q.body?M64({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await q64({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(T64(Q.method,P.status))return D(),new Response(null,{status:P.status,statusText:P.statusText,headers:vC$(P.headers)});return new Response(k64({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:D}),{status:P.status,statusText:P.statusText,headers:vC$(P.headers)})}catch(P){throw D(P instanceof Error?P:Error(String(P))),P}}};var gC$=O(()=>{CC$();fC$();TL0();tQ=class tQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var SL0=O(()=>{gC$()});function hC$($){let Z=$.createFetch??V64,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return l$1;let Q=MJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return l$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return l$1}}}var l$1,V64=($,Z)=>LB({connection:$,firstFrameTimeoutMs:Z});var cC$=O(()=>{SL0();at();l$1={online:!1,capabilities:[]}});async function*C64($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function uC$($){let Z=$.createFetch??((G)=>LB({connection:G,idleTimeoutMs:_64}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=MJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*C64(U)}}var _64=45000;var dC$=O(()=>{SL0();at()});import{z as VJ}from"zod";function lC$($){return JSON.stringify($)}var m5Z;var mC$=O(()=>{m5Z=VJ.discriminatedUnion("type",[VJ.object({type:VJ.literal("cancel"),runId:VJ.string()}),VJ.object({type:VJ.literal("cancel_req"),reqId:VJ.string()}),VJ.object({type:VJ.literal("keep_alive")}),VJ.object({type:VJ.literal("shutdown")})])});function iC$($){let Z=$.createFetch??((G)=>LB({connection:G,idleTimeoutMs:b64}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=MJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function nC$($){let Z=$.createFetch??LB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=MJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:lC$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var b64=45000;var pC$=O(()=>{SL0();mC$();at()});function VL0($,Z,G,X){if(!X)return!1;return $.emit(Z,S3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var tC$=O(()=>{u8()});class m$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as f64,rm as CL0}from"fs/promises";import{join as _L0}from"path";async function bL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-x64),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await OC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await rC$($,Y,Z);else if(!Y.startsWith(".")){let Q=_L0($,Y),J=await OC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await rC$(Q,K,Z)}if((await OC(Q)).length===0)await CL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function rC$($,Z,G){let X=0,Y=_L0($,Z),Q=await OC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=_L0(Y,W),w=await OC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=_L0(K,F);await CL0(N,{recursive:!0,force:!0}),X++}}if((await OC(K)).length===0)await CL0(K,{recursive:!0,force:!0})}if((await OC(Y)).length===0)await CL0(Y,{recursive:!0,force:!0});return X}async function OC($){try{return(await f64($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var x64=30;var i$1=()=>{};import{DBOS as n$1,SchedulerMode as v64}from"@dbos-inc/dbos-sdk";async function g64(){let $=[oQ(),DC(),AK()],Z=0;for(let G of $)try{Z+=await bL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function h64($,Z){await n$1.runStep(()=>g64(),{name:"monitoringRetention"})}function aC$(){if(oC$)return;oC$=!0;let $=n$1.registerWorkflow(h64,{name:"monitoringRetentionWorkflow"});n$1.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:y64,mode:v64.ExactlyOncePerIntervalWhenActive})}var y64="23 4 * * *",oC$=!1;var sC$=O(()=>{dX();i$1()});function eC$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await sH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Fu0($.db,Z,X.role);return Y.boundAuth=Uu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new VE(G,void 0,Y.boundAuth,X.role,"self"),y40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var $_$=O(()=>{CE();Oi()});function c64(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function d64(){for(let $ of u64)$()}function Z_$($){let Z=[...p$1.logs,$];p$1={...p$1,logs:Z.length>500?Z.slice(-500):Z},d64()}function t$1(){return l64}var p$1,u64,l64=!1;var r$1=O(()=>{p$1=c64(),u64=new Set});import{EventEmitter as m64}from"events";var o$1;var G_$=O(()=>{r$1();o$1=new m64;o$1.on("request",($)=>{Z_$($)})});function X_$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=jg(H.params.name),B=H.params.arguments||{},E=Object.keys(B).map((L)=>jg(L)),D=E.length>0?E.slice(0,3).join(",")+(E.length>3?"\u2026":""):"";Q=`${e4.tool}${N}${e4.dim}(${D})${e4.reset}`}else if(H.method)Q=`${e4.dim}${jg(H.method)}${e4.reset}`}}catch{}}let W=jg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${e4.mcp}${jg(U.slice(0,12))}\u2026${e4.reset}`}else if(Y==="/mcp")W=`${e4.mcp}/mcp${e4.reset}`;else if(Y==="/mcp/registry")W=`${e4.mcp}/mcp/registry${e4.reset}`;let K=n64(X),w=J?"\u25C0":"\u2190";if(!t$1())console.log(`${e4.dim}${w}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=i64(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!t$1())console.log(`${e4.dim}${B}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${e4.reset} ${e4.duration}${N}${e4.reset}`);o$1.emit("request",{method:X,path:jg(Y),status:F,duration:U,timestamp:new Date})}}}var e4,i64=($)=>{if($>=500)return e4.serverError;if($>=400)return e4.clientError;if($>=300)return e4.redirect;return e4.ok},n64=($)=>{return e4[$]||e4.reset},jg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Y_$=O(()=>{r$1();G_$();e4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as K_$}from"crypto";import{mkdir as p64,readdir as t64,rm as Q_$,stat as w_$}from"fs/promises";import{join as s$1,relative as r64}from"path";import{z as A$}from"zod";function F_$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return s$1(o64,Z)}function