decocms 4.64.0 → 4.65.0

package/dist/server/server.js

@@ -1089,7 +1089,7 @@ conversation.
 
 `);return new G50({connections:[$],superUser:G,mcpListCache:t5()??void 0,listTimeoutMs:X?.listTimeoutMs,instructions:Q},Z)}var ex=O(()=>{f8();KY();ZN();Os1();As1()});var ia1={};X6(ia1,{clientFromConnection:()=>$7});async function $7($,Z,G=!1){if($.connection_type==="VIRTUAL")return Is1($,Z,G);return Js1($,Z,G)}var tl=O(()=>{Ws1();ex()});async function gu0($,Z,G){let X=new AbortController,Y,Q=new Promise((W,K)=>{Y=setTimeout(()=>{X.abort(),K(new qs1($.id,G))},G)}),J=(async()=>{let W=await $7($,Z,!0);try{return(await W.listTools(void 0,{timeout:G,signal:X.signal})).tools}finally{await W.close().catch(()=>{})}})();J.catch(()=>{});try{return await Promise.race([J,Q])}finally{if(Y)clearTimeout(Y)}}var qs1;var Ms1=O(()=>{tl();qs1=class qs1 extends Error{constructor($,Z){super(`listTools timed out after ${Z}ms for connection ${$}`);this.name="ListToolsTimeoutError"}}});function J50($){return(Z)=>{if(Z instanceof S1&&Z.code===x1.MethodNotFound)return $;throw Z}}var ks1=O(()=>{E5()});function W50($,Z,G){let X=CH($,Z,G,t5()??void 0),Y=HU(X,{name:"mcp-mesh-enhanced",version:"1.0.0"},{capabilities:qo8,toolCallTimeoutMs:lb});Y.server.setRequestHandler(IF,async()=>{return await X.listResources().catch(J50({resources:[]}))}),Y.server.setRequestHandler(RF,async()=>{return await X.listResourceTemplates().catch(J50({resourceTemplates:[]}))}),Y.server.setRequestHandler(qF,async()=>{return await X.listPrompts().catch(J50({prompts:[]}))});let Q=Y.close.bind(Y);return Y.close=async()=>{await Q(),await X.close().catch(()=>{})},Y}var qo8;var Ss1=O(()=>{f8();E5();pl();KY();ks1();qo8={tools:{},resources:{},prompts:{}}});var FD=O(()=>{tl();Ms1();Ss1()});function bi($,Z,G){if(Z.some((X)=>X!=="*"&&X.startsWith("SELF::"))&&$.SELF===void 0)$.SELF={value:`${G}_self`}}function fi($,Z){let G=new Map;for(let X of Z){if(X==="*")continue;let[Y,Q]=G80(X);if(!Mo8.has(Q))continue;let J=Md(Y,$);if(typeof J!=="object"||J===null||!("value"in J))continue;let W=J.value;if(typeof W!=="string")continue;G.set(`${W}:${Q}`,{targetConnectionId:W,scope:Q})}return[...G.values()]}async function xi($,Z,G,X){for(let Q of Z){if(Q==="*")continue;let[J]=G80(Q),W=Md(J,$);if(W===void 0||W===null)throw Error(`Scope references key "${J}" but it's not present in state`)}let Y=uh1($,Z);for(let Q of Y){if(Q.endsWith("_self"))continue;let J=await X.storage.connections.findById(Q);if(!J||J.organization_id!==G)throw Error(`Referenced connection not found: ${Q}`);try{await X.access.check(Q)}catch(W){throw Error(`Access denied to referenced connection: ${Q}. ${W.message}`)}}}var Mo8;var hu0=O(()=>{tx0();Q80();Mo8=new Set([X80,Y80])});import{z as Vs1}from"zod";var ko8,So8,cu0;var Cs1=O(()=>{R4();Q1();F8();KY();FD();hu0();zd();JW();ko8=Vs1.object({data:Tu.describe("Data for the new connection (id is auto-generated if not provided)")}),So8=Vs1.object({item:rZ.describe("The created connection entity")}),cu0=Z0({name:"COLLECTION_CONNECTIONS_CREATE",description:"Create a new MCP connection. Auto-fetches and caches the server's tool list.",annotations:{title:"Create Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:ko8,outputSchema:So8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create connection");let Y={...$.data,organization_id:G.id,created_by:X};if(Y.id){if((await Z.storage.connections.findById(Y.id))?.organization_id===G.id)throw Error("Connection already exists in organization")}if(Y.connection_type==="VIRTUAL"){let F=cO(Y.connection_url);if(!F)throw Error("VIRTUAL connection requires connection_url in format: virtual://$virtual_mcp_id");let H=await Z.storage.virtualMcps.findById(F);if(!H)throw Error(`Virtual MCP not found: ${F}`);if(H.organization_id!==G.id)throw Error("Virtual MCP does not belong to the current organization");Y.connection_url=uO(F)}if(Y.connection_type==="STDIO"&&!O1().localMode)throw Error("STDIO connections are only available in local mode (--local-mode).");let Q=await aF({id:`pending-${Date.now()}`,title:Y.title,connection_type:Y.connection_type,connection_url:Y.connection_url,connection_token:Y.connection_token,connection_headers:Y.connection_headers}).catch(()=>null),J=Q?.tools?.length?Q.tools:null,W=Q?.scopes?.length?Q.scopes:Y.configuration_scopes??null,K=Y.configuration_state??null;if(K&&W?.length)bi(K,W,G.id),await xi(K,W,G.id,Z);let U=await Z.storage.connections.createNew({...Y,tools:null,configuration_state:K,configuration_scopes:W}),w=K&&W?.length?fi(K,W):[];if(w.length>0){let F;try{await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:U.id,createdBy:X,grants:w});let{plaintextToken:H,record:N}=await Z.storage.connectionCredentialVault.createOrRotateWorkloadToken({organizationId:G.id,subjectConnectionId:U.id});F=N.id,await(await $7(U,Z,!1)).callTool({name:"ON_MCP_CONFIGURATION",arguments:{state:K,scopes:W,firstRun:!0,vault:{baseUrl:Z.baseUrl,org:G.slug??G.id,subjectConnectionId:U.id,token:H}}})}catch(H){if(F)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:U.id,tokenId:F});throw await Z.storage.connections.delete(U.id),H}}if(J)t5()?.set("tools",U.id,J).catch(()=>{});return i1.capture({distinctId:X,event:"connection_created",groups:{organization:G.id},properties:{connection_id:U.id,connection_type:U.connection_type,app_name:U.app_name??null,organization_id:G.id,tools_count:J?.length??0}}),{item:U}}})});import{z as kQ}from"zod/v4";import{z as _s1}from"zod/v4";import{z as K50}from"zod/v4";import{z as SW}from"zod/v4";import{z as bo8}from"zod/v4";import{z as HD}from"zod/v4";import{z as VW}from"zod/v4";import{z as qZ}from"zod/v4";import{z as bs1}from"zod/v4";import{z as F50}from"zod/v4";import{z as Ga8}from"zod/v4";import{z as fs1}from"zod/v4";import{z as U50}from"zod/v4";import{z as Fa8}from"zod/v4";function vi($,Z){if($===Z)return!0;if($==null||Z==null)return $===Z;if(typeof $!==typeof Z)return!1;if(Array.isArray($)&&Array.isArray(Z)){if($.length!==Z.length)return!1;return $.every((G,X)=>vi(G,Z[X]))}if(typeof $==="object"&&typeof Z==="object"){let G=Object.keys($),X=Object.keys(Z);if(G.length!==X.length)return!1;return G.every((Y)=>X.includes(Y)&&vi($[Y],Z[Y]))}return!1}function eo8(){return($)=>{if(!Array.isArray($))return!0;let Z=[];return $.every((G)=>{if(Z.some((Y)=>vi(G,Y)))return!1;return Z.push(G),!0})}}function w50($,Z){return $.safeParse(Z).success}function J7($){if(typeof $==="boolean")return $?kQ.any():kQ.never();let Z={};for(let Y of Oa8)Y.apply(Z,$);let G=[];if(Z.string!==!1)G.push(Z.string||kQ.string());if(Z.number!==!1)G.push(Z.number||kQ.number());if(Z.boolean!==!1)G.push(Z.boolean||kQ.boolean());if(Z.null!==!1)G.push(Z.null||kQ.null());if(Z.array!==!1)G.push(Z.array||kQ.array(kQ.any()));if(Z.tuple!==!1&&Z.tuple!==void 0)G.push(Z.tuple);if(Z.object!==!1)if(Z.object)G.push(Z.object);else{let Y=kQ.custom((Q)=>{return typeof Q==="object"&&Q!==null&&!Array.isArray(Q)},"Must be an object, not an array");G.push(Y)}if(Z.file!==!1&&Z.file!==void 0)G.push(Z.file);let X;if(G.length===0)X=kQ.never();else if(G.length===1)X=G[0];else if(!Object.keys($).some((Q)=>Q!=="$schema"&&Q!=="title"&&Q!=="description"))X=kQ.any();else X=kQ.union(G);for(let Y of Ea8)X=Y.apply(X,$);return X}var Vo8=class{apply($,Z){if(!Z.type)return;let G=Array.isArray(Z.type)?Z.type:[Z.type],X=new Set(G);if(!X.has("string"))$.string=!1;if(!X.has("number")&&!X.has("integer"))$.number=!1;if(!X.has("boolean"))$.boolean=!1;if(!X.has("null"))$.null=!1;if(!X.has("array"))$.array=!1;if(!X.has("object"))$.object=!1;if(X.has("integer")&&$.number!==!1){let Y=$.number||_s1.number();if(Y instanceof _s1.ZodNumber)$.number=Y.int()}}},Co8=class{apply($,Z){if(Z.const===void 0)return;let G=Z.const;if($.string=!1,$.number=!1,$.boolean=!1,$.null=!1,$.array=!1,$.object=!1,typeof G==="string")$.string=K50.literal(G);else if(typeof G==="number")$.number=K50.literal(G);else if(typeof G==="boolean")$.boolean=K50.literal(G);else if(G===null)$.null=K50.null();else if(Array.isArray(G))$.array=void 0;else if(typeof G==="object")$.object=void 0}},_o8=class{apply($,Z){if(!Z.enum)return;if(Z.enum.length===0){if(!Z.type)$.string=!1,$.number=!1,$.boolean=!1,$.null=!1,$.array=!1,$.object=!1;return}let G={string:Z.enum.filter((X)=>typeof X==="string"),number:Z.enum.filter((X)=>typeof X==="number"),boolean:Z.enum.filter((X)=>typeof X==="boolean"),null:Z.enum.filter((X)=>X===null),array:Z.enum.filter((X)=>Array.isArray(X)),object:Z.enum.filter((X)=>typeof X==="object"&&X!==null&&!Array.isArray(X))};$.string=this.createTypeSchema(G.string,"string"),$.number=this.createTypeSchema(G.number,"number"),$.boolean=this.createTypeSchema(G.boolean,"boolean"),$.null=G.null.length>0?SW.null():!1,$.array=G.array.length>0?void 0:!1,$.object=G.object.length>0?void 0:!1}createTypeSchema($,Z){if($.length===0)return!1;if($.length===1)return SW.literal($[0]);if(Z==="string")return SW.enum($);if(Z==="number"){let[G,X,...Y]=$;return SW.union([SW.literal(G),SW.literal(X),...Y.map((Q)=>SW.literal(Q))])}if(Z==="boolean")return SW.union([SW.literal(!0),SW.literal(!1)]);return!1}},fo8=class{apply($,Z){let G=Z;if(G.type==="string"&&G.format==="binary"&&G.contentEncoding==="binary"){let X=bo8.file();if(G.minLength!==void 0)X=X.min(G.minLength);if(G.maxLength!==void 0)X=X.max(G.maxLength);if(G.contentMediaType!==void 0)X=X.mime(G.contentMediaType);$.file=X,$.string=!1}}},xo8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.minLength!==void 0||G.maxLength!==void 0||G.pattern!==void 0)){if($.string===void 0)$.string=HD.string()}}},vo8=class{apply($,Z){let G=Z;if(G.minLength===void 0)return;if($.string!==!1){let X=$.string||HD.string();if(X instanceof HD.ZodString)$.string=X.refine((Y)=>{return Array.from(Y).length>=G.minLength},{message:`String must be at least ${G.minLength} characters long`})}}},yo8=class{apply($,Z){let G=Z;if(G.maxLength===void 0)return;if($.string!==!1){let X=$.string||HD.string();if(X instanceof HD.ZodString)$.string=X.refine((Y)=>{return Array.from(Y).length<=G.maxLength},{message:`String must be at most ${G.maxLength} characters long`})}}},go8=class{apply($,Z){let G=Z;if(!G.pattern)return;if($.string!==!1){let X=$.string||HD.string();if(X instanceof HD.ZodString){let Y=new RegExp(G.pattern);$.string=X.regex(Y)}}}},ho8=class{apply($,Z){let G=Z;if(G.minimum===void 0)return;if($.number!==!1){let X=$.number||VW.number();if(X instanceof VW.ZodNumber)$.number=X.min(G.minimum)}}},co8=class{apply($,Z){let G=Z;if(G.maximum===void 0)return;if($.number!==!1){let X=$.number||VW.number();if(X instanceof VW.ZodNumber)$.number=X.max(G.maximum)}}},uo8=class{apply($,Z){let G=Z;if(G.exclusiveMinimum===void 0)return;if($.number!==!1){let X=$.number||VW.number();if(X instanceof VW.ZodNumber)if(typeof G.exclusiveMinimum==="number")$.number=X.gt(G.exclusiveMinimum);else $.number=!1}}},do8=class{apply($,Z){let G=Z;if(G.exclusiveMaximum===void 0)return;if($.number!==!1){let X=$.number||VW.number();if(X instanceof VW.ZodNumber)if(typeof G.exclusiveMaximum==="number")$.number=X.lt(G.exclusiveMaximum);else $.number=!1}}},lo8=class{apply($,Z){let G=Z;if(G.multipleOf===void 0)return;if($.number!==!1){let X=$.number||VW.number();if(X instanceof VW.ZodNumber)$.number=X.refine((Y)=>{if(G.multipleOf===0)return!1;let Q=Y/G.multipleOf,J=Math.round(Q),W=Math.min(Math.abs(Y)*Number.EPSILON*10,Math.abs(G.multipleOf)*Number.EPSILON*10);return Math.abs(Q-J)<=W/Math.abs(G.multipleOf)},{message:`Must be a multiple of ${G.multipleOf}`})}}},mo8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.minItems!==void 0||G.maxItems!==void 0||G.items!==void 0||G.prefixItems!==void 0)){if($.array===void 0)$.array=qZ.array(qZ.any())}}},io8=class{apply($,Z){let G=Z;if(G.minItems===void 0)return;if($.array!==!1)$.array=($.array||qZ.array(qZ.any())).min(G.minItems)}},no8=class{apply($,Z){let G=Z;if(G.maxItems===void 0)return;if($.array!==!1)$.array=($.array||qZ.array(qZ.any())).max(G.maxItems)}},po8=class{apply($,Z){let G=Z;if($.array===!1)return;if(Array.isArray(G.items))$.array=$.array||qZ.array(qZ.any());else if(G.items&&typeof G.items!=="boolean"&&!G.prefixItems){let X=J7(G.items),Y=qZ.array(X);if($.array&&$.array instanceof qZ.ZodArray){let Q=$.array._def;if(Q.checks)Q.checks.forEach((J)=>{if(J._zod&&J._zod.def){let W=J._zod.def;if(W.check==="min_length"&&W.minimum!==void 0)Y=Y.min(W.minimum);else if(W.check==="max_length"&&W.maximum!==void 0)Y=Y.max(W.maximum)}})}$.array=Y}else if(typeof G.items==="boolean"&&G.items===!1)if(!G.prefixItems)$.array=qZ.array(qZ.any()).max(0);else $.array=$.array||qZ.array(qZ.any());else if(typeof G.items==="boolean"&&G.items===!0)$.array=$.array||qZ.array(qZ.any());else if(G.prefixItems)$.array=$.array||qZ.array(qZ.any())}},to8=class{apply($,Z){if(Z.type!=="array")return;let G=Z;if(!Array.isArray(G.items))return;if($.array===!1)return;let X=G.items.map((Q)=>J7(Q)),Y;if(X.length===0)Y=bs1.tuple([]);else Y=bs1.tuple(X);if(G.minItems!==void 0&&G.minItems>X.length)Y=!1;if(G.maxItems!==void 0&&G.maxItems<X.length)Y=!1;$.tuple=Y,$.array=!1}},ro8=class{apply($,Z){let G=Z;if($.object===!1)return;if(G.properties||G.required||G.additionalProperties!==void 0)$.object=$.object||F50.object({}).passthrough()}},oo8=class{apply($,Z){let G=Z;if(Z.type===void 0&&(G.maxProperties!==void 0||G.minProperties!==void 0)){if($.object===void 0)$.object=F50.object({}).passthrough()}}},ao8=class{apply($,Z){let G=Z;if(G.maxProperties===void 0)return;if($.object!==!1){let X=$.object||F50.object({}).passthrough();$.object=X.refine((Y)=>Object.keys(Y).length<=G.maxProperties,{message:`Object must have at most ${G.maxProperties} properties`})}}},so8=class{apply($,Z){let G=Z;if(G.minProperties===void 0)return;if($.object!==!1){let X=$.object||F50.object({}).passthrough();$.object=X.refine((Y)=>Object.keys(Y).length>=G.minProperties,{message:`Object must have at least ${G.minProperties} properties`})}}},$a8=class{apply($,Z){if(!Z.not)return $;let G=J7(Z.not);return $.refine((X)=>!w50(G,X),{message:"Value must not match the 'not' schema"})}},Za8=class{apply($,Z){if(Z.uniqueItems!==!0)return $;return $.refine(eo8(),{message:"Array items must be unique"})}},Xa8=class{apply($,Z){if(!Z.allOf||Z.allOf.length===0)return $;return Z.allOf.map((X)=>J7(X)).reduce((X,Y)=>Ga8.intersection(X,Y),$)}},Ya8=class{apply($,Z){if(!Z.anyOf||Z.anyOf.length===0)return $;let G=Z.anyOf.length===1?J7(Z.anyOf[0]):fs1.union([J7(Z.anyOf[0]),J7(Z.anyOf[1]),...Z.anyOf.slice(2).map((X)=>J7(X))]);return fs1.intersection($,G)}},Qa8=class{apply($,Z){if(!Z.oneOf||Z.oneOf.length===0)return $;let G=Z.oneOf.map((X)=>J7(X));return $.refine((X)=>{let Y=0;for(let Q of G)if(Q.safeParse(X).success){if(Y++,Y>1)return!1}return Y===1},{message:"Value must match exactly one of the oneOf schemas"})}},Ja8=class{apply($,Z){let G=Z;if(G.prefixItems&&Array.isArray(G.prefixItems)){let Y=G.prefixItems.map((Q)=>J7(Q));return $.refine((Q)=>{if(!Array.isArray(Q))return!0;for(let J=0;J<Math.min(Q.length,Y.length);J++)if(!w50(Y[J],Q[J]))return!1;if(Q.length>Y.length){if(typeof G.items==="boolean"&&G.items===!1)return!1;else if(G.items&&typeof G.items==="object"&&!Array.isArray(G.items)){let J=J7(G.items);for(let W=Y.length;W<Q.length;W++)if(!w50(J,Q[W]))return!1}}return!0},{message:"Array does not match prefixItems schema"})}return $}},Wa8=class{apply($,Z){let G=Z;if(!G.properties&&!G.required&&G.additionalProperties!==!1)return $;if($ instanceof U50.ZodObject||$ instanceof U50.ZodRecord){let X={};if(G.properties){for(let[Y,Q]of Object.entries(G.properties))if(Q!==void 0)X[Y]=J7(Q)}if(G.required&&Array.isArray(G.required)){let Y=new Set(G.required);for(let Q of Object.keys(X))if(!Y.has(Q))X[Q]=X[Q].optional()}else for(let Y of Object.keys(X))X[Y]=X[Y].optional();if(G.additionalProperties===!1)return U50.object(X);else return U50.object(X).passthrough()}return $.refine((X)=>{if(typeof X!=="object"||X===null||Array.isArray(X))return!0;if(G.properties){for(let[Y,Q]of Object.entries(G.properties))if(Q!==void 0){if(Object.getOwnPropertyDescriptor(X,Y)!==void 0){if(!J7(Q).safeParse(X[Y]).success)return!1}}}if(G.required&&Array.isArray(G.required)){for(let Y of G.required)if(Object.getOwnPropertyDescriptor(X,Y)===void 0)return!1}if(G.additionalProperties===!1&&G.properties){let Y=new Set(Object.keys(G.properties));for(let Q in X)if(!Y.has(Q))return!1}return!0},{message:"Object constraints validation failed"})}},Ka8=class{apply($,Z){if(!Z.enum||Z.enum.length===0)return $;let G=Z.enum.filter((X)=>Array.isArray(X)||typeof X==="object"&&X!==null);if(G.length===0)return $;return $.refine((X)=>{if(typeof X!=="object"||X===null)return!0;return G.some((Y)=>vi(X,Y))},{message:"Value must match one of the enum values"})}},Ua8=class{apply($,Z){if(Z.const===void 0)return $;let G=Z.const;if(typeof G!=="object"||G===null)return $;return $.refine((X)=>vi(X,G),{message:"Value must equal the const value"})}},wa8=class{apply($,Z){if(Z.description)$=$.describe(Z.description);return $}},Ha8=class{apply($,Z){var G;let X=Z;if(!((G=X.required)==null?void 0:G.includes("__proto__"))||Z.type!==void 0)return $;return Fa8.any().refine((Y)=>this.validateRequired(Y,X.required),{message:"Missing required properties"})}validateRequired($,Z){if(typeof $!=="object"||$===null||Array.isArray($))return!0;return Z.every((G)=>Object.prototype.hasOwnProperty.call($,G))}},Na8=class{apply($,Z){var G;let X=Z;if(X.contains===void 0)return $;let Y=J7(X.contains),Q=(G=X.minContains)!=null?G:1,J=X.maxContains;return $.refine((W)=>{if(!Array.isArray(W))return!0;let K=0;for(let U of W)if(w50(Y,U))K++;if(K<Q)return!1;if(J!==void 0&&K>J)return!1;return!0},{message:"Array must contain required items matching the schema"})}},Ba8=class{apply($,Z){let{default:G}=Z;if(G===void 0)return $;if(!$.safeParse(G).success)return $;return $.default(G)}},Oa8,Ea8;var xs1=O(()=>{Oa8=[new Co8,new _o8,new Vo8,new fo8,new xo8,new mo8,new oo8,new vo8,new yo8,new go8,new ho8,new co8,new uo8,new do8,new lo8,new to8,new io8,new no8,new po8,new ao8,new so8,new ro8],Ea8=[new Ha8,new Ka8,new Ua8,new Xa8,new Ya8,new Qa8,new Ja8,new Wa8,new Na8,new $a8,new Za8,new Ba8,new wa8]});class uu0{constructor($){this._url=$}start(){if(this._socket)throw Error("WebSocketClientTransport already started! If using Client class, note that connect() calls start() automatically.");return new Promise(($,Z)=>{this._socket=new WebSocket(this._url,Da8),this._socket.onerror=(G)=>{let X="error"in G?G.error:Error(`WebSocket error: ${JSON.stringify(G)}`);Z(X),this.onerror?.(X)},this._socket.onopen=()=>{$()},this._socket.onclose=()=>{this.onclose?.()},this._socket.onmessage=(G)=>{let X;try{X=YY.parse(JSON.parse(G.data))}catch(Y){this.onerror?.(Y);return}this.onmessage?.(X)}})}async close(){this._socket?.close()}send($){return new Promise((Z,G)=>{if(!this._socket){G(Error("Not connected"));return}this._socket?.send(JSON.stringify($)),Z()})}}var Da8="mcp";var vs1=O(()=>{E5()});function La8($){let Z=$;if(!Z||typeof Z!=="object"||!("method"in Z))return null;switch(Z.method){case"initialize":{let G=Z?.params?.protocolVersion;if(!G)return null;return{type:"emit",message:{result:{protocolVersion:G,capabilities:{tools:{}},serverInfo:{name:"deco-chat-server",version:"1.0.0"}},jsonrpc:Z.jsonrpc??"2.0",id:Z.id}}}case"notifications/roots/list_changed":case"notifications/initialized":case"notifications/cancelled":case"notifications/progress":return{type:"suppress"};default:return null}}var H50;var du0=O(()=>{hO();H50=class H50 extends S3{constructor($,Z){super($,Z)}send($,Z){let G=La8($);if(G?.type==="emit")return this.onmessage?.(G.message),Promise.resolve();if(G?.type==="suppress")return Promise.resolve();return super.send($,Z)}}});var ys1,gs1=async($,Z,G)=>{let X=za8($.connection,Z,G);if(!X)throw Error("Unknown MCP connection type");let Y=new ys1({name:$?.name??"MCP Client",version:"1.0.0"});return await Y.connect(X),{client:Y}},za8=($,Z,G)=>{if($.type==="Websocket")return new uu0(new URL($.url));if($.type!=="SSE"&&$.type!=="HTTP")return null;let Y={...$.token?{authorization:`Bearer ${$.token}`}:{},...G??{},..."headers"in $?$.headers||{}:{}};if($.type==="SSE"){let Q={requestInit:{headers:Y,signal:Z}};if($.token)Q.eventSourceInit={fetch:(J,W)=>{return fetch(J,{...W,headers:{...Y,Accept:"text/event-stream"},signal:Z})}};return new PU(new URL($.url),Q)}return new H50(new URL($.url),{requestInit:{headers:Y,signal:Z,credentials:"include"}})};var hs1=O(()=>{k3();Dd();vs1();E5();jG();du0();ys1=class ys1 extends U9{constructor($,Z){super($,{jsonSchemaValidator:L5,...Z})}async listTools($,Z){return await this.request({method:"tools/list",params:$},ic,Z)}}});function ds1($){let Z=(G)=>{if("connection"in $)return gs1({connection:$.connection},void 0,G);return $.client};return new Proxy({},{get(G,X){if(X==="toJSON")return null;if(typeof X!=="string")throw Error("Name must be a string");if(X==="listTools")return W;async function Y(K,U=X){let w=$?.debugId?.(),F=w?{"x-trace-debug-id":w}:void 0,{client:H}=await Z(F),{structuredContent:N,isError:B,content:E}=await H.callTool({name:String(U),arguments:K});if(B){let L=E?.[0]?.text,z=typeof L==="string"?cs1(L):null,j=z?.code&&typeof $?.getErrorByStatusCode==="function"?$.getErrorByStatusCode(z.code,z.message,z.traceId):null;if(j)throw j;throw Error(`Tool ${String(U)} returned an error: ${JSON.stringify(N??E)}`)}if(N!==void 0)return N;let D=E?.