H_$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function a$1($,Z){let G=F_$($),X=H_$(Z);return s$1(G,X)}function a64($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return K_$("sha256",Y).update(Q).digest("hex")}function W_$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=a64(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${H_$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function N_$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${K_$("md5","etag").update(X).digest("hex")}"`}async function B_$($,Z,G,X,Y){try{let Q=await t64($,{withFileTypes:!0});for(let J of Q){let W=s$1($,J.name),w=r64(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await B_$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await w_$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:N_$(W,U.mtime,U.size)})}catch{}}}}catch{}}function O_$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:A$.object({prefix:A$.string().optional(),maxKeys:A$.number().optional().default(1000),continuationToken:A$.string().optional(),delimiter:A$.string().optional()}),outputSchema:A$.object({objects:A$.array(A$.object({key:A$.string(),size:A$.number(),lastModified:A$.string(),etag:A$.string()})),nextContinuationToken:A$.string().optional(),isTruncated:A$.boolean(),commonPrefixes:A$.array(A$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=F_$(X);await p64(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await B_$(U,U,J,K,F),F.objects.sort((D,L)=>D.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((D)=>D.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,E=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:E,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:A$.object({key:A$.string()}),outputSchema:A$.object({contentType:A$.string().optional(),contentLength:A$.number(),lastModified:A$.string(),etag:A$.string(),metadata:A$.record(A$.string(),A$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=a$1(X,Q.key),W=await w_$(J);return{contentType:n01(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:N_$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:A$.object({key:A$.string(),expiresIn:A$.number().optional()}),outputSchema:A$.object({url:A$.string(),expiresIn:A$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??J_$;return{url:W_$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:A$.object({key:A$.string(),expiresIn:A$.number().optional(),contentType:A$.string().optional()}),outputSchema:A$.object({url:A$.string(),expiresIn:A$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??J_$;return{url:W_$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:A$.object({key:A$.string()}),outputSchema:A$.object({success:A$.boolean(),key:A$.string()}),handler:async(Y)=>{let Q=Y,J=a$1(X,Q.key);try{return await Q_$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:A$.object({keys:A$.array(A$.string()).max(1000)}),outputSchema:A$.object({deleted:A$.array(A$.string()),errors:A$.array(A$.object({key:A$.string(),message:A$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=a$1(X,K);try{await Q_$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function e$1($,Z,G){let X=O_$(Z,G),Y=new Uw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:L5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:A$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:A$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new bY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),tW(Y,Q,$,"mcp:dev-assets")}async function E_$($,Z,G,X){let Q=O_$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var o64="./data/assets",J_$=3600,U_$,D_$;var L_$=O(()=>{F8();$p();I6();Tu();lv();zG();lD0();U_$=new v1;U_$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return e$1($.req.raw,Z,X)});D_$=U_$});var z_$={};X6(z_$,{mountDevRoutes:()=>s64});function s64($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return e$1(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await E_$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",D_$);let G=new v1;G.use("*",iQ({mountPath:"/api/dev-assets"})),G.route("/",dD0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var j_$=O(()=>{I6();h01();lD0();L_$()});var P_$=O(()=>{bu0();fu0();HD()});var fL0=O(()=>{P_$()});var T_$={};X6(T_$,{streamAgent:()=>A_$,createDecopilotClient:()=>$44});async function e64($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (D6(),$m0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function A_$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (D6(),$m0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let E=JSON.parse(N);if(E?.error)B=E.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await e64(F.body);return Q({stream:H})}function $44($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return A_$(Y,X,W,Q,J)}}}import{z as cX}from"zod";function I_$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=Z44.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:cX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:cX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var Z44,u9Z,G44=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},Z81=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},xL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},X44=($,Z,G)=>{let X=xL0($,Z,G);return new Proxy(px.