[0]?.text;return typeof D==="string"?cs1(D):void 0}async function Q(){let{client:K}=await Z(),{tools:U}=await K.listTools();return U}async function J(){if(!("connection"in $))return Q();let K=$.connection,U=JSON.stringify(K);try{if(!N50.has(U))N50.set(U,Q());return await N50.get(U)}catch(w){console.error("Failed to list tools",w),N50.delete(U);return}}async function W(){return(await J()??[]).map((U)=>us1(U,Y))}return Y.asTool=async()=>{let U=(await J()??[]).find((w)=>w.name===X);if(!U)throw Error(`Tool ${X} not found`);return us1(U,Y)},Y}})}var cs1=($)=>{try{return JSON.parse($)}catch{return $}},N50,us1=($,Z)=>{return{...$,id:$.name,inputSchema:$.inputSchema?J7($.inputSchema):void 0,outputSchema:$.outputSchema?J7($.outputSchema):void 0,execute:(G)=>{return Z(G.context,$.name)}}};var ls1=O(()=>{xs1();hs1();N50=new Map});function ND($){return ds1($)}var $v;var lu0=O(()=>{ls1();$v=new Proxy({},{get($,Z){if(Z==="toJSON")return null;if(Z==="forConnection")return(G)=>ND({connection:G});return global[Z]}})});function B50($){return{isImplementedBy:(Z)=>{for(let G of $){let X=typeof G.name==="string"?new RegExp(`^${G.name}$`):G.name,Y=Z.find((Q)=>X.test(Q.name));if(!Y&&G.opt)continue;if(!Y)return!1}return!0}}}var CW=($)=>{return{...B50($),forClient:(Z)=>{return ND({client:Z})},forConnection:(Z)=>{return ND({connection:Z})}}};var BD=O(()=>{lu0()});import{z as j8}from"zod";function cU($){return j8.object({items:j8.array($).describe("Array of collection items"),totalCount:j8.number().int().min(0).optional().describe("Total number of matching items (if available)"),hasMore:j8.boolean().optional().describe("Whether there are more items available")})}function gi($){return j8.object({item:$.nullable().describe("The retrieved item, or null if not found")})}function Aa8($){return j8.object({data:$.partial().describe("Data for the new entity (id may be auto-generated)")})}function Ta8($){return j8.object({item:$.describe("The created entity with generated id")})}function Ia8($){return j8.object({id:j8.string().describe("ID of the entity to update"),data:$.partial().describe("Partial entity data to update")})}function Ra8($){return j8.object({item:$.describe("The updated entity")})}function ci($){return j8.object({item:$.describe("The deleted entity")})}function Gv($,Z,G){let X=$.toUpperCase(),Y=G?.readOnly??!1,Q=[{name:`COLLECTION_${X}_LIST`,inputSchema:XJ,outputSchema:cU(Z)},{name:`COLLECTION_${X}_GET`,inputSchema:yi,outputSchema:gi(Z)}];if(!Y)Q.push({name:`COLLECTION_${X}_CREATE`,inputSchema:Aa8(Z),outputSchema:Ta8(Z),opt:!0},{name:`COLLECTION_${X}_UPDATE`,inputSchema:Ia8(Z),outputSchema:Ra8(Z),opt:!0},{name:`COLLECTION_${X}_DELETE`,inputSchema:hi,outputSchema:ci(Z),opt:!0});return Q}var Zv,ja8,ms1,Pa8,XJ,yi,hi;var PY=O(()=>{Zv=j8.object({id:j8.string().describe("Unique identifier for the entity"),title:j8.string().describe("Human-readable title for the entity"),description:j8.string().nullish().describe("Description of the entity"),created_at:j8.string().datetime(),updated_at:j8.string().datetime(),created_by:j8.string().optional(),updated_by:j8.string().optional()}),ja8=j8.object({field:j8.array(j8.string()),operator:j8.enum(["eq","gt","gte","lt","lte","in","like","contains"]),value:j8.unknown()}),ms1=j8.lazy(()=>j8.union([ja8,j8.object({operator:j8.enum(["and","or","not"]),conditions:j8.array(ms1)})])),Pa8=j8.object({field:j8.array(j8.string()),direction:j8.enum(["asc","desc"]),nulls:j8.enum(["first","last"]).optional()}),XJ=j8.object({where:ms1.optional().describe("Filter expression"),orderBy:j8.array(Pa8).optional().describe("Sort expressions"),limit:j8.number().int().min(1).max(1000).optional().describe("Maximum number of items to return"),offset:j8.number().int().min(0).optional().describe("Number of items to skip")});yi=j8.object({id:j8.string().describe("ID of the entity to retrieve")});hi=j8.object({id:j8.string().describe("ID of the entity to delete")})});import{z as _$}from"zod";var qa8,is1,OY5;var ns1=O(()=>{PY();qa8=_$.object({id:_$.string(),name:_$.string(),description:_$.string().optional(),inputSchema:_$.record(_$.string(),_$.unknown()),outputSchema:_$.record(_$.string(),_$.unknown()).optional()}),is1=Zv.extend({_meta:_$.object({"io.decocms":_$.object({id:_$.string(),verified:_$.boolean(),scopeName:_$.string(),appName:_$.string(),friendlyName:_$.string().nullable().optional(),metadata:_$.record(_$.string(),_$.unknown()).nullable().optional(),publishedAt:_$.string().datetime().optional(),updatedAt:_$.string().datetime().optional(),tools:_$.array(qa8).nullable().optional().describe("Available tools exposed by this app")}).optional()}).optional(),server:_$.object({$schema:_$.string().optional(),_meta:_$.record(_$.string(),_$.unknown()).optional(),name:_$.string().describe("The server name (scope/app)"),title:_$.string().optional().describe("User-friendly title"),description:_$.string().optional().describe("Server description"),icons:_$.array(_$.object({src:_$.string(),mimeType:_$.string().optional(),sizes:_$.array(_$.string()).optional(),theme:_$.enum(["light","dark"]).optional()})).optional(),remotes:_$.array(_$.object({type:_$.enum(["http","stdio","sse"]),url:_$.string().optional(),headers:_$.array(_$.unknown()).optional()})).optional(),packages:_$.array(_$.unknown()).optional(),repository:_$.object({url:_$.string(),source:_$.string().optional(),subfolder:_$.string().optional()}).optional(),version:_$.string().optional(),websiteUrl:_$.string().optional()})}),OY5=Gv("registry_app",is1,{readOnly:!0})});import{z as b5}from"zod";var ps1,O50,ts1,E50,rs1,Ma8;var os1=O(()=>{BD();ps1=b5.object({specversion:b5.literal("1.0").describe("CloudEvents specification version"),id:b5.string().describe("Unique identifier for this event (UUID recommended)"),source:b5.string().describe("Connection ID of the event publisher"),type:b5.string().describe("Event type (e.g., 'order.created', 'user.signup')"),time:b5.string().datetime().optional().describe("Timestamp of when the event occurred (ISO 8601)"),subject:b5.string().optional().describe("Subject/resource identifier (e.g., order ID, user ID)"),datacontenttype:b5.string().optional().default("application/json").describe("Content type of the data attribute"),dataschema:b5.string().url().optional().describe("URI to the schema for the data attribute"),data:b5.unknown().optional().describe("Event payload (any JSON value)")}),O50=b5.object({events:b5.array(ps1).min(1).describe("Batch of CloudEvents to process")}),ts1=b5.object({success:b5.boolean().optional().describe("Whether this event was processed successfully"),error:b5.string().optional().describe("Error message for this event"),retryAfter:b5.number().int().positive().optional().describe("Re-deliver this event after this many ms")}),E50=b5.object({success:b5.boolean().optional().describe("Batch success - applies to events not in results"),error:b5.string().optional().describe("Batch error message - applies to events not in results"),processedCount:b5.number().int().min(0).optional().describe("Number of events successfully processed"),retryAfter:b5.number().int().positive().optional().describe("Batch retryAfter - applies to events not in results"),results:b5.record(b5.string(),ts1).optional().describe("Per-event results keyed by event ID")}),rs1=[{name:"ON_EVENTS",inputSchema:O50,outputSchema:E50}],Ma8=CW(rs1)});import{z as f5}from"zod";var as1,ss1,es1,$e1,Ze1,Ge1,D50,mu0;var iu0=O(()=>{BD();as1=f5.object({type:f5.literal("string"),enum:f5.array(f5.string()).optional(),description:f5.string().optional()}),ss1=f5.object({type:f5.string(),description:f5.string(),paramsSchema:f5.record(f5.string(),as1)}),es1=f5.object({}),$e1=f5.object({triggers:f5.array(ss1)}),Ze1=f5.object({type:f5.string(),params:f5.record(f5.string(),f5.string()),enabled:f5.boolean(),callbackUrl:f5.url().optional(),callbackToken:f5.string().min(1).optional()}),Ge1=f5.object({success:f5.boolean()}),D50=[{name:"TRIGGER_LIST",inputSchema:es1,outputSchema:$e1},{name:"TRIGGER_CONFIGURE",inputSchema:Ze1,outputSchema:Ge1}],mu0=CW(D50)});import{z as j4}from"zod";var Xe1,Ye1,Qe1,ui,L50,z50,j50,P50,ka8;var nu0=O(()=>{BD();Xe1=j4.object({primary:j4.string().optional().describe("Primary brand color (hex)"),secondary:j4.string().optional().describe("Secondary brand color (hex)"),accent:j4.string().optional().describe("Accent / highlight color (hex)"),background:j4.string().optional().describe("Background color (hex)"),foreground:j4.string().optional().describe("Foreground / text color (hex)")}),Ye1=j4.object({heading:j4.string().optional().describe("Font family for headings"),body:j4.string().optional().describe("Font family for body text"),code:j4.string().optional().describe("Font family for code / monospace")}),Qe1=j4.object({logo:j4.string().optional().describe("Logo URL"),favicon:j4.string().optional().describe("Favicon URL"),ogImage:j4.string().optional().describe("Open Graph image URL")}),ui=j4.object({id:j4.string(),name:j4.string().describe("Brand / company name"),domain:j4.string().optional().describe("Company domain (e.g. example.com)"),colors:Xe1.optional().describe("Semantic color palette"),fonts:Ye1.optional().describe("Font families by role"),assets:Qe1.optional().describe("Visual identity assets"),overview:j4.string().optional().describe("Company overview / description"),tagline:j4.string().optional().describe("Brand tagline"),tone:j4.string().optional().describe("Tone of voice description"),metadata:j4.record(j4.string(),j4.unknown()).optional().describe("Extra design tokens and metadata")}),L50=j4.object({id:j4.string().optional().describe("Brand ID. Omit to get the default brand.")}),z50=j4.object({}),j50=j4.object({items:j4.array(ui)}),P50=[{name:"BRAND_GET",inputSchema:L50,outputSchema:ui},{name:"BRAND_LIST",inputSchema:z50,outputSchema:j50,opt:!0}],ka8=CW(P50)});var pu0=O(()=>{BD();ns1();os1();iu0();yc();nu0()});import{z as Xv}from"zod";var Sa8,Va8,Je1;var We1=O(()=>{PY();Sa8=Zv.extend({avatar:Xv.string().describe("URL or data URI to the assistant's avatar image"),system_prompt:Xv.string().describe("System prompt that defines the assistant's behavior"),virtual_mcp_id:Xv.string().describe("Virtual MCP ID to use for this assistant"),model:Xv.object({id:Xv.string().describe("Model ID"),connectionId:Xv.string().describe("Connection ID that provides the model")}).describe("Selected model reference for this assistant")}),Va8=Gv("assistant",Sa8),Je1=[...Va8]});import{z as I0}from"zod";var di,uU,Ue1,Ca8,_a8,we1,ba8,fa8,xa8,va8,ya8,ga8,Fe1,ha8,ca8,ua8,da8,la8,ma8,ia8,na8,pa8,ta8,uY5,ra8,dY5,Ke1,oa8,aa8,A50,lY5;var He1=O(()=>{BD();PY();di=I0.lazy(()=>I0.union([I0.null(),I0.string(),I0.number(),I0.boolean(),I0.record(I0.string(),di),I0.array(di)])),uU=I0.record(I0.string(),I0.record(I0.string(),di)).optional().describe("Additional provider-specific options. Outer record keyed by provider name, inner by option key"),Ue1=I0.object({type:I0.literal("text"),text:I0.string().describe("The text content"),providerOptions:uU}),Ca8=I0.object({type:I0.literal("text"),text:I0.string().describe("The text content"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),_a8=I0.string().describe("File data as URL string"),we1=I0.object({type:I0.literal("file"),filename:I0.string().optional().describe("Optional filename of the file"),data:_a8,mediaType:I0.string().describe("IANA media type of the file (e.g., image/png, audio/mp3)"),providerOptions:uU}),ba8=I0.object({type:I0.literal("file"),mediaType:I0.string().describe("IANA media type of the file (e.g., image/png, audio/mp3)"),data:I0.string().describe("Generated file data as base64 encoded string")}),fa8=I0.object({type:I0.literal("reasoning"),text:I0.string().describe("The reasoning text"),providerOptions:uU}),xa8=I0.object({type:I0.literal("reasoning"),text:I0.string().describe("The reasoning text"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),va8=I0.object({type:I0.literal("tool-call"),toolCallId:I0.string().describe("ID of the tool call, used to match with tool result"),toolName:I0.string().describe("Name of the tool being called"),input:I0.string().describe("Arguments of the tool call (JSON-serializable object matching tool input schema)"),providerExecuted:I0.boolean().optional().describe("Whether the tool call will be executed by the provider"),providerOptions:uU}),ya8=I0.object({type:I0.literal("tool-call"),toolCallId:I0.string().describe("ID of the tool call"),toolName:I0.string().describe("Name of the tool being called"),input:I0.string().describe("Stringified JSON object with the tool call arguments"),providerExecuted:I0.boolean().optional().describe("Whether the tool call will be executed by the provider"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),ga8=I0.union([I0.object({type:I0.literal("text"),value:I0.string()}),I0.object({type:I0.literal("json"),value:di}),I0.object({type:I0.literal("error-text"),value:I0.string()}),I0.object({type:I0.literal("error-json"),value:di}),I0.object({type:I0.literal("content"),value:I0.array(I0.union([I0.object({type:I0.literal("text"),text:I0.string().describe("Text content")}),I0.object({type:I0.literal("media"),data:I0.string().describe("Base-64 encoded media data"),mediaType:I0.string().describe("IANA media type")})]))}),I0.object({type:I0.literal("execution-denied"),reason:I0.string().optional()}),I0.string().describe("Raw or JSON-serialized output (e.g. from AI SDK mapToolResultOutput)")]),Fe1=I0.object({type:I0.literal("tool-result"),toolCallId:I0.string().describe("ID of the tool call that this result is associated with"),toolName:I0.string().describe("Name of the tool that generated this result"),output:ga8.describe("Result of the tool call"),result:I0.unknown().describe("Unknown result of the tool call"),providerOptions:uU}),ha8=I0.object({type:I0.literal("tool-result"),toolCallId:I0.string().describe("ID of the tool call that this result is associated with"),toolName:I0.string().describe("Name of the tool that generated this result"),result:I0.any().describe("Result of the tool call (JSON-serializable)"),isError:I0.boolean().optional().describe("Whether the result is an error or error message"),providerExecuted:I0.boolean().optional().describe("Whether the tool result was generated by the provider"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),ca8=I0.union([I0.object({type:I0.literal("source"),sourceType:I0.literal("url"),id:I0.string().describe("The ID of the source"),url:I0.string().describe("The URL of the source"),title:I0.string().optional().describe("The title of the source"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")}),I0.object({type:I0.literal("source"),sourceType:I0.literal("document"),id:I0.string().describe("The ID of the source"),mediaType:I0.string().describe("IANA media type of the document (e.g., application/pdf)"),title:I0.string().describe("The title of the document"),filename:I0.string().optional().describe("Optional filename of the document"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata")})]),ua8=I0.object({role:I0.literal("system"),content:I0.string().describe("System message content"),providerOptions:uU}),da8=I0.object({role:I0.literal("user"),content:I0.array(I0.union([Ue1,we1])).describe("User message content parts (text or file)"),providerOptions:uU}),la8=I0.object({role:I0.literal("assistant"),content:I0.array(I0.union([Ue1,we1,fa8,va8,Fe1])).describe("Assistant message content parts (text, file, reasoning, tool-call, or tool-result)"),providerOptions:uU}),ma8=I0.object({role:I0.literal("tool"),content:I0.array(Fe1).describe("Tool message content (tool results)"),providerOptions:uU}),ia8=I0.union([ua8,da8,la8,ma8]),na8=I0.array(ia8).describe("A list of messages forming the prompt"),pa8=I0.object({prompt:na8.describe("A language model prompt is a standardized prompt type (array of messages with roles: system, user, assistant, tool)"),maxOutputTokens:I0.number().optional().describe("Maximum number of tokens to generate"),temperature:I0.number().optional().describe("Temperature setting. The range depends on the provider and model"),topP:I0.number().optional().describe("Nucleus sampling parameter"),topK:I0.number().optional().describe("Only sample from the top K options for each subsequent token. Used to remove long tail low probability responses"),presencePenalty:I0.number().optional().describe("Presence penalty setting. It affects the likelihood of the model to repeat information that is already in the prompt"),frequencyPenalty:I0.number().optional().describe("Frequency penalty setting. It affects the likelihood of the model to repeatedly use the same words or phrases"),seed:I0.number().optional().describe("The seed (integer) to use for random sampling. If set and supported by the model, calls will generate deterministic results"),stopSequences:I0.array(I0.string()).optional().describe("Stop sequences. If set, the model will stop generating text when one of the stop sequences is generated"),responseFormat:I0.union([I0.object({type:I0.literal("text")}),I0.object({type:I0.literal("json"),schema:I0.any().optional().describe("JSON schema that the generated output should conform to"),name:I0.string().optional().describe("Name of output that should be generated"),description:I0.string().optional().describe("Description of the output that should be generated")})]).optional().describe("Response format. The output can either be text or JSON. Default is text"),tools:I0.array(I0.any()).optional().describe("The tools that are available for the model"),toolChoice:I0.any().optional().describe("Specifies how the tool should be selected. Defaults to 'auto'"),includeRawChunks:I0.boolean().optional().describe("Include raw chunks in the stream. Only applicable for streaming calls"),abortSignal:I0.any().optional().describe("Abort signal for cancelling the operation"),providerOptions:I0.any().optional().describe("Additional provider-specific options")}),ta8=I0.object({content:I0.array(I0.union([Ca8,ba8,xa8,ya8,ha8,ca8])).describe("Ordered content that the model has generated (text, tool-calls, reasoning, files, sources)"),finishReason:I0.enum(["stop","length","content-filter","tool-calls","error","other","unknown"]).describe("Reason why generation stopped"),usage:I0.looseObject({inputTokens:I0.number().optional(),outputTokens:I0.number().optional(),totalTokens:I0.number().optional(),reasoningTokens:I0.number().optional()}).describe("Usage information for the language model call"),providerMetadata:I0.any().optional().describe("Additional provider-specific metadata"),request:I0.object({body:I0.any().optional().describe("Request HTTP body sent to the provider API")}).optional().describe("Optional request information for telemetry and debugging"),response:I0.object({id:I0.string().optional().describe("ID for the generated response"),timestamp:I0.iso.datetime().optional().describe("Timestamp for the start of the generated response"),modelId:I0.string().optional().describe("The ID of the response model that was used"),headers:I0.record(I0.string(),I0.string()).optional().describe("Response headers"),body:I0.any().optional().describe("Response HTTP body")}).optional().describe("Optional response information for telemetry and debugging"),warnings:I0.array(I0.any()).describe("Warnings for the call, e.g. unsupported settings")}),uY5=I0.object({stream:I0.any().describe("ReadableStream of LanguageModelV2StreamPart"),request:I0.object({body:I0.any().optional().describe("Request HTTP body sent to the provider API")}).optional().describe("Optional request information for telemetry and debugging"),response:I0.object({headers:I0.record(I0.string(),I0.string()).optional().describe("Response headers")}).optional().describe("Optional response data")}),ra8=I0.object({supportedUrls:I0.record(I0.string(),I0.array(I0.string())).describe("Supported URL patterns by media type for the provider")}),dY5=I0.object({modelId:I0.string().describe("The ID of the model"),logo:I0.string().nullable(),description:I0.string().nullable(),capabilities:I0.array(I0.string()),limits:I0.object({contextWindow:I0.number(),maxOutputTokens:I0.number()}).nullable(),costs:I0.object({input:I0.number(),output:I0.number()}).nullable(),provider:I0.enum(["openai","anthropic","google","x-ai","deepseek","openai-compatible","openrouter"]).nullable()}),Ke1=I0.object({modelId:I0.string().describe("The ID of the model"),callOptions:pa8}),oa8=Zv.extend({logo:I0.string().nullable(),description:I0.string().nullable(),capabilities:I0.array(I0.string()),limits:I0.object({contextWindow:I0.number(),maxOutputTokens:I0.number()}).nullable(),costs:I0.object({input:I0.number(),output:I0.number()}).nullable(),provider:I0.enum(["openai","anthropic","google","xai","deepseek","openai-compatible","openrouter"]).nullable()}),aa8=Gv("llm",oa8,{readOnly:!0}),A50=[{name:"LLM_METADATA",inputSchema:I0.object({modelId:I0.string().describe("The ID of the model")}),outputSchema:ra8},{name:"LLM_DO_STREAM",inputSchema:Ke1},{name:"LLM_DO_GENERATE",inputSchema:Ke1,outputSchema:ta8},...aa8],lY5=CW(A50)});import{z as OD}from"zod";var sa8,Ne1;var Be1=O(()=>{sa8=OD.object({scopes:OD.array(OD.string()).describe("List of scopes available"),stateSchema:OD.record(OD.string(),OD.unknown()).describe("JSON Schema (draft-07) defining the state structure")}),Ne1=[{name:"MCP_CONFIGURATION",inputSchema:OD.object({}),outputSchema:sa8}]});import{z as x5}from"zod";var ea8,$s8,Oe1;var Ee1=O(()=>{ea8=x5.object({}).strict(),$s8=x5.object({billing:x5.object({mode:x5.enum(["prepaid","postpaid"]),limitPeriod:x5.enum(["daily","weekly","monthly"]).nullable()}),limit:x5.object({total:x5.number().nullable(),remaining:x5.number().nullable(),reset:x5.string().nullable()}),usage:x5.object({total:x5.number(),daily:x5.number(),weekly:x5.number(),monthly:x5.number()}),alert:x5.object({enabled:x5.boolean(),threshold_usd:x5.number(),email:x5.string().nullable()}),connectionId:x5.string()}),Oe1=[{name:"GATEWAY_USAGE",inputSchema:ea8,outputSchema:$s8},{name:"GATEWAY_SET_LIMIT",inputSchema:x5.object({}),outputSchema:x5.object({}),opt:!0},{name:"GATEWAY_SET_ALERT",inputSchema:x5.object({}),outputSchema:x5.object({}),opt:!0}]});function Zs8($,Z){if(Z.length===0)return;let[G,...X]=Z,Y=G==="slug"?rF($):$[G];for(let Q of X){if(Y===null||typeof Y!=="object")return;Y=Y[Q]}return Y}function Gs8($){let G=$.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/%/g,".*").replace(/_/g,".");return new RegExp(`^${G}$`,"i")}function Xs8($,Z,G){if($===void 0)return!0;switch(Z){case"eq":return G===null?$===null:$===G;case"gt":return $>G;case"gte":return $>=G;case"lt":return $<G;case"lte":return $<=G;case"in":return Array.isArray(G)&&G.includes($);case"like":return typeof $==="string"&&Gs8(String(G)).test($);case"contains":return String($).toLowerCase().includes(String(G).toLowerCase());default:return!0}}function li($,Z){if(!Z)return!0;if("conditions"in Z){let{operator:X,conditions:Y}=Z;if(Y.length===0)return!0;switch(X){case"and":return Y.every((Q)=>li($,Q));case"or":return Y.some((Q)=>li($,Q));case"not":return!Y.every((Q)=>li($,Q));default:return!0}}let G=Zs8($,Z.field);return Xs8(G,Z.operator,Z.value)}var De1=O(()=>{c$0()});async function Le1($,Z,G){if($.length===0)return;let X=0;async function Y(){while(X<$.length){let Q=X++;await G($[Q])}}await Promise.all(Array.from({length:Math.min(Z,$.length)},()=>Y()))}import{z as GN}from"zod";var Ys8=8,Qs8,Js8,Ws8,Ks8,tu0;var ze1=O(()=>{pu0();We1();PY();He1();Be1();yc();Ee1();f8();Q1();BG();KY();FD();Sb();JW();c$0();De1();Qs8=[{name:/^(COLLECTION_REGISTRY_APP_LIST|REGISTRY_ITEM_LIST)$/,inputSchema:GN.object({})}],Js8={LLM:A50,LLMS:A50,ASSISTANTS:Je1,MCP:Ne1,OBJECT_STORAGE:MO,AI_GATEWAY_BILLING:Oe1,TRIGGER:D50,REGISTRY:Qs8,BRAND:P50},Ws8=XJ.extend({binding:GN.union([GN.array(GN.object({}).passthrough()),GN.object({}).passthrough(),GN.string()]).optional(),include_virtual:GN.boolean().optional().describe("Whether to include VIRTUAL connections in the results. Defaults to false."),slug:GN.string().optional().describe("Filter by connection slug. Matches against app_name, or a slug derived from connection_url or title.")}),Ks8=cU(rZ),tu0=Z0({name:"COLLECTION_CONNECTIONS_LIST",description:"List all connections in the organization with filtering, sorting, and pagination",annotations:{title:"List Connections",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Ws8,outputSchema:Ks8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.binding?typeof $.binding==="string"?(()=>{let F=Js8[$.binding.toUpperCase()];if(!F)throw Error(`Unknown binding: ${$.binding}`);return F})():$.binding:void 0,Y=X?B50(X):void 0,Q=!!Y,J=$.limit??100,W=$.offset??0,{items:K,totalCount:U}=await Z.storage.connections.list(G.id,{includeVirtual:$.include_virtual??!1,slug:$.slug,where:$.where,orderBy:$.orderBy,limit:Q?void 0:J,offset:Q?void 0:W});if(Y){let F=t5(),H=Z4.SELF(G.id);await Le1(K,Ys8,async(N)=>{if(N.tools!==null)return;let B=N.id===H?async()=>{let{listManagementTools:D}=await Promise.resolve().then(() => (ED(),T50));return D(Z)}:()=>gu0(N,Z,jy1),E=await XH("tools",N.id,B,F,(D)=>Z.pendingRevalidations.push(D),GH);if(E!==null)N.tools=E})}if(C3()){let F=zZ(),H=Z4.DEV_ASSETS(G.id);if(!K.some((N)=>N.id===H)){let N=kb(G.id,F),B=!$.slug||rF(N)===$.slug,E=li(N,$.where);if(B&&E)K.unshift(N)}}if(Q){let F=(await Promise.all(K.map(async(E)=>{if(!E.tools||E.tools.length===0)return null;return Y.isImplementedBy(E.tools.map((L)=>({name:L.name,inputSchema:L.inputSchema,outputSchema:L.outputSchema})))?E:null}))).filter((E)=>E!==null),H=F.length,N=F.slice(W,W+J),B=W+J<H;return{items:N,totalCount:H,hasMore:B}}let w=W+J<U;return{items:K,totalCount:U,hasMore:w}}})});var Us8,ru0;var je1=O(()=>{PY();f8();Q1();BG();KY();FD();Sb();JW();Us8=gi(rZ),ru0=Z0({name:"COLLECTION_CONNECTIONS_GET",description:"Get a connection's configuration, tools list, and status by ID.",annotations:{title:"Get Connection",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:["app"]}},inputSchema:yi,outputSchema:Us8,handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),C3()&&c10($.id,G.id))return{item:kb(G.id,zZ())};let X=await Z.storage.connections.findById($.id);if(!X||X.organization_id!==G.id)return{item:null};if(X.tools===null){let Y=Z4.SELF(G.id),Q=X.id===Y?async()=>{let{listManagementTools:W}=await Promise.resolve().then(() => (ED(),T50));return W(Z)}:async()=>{let W=await $7(X,Z,!0);try{return(await W.listTools()).tools}finally{await W.close().catch(()=>{})}},J=await XH("tools",X.id,Q,t5(),(W)=>Z.pendingRevalidations.push(W),GH);if(J!==null)X.tools=J}return{item:X}}})});import{z as ou0}from"zod";function Hs8($,Z){return $.length===Z.length&&$.every((G,X)=>G===Z[X])}var ws8,Fs8,au0;var Pe1=O(()=>{FD();GJ();Q1();F8();KY();nl();hu0();zd();JW();ws8=ou0.object({id:ou0.string().describe("ID of the connection to update"),data:Iu.describe("Partial connection data to update")}),Fs8=ou0.object({item:rZ.describe("The updated connection entity")});au0=Z0({name:"COLLECTION_CONNECTIONS_UPDATE",description:"Update a connection's configuration. Re-fetches tools from the server on URL change.",annotations:{title:"Update Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ws8,outputSchema:Fs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update connection");let{id:Y,data:Q}=$,J=Q.configuration_state!==void 0||Q.configuration_scopes!==void 0,W=await Z.storage.connections.findById(Y);if(!W||W.organization_id!==G.id)throw Error("Connection not found in organization");let K=Q.connection_type??W.connection_type,U=Q.connection_url??W.connection_url;if(K==="VIRTUAL"){let f=cO(U);if(!f)throw Error("VIRTUAL connection requires connection_url in format: virtual://$virtual_mcp_id");let v=await Z.storage.virtualMcps.findById(f);if(!v)throw Error(`Virtual MCP not found: ${f}`);if(v.organization_id!==G.id)throw Error("Virtual MCP does not belong to the current organization");U=uO(f)}let w=Q.configuration_state??W.configuration_state??{},F=Q.configuration_scopes??W.configuration_scopes??[];if(J){if(Q.configuration_state!==void 0)w=Q.configuration_state??{};else if(w===null||w===void 0)w={};if(Q.configuration_scopes!==void 0)F=Q.configuration_scopes??[];if(F.length>0){let f=w;bi(f,F,G.id),await xi(f,F,G.id,Z)}}if(K==="STDIO"&&!O1().localMode)throw Error("STDIO connections are only available in local mode (--local-mode).");let H=Q.connection_token??W.connection_token;if(!H)try{let v=await new _5(Z.db,Z.vault).get(Y);if(v?.accessToken)H=v.accessToken}catch{}let N=await aF({id:W.id,title:Q.title??W.title,connection_type:K,connection_url:U,connection_token:H,connection_headers:Q.connection_headers??W.connection_headers}).catch(()=>null),B=N?.tools?.length?N.tools:null,E=!1;if(Q.configuration_scopes===void 0&&N?.scopes?.length)E=!Hs8(F,N.scopes),F=N.scopes;if(bi(w,F,G.id),E&&F.length>0)await xi(w,F,G.id,Z);let D=J||E,L=D?fi(w,F):[],z=D?fi(W.configuration_state??{},W.configuration_scopes??[]):[],j=W.configuration_state,P=j==null||Object.keys(j).length===0,A,M,S=async()=>{try{await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:Y,createdBy:X,grants:z})}catch(f){console.error("Failed to restore credential grants after credential vault mutation failed",f)}},q={...Q,connection_url:U,tools:null,configuration_state:w,configuration_scopes:F,updated_by:X},V={...W,...q};if(D)try{if(await Z.storage.connectionCredentialVault.replaceGrantsForSubject({organizationId:G.id,subjectConnectionId:Y,createdBy:X,grants:L}),L.length>0){if(!await Z.storage.connectionCredentialVault.findActiveWorkloadToken({organizationId:G.id,subjectConnectionId:Y})){let{plaintextToken:v,record:$0}=await Z.storage.connectionCredentialVault.createOrRotateWorkloadToken({organizationId:G.id,subjectConnectionId:Y});M=$0.id,A={baseUrl:Z.baseUrl,org:G.slug??G.id,subjectConnectionId:Y,token:v}}}}catch(f){if(M)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M});throw await S(),f}if(D&&w&&F)try{await(await $7(V,Z,!1)).callTool({name:"ON_MCP_CONFIGURATION",arguments:{state:w,scopes:F,firstRun:P,...A?{vault:A}:{}}})}catch(f){if(console.error("Failed to invoke ON_MCP_CONFIGURATION callback",f),M)throw await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M}),await S(),f}let i;try{i=await Z.storage.connections.update(Y,q)}catch(f){if(D){if(M)await Z.storage.connectionCredentialVault.revokeWorkloadToken({organizationId:G.id,subjectConnectionId:Y,tokenId:M});await S()}throw f}if(B)t5()?.set("tools",Y,B).catch(()=>{});return Kx(Y),{item:i}}})});import{z as Ns8}from"zod";var Bs8,su0;var Ae1=O(()=>{PY();R4();Q1();KY();nl();JW();Bs8=hi.extend({force:Ns8.boolean().optional().describe("If true, removes this connection from all agents that reference it before deleting")}),su0=Z0({name:"COLLECTION_CONNECTIONS_DELETE",description:"Permanently delete a connection. Set force=true to auto-remove from referencing Virtual MCPs.",annotations:{title:"Delete Connection",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Bs8,outputSchema:ci(rZ),handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.connections.findById($.id);if(!X)throw Error(`Connection not found: ${$.id}`);if(X.organization_id!==G.id)throw Error("Connection not found in organization");if(X.metadata?.isFixed===!0)throw Error("This connection is a fixed system connection and cannot be deleted");let Q=await Z.storage.virtualMcps.listByConnectionId(G.id,$.id);if(Q.length>0)if($.force)await Z.storage.virtualMcps.removeConnectionReferences($.id);else throw Error(JSON.stringify({code:"CONNECTION_IN_USE",agentNames:Q.map((K)=>K.title)}));await Z.storage.connections.delete($.id);let J=await Z.storage.organizationSettings.get(G.id);if(J?.registry_config){let{registries:K,blockedMcps:U}=J.registry_config;if($.id in K){let{[$.id]:w,...F}=K;await Z.storage.organizationSettings.upsert(G.id,{registry_config:{registries:F,blockedMcps:U}})}}t5()?.invalidate($.id).catch(()=>{}),Kx($.id);let W=y1(Z);if(W)i1.capture({distinctId:W,event:"connection_deleted",groups:{organization:G.id},properties:{connection_id:X.id,connection_type:X.connection_type,app_name:X.app_name??null,organization_id:G.id,forced:$.force??!1}});return{item:X}}})});import{z as Yv}from"zod";var eu0;var Te1=O(()=>{Q1();eu0=Z0({name:"CONNECTION_TEST",description:"Test connection health and latency",annotations:{title:"Test Connection",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:Yv.object({id:Yv.string()}),outputSchema:Yv.object({id:Yv.string(),healthy:Yv.boolean(),latencyMs:Yv.number()}),handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=await Z.storage.connections.findById($.id);if(!X||X.organization_id!==G.id)throw Error("Connection not found");let Y=await Z.storage.connections.testConnection($.id);return{id:$.id,...Y}}})});var Ie1=O(()=>{Cs1();ze1();je1();Pe1();Ae1();Te1()});import{sql as c6}from"kysely";import{z as _W}from"zod";function Re1($){if($===null||$===void 0)return"NULL";if(typeof $==="number")return String($);if(typeof $==="boolean")return $?"TRUE":"FALSE";if(typeof $==="string")return`'${$.replace(/'/g,"''")}'`;if($ instanceof Date)return`'${$.toISOString()}'`;return`'${JSON.stringify($).replace(/'/g,"''")}'`}function Ds8($,Z){let G=$;for(let Y=Z.length;Y>=1;Y--){let Q=`$${Y}`;if(G.includes(Q))G=G.replaceAll(Q,Re1(Z[Y-1]))}let X=[];for(let Y=0;Y<G.length;Y++)if(G[Y]==="?")X.push(Y);for(let Y=Math.min(X.length,Z.length)-1;Y>=0;Y--){let Q=X[Y],J=Re1(Z[Y]);G=G.slice(0,Q)+J+G.slice(Q+1)}return G}function qe1($){return $.replace(/-/g,"_")}function zs8($){return`app_${qe1($)}`}function js8($){return`app_role_${qe1($)}`}function Ps8($){if($ instanceof Error){let Z=$.message.toLowerCase(),G=$.code;return G==="3F000"||G==="42704"||G==="22023"||Z.includes("schema")&&Z.includes("does not exist")||Z.includes("role")&&Z.includes("does not exist")}return!1}async function As8($,Z,G){if(await c6`CREATE SCHEMA IF NOT EXISTS ${c6.id(Z)}`.execute($),!(await c6`
     SELECT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = ${G}) as exists
-  `.execute($)).rows[0]?.exists)await c6`CREATE ROLE ${c6.id(G)} NOLOGIN`.execute($);await c6`GRANT ${c6.id(G)} TO CURRENT_USER`.execute($),await c6`GRANT USAGE, CREATE ON SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL TABLES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL SEQUENCES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON TABLES TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON SEQUENCES TO ${c6.id(G)}`.execute($),await c6`REVOKE ALL ON SCHEMA public FROM ${c6.id(G)}`.execute($)}async function Ts8($,Z,G,X){try{return await $.transaction().execute(async(Y)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Y),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Y),await c6.raw(X).execute(Y)})}catch(Y){if(Ps8(Y))return await As8($,Z,G),await $.transaction().execute(async(Q)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Q),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Q),await c6.raw(X).execute(Q)});throw Y}}var Es8,Ls8,Me1;var ke1=O(()=>{Q1();Es8=_W.object({results:_W.array(_W.unknown()).optional(),success:_W.boolean().optional()});Ls8=_W.object({sql:_W.string().describe("The SQL query to run"),params:_W.array(_W.any()).describe("The parameters to pass to the SQL query").optional()});Me1=Z0({name:"DATABASES_RUN_SQL",description:"Run a SQL query in a connection-scoped isolated schema. Supports SELECT, DDL, and DML.",annotations:{title:"Run SQL Query",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Ls8,outputSchema:_W.object({result:_W.array(Es8)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Ds8($.sql,$.params||[]);if(!Z.connectionId)throw Error("Connection context required for database access");console.warn("DATABASES_RUN_SQL invoked",{"tool.deprecation_probe":"DATABASES_RUN_SQL","connection.id":Z.connectionId,"organization.id":Z.organization?.id??null,"user.id":Z.auth.user?.id??null});let X=zs8(Z.connectionId),Y=js8(Z.connectionId);return{result:[{results:(await Ts8(Z.db,X,Y,G)).rows,success:!0}]}}})});function I50($){let Z=$.access.getRole();if(!Z||!OQ.includes(Z))throw new qU("Only organization owners and admins can change org-wide pin status")}var $d0=O(()=>{m3();bE()});import{z as Ce1}from"zod";function Rs8(){let $=Se1[Math.floor(Math.random()*Se1.length)];return`icon://${Ve1[Math.floor(Math.random()*Ve1.length)]}?color=${$}`}var Se1,Ve1,qs8,Ms8,Zd0;var _e1=O(()=>{Q1();$H();$d0();_i();Se1=["red","orange","amber","yellow","lime","green","emerald","cyan","sky","blue","indigo","violet","purple","fuchsia","pink","rose"],Ve1=["Star01","Zap","Heart","Globe01","Compass03","Lightbulb02","Rocket01","Flag01","BookOpen01","Shield01","Key01","Diamond01","Cube01","Target04","Award01","Briefcase01","Coffee","Feather","Hexagon01","Layers3_01","Map01","Palette","Package","Terminal"];qs8=Ce1.object({data:ku.describe("Data for the new virtual MCP")}),Ms8=Ce1.object({item:oZ.describe("The created virtual MCP entity")}),Zd0=Z0({name:"COLLECTION_VIRTUAL_MCP_CREATE",description:"Create a Virtual MCP (agent) that aggregates tools from multiple connections into one endpoint. Pass `prompts` to seed the agent with kickstart prompts (conversation starters shown as icebreakers). Author them from the agent's role/instructions and the descriptions of the tools it will have, so the starters are coherent and immediately useful.",annotations:{title:"Create Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:qs8,outputSchema:Ms8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create virtual MCP");if($.data.pinned===!0)I50(Z);let{prompts:Y,...Q}=$.data,J={...Q,icon:Q.icon??Rs8()},W=await Z.storage.virtualMcps.create(G.id,X,J);if(Y?.length&&Z.orgFs&&W.id)await e40(Z.orgFs,W.id,X,Y);return{item:W}}})});function ks8($){let Z=[],G=0;while(G<$.length){let X=$[G];if(X==="%")Z.push(".*");else if(X==="_")Z.push(".");else if(/[.*+?^${}()|[\]\\]/.test(X))Z.push("\\"+X);else Z.push(X);G++}return Z.join("")}function XN($){return typeof $==="string"||typeof $==="number"}function Gd0($,Z){let G=Z.split("."),X=$;for(let Y of G){if(X==null||typeof X!=="object")return;X=X[Y]}return X}function Ss8($,Z){return $.connections.some((G)=>G.connection_id===Z)}function R50($,Z){if("conditions"in Z){let{operator:W,conditions:K}=Z;switch(W){case"and":return K.every((U)=>R50($,U));case"or":return K.some((U)=>R50($,U));case"not":return!K.every((U)=>R50($,U));default:return!0}}let{field:G,operator:X,value:Y}=Z,Q=G.join(".");if(Q==="connection_id"){if(X!=="eq"||typeof Y!=="string")return!1;return Ss8($,Y)}let J=Gd0($,Q);switch(X){case"eq":return J===Y;case"gt":return XN(J)&&XN(Y)&&J>Y;case"gte":return XN(J)&&XN(Y)&&J>=Y;case"lt":return XN(J)&&XN(Y)&&J<Y;case"lte":return XN(J)&&XN(Y)&&J<=Y;case"in":return Array.isArray(Y)&&Y.includes(J);case"like":if(typeof J!=="string"||typeof Y!=="string")return!1;if(Y.length>100)return!1;let W=ks8(Y);return new RegExp(`^${W}$`,"i").test(J);case"contains":if(typeof J!=="string"||typeof Y!=="string")return!1;return J.toLowerCase().includes(Y.toLowerCase());default:return!0}}function Vs8($,Z){return[...$].sort((G,X)=>{for(let Y of Z){let Q=Y.field.join("."),J=Gd0(G,Q),W=Gd0(X,Q),K=0;if(J==null&&W==null)continue;if(J==null)K=Y.nulls==="first"?-1:1;else if(W==null)K=Y.nulls==="first"?1:-1;else if(typeof J==="string"&&typeof W==="string")K=J.localeCompare(W);else if(typeof J==="number"&&typeof W==="number")K=J-W;else K=String(J).localeCompare(String(W));if(K!==0)return Y.direction==="desc"?-K:K}return 0})}var Cs8,_s8,Xd0;var be1=O(()=>{PY();Q1();$H();Cs8=XJ,_s8=cU(oZ),Xd0=Z0({name:"COLLECTION_VIRTUAL_MCP_LIST",description:"List all MCP virtual MCPs in the organization",annotations:{title:"List Virtual MCPs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Cs8,outputSchema:_s8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="connection_id"&&$.where.operator==="eq"&&typeof $.where.value==="string"?$.where.value:void 0,Y=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="pinned"&&$.where.operator==="eq"&&typeof $.where.value==="boolean"?$.where.value:void 0,J=X?await Z.storage.virtualMcps.listByConnectionId(G.id,X):await Z.storage.virtualMcps.list(G.id,Y!==void 0?{pinnedOnly:Y}:void 0);if($.where)J=J.filter((H)=>R50(H,$.where));if($.orderBy&&$.orderBy.length>0)J=Vs8(J,$.orderBy);let W=J.length,K=$.offset??0,U=$.limit??100,w=J.slice(K,K+U),F=K+U<W;return{items:w,totalCount:W,hasMore:F}}})});import{z as Yd0}from"zod";var bs8,fs8,Qd0;var fe1=O(()=>{Q1();$H();bs8=Yd0.object({id:Yd0.string().describe("ID of the virtual MCP to retrieve")}),fs8=Yd0.object({item:oZ.nullable().describe("The retrieved virtual MCP, or null if not found")}),Qd0=Z0({name:"COLLECTION_VIRTUAL_MCP_GET",description:"Get a Virtual MCP's configuration, connections, and virtual tools by ID.",annotations:{title:"Get Virtual MCP",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:bs8,outputSchema:fs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(X&&X.organization_id!==G.id)return{item:null};if(!X)return{item:null};return{item:X}}})});import{z as Jd0}from"zod";var xs8,vs8,Wd0;var xe1=O(()=>{Q1();_i();$H();$d0();xs8=Jd0.object({id:Jd0.string().describe("ID of the virtual MCP to update"),data:Su.describe("Partial virtual MCP data to update")}),vs8=Jd0.object({item:oZ.describe("The updated virtual MCP entity")}),Wd0=Z0({name:"COLLECTION_VIRTUAL_MCP_UPDATE",description:"Update a Virtual MCP's name, slug, connection list, or kickstart prompts. Pass `prompts` to replace the agent's conversation starters (full set; empty array clears them).",annotations:{title:"Update Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:xs8,outputSchema:vs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update virtual MCP");let Y=await Z.storage.virtualMcps.findById($.id);if(!Y)throw Error(`Virtual MCP not found: ${$.id}`);if(Y.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);let{prompts:Q,...J}=$.data;if(J.metadata&&Y.metadata)J.metadata={...Y.metadata,...J.metadata};if(J.pinned!==void 0&&J.pinned!==Y.pinned)I50(Z);let W=await Z.storage.virtualMcps.update($.id,X,J);if(Q!==void 0&&Z.orgFs)await e40(Z.orgFs,$.id,X,Q);return{item:W}}})});import{z as Kd0}from"zod";var ys8,gs8,Ud0;var ve1=O(()=>{ZN();GJ();Q1();_i();$H();ys8=Kd0.object({id:Kd0.string().describe("ID of the virtual MCP to delete")}),gs8=Kd0.object({item:oZ.describe("The deleted virtual MCP entity")}),Ud0=Z0({name:"COLLECTION_VIRTUAL_MCP_DELETE",description:"Permanently delete a Virtual MCP and its virtual tools.",annotations:{title:"Delete Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ys8,outputSchema:gs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(!X)throw Error(`Virtual MCP not found: ${$.id}`);if(X.