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},Y44=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => T_$);return J(X,Z.token,$,Y,Q)}}},$81=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>$81(G,Z));if(typeof $==="object"){if(G44($))return Y44($,Z);if(Z81($))return X44($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=$81(Y,Z);return G}return $},R_$=($)=>{return $81($.state,$)};var Pg=O(()=>{fL0();Z44=new Map;u9Z=cX.object({id:cX.string(),title:cX.string(),capabilities:cX.object({vision:cX.boolean().optional(),text:cX.boolean().optional(),tools:cX.boolean().optional(),reasoning:cX.boolean().optional()}).passthrough().optional(),provider:cX.string().optional().nullable(),limits:cX.object({contextWindow:cX.number().optional(),maxOutputTokens:cX.number().optional()}).passthrough().optional()})});var Q44,q_$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},J44=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=q_$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},M_$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=q_$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??Q44;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},k_$=($,Z,G)=>{let X=new Headers($.headers);return J44(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var S_$=O(()=>{Q44=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function V_$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function W44($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function C_$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function __$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function b_$($){return{handleProtectedResourceMetadata:(w)=>{let U=LK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=LK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=LK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),E=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let D=LK(new URL(`${U.origin}/oauth/callback`)),L=D.toString(),j=C_$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:E??void 0,oauthCallbackUri:L});D.searchParams.set("state",j);let P=$.authorizationUrl(D.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=LK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?__$(H):null;if(N){let E=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let D=LK(new URL(B.redirectUri));if(D.searchParams.set("error",N),D.searchParams.set("error_description",E),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}return Response.json({error:N,error_description:E},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let E=B.oauthCallbackUri??LK(new URL(`${U.origin}/oauth/callback`)).toString(),D={code:F,redirect_uri:E},L=await $.exchangeCode(D),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=C_$(z),P=LK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(E){console.error("OAuth callback error:",E);let D=LK(new URL(B.redirectUri));if(D.searchParams.set("error","server_error"),D.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:E}=F;if(B==="refresh_token"){if(typeof E!=="string"||!E)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(E)}catch(P){if(P instanceof G81)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let D=__$(H);if(!D||!D.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(D.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(D.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==D.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:D.accessToken,token_type:D.tokenType};if(D.refreshToken)L.refresh_token=D.refreshToken;if(D.expiresIn!==void 0)L.expires_in=D.expiresIn;if(D.scope)L.scope=D.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let E of U.redirect_uris)if(!W44(E))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${E}`},{status:400});let F=V_$(32),H=U.token_endpoint_auth_method!=="none"?V_$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${LK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var G81,LK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var X81=O(()=>{G81=class G81 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as K44}from"async_hooks";var f_$,Zr;var Y81=O(()=>{f_$=new K44,Zr={getStore:()=>{return f_$.getStore()},run:($,Z,...G)=>f_$.run($,Z,...G)}});var v_$="SELF",yL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},y_$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},x_$="::",g_$=($)=>{let Z=$.indexOf(x_$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+x_$.length);return[G,X]},w44=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},h_$=($)=>{if(yL0($))return[];return Object.keys($)},U44=($,Z)=>{if(yL0($))return $.events;let G=$[Z];if(!G)return[];if(y_$(G))return G.events;return Object.keys(G)},vL0=($,Z,G)=>{if($===v_$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!Z81(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},F44=($,Z,G)=>{let X=Z;if(yL0($)){let Q=[];for(let J of $.events){let W=g_$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=vL0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of h_$($)){let J=vL0(Q,X,G);if(!J)continue;let W=U44($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},H44=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},N44=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},B44=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},O44=async($,Z,G,X,Y)=>{let Q=X;if(yL0($)){let U=new Set;for(let H of $.events){let N=g_$(H);if(!N)continue;let[B,E]=N,D=vL0(B,Q,Y);if(!D)continue;U.add(`${D}:${E}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of h_$($)){let F=vL0(U,Q,Y);if(F)J.set(F,U)}let W=H44(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(y_$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(D){let L={};for(let z of F)L[z.id]={success:!1,error:D instanceof Error?D.message:String(D)};return{results:L}}})());continue}let B=N,E=N44(F);for(let[D,L]of E){let z=B[D];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return B44(w)},c_$;var Q81=O(()=>{Pg();c_$={subscriptions:F44,execute:O44,parseCron:w44}});function E44($,Z){let G=xL0("self",{meshUrl:$,token:Z});return px.forConnection(G)}function D44($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function u_$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=E44($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(D44(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var J81=O(()=>{Pg();fL0()});import{z as wZ}from"zod";function bU($){return{...$,execute:(Z)=>{let G=Gr(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var Gr=($)=>{let Z=Zr.