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);if(await Z.storage.virtualMcps.delete($.id),Z.orgFs)await xu0(Z.orgFs,$.id,y1(Z)??"system");let Y=X.metadata?.githubRepo?.connectionId;if(Y)try{let Q=await Z.storage.connections.findById(Y,G.id);if(Q&&qQ(Q)){let W=await new _5(Z.db,Z.vault).get(Y);if(W?.accessToken)try{await fetch("https://api.github.com/installation/token",{method:"DELETE",headers:{Authorization:`Bearer ${W.accessToken}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"},signal:AbortSignal.timeout(5000)})}catch{}await Z.storage.connections.delete(Y)}}catch(Q){console.error("[VIRTUAL_MCP_DELETE] failed to tear down repo-scoped connection",{childConnectionId:Y,error:Q.message})}return{item:X}}})});import{z as zX}from"zod";var hs8,wd0;var ye1=O(()=>{Q1();hs8=zX.object({id:zX.string(),virtualMcpId:zX.string(),pluginId:zX.string(),connectionId:zX.string().nullable(),settings:zX.record(zX.string(),zX.unknown()).nullable(),createdAt:zX.string(),updatedAt:zX.string()}),wd0=Z0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_GET",description:"Get a plugin's current configuration for a specific virtual MCP.",annotations:{title:"Get Virtual MCP Plugin Config",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:zX.object({virtualMcpId:zX.string().describe("Virtual MCP ID"),pluginId:zX.string().describe("Plugin ID")}),outputSchema:zX.object({config:hs8.nullable()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X}=$,Y=await Z.storage.virtualMcpPluginConfigs.get(G,X);if(!Y)return{config:null};return{config:{id:Y.id,virtualMcpId:Y.virtualMcpId,pluginId:Y.pluginId,connectionId:Y.connectionId,settings:Y.settings,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}}}})});import{z as MZ}from"zod";var cs8,Fd0;var ge1=O(()=>{Q1();Sb();BG();cs8=MZ.object({id:MZ.string(),virtualMcpId:MZ.string(),pluginId:MZ.string(),connectionId:MZ.string().nullable(),settings:MZ.record(MZ.string(),MZ.unknown()).nullable(),createdAt:MZ.string(),updatedAt:MZ.string()}),Fd0=Z0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE",description:"Set or update a plugin's configuration for a specific virtual MCP.",annotations:{title:"Update Virtual MCP Plugin Config",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:MZ.object({virtualMcpId:MZ.string().describe("Virtual MCP ID"),pluginId:MZ.string().describe("Plugin ID"),connectionId:MZ.string().nullable().optional().describe("MCP connection to bind"),settings:MZ.record(MZ.string(),MZ.unknown()).nullable().optional().describe("Plugin-specific settings")}),outputSchema:MZ.object({config:cs8}),handler:async($,Z)=>{k0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X,connectionId:Y,settings:Q}=$,J=y1(Z),W=await Z.storage.connections.findById(G);if(!W)throw Error(`Connection not found: ${G}`);let K=Y?await Z.storage.connections.findById(Y):null;if(Y&&W.organization_id&&!K&&C3()){if(c10(Y,W.organization_id)){if(!J)throw Error("User ID required to create dev-assets connection");let w=kb(W.organization_id,zZ());await Z.storage.connections.create({...w,organization_id:W.organization_id,created_by:J})}}let U=await Z.storage.virtualMcpPluginConfigs.upsert(G,X,{connectionId:Y,settings:Q});return{config:{id:U.id,virtualMcpId:U.virtualMcpId,pluginId:U.pluginId,connectionId:U.connectionId,settings:U.settings,createdAt:U.createdAt instanceof Date?U.createdAt.toISOString():U.createdAt,updatedAt:U.updatedAt instanceof Date?U.updatedAt.toISOString():U.updatedAt}}}})});import{z as CG}from"zod";var us8,Hd0;var he1=O(()=>{Q1();$H();us8=CG.object({connectionId:CG.string(),toolName:CG.string(),label:CG.string(),icon:CG.string().nullable().optional()}),Hd0=Z0({name:"VIRTUAL_MCP_PINNED_VIEWS_UPDATE",description:"Update the pinned sidebar views for a virtual MCP. Replaces all current pins.",annotations:{title:"Update Pinned Views",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:CG.object({virtualMcpId:CG.string().describe("Virtual MCP ID"),pinnedViews:CG.array(us8).describe("Pinned views to set for the virtual MCP sidebar"),layout:CG.object({defaultMainView:CG.object({type:CG.string(),id:CG.string().optional(),toolName:CG.string().optional()}).nullable().optional(),chatDefaultOpen:CG.boolean().nullable().optional()}).optional()}),outputSchema:CG.object({item:oZ.nullable()}),handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let{virtualMcpId:X,pinnedViews:Y,layout:Q}=$,J=y1(Z),W=await Z.storage.virtualMcps.findById(X);if(!W)throw Error(`Virtual MCP not found: ${X}`);if(W.organization_id!==G.id)throw Error(`Virtual MCP not found: ${X}`);let K=W.metadata?.ui??{},U={...K,pinnedViews:Y.length>0?Y:null,layout:Q??K.layout??null};return{item:await Z.storage.virtualMcps.update(X,J??"system",{metadata:{...W.metadata,ui:U}})}}})});import{z as dU}from"zod";var ds8,ls8,Nd0;var ce1=O(()=>{Q1();ds8=dU.object({ids:dU.array(dU.string()).describe("Virtual MCP ids to look up")}),ls8=dU.object({items:dU.array(dU.object({id:dU.string(),last_used_at:dU.string().optional(),last_used_by:dU.string().optional()}))}),Nd0=Z0({name:"VIRTUAL_MCP_LAST_USED_LIST",description:"Get last-used info (timestamp + user) for one or more virtual MCPs, derived from the most recent thread per agent.",annotations:{title:"List Virtual MCP Last Used",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:ds8,outputSchema:ls8,handler:async($,Z)=>{k0(Z),O0(Z),await Z.access.check();let G=await Z.storage.threads.findLastUsedByVirtualMcpIds($.ids);return{items:$.ids.map((X)=>({id:X,last_used_at:G.get(X)?.last_used_at,last_used_by:G.get(X)?.last_used_by}))}}})});var ue1=O(()=>{_e1();be1();fe1();xe1();ve1();ye1();ge1();he1();ce1()});import{z as K5}from"zod";var Bd0;var de1=O(()=>{N5();Q1();Bd0=Z0({name:"MONITORING_LOG_GET",description:"Get a single monitoring log by ID with full input and output data.",annotations:{title:"Get Monitoring Log",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:K5.object({id:K5.string().describe("Log ID to fetch")}),outputSchema:K5.object({log:K5.object({id:K5.string().optional(),organizationId:K5.string(),connectionId:K5.string(),toolName:K5.string(),input:K5.record(K5.string(),K5.unknown()),output:K5.record(K5.string(),K5.unknown()),isError:K5.boolean(),errorMessage:K5.string().nullish(),durationMs:K5.number(),timestamp:K5.string(),userId:K5.string().nullish(),requestId:K5.string(),userAgent:K5.string().nullish(),virtualMcpId:K5.string().nullish(),properties:K5.record(K5.string(),K5.string()).nullish()}).nullable().describe("The monitoring log, or null if not found")}),handler:async($,Z)=>{await Z.access.check(),await dY();let G=O0(Z),X=await Z.storage.monitoring.getById(G.id,$.id);if(!X)return{log:null};return{log:{...X,timestamp:X.timestamp instanceof Date?X.timestamp.toISOString():X.timestamp}}}})});import{z as B8}from"zod";var is8,Od0;var le1=O(()=>{N5();Q1();is8=B8.object({id:B8.string().optional().describe("Unique log identifier"),organizationId:B8.string().describe("Organization ID"),connectionId:B8.string().describe("Connection ID"),toolName:B8.string().describe("Name of the tool that was called"),isError:B8.boolean().describe("Whether the call resulted in an error"),errorMessage:B8.string().nullish().describe("Error message if applicable"),durationMs:B8.number().describe("Call duration in milliseconds"),timestamp:B8.string().describe("ISO 8601 timestamp of the call"),userId:B8.string().nullish().describe("User who triggered the call"),requestId:B8.string().describe("Unique request identifier"),userAgent:B8.string().nullish().describe("Client identifier (x-mesh-client header)"),virtualMcpId:B8.string().nullish().describe("Virtual MCP (Agent) ID if routed through an agent"),properties:B8.record(B8.string(),B8.string()).nullish().describe("Custom key-value metadata attached to the log")}),Od0=Z0({name:"MONITORING_LOGS_LIST",description:"List monitoring logs for tool calls with filtering and pagination.",annotations:{title:"List Monitoring Logs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:B8.object({connectionId:B8.string().optional().describe("Filter by connection ID"),excludeConnectionIds:B8.array(B8.string()).optional().describe("Exclude logs from these connection IDs (e.g. system connections)"),virtualMcpId:B8.string().optional().describe("Filter by Virtual MCP (Agent) ID"),toolName:B8.string().optional().describe("Filter by tool name"),isError:B8.boolean().optional().describe("Filter by error status"),startDate:B8.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:B8.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),limit:B8.number().default(20).describe("Maximum number of results"),offset:B8.number().default(0).describe("Offset for pagination"),properties:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact property key=value matches"),propertyKeys:B8.array(B8.string()).optional().describe("Filter by logs that have these property keys"),propertyPatterns:B8.record(B8.string(),B8.string()).optional().describe("Filter by property value patterns (SQL LIKE, use % as wildcard)"),propertyInValues:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact match within comma-separated values (e.g., user_tags in 'Engineering')")}),outputSchema:B8.object({logs:B8.array(is8).describe("Array of monitoring logs"),total:B8.number().describe("Total number of logs matching filters"),offset:B8.number().describe("Current offset for pagination"),limit:B8.number().describe("Current limit for pagination")}),handler:async($,Z)=>{await dY();let G=O0(Z),Y=$.properties||$.propertyKeys||$.propertyPatterns||$.propertyInValues?{properties:$.properties,propertyKeys:$.propertyKeys,propertyPatterns:$.propertyPatterns,propertyInValues:$.propertyInValues}:void 0,Q={organizationId:G.id,connectionId:$.connectionId,excludeConnectionIds:$.excludeConnectionIds,virtualMcpId:$.virtualMcpId,toolName:$.toolName,isError:$.isError,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,limit:$.limit,offset:$.offset,propertyFilters:Y},J=await Z.storage.monitoring.query(Q);return{logs:J.logs.map(({input:W,output:K,...U})=>({...U,timestamp:U.timestamp instanceof Date?U.timestamp.toISOString():U.timestamp})),total:J.total,offset:$.offset,limit:$.limit}}})});import{z as w$}from"zod";var Ed0;var me1=O(()=>{N5();Q1();Ed0=Z0({name:"MONITORING_STATS",description:"Get aggregated statistics (counts, latency, error rates) for tool call monitoring.",annotations:{title:"Get Monitoring Stats",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:w$.object({startDate:w$.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:w$.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),interval:w$.string().regex(/^\d+[mhd]$/).optional().describe("Bucket interval for timeseries data (e.g. 1m, 5m, 2h, 1d). When provided, returns timeseries array."),connectionIds:w$.array(w$.string()).max(100).optional().describe("Filter by specific connection IDs (max 100)"),excludeConnectionIds:w$.array(w$.string()).max(100).optional().describe("Exclude specific connection IDs (max 100)"),toolNames:w$.array(w$.string()).max(100).optional().describe("Filter by specific tool names (max 100)"),status:w$.enum(["success","error"]).optional().describe("Filter metrics by execution status"),topN:w$.number().int().min(1).max(20).optional().describe("When provided with interval, also return top tools and their timeseries"),userIds:w$.array(w$.string()).max(100).optional().describe("Filter LLM usage by user IDs (only applied when llmUsage is true)"),llmUsage:w$.boolean().optional().describe("Aggregate LLM-call usage (tokens + USD cost) from raw log rows for the given connection. Returns token/cost totals and timeseries. Requires interval.")}),outputSchema:w$.object({totalCalls:w$.number().describe("Total number of tool calls"),errorRate:w$.number().optional().describe("Error rate as a decimal (0 to 1)"),avgDurationMs:w$.number().describe("Average call duration in milliseconds"),errorRatePercent:w$.string().optional().describe("Error rate as a percentage string"),totalErrors:w$.number().optional().describe("Total number of errors"),p50DurationMs:w$.number().optional().describe("50th percentile duration in milliseconds"),p95DurationMs:w$.number().optional().describe("95th percentile duration in milliseconds"),connectionBreakdown:w$.array(w$.object({connectionId:w$.string(),calls:w$.number(),errors:w$.number(),errorRate:w$.number(),avgDurationMs:w$.number()})).optional().describe("Per-connection metric breakdown"),totalInputTokens:w$.number().optional().describe("Total input tokens (LLM usage mode)"),totalOutputTokens:w$.number().optional().describe("Total output tokens (LLM usage mode)"),totalTokens:w$.number().optional().describe("Total tokens (LLM usage mode)"),totalCostUsd:w$.number().optional().describe("Total USD cost (LLM usage mode; only non-zero for providers that report cost)"),topTools:w$.array(w$.object({toolName:w$.string(),connectionId:w$.string().nullable(),calls:w$.number(),inputTokens:w$.number().optional(),outputTokens:w$.number().optional(),costUsd:w$.number().optional()})).optional().describe("Top tools ranked by calls"),topToolsTimeseries:w$.array(w$.object({timestamp:w$.string(),toolName:w$.string(),calls:w$.number(),errors:w$.number(),avg:w$.number(),p95:w$.number()})).optional().describe("Per-tool metric timeseries for the top tools"),timeseries:w$.array(w$.object({timestamp:w$.string(),calls:w$.number(),errors:w$.number(),errorRate:w$.number(),avg:w$.number(),p50:w$.number(),p95:w$.number(),inputTokens:w$.number().optional(),outputTokens:w$.number().optional(),totalTokens:w$.number().optional(),costUsd:w$.number().optional()})).optional().describe("Timeseries data points bucketed by interval")}),handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),await dY(),$.interval&&$.llmUsage)return Z.storage.monitoring.queryLlmUsageStats({organizationId:G.id,interval:$.interval,connectionId:$.connectionIds?.[0]??"decopilot",startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,userIds:$.userIds,topN:$.topN});if($.interval){let Y=await Z.storage.monitoring.queryMetricTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});if(!$.topN)return Y;let Q=await Z.storage.monitoring.queryMetricTopToolsTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,topN:$.topN,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});return{...Y,topTools:Q.topTools,topToolsTimeseries:Q.timeseries}}let X=await Z.storage.monitoring.getStats({organizationId:G.id,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0});return{...X,errorRatePercent:(X.errorRate*100).toFixed(2)}}})});import{z as _G}from"zod";var Dd0;var ie1=O(()=>{N5();Q1();Dd0=Z0({name:"MONITORING_THREAD_USAGE",description:"Aggregate LLM token usage and USD cost per thread for the given thread IDs.",annotations:{title:"Get Thread Usage",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:_G.object({threadIds:_G.array(_G.string()).min(1).max(500).describe("Thread IDs to aggregate usage for (max 500)"),connectionId:_G.string().optional().describe("LLM connection ID (defaults to 'decopilot')"),startDate:_G.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:_G.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)")}),outputSchema:_G.object({items:_G.array(_G.object({threadId:_G.string(),calls:_G.number(),inputTokens:_G.number(),outputTokens:_G.number(),totalTokens:_G.number(),costUsd:_G.number()}))}),handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),await dY(),{items:await Z.storage.monitoring.queryThreadUsage({organizationId:G.id,connectionId:$.connectionId??"decopilot",threadIds:$.threadIds,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0})}}})});var ne1=O(()=>{de1();le1();me1();ie1()});function q50($){return typeof $==="string"&&ps8.has($.trim().toLowerCase())}var ps8;var Ld0=O(()=>{ps8=new Set([".well-known","_admin","api","auth","cli","commerce-onboarding","dbos-queue-depth","health","hosted-run-pending","login","mcp","metrics","oauth","oauth-proxy","onboarding","org","report","reset-password"])});import{z as AY}from"zod";var zd0;var pe1=O(()=>{Q1();Ld0();zd0=Z0({name:"ORGANIZATION_CREATE",description:"Create a new organization. The caller becomes the owner automatically.",annotations:{title:"Create Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:AY.object({slug:AY.string().min(1).max(50).regex(/^[a-z0-9-]+$/,"Slug must be lowercase alphanumeric with hyphens").refine(($)=>!q50($),"Slug is reserved by Studio"),name:AY.string().min(1).max(255),description:AY.string().optional()}),outputSchema:AY.object({id:AY.string(),name:AY.string(),slug:AY.string(),logo:AY.string().nullable().optional(),metadata:AY.any().optional(),createdAt:AY.string().datetime().describe("ISO 8601 timestamp"),members:AY.array(AY.any()).optional()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to create organization");let X=await Z.boundAuth.organization.create({name:$.name,slug:$.slug,metadata:$.description?{description:$.description}:void 0,userId:G});if(!X)throw Error("Failed to create organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as YJ}from"zod";var jd0;var te1=O(()=>{Q1();jd0=Z0({name:"ORGANIZATION_LIST",description:"List organizations the current user belongs to.",annotations:{title:"List Organizations",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:"app"}},inputSchema:YJ.object({userId:YJ.string().optional()}),outputSchema:YJ.object({organizations:YJ.array(YJ.object({id:YJ.string(),name:YJ.string(),slug:YJ.string(),logo:YJ.string().nullable().optional(),metadata:YJ.any().optional(),createdAt:YJ.string().datetime().describe("ISO 8601 timestamp")}))}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=y1(Z),X=$.userId||G;if(!X)throw Error("User ID required to list organizations");return{organizations:(await Z.boundAuth.organization.list(X)).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as SQ}from"zod";var Pd0;var re1=O(()=>{Q1();Pd0=Z0({name:"ORGANIZATION_GET",description:"Get an organization's details, members, and settings by slug or ID.",annotations:{title:"Get Organization",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:SQ.object({}),outputSchema:SQ.object({id:SQ.string(),name:SQ.string(),slug:SQ.string(),logo:SQ.string().nullable().optional(),metadata:SQ.any().optional(),createdAt:SQ.string().datetime().describe("ISO 8601 timestamp"),members:SQ.array(SQ.any()).optional(),invitations:SQ.array(SQ.any()).optional()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.get(G);if(!X)throw Error("No active organization found");let Y=new Date,Q=X.invitations?.filter((J)=>new Date(J.expiresAt)>Y);return{...X,invitations:Q,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as QJ}from"zod";var Ad0;var oe1=O(()=>{Q1();Ad0=Z0({name:"ORGANIZATION_UPDATE",description:"Update an organization's name or description.",annotations:{title:"Update Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:QJ.object({id:QJ.string(),name:QJ.string().min(1).max(255).optional(),description:QJ.string().optional()}),outputSchema:QJ.object({id:QJ.string(),name:QJ.string(),slug:QJ.string(),logo:QJ.string().nullable().optional(),metadata:QJ.any().optional(),createdAt:QJ.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G={};if($.name)G.name=$.name;if($.description)G.metadata={description:$.description};let X=await Z.boundAuth.organization.update({organizationId:$.id,data:G});if(!X)throw Error("Failed to update organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as mi}from"zod";var Td0;var ae1=O(()=>{Q1();Td0=Z0({name:"ORGANIZATION_DELETE",description:"Archive an organization (soft delete).",annotations:{title:"Delete Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:mi.object({id:mi.string()}),outputSchema:mi.object({success:mi.boolean(),id:mi.string()}),handler:async($,Z)=>{return k0(Z),await Z.access.check(),await Z.boundAuth.organization.update({organizationId:$.id,data:{metadata:{archived:!0,archivedAt:new Date().toISOString()}}}),{success:!0,id:$.id}}})});import{z as h$}from"zod";var ii,ni,Qv,se1,M50,pi,ti,YN;var lU=O(()=>{ii=h$.object({title:h$.string(),url:h$.string(),icon:h$.string()}),ni=h$.object({registries:h$.record(h$.string(),h$.object({enabled:h$.boolean()})).describe("Per-registry enabled/disabled state. Key is connection ID. Absent registries are treated as enabled."),blockedMcps:h$.array(h$.string()).describe("List of MCP app_name or app_id values to hide from the store.")}),Qv=h$.object({keyId:h$.string(),modelId:h$.string(),title:h$.string().optional()}).nullable(),se1=h$.enum(["fast","smart","thinking","image","web_search","deep_research"]),M50=h$.enum(["fast","smart","thinking"]),pi=h$.object({tiers:h$.object({fast:Qv,smart:Qv,thinking:Qv,image:Qv,web_search:Qv,deep_research:Qv})}),ti=h$.object({ids:h$.array(h$.string()).describe("Ordered list of custom virtual MCP agent ids to show on the home view.")