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},d_$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},L44=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?I_$(wZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[bU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:wZ.object({state:Z??wZ.unknown(),scopes:wZ.array(wZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:wZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:wZ.object({baseUrl:wZ.string(),org:wZ.string(),subjectConnectionId:wZ.string(),token:wZ.string()}).optional()}),outputSchema:wZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=d_$(J);await Y(J.runtimeContext.env,{createAgent:u_$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[bU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:w50,outputSchema:U50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=d_$(J);return c_$.execute($.handlers,J.context.events,W,K,w)}})]:[],bU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:wZ.object({}),outputSchema:wZ.object({stateSchema:wZ.unknown(),scopes:wZ.array(wZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},l_$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(E)=>{if(J(E))return[E];Q();let D=await E(B);if(Array.isArray(D))return D;return[D]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...L44({...$}));let E;if(typeof $.prompts==="function")Q(),E=await $.prompts(N);else E=await W($.prompts,N);let D;if(typeof $.resources==="function")Q(),D=await $.resources(N);else D=await W($.resources,N);let L={tools:B,prompts:E,resources:D};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let E of B.tools)N.registerTool(E.id,{_meta:E._meta,title:E.title,description:E.description,annotations:E.annotations,inputSchema:E.inputSchema&&"shape"in E.inputSchema?E.inputSchema:wZ.object({}),outputSchema:E.outputSchema&&typeof E.outputSchema==="object"&&"shape"in E.outputSchema?E.outputSchema:void 0},async(D)=>{let L=Gr(),z=await E.execute({context:D,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let E of B.prompts)N.registerPrompt(E.name,{title:E.title,description:E.description,argsSchema:E.argsSchema?E.argsSchema:wZ.object({}).shape},async(D)=>{let L=Gr();return await E.execute({args:D,runtimeContext:L},L)});for(let E of B.resources)N.resource(E.name,E.uri,{description:E.description,mimeType:E.mimeType},async(D)=>{let L=Gr(),z=await E.read({uri:D,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...E}=$.serverInfo??{},D=new Uw({...E,name:E.name??"@deco/mcp-api",version:E.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:L5,...B&&{instructions:B}}),L=await K(N);w(D,L);let z="tools/list",j=D.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:D,...L}};return{fetch:async(N,B)=>{let{server:E}=await U(B),D=new bY;await E.connect(D);let L=()=>{try{D.close?.()}catch{}try{E.close?.()}catch{}};try{let z=await D.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let E=Zr.getStore();if(!E)throw Error("Missing state, did you forget to call State.bind?");let D=E?.env,{tools:L}=await K(D),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=Gr();return j({context:B,runtimeContext:P},P)}}};var gL0=O(()=>{gu0();zG();Tu();lv();Pg();Q81();Y81();J81();Q81();J81()});import{decodeJwt as m_$}from"jose";var z44=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},i_$=($)=>()=>{return{...$??{}}},j44=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=m_$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:i_$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=m_$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=i_$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=R_$(W),z44({env:Q,server:Z,url:X}),Q},P44,n_$=($)=>{let Z=l_$($),G=$.cors??P44,X=$.oauth,Y=X?b_$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return M_$(J,G??{});let w=j44({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await Zr.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return k_$(U,J,G??{});return U}}};var p_$=O(()=>{Pg();S_$();X81();X81();Y81();gL0();gL0();Pg();fL0();P44={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as W81}from"zod";function I44($,Z){let G=bU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:fy,outputSchema:xy,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=t_$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return t_$.set(w,F),F}}),X=bU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:WK,outputSchema:tV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=bU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:WK,outputSchema:W81.object({versions:W81.array(tV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=bU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:tE0,outputSchema:rE0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=bU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:W81.object({}),outputSchema:vy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function r_$($){let Z=$.db,G=new rf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=I44(G,Q.id),W=n_$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,E)=>{F.searchParams.set(E,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var A44=3600000,T44=500,t_$;var o_$=O(()=>{p_$();gL0();yy0();X9();t_$=zg({ttlMs:A44,maxSize:T44,updateRecencyOnGet:!0})});import{sql as R44}from"kysely";import{randomUUID as a_$}from"crypto";import{z as q44}from"zod";async function k44($){let Z=new Date().toISOString(),G=a_$(),X=Z4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:a_$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await R44`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function S44($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function V44($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",rV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):e_$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?s_$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:s_$,rateLimitWindow:M44,rateLimitMax:e_$}}async function C44($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function _44($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function $b$($){let{db:Z,db:G}=$,X=new of(G),Y=new af(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await S44(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await V44(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await C44(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=aj$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:q44.treeifyError(U.error)},400);let F=await _44(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await k44({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var s_$=!0,M44="hour",e_$=100;var Zb$=O(()=>{R4();u8();yy();gy0();hy0();X9()});var Gb$={};X6(Gb$,{createPublishRequestHandler:()=>$b$,createPublicMCPHandler:()=>r_$});var Xb$=O(()=>{o_$();Zb$()});var Kp0={};X6(Kp0,{watchHandler:()=>Kb$,getProxyDispatch:()=>v44,createApp:()=>i44});import{readFileSync as b44}from"fs";import{PrometheusSerializer as f44}from"@opentelemetry/exporter-prometheus";import{DBOS as Ag}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as c44,oAuthProtectedResourceMetadata as u44}from"better-auth/plugins";async function x44($){let Z=$.connect(),G;try{G=await Promise.race([Z,Qb$(Yb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),Qb$(Yb$)]),G.release(),!0}catch{return G.release(!0),!1}}function Qb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function v44(){if(!K81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return K81}async function y44($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${G_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function g44($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function i44($={}){let Z=$.database??F6(),G=!1;WZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new x$1,J,W,K,w,U,F=null;if($.disableNats)J=v$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Zp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let l=d.getReader();try{while(!0){let{done:k0}=await l.read();if(k0)break}}catch{}finally{l.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=JC$();let d=O1().natsCredsPath,l;if(d)try{l=b44(d,"utf8")}catch(j1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,j1)}F.init(O1().natsUrls,l?{creds:l}:void 0);let k0=iy0()?new vx0({getJetStream:()=>F.getJetStream()}):null;k0?.init().catch(()=>{}),X=k0;let v0=new Yt0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=v$1({getConnection:()=>F.getConnection()}),W=new y$1({getConnection:()=>F.getConnection()}),K=new c$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=hC$({getConnection:()=>F.getConnection()}),U=iC$({getConnection:()=>F.getConnection()});let B1=nC$({getConnection:()=>F.getConnection()}),i0=W;W={start:(j1)=>i0.start(j1),broadcast:(j1)=>i0.broadcast(j1),publishControlFrame:(j1,q$)=>{B1.publishControlFrame(j1,q$).catch((L6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",L6)})},stop:()=>i0.stop()},VT$(F),F.onReady(()=>{k0?.init().catch((j1)=>{console.error("[McpListCache] Deferred init failed:",j1)}),v0.init().catch((j1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",j1)}),J.start(),rm1(()=>F.getConnection()),K.init().catch((j1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",j1)})})}if(Tg)await Tg();yx0(X),Qt0(Y);let N={storage:new Yx(Z.db),sseHub:WZ},B=new Lm0(N),E=new dl(Z.db),D=new m$1(E);D.start(),W.start((d)=>{A90(d),B.execute({type:"CANCEL",taskId:d}).catch((l)=>{console.error("[Decopilot] CancelBroadcast execute failed:",l)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Tg=async()=>{await B.stopAll(),B.dispose(),D.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),om1(),Y.teardown(),yx0(null),Qt0(null)};let L=new v1;if(L.use("*",fb0({enabled:(d)=>qb(d,"debug")==="1"})),L.use("*",Gz0),L.use("/*",u_1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,l)=>{if(await l(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",X_$());L.use("*",async(d,l)=>{if(await l(),Mg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(bZ.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(bZ.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(bZ.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let l={};if(l.postgres={status:await x44(Z.pool)?"up":"down"},F)l.nats=F.isConnected()?{status:"up"}:{status:"down"};else l.nats={status:"down"};let k0=l.postgres.status==="up",v0=k0?200:503;return d.json({status:k0?"ready":"not_ready",services:l},v0)}),L.get(bZ.METRICS,async(d)=>{try{let l=await Jz0.collect(),k0=h44.serialize(l.resourceMetrics);return d.text(k0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(l){return console.error("Failed to collect metrics:",l),d.text("# Error collecting metrics",500)}}),L.get(`${bZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let l=d.req.param("queueName");if(!d44.has(l))return d.json({error:`Unknown queue: ${l}`},404);let k0=await Ag.listQueuedWorkflows({queueName:l,status:"ENQUEUED"});return d.json({queue_length:k0.length})}),L.get(bZ.HOSTED_RUN_PENDING,(d)=>{let{active:l,pending:k0,max:v0}=f4$();return d.json({pending:k0,active:l,max:v0})}),L.route("/api/config",kV$),L.route("/api/_reports",gV$),L.route("/report",hV$($.clientDir)),L.route("/api/auth/custom",aT$),L.all("/api/auth/admin/*",$I$),L.all("/api/auth/*",async(d)=>{return await e8.handler(d.req.raw)});let z=Sa1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",eV),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",eV),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Ei),L.route("/",ba1()),L.use("/oauth-proxy/:connectionId/*",eV),L.all("/oauth-proxy/:connectionId/*",Jb$);let j=async(d)=>{let k0=await l44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",eV),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let k0=await m44()(d.req.raw),v0=await k0.json();return Response.json(v0,k0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=qT$({ttlMs:120000}),M=await Oa1({db:Z.db,auth:e8,encryption:{key:O1().encryptionKey},observability:{tracer:xU,meter:E8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,l)=>W.publishControlFrame(d,l)});sH.set(M);let S=new Dw(O1().encryptionKey);rR1({db:Z.db,baseUrl:D3()});let q=o80(Z.db),V=new fl(Z.db),n=eC$({db:Z.db});ep0({storage:q,meshContextFactory:n}),Cm0({meshContextFactory:n,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:WZ},prepareLinkWorkFn:n2$,workPublisher:U}),qm0({dispatchRunFn:m2$,meshContextFactory:n,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:WZ}});let f=new Yx(Z.db);D4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await Wb$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let l=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return l?