}),YN=h$.object({id:h$.string().describe("Brand context ID"),name:h$.string().describe("Company name"),domain:h$.string().describe("Company domain (e.g. example.com)"),overview:h$.string().describe("Company overview / description"),logo:h$.string().nullable().optional().describe("Logo URL"),favicon:h$.string().nullable().optional().describe("Favicon URL"),ogImage:h$.string().nullable().optional().describe("OG image URL"),fonts:h$.object({heading:h$.string().optional().describe("Font family for headings"),body:h$.string().optional().describe("Font family for body text"),code:h$.string().optional().describe("Font family for code / monospace")}).nullable().optional().describe("Font families by semantic role"),colors:h$.object({primary:h$.string().optional().describe("Primary brand color (hex)"),secondary:h$.string().optional().describe("Secondary brand color (hex)"),accent:h$.string().optional().describe("Accent / highlight color (hex)"),background:h$.string().optional().describe("Background color (hex)"),foreground:h$.string().optional().describe("Foreground / text color (hex)")}).nullable().optional().describe("Semantic color palette"),images:h$.array(h$.record(h$.string(),h$.unknown())).nullable().optional().describe("Brand images"),metadata:h$.record(h$.string(),h$.unknown()).nullable().optional().describe("Extra design tokens (typography, components, spacing, layout, tone, etc.)"),archivedAt:h$.string().nullable().optional().describe("Archive timestamp (null to unarchive)"),isDefault:h$.boolean().optional().describe("Whether this is the default brand for the organization")})});import{z as bW}from"zod";var Id0;var ee1=O(()=>{Q1();lU();Id0=Z0({name:"ORGANIZATION_SETTINGS_GET",description:"Get organization-level settings including sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Get Organization Settings",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:bW.object({}),outputSchema:bW.object({organizationId:bW.string(),sidebar_items:bW.array(ii).nullable().optional(),enabled_plugins:bW.array(bW.string()).nullable().optional(),registry_config:ni.nullable().optional(),simple_mode:pi.nullable().optional(),default_home_agents:ti.nullable().optional(),reports_only:bW.boolean().nullable().optional(),task_board_enabled:bW.boolean().optional(),createdAt:bW.string().datetime().optional().describe("ISO 8601 timestamp"),updatedAt:bW.string().datetime().optional().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.organizationSettings.get(G);if(!X)return{organizationId:G};return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as n7}from"zod";var Rd0;var $0$=O(()=>{Q1();lU();Rd0=Z0({name:"ORGANIZATION_SETTINGS_UPDATE",description:"Update organization-level settings such as sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Update Organization Settings",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:n7.object({organizationId:n7.string(),sidebar_items:n7.array(ii).optional(),enabled_plugins:n7.array(n7.string()).optional(),registry_config:ni.optional(),simple_mode:pi.optional(),default_home_agents:ti.optional(),reports_only:n7.boolean().optional(),task_board_enabled:n7.boolean().optional()}),outputSchema:n7.object({organizationId:n7.string(),sidebar_items:n7.array(ii).nullable().optional(),enabled_plugins:n7.array(n7.string()).nullable().optional(),registry_config:ni.nullable().optional(),simple_mode:pi.nullable().optional(),default_home_agents:ti.nullable().optional(),reports_only:n7.boolean().nullable().optional(),task_board_enabled:n7.boolean().optional(),createdAt:n7.string().datetime().describe("ISO 8601 timestamp"),updatedAt:n7.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{if(k0(Z),await Z.access.check(),Z.organization&&Z.organization.id!==$.organizationId)throw Error("Cannot update settings for a different organization");let G=await Z.storage.organizationSettings.upsert($.organizationId,{sidebar_items:$.sidebar_items,enabled_plugins:$.enabled_plugins,registry_config:$.registry_config,simple_mode:$.simple_mode,default_home_agents:$.default_home_agents,reports_only:$.reports_only,task_board_enabled:$.task_board_enabled});return{...G,createdAt:G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,updatedAt:G.updatedAt instanceof Date?G.updatedAt.toISOString():G.updatedAt}}})});import{z as JJ}from"zod";var Z0$,qd0,Md0;var G0$=O(()=>{Q1();lU();Z0$=YN.extend({organizationId:JJ.string(),archivedAt:JJ.string().nullable().optional().describe("ISO 8601 timestamp"),createdAt:JJ.string().describe("ISO 8601 timestamp"),updatedAt:JJ.string().describe("ISO 8601 timestamp")}),qd0=Z0({name:"BRAND_CONTEXT_LIST",description:"List all brand contexts (company profiles) for the current organization.",annotations:{title:"List Brand Contexts",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:JJ.object({includeArchived:JJ.boolean().optional().describe("Include archived brands in the list")}),outputSchema:JJ.object({items:JJ.array(Z0$)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G,{includeArchived:$.includeArchived})).map((Y)=>({...Y,archivedAt:Y.archivedAt instanceof Date?Y.archivedAt.toISOString():Y.archivedAt,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}))}}}),Md0=Z0({name:"BRAND_CONTEXT_GET",description:"Get a specific brand context by ID.",annotations:{title:"Get Brand Context",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:JJ.object({id:JJ.string().describe("Brand context ID")}),outputSchema:Z0$.extend({organizationId:JJ.string()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.get($.id,G);if(!X)throw Error("Brand context not found");return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as DD}from"zod";var X0$,kd0,Sd0,Vd0;var Y0$=O(()=>{Q1();lU();X0$=YN.extend({organizationId:DD.string(),createdAt:DD.string().describe("ISO 8601 timestamp"),updatedAt:DD.string().describe("ISO 8601 timestamp")}),kd0=Z0({name:"BRAND_CONTEXT_CREATE",description:"Create a new brand context (company profile) for the current organization.",annotations:{title:"Create Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},inputSchema:YN.omit({id:!0}),outputSchema:X0$,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.create(G,{name:$.name,domain:$.domain,overview:$.overview,logo:$.logo??null,favicon:$.favicon??null,ogImage:$.ogImage??null,fonts:$.fonts??null,colors:$.colors??null,images:$.images??null,metadata:$.metadata??null});return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}}),Sd0=Z0({name:"BRAND_CONTEXT_UPDATE",description:"Update an existing brand context by ID.",annotations:{title:"Update Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:YN.partial().required({id:!0}),outputSchema:X0$,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");let{id:Y,...Q}=$;if(Q.isDefault===!0)await Z.storage.brandContext.setDefault(Y,G);let J=await Z.storage.brandContext.update(Y,G,{name:Q.name,domain:Q.domain,overview:Q.overview,logo:Q.logo!==void 0?Q.logo??null:void 0,favicon:Q.favicon!==void 0?Q.favicon??null:void 0,ogImage:Q.ogImage!==void 0?Q.ogImage??null:void 0,fonts:Q.fonts!==void 0?Q.fonts??null:void 0,colors:Q.colors!==void 0?Q.colors??null:void 0,images:Q.images!==void 0?Q.images??null:void 0,metadata:Q.metadata!==void 0?Q.metadata??null:void 0,archivedAt:Q.archivedAt!==void 0?Q.archivedAt??null:void 0,isDefault:Q.isDefault===!1?!1:void 0});return{...J,archivedAt:J.archivedAt instanceof Date?J.archivedAt.toISOString():J.archivedAt,createdAt:J.createdAt instanceof Date?J.createdAt.toISOString():J.createdAt,updatedAt:J.updatedAt instanceof Date?J.updatedAt.toISOString():J.updatedAt}}}),Vd0=Z0({name:"BRAND_CONTEXT_DELETE",description:"Archive a brand context by ID (soft delete).",annotations:{title:"Archive Brand Context",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:DD.object({id:DD.string().describe("Brand context ID")}),outputSchema:DD.object({success:DD.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");return await Z.storage.brandContext.update($.id,G,{archivedAt:new Date().toISOString(),isDefault:!1}),{success:!0}}})});async function k50($,Z,G){let X=$.trim();if(!X.startsWith("http"))X=`https://${X}`;let Y=await fetch("https://api.firecrawl.dev/v1/scrape",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${Z}`},body:JSON.stringify({url:X,formats:["branding"]})});if(!Y.ok){let H=await Y.text().catch(()=>"");throw Error(`Firecrawl API error: ${Y.status} ${H.slice(0,200)}`)}let Q=await Y.json();if(!Q.success||!Q.data?.branding)return null;let J=Q.data.branding,W=Q.data.metadata??{},K=os8(J,W);return{name:W.title?.split(/[|\u2013\u2014]|\s+-\s+/).map((H)=>H.trim()).filter(Boolean)?.slice().sort((H,N)=>H.length-N.length)[0]??W.ogSiteName??G??$,domain:$,overview:W.description??"",logo:K.logo,favicon:K.favicon,ogImage:K.ogImage,fonts:K.fonts,colors:K.colors,images:null,metadata:Object.keys(K.metadata).length>0?K.metadata:null}}function os8($,Z){let G=$.images??{},X=$.colors??{},Y={};for(let[w,F]of Object.entries(X))if(typeof F==="string"&&F&&ts8.has(w))Y[w]=F;let Q={},W=($.typography??{}).fontFamilies??{};for(let[w,F]of Object.entries(W))if(typeof F==="string"&&F){let H=rs8[w.toLowerCase()];if(H&&!Q[H])Q[H]=F}let K=$.fonts;if(Array.isArray(K))for(let w of K){let F=w.family;if(typeof F==="string"&&F&&!Q.body)Q.body=F}let U={};for(let w of["typography","components","spacing","layout","animations","icons","tone","personality","colorScheme"])if($[w]!==void 0)U[w]=$[w];return{logo:G.logo??null,favicon:G.favicon??null,ogImage:G.ogImage??Z.ogImage??null,fonts:Object.keys(Q).length>0?Q:null,colors:Object.keys(Y).length>0?Y:null,metadata:U}}var ts8,rs8;var Cd0=O(()=>{ts8=new Set(["primary","secondary","accent","background","foreground"]),rs8={heading:"heading",headings:"heading",head:"heading",title:"heading",body:"body",primary:"body",text:"body",code:"code",monospace:"code",mono:"code"}});import{z as S50}from"zod";var as8,_d0;var Q0$=O(()=>{Q1();Cd0();lU();as8=YN.pick({id:!0,name:!0,domain:!0,overview:!0,logo:!0,favicon:!0,ogImage:!0,fonts:!0,colors:!0}).extend({success:S50.boolean()}),_d0=Z0({name:"BRAND_CONTEXT_EXTRACT",description:"Extract brand context (colors, fonts, logos) from a website URL using Firecrawl.",annotations:{title:"Extract Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:S50.object({domain:S50.string().describe("Website domain to extract brand from"),brandId:S50.string().optional().describe("Existing brand context ID to update (creates new if omitted)")}),outputSchema:as8,modelSummary:($)=>$.success?`Brand saved (id=${$.id}, name=${$.name}, domain=${$.domain}). The UI rendered the logo, colors, fonts, and overview.`:"Brand extraction failed.",handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Z.firecrawlApiKey;if(!X)throw Error("FIRECRAWL_API_KEY is not configured. Set the environment variable to enable brand extraction.");let Y=await k50($.domain,X,$.domain);if(!Y)throw Error("Firecrawl did not return branding data for this URL");let Q={name:Y.name,domain:Y.domain,overview:Y.overview,logo:Y.logo,favicon:Y.favicon,ogImage:Y.ogImage,fonts:Y.fonts,colors:Y.colors,images:Y.images,metadata:Y.metadata},J=$.brandId?await(async()=>{if(!await Z.storage.brandContext.get($.brandId,G))throw Error("Brand context not found");return Z.storage.brandContext.update($.brandId,G,Q)})():await Z.storage.brandContext.create(G,Q);return{id:J.id,name:J.name,domain:J.domain,overview:J.overview,logo:J.logo,favicon:J.favicon,ogImage:J.ogImage,fonts:J.fonts,colors:J.colors,success:!0}}})});function J0$($){let Z=$.metadata??{};return{id:$.id,name:$.name,domain:$.domain||void 0,colors:$.colors??void 0,fonts:$.fonts??void 0,assets:$.logo||$.favicon||$.ogImage?{logo:$.logo??void 0,favicon:$.favicon??void 0,ogImage:$.ogImage??void 0}:void 0,overview:$.overview||void 0,tagline:typeof Z.tagline==="string"?Z.tagline:void 0,tone:typeof Z.tone==="string"?Z.tone:void 0,metadata:(()=>{let G=Object.fromEntries(Object.entries(Z).filter(([X])=>X!=="tagline"&&X!=="tone"));return Object.keys(G).length>0?G:void 0})()}}var bd0,fd0;var W0$=O(()=>{nu0();Q1();bd0=Z0({name:"BRAND_GET",description:"Get a brand context by ID. Omit the ID to get the default brand for the organization.",annotations:{title:"Get Brand",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:L50,outputSchema:ui,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=$.id?await Z.storage.brandContext.get($.id,G):await Z.storage.brandContext.getDefault(G);if(!X)throw Error($.id?"Brand not found":"No default brand configured");return J0$(X)}}),fd0=Z0({name:"BRAND_LIST",description:"List all active brands for the current organization.",annotations:{title:"List Brands",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:z50,outputSchema:j50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G)).map(J0$)}}})});import{resolveTxt as ss8}from"dns/promises";function xd0($){return`${es8}.${$.toLowerCase()}`}function K0$(){return`deco-verify-${crypto.randomUUID().replace(/-/g,"")}`}async function U0$($,Z,G=ss8){if(!Z)return!1;try{return(await G(xd0($))).some((Y)=>Y.join("").trim()===Z)}catch{return!1}}var es8="_deco-verify";var w0$=()=>{};import{z as A5}from"zod";function QN($){let Z=$.verificationStatus==="pending"&&Boolean($.verificationToken);return{id:$.id,domain:$.domain,joinMode:$.joinMode,verificationStatus:$.verificationStatus,verificationMethod:$.verificationMethod,verifiedAt:$.verifiedAt?new Date($.verifiedAt).toISOString():null,recordName:Z?xd0($.domain):null,recordValue:Z?$.verificationToken:null}}function Ze8($){let Z=$.toLowerCase().trim();if(!$e8.test(Z))throw Error(`Invalid domain format: "${Z}". Must be a valid domain like "acme.com"`);if(WJ.has(Z))throw Error(`Cannot claim generic email domain "${Z}". Only corporate domains are allowed.`);return Z}var $e8,vd0,V50,yd0,gd0,hd0,cd0,ud0;var F0$=O(()=>{KJ();w0$();Q1();$e8=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/,vd0=A5.enum(["off","auto","request"]),V50=A5.object({id:A5.string(),domain:A5.string(),joinMode:vd0,verificationStatus:A5.enum(["pending","verified"]),verificationMethod:A5.enum(["email","dns"]).nullable(),verifiedAt:A5.string().nullable(),recordName:A5.string().nullable(),recordValue:A5.string().nullable()});yd0=Z0({name:"ORGANIZATION_DOMAIN_LIST",description:"List the email domains claimed by an organization.",annotations:{title:"List Organization Domains",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({}),outputSchema:A5.object({domains:A5.array(V50)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z);return{domains:(await Z.storage.organizationDomains.listByOrganizationId(G.id)).map(QN)}}}),gd0=Z0({name:"ORGANIZATION_DOMAIN_ADD",description:"Claim an email domain for an organization. If the caller's verified email matches the domain it is trusted immediately; otherwise it requires DNS verification.",annotations:{title:"Add Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({domain:A5.string().min(1).max(255).describe("Domain to claim, e.g. acme.com"),joinMode:vd0.optional().describe("Initial join mode (only applied when the domain is trusted immediately via email match).")}),outputSchema:V50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=Ze8($.domain),Q=Z.auth.user?.email?.split("@")[1]?.toLowerCase(),J=Boolean(Z.auth.user?.emailVerified)&&Q===X,W=await Z.storage.organizationDomains.getByOrgAndDomain(G.id,X);if(W){if(W.verificationStatus!=="verified"&&J){let U=await Z.storage.organizationDomains.markVerified(W.id,"email");return QN(U)}return QN(W)}let K=J?await Z.storage.organizationDomains.add(G.id,X,{joinMode:$.joinMode??"off",verificationStatus:"verified",verificationMethod:"email"}):await Z.storage.organizationDomains.add(G.id,X,{joinMode:"off",verificationStatus:"pending",verificationToken:K0$()});return QN(K)}}),hd0=Z0({name:"ORGANIZATION_DOMAIN_UPDATE",description:"Set the join mode for a claimed domain. Discoverable modes (auto/request) require the domain to be verified.",annotations:{title:"Update Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({id:A5.string(),joinMode:vd0}),outputSchema:V50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if($.joinMode!=="off"&&X.verificationStatus!=="verified")throw Error("Verify the domain before enabling auto-join or requests.");let Y=await Z.storage.organizationDomains.updateJoinMode($.id,$.joinMode);return QN(Y)}}),cd0=Z0({name:"ORGANIZATION_DOMAIN_VERIFY",description:"Check the DNS TXT record for a pending domain and mark it verified if present.",annotations:{title:"Verify Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:A5.object({id:A5.string()}),outputSchema:A5.object({verified:A5.boolean(),domain:V50}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if(X.verificationStatus==="verified")return{verified:!0,domain:QN(X)};if(!X.verificationToken)throw Error("Domain has no pending DNS verification.");if(!await U0$(X.domain,X.verificationToken))return{verified:!1,domain:QN(X)};let Q=await Z.storage.organizationDomains.markVerified($.id,"dns");return{verified:!0,domain:QN(Q)}}}),ud0=Z0({name:"ORGANIZATION_DOMAIN_REMOVE",description:"Remove a claimed domain from an organization.",annotations:{title:"Remove Organization Domain",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({id:A5.string()}),outputSchema:A5.object({success:A5.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");return await Z.storage.organizationDomains.removeById($.id),{success:!0}}})});function JN($){return($ instanceof Error?$.message.toLowerCase():"").includes("already a member")}import{z as E9}from"zod";var Ge8,dd0,ld0,md0;var H0$=O(()=>{Q1();R4();Ge8=E9.object({id:E9.string(),userId:E9.string(),status:E9.enum(["pending","approved","denied"]),createdAt:E9.string(),user:E9.object({id:E9.string(),name:E9.string(),email:E9.string(),image:E9.string().nullable()}).nullable()}),dd0=Z0({name:"ORGANIZATION_JOIN_REQUEST_LIST",description:"List pending requests to join the organization.",annotations:{title:"List Join Requests",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({}),outputSchema:E9.object({requests:E9.array(Ge8)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z);return{requests:(await Z.storage.organizationJoinRequests.listPendingWithUser(G.id)).map((Y)=>({id:Y.id,userId:Y.userId,status:Y.status,createdAt:new Date(Y.createdAt).toISOString(),user:Y.user}))}}}),ld0=Z0({name:"ORGANIZATION_JOIN_REQUEST_APPROVE",description:"Approve a pending join request, adding the user as a member.",annotations:{title:"Approve Join Request",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(!await Z.storage.organizationJoinRequests.decide(X.id,"approved",Y??X.userId))return{success:!0};try{await Z.boundAuth.organization.addMember({organizationId:G.id,userId:X.userId,role:["user"]})}catch(J){if(!JN(J))throw J}if(Y)i1.capture({distinctId:Y,event:"organization_join_request_approved",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}}),md0=Z0({name:"ORGANIZATION_JOIN_REQUEST_DENY",description:"Deny a pending join request.",annotations:{title:"Deny Join Request",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(await Z.storage.organizationJoinRequests.decide(X.id,"denied",Y??X.userId)&&Y)i1.capture({distinctId:Y,event:"organization_join_request_denied",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}})});import{z as jX}from"zod";var id0;var N0$=O(()=>{R4();Q1();m3();id0=Z0({name:"ORGANIZATION_MEMBER_ADD",description:"Invite a member to the organization by email with an assigned role.",annotations:{title:"Add Organization Member",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:jX.object({organizationId:jX.string().optional(),userId:jX.string(),role:jX.array(jX.string())}),outputSchema:jX.object({id:jX.string(),organizationId:jX.string(),userId:jX.string(),role:jX.union([jX.string(),jX.array(jX.string())]),createdAt:jX.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(G!==Z.organization?.id)throw Error("Organization ID does not match authenticated organization");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!P60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.addMember({organizationId:G,userId:$.userId,role:$.role});if(!Y)throw Error("Failed to add member");let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_added",groups:{organization:G},properties:{organization_id:G,added_user_id:$.userId,role:$.role}});return{...Y,role:Y.role,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});import{z as Jv}from"zod";var nd0;var B0$=O(()=>{R4();Q1();nd0=Z0({name:"ORGANIZATION_MEMBER_REMOVE",description:"Remove a member from the organization. Revokes all their access immediately.",annotations:{title:"Remove Organization Member",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Jv.object({organizationId:Jv.string().optional(),memberIdOrEmail:Jv.string()}),outputSchema:Jv.object({success:Jv.boolean(),memberIdOrEmail:Jv.string()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");await Z.boundAuth.organization.removeMember({organizationId:G,memberIdOrEmail:$.memberIdOrEmail});let X=y1(Z);if(X)i1.capture({distinctId:X,event:"organization_member_removed",groups:{organization:G},properties:{organization_id:G,member_id_or_email:$.memberIdOrEmail}});return{success:!0,memberIdOrEmail:$.memberIdOrEmail}}})});import{z as p7}from"zod";var pd0;var O0$=O(()=>{Q1();pd0=Z0({name:"ORGANIZATION_MEMBER_LIST",description:"List all members in the organization with their roles.",annotations:{title:"List Organization Members",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:p7.object({limit:p7.number().optional(),offset:p7.number().optional()}),outputSchema:p7.object({members:p7.array(p7.object({id:p7.string(),organizationId:p7.string(),userId:p7.string(),role:p7.string(),createdAt:p7.string().datetime().describe("ISO 8601 timestamp"),user:p7.object({id:p7.string(),name:p7.string(),email:p7.string(),image:p7.string().optional()}).optional()}))}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.listMembers({organizationId:G,limit:$.limit,offset:$.offset});return{members:(Array.isArray(X)?X:[]).