{orgId:l.organization_id,createdBy:l.created_by,version:l.message_storage_version??1,status:l.status,runFenceToken:l.run_fence_token,title:l.title??null}:null},completeRunIfNotCompleted:async(d,l)=>{let k0=await f.completeRunIfNotCompleted(d,l);return VL0(WZ,l,d,k0),k0},markRunRequiresAction:async(d,l)=>{let k0=await f.requiresActionIfInProgress(d,l);return VL0(WZ,l,d,k0),k0},markRunFailed:async(d,l,k0,v0)=>{let B1=await f.markRunFailed(d,l,k0,v0);return VL0(WZ,l,d,B1),B1},clearSynthesizedError:async(d,l)=>{await f.messageParts().replaceMessageParts(d,DN(d,l),[])},persistTitle:(d,l,k0)=>f.update(d,l,{title:k0}),onTitleUpdated:async({runId:d,orgId:l,title:k0})=>{let v0=await f.get(d,l).catch(()=>null);WZ.emit(l,S3(d,v0?.status??"in_progress",{title:k0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:l})=>{await f.bumpProgress(d,l)},recordCompleted:async({runId:d,orgId:l,distinctId:k0,usage:v0})=>{i1.capture({distinctId:k0,event:"chat_message_completed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:l,distinctId:k0,reason:v0,kind:B1})=>{i1.capture({distinctId:k0,event:"chat_message_failed",groups:{organization:l},properties:{organization_id:l,thread_id:d,transport:"projector",error_category:B1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),OJ$({meshContextFactory:n,systemDatabaseUrl:Fx1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),aC$(),oR1();let v=async(d,l,k0)=>{let v0=await q.findById(d,l);if(!v0)throw Error("Automation not found");return Gt0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new sy(q,({automation:d,trigger:l,contextMessages:k0,idempotencyKey:v0})=>en({automationId:d.id,organizationId:d.organization_id,triggerId:l.id,contextMessages:k0},{idempotencyKey:v0})),a=[oQ(),DC(),AK()];for(let d of a)bL0(d).then(()=>{}).catch((l)=>console.error("[monitoring] Retention cleanup failed:",l));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,l)=>{if($z0(d.req.path))return l();let k0={measure:async(B1,i0)=>{WQ(d,B1);try{return await i0()}finally{XY(d,B1)}}},v0=await sH.create(d.req.raw,{timings:k0});v0.automationRunner=v,d.set("meshContext",v0);try{await l()}finally{let B1=v0.pendingRevalidations;if(B1.length>0)Promise.race([Promise.allSettled(B1),O8(30000)]).catch((j1)=>console.error("[mesh] revalidation cleanup error:",j1))}}),L.use("/api/:org/decopilot/*",$C),L.use("/api/:org/v1/*",$C),L.use("/api/:org/files/*",$C),L.use("*",async(d,l)=>{let k0=d.req.path;if(k0.startsWith("/api/org-sso/")||k0.startsWith("/api/auth/")||k0.startsWith("/api/tools/management")||k0.startsWith("/oauth-proxy/")||k0.startsWith(`${ge0}/`))return l();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return l();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return l();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return l()});let E0=new v1;E0.use("*",iQ({mountPath:"/api/org-sso"})),E0.route("/",wD0()),L.route("/api/org-sso",E0),L.get("/api/tools/management",(d)=>{return d.json({tools:vb0,grouped:dO()})}),L.use("/mcp/*",async(d,l)=>{WQ(d,"mcp");try{return await l()}finally{XY(d,"mcp")}});let W0=async(d,l)=>{let k0=d.var.meshContext;if(!k0.auth.user?.id&&!k0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await l()};if(L.use("/mcp/:connectionId?",W0),L.use("/mcp/gateway/:virtualMcpId?",W0),L.use("/mcp/virtual-mcp/:virtualMcpId?",W0),L.use("/mcp/self",W0),V3()){let{mountDevRoutes:d}=(j_$(),mL0(z_$));d(L,W0)}let J0=new v1;J0.use("*",iQ({mountPath:"/mcp"})),J0.route("/",rN0()),L.route("/mcp",J0);let s=new v1;s.use("*",iQ({mountPath:"/mcp/self"})),s.route("/",LL0()),L.route("/mcp/self",s);let A0=new v1;A0.use("*",iQ({mountPath:"/mcp"})),A0.route("/",sN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,l)=>{WQ(d,"llm_models");try{return await l()}finally{XY(d,"llm_models")}});let U0=y01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)K81=uC$({getConnection:()=>F?.getConnection()??null});L.route("/api",FV$()),L.get("/api/links/me",async(d)=>{try{let l=d.req.header("authorization")??"",k0=/^Bearer\s+(.+)$/i.exec(l),v0=null;if(k0){let i0=(k0[1]??"").trim();v0=await tS$(i0,e8.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let B1=w?await w(v0):{online:!1,capabilities:[]};if(!B1.online)return d.json(null);return d.json({hostname:B1.hostname,cliVersion:B1.cliVersion})}catch(l){return console.error("[links/me] presence probe failed; reporting offline:",l instanceof Error?l.message:String(l)),d.json(null)}}),L.use("/api/:org/files/*",$C),L.route("/api",lV$);let f0=new v1;f0.use("*",iQ({mountPath:"/api"})),f0.route("/",zL0()),L.route("/api",f0),L.route("/api",TV$);let m0=new v1;m0.use("*",iQ({mountPath:"/api"})),m0.route("/",jL0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new vl(Z.db),n0=new v1;n0.use("*",iQ({mountPath:"/api"})),n0.route("/",hD0()),L.route("/api",n0),L.route("/api/deco-sites",Bq$()),L.route("/api/deco-apps",DV$());let N0=new v1;N0.use("*",iQ({mountPath:"/api/deco-sites"})),N0.route("/",uD0()),L.route("/api/deco-sites",N0);let _0=new v1;_0.use("*",iQ({mountPath:"/api/vm-events"})),_0.route("/",OV$()),L.route("/api/vm-events",_0);let{createPublishRequestHandler:I0,createPublicMCPHandler:H0}=await Promise.resolve().then(() => (Xb$(),Gb$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},X0=I0(Q0),V0=H0(Q0);L.use("/org/:orgRef/registry/publish-request",eV),L.post("/org/:orgRef/registry/publish-request",X0),L.use("/org/:orgSlug/registry/*",eV),L.all("/org/:orgSlug/registry/*",V0),L.post("/api/:org/registry/publish-request",X0),L.all("/api/:org/registry/*",V0),L.route(ge0,ZI$());let