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as kZ}from"zod";var td0;var E0$=O(()=>{R4();Q1();m3();td0=Z0({name:"ORGANIZATION_MEMBER_UPDATE_ROLE",description:"Change a member's role (e.g., admin, member) within the organization.",annotations:{title:"Update Member Role",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:kZ.object({organizationId:kZ.string().optional(),memberId:kZ.string(),role:kZ.array(kZ.string())}),outputSchema:kZ.object({id:kZ.string(),organizationId:kZ.string(),userId:kZ.string(),role:kZ.union([kZ.literal("admin"),kZ.literal("member"),kZ.literal("owner")]),createdAt:kZ.string().datetime().describe("ISO 8601 timestamp"),user:kZ.object({email:kZ.string(),name:kZ.string(),image:kZ.string().optional()})}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!P60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.updateMemberRole({organizationId:G,memberId:$.memberId,role:$.role});if(!Y)throw Error("Failed to update member role");Z.invalidateMemberRole?.(Y.userId,G);let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_role_updated",groups:{organization:G},properties:{organization_id:G,member_id:$.memberId,target_user_id:Y.userId,new_role:Array.isArray($.role)?$.role.join(","):$.role}});return{...Y,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});var D0$=O(()=>{pe1();te1();re1();oe1();ae1();ee1();$0$();G0$();Y0$();Q0$();W0$();F0$();H0$();N0$();B0$();O0$();E0$()});var WN="super-agent",L0$="task-board.item.updated";import{z as v5}from"zod";var ri,oi,Ye8,Wv;var ai=O(()=>{ri=v5.enum(["triage","todo","in_progress","in_review","done"]),oi=v5.enum(["low","medium","high","urgent"]),Ye8=v5.object({threadId:v5.string(),virtualMcpId:v5.string().nullable(),status:v5.enum(["in_progress","requires_action","failed","completed","expired"]).nullable(),title:v5.string().nullable(),lastMessage:v5.string().nullable(),hasPreview:v5.boolean(),createdAt:v5.string()}),Wv=v5.object({id:v5.string(),organizationId:v5.string(),title:v5.string(),description:v5.string().nullable(),status:ri,priority:oi,assigneeId:v5.string().nullable(),assignedBy:v5.string().nullable(),dueDate:v5.string().datetime().nullable(),threads:v5.array(Ye8),createdBy:v5.string(),createdAt:v5.string().datetime(),updatedBy:v5.string(),updatedAt:v5.string().datetime()})});async function C50($,Z,G){if(G===WN)return;let{members:X}=await $.boundAuth.organization.listMembers({organizationId:Z,filterField:"userId",filterValue:G});if(!X.some((Y)=>Y.userId===G))throw Error("assigneeId is not a member of the organization")}var rd0=O(()=>{ai()});async function KN($,Z){if(!(await $.storage.organizationSettings.get(Z))?.task_board_enabled)throw Error("Task board is not enabled for this organization")}async function od0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),Qe8)})])}finally{if(X)clearTimeout(X)}}function Je8($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function ad0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function UJ($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((w)=>w.id===Y.keyId)){let w=await od0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:ad0(w,Y.modelId,Y.title)}}if(Q.length===0)throw new Kv(Z);let J={};await Promise.all(Q.map(async(w)=>{J[w.id]=await od0($,w.id,G).catch(()=>[])}));let W=Q.map((w)=>({id:w.id,providerId:w.providerId,label:w.label,presetId:w.presetId,createdBy:w.createdBy,createdAt:w.createdAt})),K=qb0(W,J),U=Je8(Z,K);if(!U)throw new Kv(Z);return{credentialId:U.keyId,modelId:U.modelId,modelMeta:ad0(J[U.keyId]??[],U.modelId,U.title)}}async function z0$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await od0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:ad0(Y,G)}}async function VQ($,Z){try{return await UJ($,Z)}catch(G){if(G instanceof Kv)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var Kv,Qe8=5000;var Uv=O(()=>{f8();Kv=class Kv extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});function _50($){return $.sandboxProviderKind==="agent-sandbox"&&$.harnessId==="decopilot"}function j0$($){return $.harnessId==="decopilot"&&($.sandboxProviderKind==null||$.sandboxProviderKind==="agent-sandbox")}function Ke8($){return{type:"data-run-status",id:"run-status",data:{stage:$}}}function P0$($){if(!$||typeof $!=="object")return!1;return $.type==="data-run-status"}async function mU($,Z,G){if(!$)return;try{await $.publishRawChunk(Z,Ke8(G))}catch{}}var We8,si,sK5;var ei=O(()=>{We8=["waiting-runner","starting-run","gathering-context","preparing-tools","starting-assistant","analyzing-scope"],si=["gathering-context","preparing-tools","starting-assistant","analyzing-scope"],sK5=new Set(We8)});function b50(){return crypto.randomUUID()}var ed0=_((ZU5,I0$)=>{var{defineProperty:sd0,getOwnPropertyDescriptor:Ue8,getOwnPropertyNames:we8}=Object,Fe8=Object.prototype.hasOwnProperty,He8=($,Z)=>{for(var G in Z)sd0($,G,{get:Z[G],enumerable:!0})},Ne8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of we8(Z))if(!Fe8.call($,Y)&&Y!==G)sd0($,Y,{get:()=>Z[Y],enumerable:!(X=Ue8(Z,Y))||X.enumerable})}return $},Be8=($)=>Ne8(sd0({},"__esModule",{value:!0}),$),A0$={};He8(A0$,{SYMBOL_FOR_REQ_CONTEXT:()=>T0$,getContext:()=>Oe8});I0$.exports=Be8(A0$);var T0$=Symbol.for("@vercel/request-context");function Oe8(){return globalThis[T0$]?.get?.()??{}}});var $n=_((GU5,M0$)=>{var{defineProperty:$l0,getOwnPropertyDescriptor:Ee8,getOwnPropertyNames:De8}=Object,Le8=Object.prototype.hasOwnProperty,ze8=($,Z)=>{for(var G in Z)$l0($,G,{get:Z[G],enumerable:!0})},je8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of De8(Z))if(!Le8.call($,Y)&&Y!==G)$l0($,Y,{get:()=>Z[Y],enumerable:!(X=Ee8(Z,Y))||X.enumerable})}return $},Pe8=($)=>je8($l0({},"__esModule",{value:!0}),$),R0$={};ze8(R0$,{VercelOidcTokenError:()=>q0$});M0$.exports=Pe8(R0$);class q0$ extends Error{constructor($,Z){super($);this.name="VercelOidcTokenError",this.cause=Z}toString(){if(this.cause)return`${this.name}: ${this.message}: ${this.cause}`;return`${this.name}: ${this.message}`}}});var C0$=_((XU5,V0$)=>{var{create:Ae8,defineProperty:f50,getOwnPropertyDescriptor:Te8,getOwnPropertyNames:Ie8,getPrototypeOf:Re8}=Object,qe8=Object.prototype.hasOwnProperty,Me8=($,Z)=>{for(var G in Z)f50($,G,{get:Z[G],enumerable:!0})},k0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of Ie8(Z))if(!qe8.call($,Y)&&Y!==G)f50($,Y,{get:()=>Z[Y],enumerable:!(X=Te8(Z,Y))||X.enumerable})}return $},Gl0=($,Z,G)=>(G=$!=null?Ae8(Re8($)):{},k0$(Z||!$||!$.__esModule?f50(G,"default",{value:$,enumerable:!0}):G,$)),ke8=($)=>k0$(f50({},"__esModule",{value:!0}),$),S0$={};Me8(S0$,{findRootDir:()=>Ce8,getUserDataDir:()=>_e8});V0$.exports=ke8(S0$);var Zn=Gl0(u0("path")),Se8=Gl0(u0("fs")),Zl0=Gl0(u0("os")),Ve8=$n();function Ce8(){try{let $=process.cwd();while($!==Zn.default.dirname($)){let Z=Zn.default.join($,".vercel");if(Se8.default.existsSync(Z))return $;$=Zn.default.dirname($)}}catch($){throw new Ve8.VercelOidcTokenError("Token refresh only supported in node server environments")}return null}function _e8(){if(process.env.XDG_DATA_HOME)return process.env.XDG_DATA_HOME;switch(Zl0.default.platform()){case"darwin":return Zn.default.join(Zl0.default.homedir(),"Library/Application Support");case"linux":return Zn.default.join(Zl0.default.homedir(),".local/share");case"win32":if(process.env.LOCALAPPDATA)return process.env.LOCALAPPDATA;return null;default:return null}}});var g0$=_((YU5,y0$)=>{var{create:be8,defineProperty:x50,getOwnPropertyDescriptor:fe8,getOwnPropertyNames:xe8,getPrototypeOf:ve8}=Object,ye8=Object.prototype.hasOwnProperty,ge8=($,Z)=>{for(var G in Z)x50($,G,{get:Z[G],enumerable:!0})},_0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of xe8(Z))if(!ye8.call($,Y)&&Y!==G)x50($,Y,{get:()=>Z[Y],enumerable:!(X=fe8(Z,Y))||X.enumerable})}return $},b0$=($,Z,G)=>(G=$!=null?be8(ve8($)):{},_0$(Z||!$||!$.__esModule?x50(G,"default",{value:$,enumerable:!0}):G,$)),he8=($)=>_0$(x50({},"__esModule",{value:!0}),$),f0$={};ge8(f0$,{isValidAccessToken:()=>le8,readAuthConfig:()=>ue8,writeAuthConfig:()=>de8});y0$.exports=he8(f0$);var Gn=b0$(u0("fs")),x0$=b0$(u0("path")),ce8=Xn();function v0$(){let $=(0,ce8.getVercelDataDir)();if(!$)throw Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);return x0$.join($,"auth.json")}function ue8(){try{let $=v0$();if(!Gn.existsSync($))return null;let Z=Gn.readFileSync($,"utf8");if(!Z)return null;return JSON.parse(Z)}catch($){return null}}function de8($){let Z=v0$(),G=x0$.dirname(Z);if(!Gn.existsSync(G))Gn.mkdirSync(G,{mode:504,recursive:!0});Gn.writeFileSync(Z,JSON.stringify($,null,2),{mode:384})}function le8($,Z=0){if(!$.token)return!1;if(typeof $.expiresAt!=="number")return!0;let G=Math.floor(Date.now()/1000),X=Z/1000;return $.expiresAt>=G+X}});var d0$=_((QU5,u0$)=>{var{defineProperty:Ql0,getOwnPropertyDescriptor:me8,getOwnPropertyNames:ie8}=Object,ne8=Object.prototype.hasOwnProperty,pe8=($,Z)=>{for(var G in Z)Ql0($,G,{get:Z[G],enumerable:!0})},te8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ie8(Z))if(!ne8.call($,Y)&&Y!==G)Ql0($,Y,{get:()=>Z[Y],enumerable:!(X=me8(Z,Y))||X.enumerable})}return $},re8=($)=>te8(Ql0({},"__esModule",{value:!0}),$),h0$={};pe8(h0$,{processTokenResponse:()=>$06,refreshTokenRequest:()=>ee8});u0$.exports=re8(h0$);var Xl0=u0("os"),oe8="https://vercel.com",ae8="cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp",c0$=`@vercel/oidc node-${process.version} ${(0,Xl0.platform)()} (${(0,Xl0.arch)()}) ${(0,Xl0.hostname)()}`,Yl0=null;async function se8(){if(Yl0)return Yl0;let $=`${oe8}/.well-known/openid-configuration`,Z=await fetch($,{headers:{"user-agent":c0$}});if(!Z.ok)throw Error("Failed to discover OAuth endpoints");let G=await Z.json();if(!G||typeof G.token_endpoint!=="string")throw Error("Invalid OAuth discovery response");let X=G.token_endpoint;return Yl0=X,X}async function ee8($){let Z=await se8();return await fetch(Z,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded","user-agent":c0$},body:new URLSearchParams({client_id:ae8,grant_type:"refresh_token",...$})})}async function $06($){let Z=await $.json();if(!$.ok){let G=typeof Z==="object"&&Z&&"error"in Z?String(Z.error):"Token refresh failed";return[Error(G)]}if(typeof Z!=="object"||Z===null)return[Error("Invalid token response")];if(typeof Z.access_token!=="string")return[Error("Missing access_token in response")];if(Z.token_type!=="Bearer")return[Error("Invalid token_type in response")];if(typeof Z.expires_in!=="number")return[Error("Missing expires_in in response")];return[null,Z]}});var Wl0=_((JU5,n0$)=>{var{defineProperty:Jl0,getOwnPropertyDescriptor:Z06,getOwnPropertyNames:G06}=Object,X06=Object.prototype.hasOwnProperty,Y06=($,Z)=>{for(var G in Z)Jl0($,G,{get:Z[G],enumerable:!0})},Q06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of G06(Z))if(!X06.call($,Y)&&Y!==G)Jl0($,Y,{get:()=>Z[Y],enumerable:!(X=Z06(Z,Y))||X.enumerable})}return $},J06=($)=>Q06(Jl0({},"__esModule",{value:!0}),$),l0$={};Y06(l0$,{AccessTokenMissingError:()=>m0$,RefreshAccessTokenFailedError:()=>i0$});n0$.exports=J06(l0$);class m0$ extends Error{constructor(){super("No authentication found. Please log in with the Vercel CLI (vercel login).");this.name="AccessTokenMissingError"}}class i0$ extends Error{constructor($){super("Failed to refresh authentication token.",{cause:$});this.name="RefreshAccessTokenFailedError"}}});var Xn=_((WU5,a0$)=>{var{create:W06,defineProperty:v50,getOwnPropertyDescriptor:K06,getOwnPropertyNames:U06,getPrototypeOf:w06}=Object,F06=Object.prototype.hasOwnProperty,H06=($,Z)=>{for(var G in Z)v50($,G,{get:Z[G],enumerable:!0})},t0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of U06(Z))if(!F06.call($,Y)&&Y!==G)v50($,Y,{get:()=>Z[Y],enumerable:!(X=K06(Z,Y))||X.enumerable})}return $},r0$=($,Z,G)=>(G=$!=null?W06(w06($)):{},t0$(Z||!$||!$.__esModule?v50(G,"default",{value:$,enumerable:!0}):G,$)),N06=($)=>t0$(v50({},"__esModule",{value:!0}),$),o0$={};H06(o0$,{assertVercelOidcTokenResponse:()=>Kl0,findProjectInfo:()=>D06,getTokenPayload:()=>j06,getVercelDataDir:()=>B06,getVercelOidcToken:()=>E06,getVercelToken:()=>O06,isExpired:()=>P06,loadToken:()=>z06,saveToken:()=>L06});a0$.exports=N06(o0$);var Yn=r0$(u0("path")),LD=r0$(u0("fs")),Hv=$n(),y50=C0$(),wv=g0$(),p0$=d0$(),Fv=Wl0();function B06(){let Z=(0,y50.getUserDataDir)();if(!Z)return null;return Yn.join(Z,"com.vercel.cli")}async function O06($){let Z=(0,wv.readAuthConfig)();if(!Z?.token)throw new Fv.AccessTokenMissingError;if((0,wv.isValidAccessToken)(Z,$?.expirationBufferMs))return Z.token;if(!Z.refreshToken)throw(0,wv.writeAuthConfig)({}),new Fv.RefreshAccessTokenFailedError("No refresh token available");try{let G=await(0,p0$.refreshTokenRequest)({refresh_token:Z.refreshToken}),[X,Y]=await(0,p0$.processTokenResponse)(G);if(X||!Y)throw(0,wv.writeAuthConfig)({}),new Fv.RefreshAccessTokenFailedError(X);let Q={token:Y.access_token,expiresAt:Math.floor(Date.now()/1000)+Y.expires_in};if(Y.refresh_token)Q.refreshToken=Y.refresh_token;return(0,wv.writeAuthConfig)(Q),Q.token}catch(G){if((0,wv.writeAuthConfig)({}),G instanceof Fv.AccessTokenMissingError||G instanceof Fv.RefreshAccessTokenFailedError)throw G;throw new Fv.RefreshAccessTokenFailedError(G)}}async function E06($,Z,G){let X=`https://api.vercel.com/v1/projects/${Z}/token?source=vercel-oidc-refresh${G?`&teamId=${G}`:""}`,Y=await fetch(X,{method:"POST",headers:{Authorization:`Bearer ${$}`}});if(!Y.ok)throw new Hv.VercelOidcTokenError(`Failed to refresh OIDC token: ${Y.statusText}`);let Q=await Y.json();return Kl0(Q),Q}function Kl0($){if(!$||typeof $!=="object")throw TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");if(!("token"in $)||typeof $.token!=="string")throw TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again")}function D06(){let $=(0,y50.findRootDir)();if(!$)throw new Hv.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");let Z=Yn.join($,".vercel","project.json");if(!LD.existsSync(Z))throw new Hv.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");let G=JSON.parse(LD.readFileSync(Z,"utf8"));if(typeof G.projectId!=="string"&&typeof G.orgId!=="string")throw TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");return{projectId:G.projectId,teamId:G.orgId}}function L06($,Z){let G=(0,y50.getUserDataDir)();if(!G)throw new Hv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let X=Yn.join(G,"com.vercel.token",`${Z}.json`),Y=JSON.stringify($);LD.mkdirSync(Yn.dirname(X),{mode:504,recursive:!0}),LD.writeFileSync(X,Y),LD.chmodSync(X,432);return}function z06($){let Z=(0,y50.getUserDataDir)();if(!Z)throw new Hv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let G=Yn.join(Z,"com.vercel.token",`${$}.json`);if(!LD.existsSync(G))return null;let X=JSON.parse(LD.readFileSync(G,"utf8"));return Kl0(X),X}function j06($){let Z=$.split(".");if(Z.length!==3)throw new Hv.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");let G=Z[1].replace(/-/g,"+").replace(/_/g,"/"),X=G.padEnd(G.length+(4-G.length%4)%4,"=");return JSON.parse(Buffer.from(X,"base64").toString("utf8"))}function P06($,Z=0){return $.exp*1000<Date.now()+Z}});var Z1$=_((KU5,$1$)=>{var{defineProperty:Ul0,getOwnPropertyDescriptor:A06,getOwnPropertyNames:T06}=Object,I06=Object.prototype.hasOwnProperty,R06=($,Z)=>{for(var G in Z)Ul0($,G,{get:Z[G],enumerable:!0})},q06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of T06(Z))if(!I06.call($,Y)&&Y!==G)Ul0($,Y,{get:()=>Z[Y],enumerable:!(X=A06(Z,Y))||X.enumerable})}return $},M06=($)=>q06(Ul0({},"__esModule",{value:!0}),$),e0$={};R06(e0$,{refreshToken:()=>k06});$1$.exports=M06(e0$);var s0$=$n(),UN=Xn();async function k06($){let Z=$?.project,G=$?.team;if(!Z&&!G){let Y=(0,UN.findProjectInfo)();Z=Y.projectId,G=Y.teamId}else if(!Z||!G){let Y=(0,UN.findProjectInfo)();Z=Z??Y.projectId,G=G??Y.teamId}if(!Z)throw new s0$.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let X=(0,UN.loadToken)(Z);if(!X||(0,UN.isExpired)((0,UN.getTokenPayload)(X.token),$?.expirationBufferMs)){let Y=await(0,UN.getVercelToken)({expirationBufferMs:$?.expirationBufferMs});if(X=await(0,UN.getVercelOidcToken)(Y,Z,G),!X)throw new s0$.VercelOidcTokenError("Failed to refresh OIDC token");(0,UN.saveToken)(X,Z)}process.env.VERCEL_OIDC_TOKEN=X.token;return}});var Y1$=_((UU5,X1$)=>{var{defineProperty:Fl0,getOwnPropertyDescriptor:S06,getOwnPropertyNames:V06}=Object,C06=Object.prototype.hasOwnProperty,_06=($,Z)=>{for(var G in Z)Fl0($,G,{get:Z[G],enumerable:!0})},b06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of V06(Z))if(!C06.call($,Y)&&Y!==G)Fl0($,Y,{get:()=>Z[Y],enumerable:!(X=S06(Z,Y))||X.enumerable})}return $},f06=($)=>b06(Fl0({},"__esModule",{value:!0}),$),G1$={};_06(G1$,{getVercelOidcToken:()=>y06,getVercelOidcTokenSync:()=>wl0});X1$.exports=f06(G1$);var x06=ed0(),v06=$n();async function y06($){let Z="",G;try{Z=wl0()}catch(X){G=X}try{let[{getTokenPayload:X,isExpired:Y},{refreshToken:Q}]=await Promise.all([await Promise.resolve().then(() => k(Xn())),await Promise.resolve().then(() => k(Z1$()))]);if(!Z||Y(X(Z),$?.expirationBufferMs))await Q($),Z=wl0()}catch(X){let Y=G instanceof Error?G.message:"";if(X instanceof Error)Y=`${Y}
+  `.execute($)).rows[0]?.exists)await c6`CREATE ROLE ${c6.id(G)} NOLOGIN`.execute($);await c6`GRANT ${c6.id(G)} TO CURRENT_USER`.execute($),await c6`GRANT USAGE, CREATE ON SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL TABLES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`GRANT ALL ON ALL SEQUENCES IN SCHEMA ${c6.id(Z)} TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON TABLES TO ${c6.id(G)}`.execute($),await c6`ALTER DEFAULT PRIVILEGES IN SCHEMA ${c6.id(Z)} GRANT ALL ON SEQUENCES TO ${c6.id(G)}`.execute($),await c6`REVOKE ALL ON SCHEMA public FROM ${c6.id(G)}`.execute($)}async function Ts8($,Z,G,X){try{return await $.transaction().execute(async(Y)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Y),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Y),await c6.raw(X).execute(Y)})}catch(Y){if(Ps8(Y))return await As8($,Z,G),await $.transaction().execute(async(Q)=>{return await c6`SET LOCAL ROLE ${c6.id(G)}`.execute(Q),await c6`SET LOCAL search_path TO ${c6.id(Z)}`.execute(Q),await c6.raw(X).execute(Q)});throw Y}}var Es8,Ls8,Me1;var ke1=O(()=>{Q1();Es8=_W.object({results:_W.array(_W.unknown()).optional(),success:_W.boolean().optional()});Ls8=_W.object({sql:_W.string().describe("The SQL query to run"),params:_W.array(_W.any()).describe("The parameters to pass to the SQL query").optional()});Me1=Z0({name:"DATABASES_RUN_SQL",description:"Run a SQL query in a connection-scoped isolated schema. Supports SELECT, DDL, and DML.",annotations:{title:"Run SQL Query",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Ls8,outputSchema:_W.object({result:_W.array(Es8)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Ds8($.sql,$.params||[]);if(!Z.connectionId)throw Error("Connection context required for database access");console.warn("DATABASES_RUN_SQL invoked",{"tool.deprecation_probe":"DATABASES_RUN_SQL","connection.id":Z.connectionId,"organization.id":Z.organization?.id??null,"user.id":Z.auth.user?.id??null});let X=zs8(Z.connectionId),Y=js8(Z.connectionId);return{result:[{results:(await Ts8(Z.db,X,Y,G)).rows,success:!0}]}}})});function I50($){let Z=$.access.getRole();if(!Z||!OQ.includes(Z))throw new qU("Only organization owners and admins can change org-wide pin status")}var $d0=O(()=>{m3();bE()});import{z as Ce1}from"zod";function Rs8(){let $=Se1[Math.floor(Math.random()*Se1.length)];return`icon://${Ve1[Math.floor(Math.random()*Ve1.length)]}?color=${$}`}var Se1,Ve1,qs8,Ms8,Zd0;var _e1=O(()=>{Q1();$H();$d0();_i();Se1=["red","orange","amber","yellow","lime","green","emerald","cyan","sky","blue","indigo","violet","purple","fuchsia","pink","rose"],Ve1=["Star01","Zap","Heart","Globe01","Compass03","Lightbulb02","Rocket01","Flag01","BookOpen01","Shield01","Key01","Diamond01","Cube01","Target04","Award01","Briefcase01","Coffee","Feather","Hexagon01","Layers3_01","Map01","Palette","Package","Terminal"];qs8=Ce1.object({data:ku.describe("Data for the new virtual MCP")}),Ms8=Ce1.object({item:oZ.describe("The created virtual MCP entity")}),Zd0=Z0({name:"COLLECTION_VIRTUAL_MCP_CREATE",description:"Create a Virtual MCP (agent) that aggregates tools from multiple connections into one endpoint. Pass `prompts` to seed the agent with kickstart prompts (conversation starters shown as icebreakers). Author them from the agent's role/instructions and the descriptions of the tools it will have, so the starters are coherent and immediately useful.",annotations:{title:"Create Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:qs8,outputSchema:Ms8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to create virtual MCP");if($.data.pinned===!0)I50(Z);let{prompts:Y,...Q}=$.data,J={...Q,icon:Q.icon??Rs8()},W=await Z.storage.virtualMcps.create(G.id,X,J);if(Y?.length&&Z.orgFs&&W.id)await e40(Z.orgFs,W.id,X,Y);return{item:W}}})});function ks8($){let Z=[],G=0;while(G<$.length){let X=$[G];if(X==="%")Z.push(".*");else if(X==="_")Z.push(".");else if(/[.*+?^${}()|[\]\\]/.test(X))Z.push("\\"+X);else Z.push(X);G++}return Z.join("")}function XN($){return typeof $==="string"||typeof $==="number"}function Gd0($,Z){let G=Z.split("."),X=$;for(let Y of G){if(X==null||typeof X!=="object")return;X=X[Y]}return X}function Ss8($,Z){return $.connections.some((G)=>G.connection_id===Z)}function R50($,Z){if("conditions"in Z){let{operator:W,conditions:K}=Z;switch(W){case"and":return K.every((U)=>R50($,U));case"or":return K.some((U)=>R50($,U));case"not":return!K.every((U)=>R50($,U));default:return!0}}let{field:G,operator:X,value:Y}=Z,Q=G.join(".");if(Q==="connection_id"){if(X!=="eq"||typeof Y!=="string")return!1;return Ss8($,Y)}let J=Gd0($,Q);switch(X){case"eq":return J===Y;case"gt":return XN(J)&&XN(Y)&&J>Y;case"gte":return XN(J)&&XN(Y)&&J>=Y;case"lt":return XN(J)&&XN(Y)&&J<Y;case"lte":return XN(J)&&XN(Y)&&J<=Y;case"in":return Array.isArray(Y)&&Y.includes(J);case"like":if(typeof J!=="string"||typeof Y!=="string")return!1;if(Y.length>100)return!1;let W=ks8(Y);return new RegExp(`^${W}$`,"i").test(J);case"contains":if(typeof J!=="string"||typeof Y!=="string")return!1;return J.toLowerCase().includes(Y.toLowerCase());default:return!0}}function Vs8($,Z){return[...$].sort((G,X)=>{for(let Y of Z){let Q=Y.field.join("."),J=Gd0(G,Q),W=Gd0(X,Q),K=0;if(J==null&&W==null)continue;if(J==null)K=Y.nulls==="first"?-1:1;else if(W==null)K=Y.nulls==="first"?1:-1;else if(typeof J==="string"&&typeof W==="string")K=J.localeCompare(W);else if(typeof J==="number"&&typeof W==="number")K=J-W;else K=String(J).localeCompare(String(W));if(K!==0)return Y.direction==="desc"?-K:K}return 0})}var Cs8,_s8,Xd0;var be1=O(()=>{PY();Q1();$H();Cs8=XJ,_s8=cU(oZ),Xd0=Z0({name:"COLLECTION_VIRTUAL_MCP_LIST",description:"List all MCP virtual MCPs in the organization",annotations:{title:"List Virtual MCPs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Cs8,outputSchema:_s8,handler:async($,Z)=>{await Z.access.check();let G=O0(Z),X=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="connection_id"&&$.where.operator==="eq"&&typeof $.where.value==="string"?$.where.value:void 0,Y=$.where&&!("conditions"in $.where)&&$.where.field.join(".")==="pinned"&&$.where.operator==="eq"&&typeof $.where.value==="boolean"?$.where.value:void 0,J=X?await Z.storage.virtualMcps.listByConnectionId(G.id,X):await Z.storage.virtualMcps.list(G.id,Y!==void 0?{pinnedOnly:Y}:void 0);if($.where)J=J.filter((H)=>R50(H,$.where));if($.orderBy&&$.orderBy.length>0)J=Vs8(J,$.orderBy);let W=J.length,K=$.offset??0,U=$.limit??100,w=J.slice(K,K+U),F=K+U<W;return{items:w,totalCount:W,hasMore:F}}})});import{z as Yd0}from"zod";var bs8,fs8,Qd0;var fe1=O(()=>{Q1();$H();bs8=Yd0.object({id:Yd0.string().describe("ID of the virtual MCP to retrieve")}),fs8=Yd0.object({item:oZ.nullable().describe("The retrieved virtual MCP, or null if not found")}),Qd0=Z0({name:"COLLECTION_VIRTUAL_MCP_GET",description:"Get a Virtual MCP's configuration, connections, and virtual tools by ID.",annotations:{title:"Get Virtual MCP",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:bs8,outputSchema:fs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(X&&X.organization_id!==G.id)return{item:null};if(!X)return{item:null};return{item:X}}})});import{z as Jd0}from"zod";var xs8,vs8,Wd0;var xe1=O(()=>{Q1();_i();$H();$d0();xs8=Jd0.object({id:Jd0.string().describe("ID of the virtual MCP to update"),data:Su.describe("Partial virtual MCP data to update")}),vs8=Jd0.object({item:oZ.describe("The updated virtual MCP entity")}),Wd0=Z0({name:"COLLECTION_VIRTUAL_MCP_UPDATE",description:"Update a Virtual MCP's name, slug, connection list, or kickstart prompts. Pass `prompts` to replace the agent's conversation starters (full set; empty array clears them).",annotations:{title:"Update Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:xs8,outputSchema:vs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=y1(Z);if(!X)throw Error("User ID required to update virtual MCP");let Y=await Z.storage.virtualMcps.findById($.id);if(!Y)throw Error(`Virtual MCP not found: ${$.id}`);if(Y.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);let{prompts:Q,...J}=$.data;if(J.metadata&&Y.metadata)J.metadata={...Y.metadata,...J.metadata};if(J.pinned!==void 0&&J.pinned!==Y.pinned)I50(Z);let W=await Z.storage.virtualMcps.update($.id,X,J);if(Q!==void 0&&Z.orgFs)await e40(Z.orgFs,$.id,X,Q);return{item:W}}})});import{z as Kd0}from"zod";var ys8,gs8,Ud0;var ve1=O(()=>{ZN();GJ();Q1();_i();$H();ys8=Kd0.object({id:Kd0.string().describe("ID of the virtual MCP to delete")}),gs8=Kd0.object({item:oZ.describe("The deleted virtual MCP entity")}),Ud0=Z0({name:"COLLECTION_VIRTUAL_MCP_DELETE",description:"Permanently delete a Virtual MCP and its virtual tools.",annotations:{title:"Delete Virtual MCP",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:ys8,outputSchema:gs8,handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let X=await Z.storage.virtualMcps.findById($.id);if(!X)throw Error(`Virtual MCP not found: ${$.id}`);if(X.organization_id!==G.id)throw Error(`Virtual MCP not found: ${$.id}`);if(await Z.storage.virtualMcps.delete($.id),Z.orgFs)await xu0(Z.orgFs,$.id,y1(Z)??"system");let Y=X.metadata?.githubRepo?.connectionId;if(Y)try{let Q=await Z.storage.connections.findById(Y,G.id);if(Q&&qQ(Q)){let W=await new _5(Z.db,Z.vault).get(Y);if(W?.accessToken)try{await fetch("https://api.github.com/installation/token",{method:"DELETE",headers:{Authorization:`Bearer ${W.accessToken}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"},signal:AbortSignal.timeout(5000)})}catch{}await Z.storage.connections.delete(Y)}}catch(Q){console.error("[VIRTUAL_MCP_DELETE] failed to tear down repo-scoped connection",{childConnectionId:Y,error:Q.message})}return{item:X}}})});import{z as zX}from"zod";var hs8,wd0;var ye1=O(()=>{Q1();hs8=zX.object({id:zX.string(),virtualMcpId:zX.string(),pluginId:zX.string(),connectionId:zX.string().nullable(),settings:zX.record(zX.string(),zX.unknown()).nullable(),createdAt:zX.string(),updatedAt:zX.string()}),wd0=Z0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_GET",description:"Get a plugin's current configuration for a specific virtual MCP.",annotations:{title:"Get Virtual MCP Plugin Config",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:zX.object({virtualMcpId:zX.string().describe("Virtual MCP ID"),pluginId:zX.string().describe("Plugin ID")}),outputSchema:zX.object({config:hs8.nullable()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X}=$,Y=await Z.storage.virtualMcpPluginConfigs.get(G,X);if(!Y)return{config:null};return{config:{id:Y.id,virtualMcpId:Y.virtualMcpId,pluginId:Y.pluginId,connectionId:Y.connectionId,settings:Y.settings,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}}}})});import{z as MZ}from"zod";var cs8,Fd0;var ge1=O(()=>{Q1();Sb();BG();cs8=MZ.object({id:MZ.string(),virtualMcpId:MZ.string(),pluginId:MZ.string(),connectionId:MZ.string().nullable(),settings:MZ.record(MZ.string(),MZ.unknown()).nullable(),createdAt:MZ.string(),updatedAt:MZ.string()}),Fd0=Z0({name:"VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE",description:"Set or update a plugin's configuration for a specific virtual MCP.",annotations:{title:"Update Virtual MCP Plugin Config",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:MZ.object({virtualMcpId:MZ.string().describe("Virtual MCP ID"),pluginId:MZ.string().describe("Plugin ID"),connectionId:MZ.string().nullable().optional().describe("MCP connection to bind"),settings:MZ.record(MZ.string(),MZ.unknown()).nullable().optional().describe("Plugin-specific settings")}),outputSchema:MZ.object({config:cs8}),handler:async($,Z)=>{k0(Z),await Z.access.check();let{virtualMcpId:G,pluginId:X,connectionId:Y,settings:Q}=$,J=y1(Z),W=await Z.storage.connections.findById(G);if(!W)throw Error(`Connection not found: ${G}`);let K=Y?await Z.storage.connections.findById(Y):null;if(Y&&W.organization_id&&!K&&C3()){if(c10(Y,W.organization_id)){if(!J)throw Error("User ID required to create dev-assets connection");let w=kb(W.organization_id,zZ());await Z.storage.connections.create({...w,organization_id:W.organization_id,created_by:J})}}let U=await Z.storage.virtualMcpPluginConfigs.upsert(G,X,{connectionId:Y,settings:Q});return{config:{id:U.id,virtualMcpId:U.virtualMcpId,pluginId:U.pluginId,connectionId:U.connectionId,settings:U.settings,createdAt:U.createdAt instanceof Date?U.createdAt.toISOString():U.createdAt,updatedAt:U.updatedAt instanceof Date?U.updatedAt.toISOString():U.updatedAt}}}})});import{z as CG}from"zod";var us8,Hd0;var he1=O(()=>{Q1();$H();us8=CG.object({connectionId:CG.string(),toolName:CG.string(),label:CG.string(),icon:CG.string().nullable().optional()}),Hd0=Z0({name:"VIRTUAL_MCP_PINNED_VIEWS_UPDATE",description:"Update the pinned sidebar views for a virtual MCP. Replaces all current pins.",annotations:{title:"Update Pinned Views",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:CG.object({virtualMcpId:CG.string().describe("Virtual MCP ID"),pinnedViews:CG.array(us8).describe("Pinned views to set for the virtual MCP sidebar"),layout:CG.object({defaultMainView:CG.object({type:CG.string(),id:CG.string().optional(),toolName:CG.string().optional()}).nullable().optional(),chatDefaultOpen:CG.boolean().nullable().optional()}).optional()}),outputSchema:CG.object({item:oZ.nullable()}),handler:async($,Z)=>{k0(Z);let G=O0(Z);await Z.access.check();let{virtualMcpId:X,pinnedViews:Y,layout:Q}=$,J=y1(Z),W=await Z.storage.virtualMcps.findById(X);if(!W)throw Error(`Virtual MCP not found: ${X}`);if(W.organization_id!==G.id)throw Error(`Virtual MCP not found: ${X}`);let K=W.metadata?.ui??{},U={...K,pinnedViews:Y.length>0?Y:null,layout:Q??K.layout??null};return{item:await Z.storage.virtualMcps.update(X,J??"system",{metadata:{...W.metadata,ui:U}})}}})});import{z as dU}from"zod";var ds8,ls8,Nd0;var ce1=O(()=>{Q1();ds8=dU.object({ids:dU.array(dU.string()).describe("Virtual MCP ids to look up")}),ls8=dU.object({items:dU.array(dU.object({id:dU.string(),last_used_at:dU.string().optional(),last_used_by:dU.string().optional()}))}),Nd0=Z0({name:"VIRTUAL_MCP_LAST_USED_LIST",description:"Get last-used info (timestamp + user) for one or more virtual MCPs, derived from the most recent thread per agent.",annotations:{title:"List Virtual MCP Last Used",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:ds8,outputSchema:ls8,handler:async($,Z)=>{k0(Z),O0(Z),await Z.access.check();let G=await Z.storage.threads.findLastUsedByVirtualMcpIds($.ids);return{items:$.ids.map((X)=>({id:X,last_used_at:G.get(X)?.last_used_at,last_used_by:G.get(X)?.last_used_by}))}}})});var ue1=O(()=>{_e1();be1();fe1();xe1();ve1();ye1();ge1();he1();ce1()});import{z as K5}from"zod";var Bd0;var de1=O(()=>{N5();Q1();Bd0=Z0({name:"MONITORING_LOG_GET",description:"Get a single monitoring log by ID with full input and output data.",annotations:{title:"Get Monitoring Log",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:K5.object({id:K5.string().describe("Log ID to fetch")}),outputSchema:K5.object({log:K5.object({id:K5.string().optional(),organizationId:K5.string(),connectionId:K5.string(),toolName:K5.string(),input:K5.record(K5.string(),K5.unknown()),output:K5.record(K5.string(),K5.unknown()),isError:K5.boolean(),errorMessage:K5.string().nullish(),durationMs:K5.number(),timestamp:K5.string(),userId:K5.string().nullish(),requestId:K5.string(),userAgent:K5.string().nullish(),virtualMcpId:K5.string().nullish(),properties:K5.record(K5.string(),K5.string()).nullish()}).nullable().describe("The monitoring log, or null if not found")}),handler:async($,Z)=>{await Z.access.check(),await dY();let G=O0(Z),X=await Z.storage.monitoring.getById(G.id,$.id);if(!X)return{log:null};return{log:{...X,timestamp:X.timestamp instanceof Date?X.timestamp.toISOString():X.timestamp}}}})});import{z as B8}from"zod";var is8,Od0;var le1=O(()=>{N5();Q1();is8=B8.object({id:B8.string().optional().describe("Unique log identifier"),organizationId:B8.string().describe("Organization ID"),connectionId:B8.string().describe("Connection ID"),toolName:B8.string().describe("Name of the tool that was called"),isError:B8.boolean().describe("Whether the call resulted in an error"),errorMessage:B8.string().nullish().describe("Error message if applicable"),durationMs:B8.number().describe("Call duration in milliseconds"),timestamp:B8.string().describe("ISO 8601 timestamp of the call"),userId:B8.string().nullish().describe("User who triggered the call"),requestId:B8.string().describe("Unique request identifier"),userAgent:B8.string().nullish().describe("Client identifier (x-mesh-client header)"),virtualMcpId:B8.string().nullish().describe("Virtual MCP (Agent) ID if routed through an agent"),properties:B8.record(B8.string(),B8.string()).nullish().describe("Custom key-value metadata attached to the log")}),Od0=Z0({name:"MONITORING_LOGS_LIST",description:"List monitoring logs for tool calls with filtering and pagination.",annotations:{title:"List Monitoring Logs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:B8.object({connectionId:B8.string().optional().describe("Filter by connection ID"),excludeConnectionIds:B8.array(B8.string()).optional().describe("Exclude logs from these connection IDs (e.g. system connections)"),virtualMcpId:B8.string().optional().describe("Filter by Virtual MCP (Agent) ID"),toolName:B8.string().optional().describe("Filter by tool name"),isError:B8.boolean().optional().describe("Filter by error status"),startDate:B8.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:B8.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),limit:B8.number().default(20).describe("Maximum number of results"),offset:B8.number().default(0).describe("Offset for pagination"),properties:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact property key=value matches"),propertyKeys:B8.array(B8.string()).optional().describe("Filter by logs that have these property keys"),propertyPatterns:B8.record(B8.string(),B8.string()).optional().describe("Filter by property value patterns (SQL LIKE, use % as wildcard)"),propertyInValues:B8.record(B8.string(),B8.string()).optional().describe("Filter by exact match within comma-separated values (e.g., user_tags in 'Engineering')")}),outputSchema:B8.object({logs:B8.array(is8).describe("Array of monitoring logs"),total:B8.number().describe("Total number of logs matching filters"),offset:B8.number().describe("Current offset for pagination"),limit:B8.number().describe("Current limit for pagination")}),handler:async($,Z)=>{await dY();let G=O0(Z),Y=$.properties||$.propertyKeys||$.propertyPatterns||$.propertyInValues?{properties:$.properties,propertyKeys:$.propertyKeys,propertyPatterns:$.propertyPatterns,propertyInValues:$.propertyInValues}:void 0,Q={organizationId:G.id,connectionId:$.connectionId,excludeConnectionIds:$.excludeConnectionIds,virtualMcpId:$.virtualMcpId,toolName:$.toolName,isError:$.isError,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,limit:$.limit,offset:$.offset,propertyFilters:Y},J=await Z.storage.monitoring.query(Q);return{logs:J.logs.map(({input:W,output:K,...U})=>({...U,timestamp:U.timestamp instanceof Date?U.timestamp.toISOString():U.timestamp})),total:J.total,offset:$.offset,limit:$.limit}}})});import{z as w$}from"zod";var Ed0;var me1=O(()=>{N5();Q1();Ed0=Z0({name:"MONITORING_STATS",description:"Get aggregated statistics (counts, latency, error rates) for tool call monitoring.",annotations:{title:"Get Monitoring Stats",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:w$.object({startDate:w$.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:w$.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)"),interval:w$.string().regex(/^\d+[mhd]$/).optional().describe("Bucket interval for timeseries data (e.g. 1m, 5m, 2h, 1d). When provided, returns timeseries array."),connectionIds:w$.array(w$.string()).max(100).optional().describe("Filter by specific connection IDs (max 100)"),excludeConnectionIds:w$.array(w$.string()).max(100).optional().describe("Exclude specific connection IDs (max 100)"),toolNames:w$.array(w$.string()).max(100).optional().describe("Filter by specific tool names (max 100)"),status:w$.enum(["success","error"]).optional().describe("Filter metrics by execution status"),topN:w$.number().int().min(1).max(20).optional().describe("When provided with interval, also return top tools and their timeseries"),userIds:w$.array(w$.string()).max(100).optional().describe("Filter LLM usage by user IDs (only applied when llmUsage is true)"),llmUsage:w$.boolean().optional().describe("Aggregate LLM-call usage (tokens + USD cost) from raw log rows for the given connection. Returns token/cost totals and timeseries. Requires interval.")}),outputSchema:w$.object({totalCalls:w$.number().describe("Total number of tool calls"),errorRate:w$.number().optional().describe("Error rate as a decimal (0 to 1)"),avgDurationMs:w$.number().describe("Average call duration in milliseconds"),errorRatePercent:w$.string().optional().describe("Error rate as a percentage string"),totalErrors:w$.number().optional().describe("Total number of errors"),p50DurationMs:w$.number().optional().describe("50th percentile duration in milliseconds"),p95DurationMs:w$.number().optional().describe("95th percentile duration in milliseconds"),connectionBreakdown:w$.array(w$.object({connectionId:w$.string(),calls:w$.number(),errors:w$.number(),errorRate:w$.number(),avgDurationMs:w$.number()})).optional().describe("Per-connection metric breakdown"),totalInputTokens:w$.number().optional().describe("Total input tokens (LLM usage mode)"),totalOutputTokens:w$.number().optional().describe("Total output tokens (LLM usage mode)"),totalTokens:w$.number().optional().describe("Total tokens (LLM usage mode)"),totalCostUsd:w$.number().optional().describe("Total USD cost (LLM usage mode; only non-zero for providers that report cost)"),topTools:w$.array(w$.object({toolName:w$.string(),connectionId:w$.string().nullable(),calls:w$.number(),inputTokens:w$.number().optional(),outputTokens:w$.number().optional(),costUsd:w$.number().optional()})).optional().describe("Top tools ranked by calls"),topToolsTimeseries:w$.array(w$.object({timestamp:w$.string(),toolName:w$.string(),calls:w$.number(),errors:w$.number(),avg:w$.number(),p95:w$.number()})).optional().describe("Per-tool metric timeseries for the top tools"),timeseries:w$.array(w$.object({timestamp:w$.string(),calls:w$.number(),errors:w$.number(),errorRate:w$.number(),avg:w$.number(),p50:w$.number(),p95:w$.number(),inputTokens:w$.number().optional(),outputTokens:w$.number().optional(),totalTokens:w$.number().optional(),costUsd:w$.number().optional()})).optional().describe("Timeseries data points bucketed by interval")}),handler:async($,Z)=>{let G=O0(Z);if(await Z.access.check(),await dY(),$.interval&&$.llmUsage)return Z.storage.monitoring.queryLlmUsageStats({organizationId:G.id,interval:$.interval,connectionId:$.connectionIds?.[0]??"decopilot",startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,userIds:$.userIds,topN:$.topN});if($.interval){let Y=await Z.storage.monitoring.queryMetricTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});if(!$.topN)return Y;let Q=await Z.storage.monitoring.queryMetricTopToolsTimeseries({organizationId:G.id,interval:$.interval,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0,topN:$.topN,filters:{connectionIds:$.connectionIds,excludeConnectionIds:$.excludeConnectionIds,toolNames:$.toolNames,status:$.status}});return{...Y,topTools:Q.topTools,topToolsTimeseries:Q.timeseries}}let X=await Z.storage.monitoring.getStats({organizationId:G.id,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0});return{...X,errorRatePercent:(X.errorRate*100).toFixed(2)}}})});import{z as _G}from"zod";var Dd0;var ie1=O(()=>{N5();Q1();Dd0=Z0({name:"MONITORING_THREAD_USAGE",description:"Aggregate LLM token usage and USD cost per thread for the given thread IDs.",annotations:{title:"Get Thread Usage",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:_G.object({threadIds:_G.array(_G.string()).min(1).max(500).describe("Thread IDs to aggregate usage for (max 500)"),connectionId:_G.string().optional().describe("LLM connection ID (defaults to 'decopilot')"),startDate:_G.string().datetime().optional().describe("Filter by start date (ISO 8601 datetime string)"),endDate:_G.string().datetime().optional().describe("Filter by end date (ISO 8601 datetime string)")}),outputSchema:_G.object({items:_G.array(_G.object({threadId:_G.string(),calls:_G.number(),inputTokens:_G.number(),outputTokens:_G.number(),totalTokens:_G.number(),costUsd:_G.number()}))}),handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),await dY(),{items:await Z.storage.monitoring.queryThreadUsage({organizationId:G.id,connectionId:$.connectionId??"decopilot",threadIds:$.threadIds,startDate:$.startDate?new Date($.startDate):void 0,endDate:$.endDate?new Date($.endDate):void 0})}}})});var ne1=O(()=>{de1();le1();me1();ie1()});function q50($){return typeof $==="string"&&ps8.has($.trim().toLowerCase())}var ps8;var Ld0=O(()=>{ps8=new Set([".well-known","_admin","api","auth","cli","commerce-onboarding","dbos-queue-depth","health","hosted-run-pending","login","mcp","metrics","oauth","oauth-proxy","onboarding","org","report","reset-password"])});import{z as AY}from"zod";var zd0;var pe1=O(()=>{Q1();Ld0();zd0=Z0({name:"ORGANIZATION_CREATE",description:"Create a new organization. The caller becomes the owner automatically.",annotations:{title:"Create Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:AY.object({slug:AY.string().min(1).max(50).regex(/^[a-z0-9-]+$/,"Slug must be lowercase alphanumeric with hyphens").refine(($)=>!q50($),"Slug is reserved by Studio"),name:AY.string().min(1).max(255),description:AY.string().optional()}),outputSchema:AY.object({id:AY.string(),name:AY.string(),slug:AY.string(),logo:AY.string().nullable().optional(),metadata:AY.any().optional(),createdAt:AY.string().datetime().describe("ISO 8601 timestamp"),members:AY.array(AY.any()).optional()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to create organization");let X=await Z.boundAuth.organization.create({name:$.name,slug:$.slug,metadata:$.description?