p=nS$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:WZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:V3(),mcpAuth:W0,oauthProxyHandler:Jb$,watchHandler:Kb$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",p),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(Zq$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([WZ.stop(),Tg?Promise.resolve(Tg()).finally(()=>{Tg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await uY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await Nx1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Ag.registerQueue(cY,{partitionQueue:!0,concurrency:op0,minPollingIntervalMs:ap0}),await Ag.registerQueue(rQ,{partitionQueue:!0,concurrency:Vm0}),await Ag.registerQueue(PK,{partitionQueue:!0,concurrency:Rm0}),await Ag.registerQueue(fU,{partitionQueue:!0,concurrency:BJ$}),await u01(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>Ag.deleteQueue(d))),await sp0(Z.pool),gg1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),aR1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var Wb$,Yb$=5000,K81=null,Tg=null,Jb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await sH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await ux(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await Di(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=O1().baseUrl??B.origin;try{let n=new URL(q),f=new URL(V);if(!(n.origin===f.origin||n.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(X_1(J.connection_url))try{let V=await y44(Y,J.organization_id),n=g44(V);for(let[f,v]of n)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let E={Accept:$.req.header("Accept")||"application/json"},D=$.req.header("Content-Type");if(D)E["Content-Type"]=D;let L=$.req.header("Authorization");if(L)E.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&D?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),n=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof n==="string"&&n)P=n;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&D?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),n={};try{n=V?JSON.parse(V):{}}catch{z=V}let f=typeof n==="object"&&n!==null&&!Array.isArray(n);if(z===void 0&&!f)z=V;if(z===void 0){let v=n,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),E["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:E,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let n=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await dx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:n,clientId:j,clientSecret:P,tokenEndpoint:f};await new _5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},Kb$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return nQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!WZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{WZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),WZ.remove(X,J),U()})})})},h44,d44,l44=()=>u44(e8),m44=()=>c44(e8);var wp0=O(()=>{d5();F8();sR1();NG();Tb();u8();I6();p10();d_1();xb0();_W();Oi();Ve0();UQ();N5();R4();ye0();GI$();de0();e2$();g01();ZJ();g40();h01();Gq$();c01();pS$();HV$();EV$();i01();LV$();oN0();Li();IV$();eN0();N$1();SV$();cV$();_$1();mV$();H$1();F$1();Nr();Zd();WC$();JY();B60();gl();Wt0();KC$();UC$();EC$();cC$();dC$();pC$();zm0();tC$();Yg0();wg0();sC$();d$0();i$1();dX();d01();Un();Tm0();Em0();d$0();b01();ky0();Sy0();$_$();Mb();Y_$();wC();Ve0();cv();T90();Wb$=k(fB(),1);h44=new f44,d44=new Set([cY,rQ,PK,fU])});var Hb$={};X6(Hb$,{resolveClientDir:()=>s44,resolveAssetPathWithTraversalCheck:()=>Fb$,isPathWithinDirectory:()=>Ub$,createAssetHandler:()=>e44});import{resolve as Xr,dirname as n44,join as p44,extname as t44,basename as r44,sep as wb$}from"path";function o44($,Z){if($===Z||r44($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${wb$}assets${wb$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function Ub$($,Z){let G=Xr(Z),X=Xr($);return X===G||X.startsWith(G+"/")}function Fb$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Xr(Z,G);if(!Ub$(X,Z))return null;return X}function s44($,Z="../client"){let G=new URL($),X=n44(G.pathname);return Xr(X,Z)}function e44($={}){let{env:Z="production",clientDir:G=a44,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Fb$({requestPath:W,clientDir:G});if(!K)return null;let w=p44(K,"index.html"),U=Xr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(t44(K))?[w,U]:[];for(let B of[K,...N])try{let E=Bun.file(B);if(await E.exists())return new Response(E,{headers:o44(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var a44="./dist/client";var Nb$=()=>{};var Bb$={};X6(Bb$,{tryUpgradePreviewWs:()=>J54,tryHandlePreviewHttp:()=>Q54,previewWebSocketHandler:()=>W54,parsePreviewBaseDomain:()=>Y54,isPreviewWsData:()=>hL0,extractHandleFromHost:()=>w81});function G54($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function X54(){return new Response(Z54,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function Y54($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function w81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function Q54($,Z){let G=w81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Qr(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(FV)&&G54($))return X54();return Y.headers.delete(FV),Y}function Qr($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function hL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function J54($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=w81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Qr(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Qr(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Qr(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return Qr(426,"upgrade failed");return}function Yr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var $54=256,Z54='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',W54;var Ob$=O(()=>{Yp0();W54={open($){let Z=$.data;if(!hL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Yr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Yr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Yr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!hL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=$54){Yr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!hL0(Z))return;Yr($,Z,1000,"")}}});var zb$={};X6(zb$,{printBanner:()=>w54,bannerLines:()=>Lb$,BANNER_LINES:()=>Eb$,BANNER_GRADIENT:()=>Db$});function K54($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Lb$($){let Z=Eb$.map((G,X)=>{let[Y,Q,J]=K54(Db$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function w54($){console.log("");for(let Z of Lb$($))console.log(Z);console.log("")}var Eb$,Db$;var jb$=O(()=>{Eb$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Db$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Ab$={};X6(Ab$,{bootstrapDevLinkSession:()=>L54});import{existsSync as U54}from"fs";import{chmod as F54,mkdir as H54,rename as N54,writeFile as B54}from"fs/promises";import{dirname as O54,join as Pb$}from"path";function E54($){return Pb$($,"dev-link")}function D54($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Pb$(E54($),"session.json")}async function L54($,Z){let G=D54($),X=F6().db,Y=xQ()?await rn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(U54(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await e8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await e8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await H54(O54(G),{recursive:!0});let W=`${G}.tmp`;return await B54(W,JSON.stringify(J,null,2),{mode:384}),await F54(W,384),await N54(W,G),{path:G,userSub:Y.id}}var Tb$=O(()=>{UQ();_W();cN()});d5();var L81="4";function z81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:L81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();N5();function yf$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Uz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function $61(){let $=yf$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Uz0($,"--cpu-prof-dir")??process.cwd(),name:Uz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Uz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Nz0();var Er;function w61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=PB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Er=setInterval(()=>void Z().catch(()=>{}),$),Er.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Er)clearInterval(Er)}}import*as cf$ from"bun:jsc";var{startSamplingProfiler:uf$,samplingProfilerStackTraces:df$}=cf$;function U61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{uf$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=df$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function F61(){$61();let $=[w61(),K61(),U61()];return()=>{for(let Z of $)Z()}}import{existsSync as q54}from"fs";var hY=O1();s81();var{DBOS:Jr,DBOSClient:z54}=await import("@dbos-inc/dbos-sdk");function kb$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var j54=[cY,rQ,PK,fU],P54=hY.dispatchRole==="worker"?j54:hY.dispatchRole==="api"?[]:void 0;Jr.setConfig(z81({systemDatabaseUrl:kb$(hY.databaseUrl,hY.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:hY.podName,listenQueues:P54}));var{createApp:A54}=await Promise.resolve().then(() => (wp0(),Kp0)),{isServerPath:T54}=await Promise.resolve().then(() => (Nr(),x81)),{createAssetHandler:I54,resolveClientDir:Sb$}=await Promise.resolve().then(() => (Nb$(),Hb$)),R54=hY.port,Ib$=Sb$(import.meta.url,"../client"),Vb$=q54(Ib$)?Ib$:Sb$(import.meta.url,"../dist/client"),M54=I54({clientDir:Vb$,isServerPath:T54}),k54={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function S54($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(k54))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:V54,tryHandlePreviewHttp:C54,tryUpgradePreviewWs:_54,previewWebSocketHandler:U81,isPreviewWsData:F81}=await Promise.resolve().then(() => (Ob$(),Bb$)),{getOrInitSharedRunner:b54}=await Promise.resolve().then(() => (cn(),PQ$)),Cb$=V54(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Rb$={baseDomain:Cb$??"",getRunner:b54},cL0=await A54({clientDir:Vb$}),H81=process.env.DBOS_CONDUCTOR_KEY?.trim(),qb$=process.env.DBOS_CONDUCTOR_URL?.trim();await Jr.launch({...H81?{conductorKey:H81}:{},...H81&&qb$?{conductorURL:qb$}:{}});console.log(`[dbos] application version: ${Jr.applicationVersion}`);await cL0.initDbos();if(!hY.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (jb$(),zb$));console.log("");for(let Z of $())console.log(Z)}var f54=Bun.serve({idleTimeout:0,port:R54,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Cb$){let X=await _54($,Z,Rb$);if(X===void 0)return;if(X)return X;let Y=await C54($,Rb$);if(Y)return Y}let G=await M54($);if(G)return S54(G);return cL0.fetch($,{server:Z})},websocket:{open($){if(F81($.data))U81.open($)},message($,Z){if(F81($.data))U81.message($,Z)},close($){if(F81($.data))U81.close($)}},development:!1}),x54=F61();if(hY.localMode)Promise.resolve().then(() => (cN(),SN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Tb$(),Ab$)),Y=hY.baseUrl??`http://localhost:${hY.port}`,Q=await X(hY.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (cN(),SN0));Z()}catch{}});var Mb$=!1;async function v54($){let Z;try{Z=await z54.create({systemDatabaseUrl:kb$(hY.databaseUrl,hY.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:rQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:rQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function uL0($){if(Mb$)return;Mb$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{x54(),cL0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await O8(Q),await f54.stop(!0);let J=Jr.executorID;await Jr.shutdown(),await v54(J),await cL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>uL0("SIGTERM"));process.on("SIGINT",()=>uL0("SIGINT"));process.on("SIGHUP",()=>uL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),uL0("uncaughtException")});