{description:$.description}:void 0,userId:G});if(!X)throw Error("Failed to create organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as YJ}from"zod";var jd0;var te1=O(()=>{Q1();jd0=Z0({name:"ORGANIZATION_LIST",description:"List organizations the current user belongs to.",annotations:{title:"List Organizations",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},_meta:{ui:{visibility:"app"}},inputSchema:YJ.object({userId:YJ.string().optional()}),outputSchema:YJ.object({organizations:YJ.array(YJ.object({id:YJ.string(),name:YJ.string(),slug:YJ.string(),logo:YJ.string().nullable().optional(),metadata:YJ.any().optional(),createdAt:YJ.string().datetime().describe("ISO 8601 timestamp")}))}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=y1(Z),X=$.userId||G;if(!X)throw Error("User ID required to list organizations");return{organizations:(await Z.boundAuth.organization.list(X)).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as SQ}from"zod";var Pd0;var re1=O(()=>{Q1();Pd0=Z0({name:"ORGANIZATION_GET",description:"Get an organization's details, members, and settings by slug or ID.",annotations:{title:"Get Organization",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:SQ.object({}),outputSchema:SQ.object({id:SQ.string(),name:SQ.string(),slug:SQ.string(),logo:SQ.string().nullable().optional(),metadata:SQ.any().optional(),createdAt:SQ.string().datetime().describe("ISO 8601 timestamp"),members:SQ.array(SQ.any()).optional(),invitations:SQ.array(SQ.any()).optional()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.get(G);if(!X)throw Error("No active organization found");let Y=new Date,Q=X.invitations?.filter((J)=>new Date(J.expiresAt)>Y);return{...X,invitations:Q,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as QJ}from"zod";var Ad0;var oe1=O(()=>{Q1();Ad0=Z0({name:"ORGANIZATION_UPDATE",description:"Update an organization's name or description.",annotations:{title:"Update Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:QJ.object({id:QJ.string(),name:QJ.string().min(1).max(255).optional(),description:QJ.string().optional()}),outputSchema:QJ.object({id:QJ.string(),name:QJ.string(),slug:QJ.string(),logo:QJ.string().nullable().optional(),metadata:QJ.any().optional(),createdAt:QJ.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G={};if($.name)G.name=$.name;if($.description)G.metadata={description:$.description};let X=await Z.boundAuth.organization.update({organizationId:$.id,data:G});if(!X)throw Error("Failed to update organization");return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt}}})});import{z as mi}from"zod";var Td0;var ae1=O(()=>{Q1();Td0=Z0({name:"ORGANIZATION_DELETE",description:"Archive an organization (soft delete).",annotations:{title:"Delete Organization",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:mi.object({id:mi.string()}),outputSchema:mi.object({success:mi.boolean(),id:mi.string()}),handler:async($,Z)=>{return k0(Z),await Z.access.check(),await Z.boundAuth.organization.update({organizationId:$.id,data:{metadata:{archived:!0,archivedAt:new Date().toISOString()}}}),{success:!0,id:$.id}}})});import{z as h$}from"zod";var ii,ni,Qv,se1,M50,pi,ti,YN;var lU=O(()=>{ii=h$.object({title:h$.string(),url:h$.string(),icon:h$.string()}),ni=h$.object({registries:h$.record(h$.string(),h$.object({enabled:h$.boolean()})).describe("Per-registry enabled/disabled state. Key is connection ID. Absent registries are treated as enabled."),blockedMcps:h$.array(h$.string()).describe("List of MCP app_name or app_id values to hide from the store.")}),Qv=h$.object({keyId:h$.string(),modelId:h$.string(),title:h$.string().optional()}).nullable(),se1=h$.enum(["fast","smart","thinking","image","web_search","deep_research"]),M50=h$.enum(["fast","smart","thinking"]),pi=h$.object({tiers:h$.object({fast:Qv,smart:Qv,thinking:Qv,image:Qv,web_search:Qv,deep_research:Qv})}),ti=h$.object({ids:h$.array(h$.string()).describe("Ordered list of custom virtual MCP agent ids to show on the home view.")}),YN=h$.object({id:h$.string().describe("Brand context ID"),name:h$.string().describe("Company name"),domain:h$.string().describe("Company domain (e.g. example.com)"),overview:h$.string().describe("Company overview / description"),logo:h$.string().nullable().optional().describe("Logo URL"),favicon:h$.string().nullable().optional().describe("Favicon URL"),ogImage:h$.string().nullable().optional().describe("OG image URL"),fonts:h$.object({heading:h$.string().optional().describe("Font family for headings"),body:h$.string().optional().describe("Font family for body text"),code:h$.string().optional().describe("Font family for code / monospace")}).nullable().optional().describe("Font families by semantic role"),colors:h$.object({primary:h$.string().optional().describe("Primary brand color (hex)"),secondary:h$.string().optional().describe("Secondary brand color (hex)"),accent:h$.string().optional().describe("Accent / highlight color (hex)"),background:h$.string().optional().describe("Background color (hex)"),foreground:h$.string().optional().describe("Foreground / text color (hex)")}).nullable().optional().describe("Semantic color palette"),images:h$.array(h$.record(h$.string(),h$.unknown())).nullable().optional().describe("Brand images"),metadata:h$.record(h$.string(),h$.unknown()).nullable().optional().describe("Extra design tokens (typography, components, spacing, layout, tone, etc.)"),archivedAt:h$.string().nullable().optional().describe("Archive timestamp (null to unarchive)"),isDefault:h$.boolean().optional().describe("Whether this is the default brand for the organization")})});import{z as bW}from"zod";var Id0;var ee1=O(()=>{Q1();lU();Id0=Z0({name:"ORGANIZATION_SETTINGS_GET",description:"Get organization-level settings including sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Get Organization Settings",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:bW.object({}),outputSchema:bW.object({organizationId:bW.string(),sidebar_items:bW.array(ii).nullable().optional(),enabled_plugins:bW.array(bW.string()).nullable().optional(),registry_config:ni.nullable().optional(),simple_mode:pi.nullable().optional(),default_home_agents:ti.nullable().optional(),reports_only:bW.boolean().nullable().optional(),task_board_enabled:bW.boolean().optional(),createdAt:bW.string().datetime().optional().describe("ISO 8601 timestamp"),updatedAt:bW.string().datetime().optional().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.organizationSettings.get(G);if(!X)return{organizationId:G};return{...X,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as n7}from"zod";var Rd0;var $0$=O(()=>{Q1();lU();Rd0=Z0({name:"ORGANIZATION_SETTINGS_UPDATE",description:"Update organization-level settings such as sidebar configuration, store registry settings, simple model mode, and default home agents.",annotations:{title:"Update Organization Settings",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:n7.object({organizationId:n7.string(),sidebar_items:n7.array(ii).optional(),enabled_plugins:n7.array(n7.string()).optional(),registry_config:ni.optional(),simple_mode:pi.optional(),default_home_agents:ti.optional(),reports_only:n7.boolean().optional(),task_board_enabled:n7.boolean().optional()}),outputSchema:n7.object({organizationId:n7.string(),sidebar_items:n7.array(ii).nullable().optional(),enabled_plugins:n7.array(n7.string()).nullable().optional(),registry_config:ni.nullable().optional(),simple_mode:pi.nullable().optional(),default_home_agents:ti.nullable().optional(),reports_only:n7.boolean().nullable().optional(),task_board_enabled:n7.boolean().optional(),createdAt:n7.string().datetime().describe("ISO 8601 timestamp"),updatedAt:n7.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{if(k0(Z),await Z.access.check(),Z.organization&&Z.organization.id!==$.organizationId)throw Error("Cannot update settings for a different organization");let G=await Z.storage.organizationSettings.upsert($.organizationId,{sidebar_items:$.sidebar_items,enabled_plugins:$.enabled_plugins,registry_config:$.registry_config,simple_mode:$.simple_mode,default_home_agents:$.default_home_agents,reports_only:$.reports_only,task_board_enabled:$.task_board_enabled});return{...G,createdAt:G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,updatedAt:G.updatedAt instanceof Date?G.updatedAt.toISOString():G.updatedAt}}})});import{z as JJ}from"zod";var Z0$,qd0,Md0;var G0$=O(()=>{Q1();lU();Z0$=YN.extend({organizationId:JJ.string(),archivedAt:JJ.string().nullable().optional().describe("ISO 8601 timestamp"),createdAt:JJ.string().describe("ISO 8601 timestamp"),updatedAt:JJ.string().describe("ISO 8601 timestamp")}),qd0=Z0({name:"BRAND_CONTEXT_LIST",description:"List all brand contexts (company profiles) for the current organization.",annotations:{title:"List Brand Contexts",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:JJ.object({includeArchived:JJ.boolean().optional().describe("Include archived brands in the list")}),outputSchema:JJ.object({items:JJ.array(Z0$)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G,{includeArchived:$.includeArchived})).map((Y)=>({...Y,archivedAt:Y.archivedAt instanceof Date?Y.archivedAt.toISOString():Y.archivedAt,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt,updatedAt:Y.updatedAt instanceof Date?Y.updatedAt.toISOString():Y.updatedAt}))}}}),Md0=Z0({name:"BRAND_CONTEXT_GET",description:"Get a specific brand context by ID.",annotations:{title:"Get Brand Context",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:JJ.object({id:JJ.string().describe("Brand context ID")}),outputSchema:Z0$.extend({organizationId:JJ.string()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.get($.id,G);if(!X)throw Error("Brand context not found");return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}})});import{z as DD}from"zod";var X0$,kd0,Sd0,Vd0;var Y0$=O(()=>{Q1();lU();X0$=YN.extend({organizationId:DD.string(),createdAt:DD.string().describe("ISO 8601 timestamp"),updatedAt:DD.string().describe("ISO 8601 timestamp")}),kd0=Z0({name:"BRAND_CONTEXT_CREATE",description:"Create a new brand context (company profile) for the current organization.",annotations:{title:"Create Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!1,openWorldHint:!1},inputSchema:YN.omit({id:!0}),outputSchema:X0$,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.storage.brandContext.create(G,{name:$.name,domain:$.domain,overview:$.overview,logo:$.logo??null,favicon:$.favicon??null,ogImage:$.ogImage??null,fonts:$.fonts??null,colors:$.colors??null,images:$.images??null,metadata:$.metadata??null});return{...X,archivedAt:X.archivedAt instanceof Date?X.archivedAt.toISOString():X.archivedAt,createdAt:X.createdAt instanceof Date?X.createdAt.toISOString():X.createdAt,updatedAt:X.updatedAt instanceof Date?X.updatedAt.toISOString():X.updatedAt}}}),Sd0=Z0({name:"BRAND_CONTEXT_UPDATE",description:"Update an existing brand context by ID.",annotations:{title:"Update Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:YN.partial().required({id:!0}),outputSchema:X0$,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");let{id:Y,...Q}=$;if(Q.isDefault===!0)await Z.storage.brandContext.setDefault(Y,G);let J=await Z.storage.brandContext.update(Y,G,{name:Q.name,domain:Q.domain,overview:Q.overview,logo:Q.logo!==void 0?Q.logo??null:void 0,favicon:Q.favicon!==void 0?Q.favicon??null:void 0,ogImage:Q.ogImage!==void 0?Q.ogImage??null:void 0,fonts:Q.fonts!==void 0?Q.fonts??null:void 0,colors:Q.colors!==void 0?Q.colors??null:void 0,images:Q.images!==void 0?Q.images??null:void 0,metadata:Q.metadata!==void 0?Q.metadata??null:void 0,archivedAt:Q.archivedAt!==void 0?Q.archivedAt??null:void 0,isDefault:Q.isDefault===!1?!1:void 0});return{...J,archivedAt:J.archivedAt instanceof Date?J.archivedAt.toISOString():J.archivedAt,createdAt:J.createdAt instanceof Date?J.createdAt.toISOString():J.createdAt,updatedAt:J.updatedAt instanceof Date?J.updatedAt.toISOString():J.updatedAt}}}),Vd0=Z0({name:"BRAND_CONTEXT_DELETE",description:"Archive a brand context by ID (soft delete).",annotations:{title:"Archive Brand Context",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:DD.object({id:DD.string().describe("Brand context ID")}),outputSchema:DD.object({success:DD.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(!await Z.storage.brandContext.get($.id,G))throw Error("Brand context not found");return await Z.storage.brandContext.update($.id,G,{archivedAt:new Date().toISOString(),isDefault:!1}),{success:!0}}})});async function k50($,Z,G){let X=$.trim();if(!X.startsWith("http"))X=`https://${X}`;let Y=await fetch("https://api.firecrawl.dev/v1/scrape",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${Z}`},body:JSON.stringify({url:X,formats:["branding"]})});if(!Y.ok){let H=await Y.text().catch(()=>"");throw Error(`Firecrawl API error: ${Y.status} ${H.slice(0,200)}`)}let Q=await Y.json();if(!Q.success||!Q.data?.branding)return null;let J=Q.data.branding,W=Q.data.metadata??{},K=os8(J,W);return{name:W.title?.split(/[|\u2013\u2014]|\s+-\s+/).map((H)=>H.trim()).filter(Boolean)?.slice().sort((H,N)=>H.length-N.length)[0]??W.ogSiteName??G??$,domain:$,overview:W.description??"",logo:K.logo,favicon:K.favicon,ogImage:K.ogImage,fonts:K.fonts,colors:K.colors,images:null,metadata:Object.keys(K.metadata).length>0?K.metadata:null}}function os8($,Z){let G=$.images??{},X=$.colors??{},Y={};for(let[w,F]of Object.entries(X))if(typeof F==="string"&&F&&ts8.has(w))Y[w]=F;let Q={},W=($.typography??{}).fontFamilies??{};for(let[w,F]of Object.entries(W))if(typeof F==="string"&&F){let H=rs8[w.toLowerCase()];if(H&&!Q[H])Q[H]=F}let K=$.fonts;if(Array.isArray(K))for(let w of K){let F=w.family;if(typeof F==="string"&&F&&!Q.body)Q.body=F}let U={};for(let w of["typography","components","spacing","layout","animations","icons","tone","personality","colorScheme"])if($[w]!==void 0)U[w]=$[w];return{logo:G.logo??null,favicon:G.favicon??null,ogImage:G.ogImage??Z.ogImage??null,fonts:Object.keys(Q).length>0?Q:null,colors:Object.keys(Y).length>0?Y:null,metadata:U}}var ts8,rs8;var Cd0=O(()=>{ts8=new Set(["primary","secondary","accent","background","foreground"]),rs8={heading:"heading",headings:"heading",head:"heading",title:"heading",body:"body",primary:"body",text:"body",code:"code",monospace:"code",mono:"code"}});import{z as S50}from"zod";var as8,_d0;var Q0$=O(()=>{Q1();Cd0();lU();as8=YN.pick({id:!0,name:!0,domain:!0,overview:!0,logo:!0,favicon:!0,ogImage:!0,fonts:!0,colors:!0}).extend({success:S50.boolean()}),_d0=Z0({name:"BRAND_CONTEXT_EXTRACT",description:"Extract brand context (colors, fonts, logos) from a website URL using Firecrawl.",annotations:{title:"Extract Brand Context",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:S50.object({domain:S50.string().describe("Website domain to extract brand from"),brandId:S50.string().optional().describe("Existing brand context ID to update (creates new if omitted)")}),outputSchema:as8,modelSummary:($)=>$.success?`Brand saved (id=${$.id}, name=${$.name}, domain=${$.domain}). The UI rendered the logo, colors, fonts, and overview.`:"Brand extraction failed.",handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Z.firecrawlApiKey;if(!X)throw Error("FIRECRAWL_API_KEY is not configured. Set the environment variable to enable brand extraction.");let Y=await k50($.domain,X,$.domain);if(!Y)throw Error("Firecrawl did not return branding data for this URL");let Q={name:Y.name,domain:Y.domain,overview:Y.overview,logo:Y.logo,favicon:Y.favicon,ogImage:Y.ogImage,fonts:Y.fonts,colors:Y.colors,images:Y.images,metadata:Y.metadata},J=$.brandId?await(async()=>{if(!await Z.storage.brandContext.get($.brandId,G))throw Error("Brand context not found");return Z.storage.brandContext.update($.brandId,G,Q)})():await Z.storage.brandContext.create(G,Q);return{id:J.id,name:J.name,domain:J.domain,overview:J.overview,logo:J.logo,favicon:J.favicon,ogImage:J.ogImage,fonts:J.fonts,colors:J.colors,success:!0}}})});function J0$($){let Z=$.metadata??{};return{id:$.id,name:$.name,domain:$.domain||void 0,colors:$.colors??void 0,fonts:$.fonts??void 0,assets:$.logo||$.favicon||$.ogImage?{logo:$.logo??void 0,favicon:$.favicon??void 0,ogImage:$.ogImage??void 0}:void 0,overview:$.overview||void 0,tagline:typeof Z.tagline==="string"?Z.tagline:void 0,tone:typeof Z.tone==="string"?Z.tone:void 0,metadata:(()=>{let G=Object.fromEntries(Object.entries(Z).filter(([X])=>X!=="tagline"&&X!=="tone"));return Object.keys(G).length>0?G:void 0})()}}var bd0,fd0;var W0$=O(()=>{nu0();Q1();bd0=Z0({name:"BRAND_GET",description:"Get a brand context by ID. Omit the ID to get the default brand for the organization.",annotations:{title:"Get Brand",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:L50,outputSchema:ui,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=$.id?await Z.storage.brandContext.get($.id,G):await Z.storage.brandContext.getDefault(G);if(!X)throw Error($.id?"Brand not found":"No default brand configured");return J0$(X)}}),fd0=Z0({name:"BRAND_LIST",description:"List all active brands for the current organization.",annotations:{title:"List Brands",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:z50,outputSchema:j50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");return{items:(await Z.storage.brandContext.list(G)).map(J0$)}}})});import{resolveTxt as ss8}from"dns/promises";function xd0($){return`${es8}.${$.toLowerCase()}`}function K0$(){return`deco-verify-${crypto.randomUUID().replace(/-/g,"")}`}async function U0$($,Z,G=ss8){if(!Z)return!1;try{return(await G(xd0($))).some((Y)=>Y.join("").trim()===Z)}catch{return!1}}var es8="_deco-verify";var w0$=()=>{};import{z as A5}from"zod";function QN($){let Z=$.verificationStatus==="pending"&&Boolean($.verificationToken);return{id:$.id,domain:$.domain,joinMode:$.joinMode,verificationStatus:$.verificationStatus,verificationMethod:$.verificationMethod,verifiedAt:$.verifiedAt?new Date($.verifiedAt).toISOString():null,recordName:Z?xd0($.domain):null,recordValue:Z?$.verificationToken:null}}function Ze8($){let Z=$.toLowerCase().trim();if(!$e8.test(Z))throw Error(`Invalid domain format: "${Z}". Must be a valid domain like "acme.com"`);if(WJ.has(Z))throw Error(`Cannot claim generic email domain "${Z}". Only corporate domains are allowed.`);return Z}var $e8,vd0,V50,yd0,gd0,hd0,cd0,ud0;var F0$=O(()=>{KJ();w0$();Q1();$e8=/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/,vd0=A5.enum(["off","auto","request"]),V50=A5.object({id:A5.string(),domain:A5.string(),joinMode:vd0,verificationStatus:A5.enum(["pending","verified"]),verificationMethod:A5.enum(["email","dns"]).nullable(),verifiedAt:A5.string().nullable(),recordName:A5.string().nullable(),recordValue:A5.string().nullable()});yd0=Z0({name:"ORGANIZATION_DOMAIN_LIST",description:"List the email domains claimed by an organization.",annotations:{title:"List Organization Domains",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({}),outputSchema:A5.object({domains:A5.array(V50)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z);return{domains:(await Z.storage.organizationDomains.listByOrganizationId(G.id)).map(QN)}}}),gd0=Z0({name:"ORGANIZATION_DOMAIN_ADD",description:"Claim an email domain for an organization. If the caller's verified email matches the domain it is trusted immediately; otherwise it requires DNS verification.",annotations:{title:"Add Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({domain:A5.string().min(1).max(255).describe("Domain to claim, e.g. acme.com"),joinMode:vd0.optional().describe("Initial join mode (only applied when the domain is trusted immediately via email match).")}),outputSchema:V50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=Ze8($.domain),Q=Z.auth.user?.email?.split("@")[1]?.toLowerCase(),J=Boolean(Z.auth.user?.emailVerified)&&Q===X,W=await Z.storage.organizationDomains.getByOrgAndDomain(G.id,X);if(W){if(W.verificationStatus!=="verified"&&J){let U=await Z.storage.organizationDomains.markVerified(W.id,"email");return QN(U)}return QN(W)}let K=J?await Z.storage.organizationDomains.add(G.id,X,{joinMode:$.joinMode??"off",verificationStatus:"verified",verificationMethod:"email"}):await Z.storage.organizationDomains.add(G.id,X,{joinMode:"off",verificationStatus:"pending",verificationToken:K0$()});return QN(K)}}),hd0=Z0({name:"ORGANIZATION_DOMAIN_UPDATE",description:"Set the join mode for a claimed domain. Discoverable modes (auto/request) require the domain to be verified.",annotations:{title:"Update Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({id:A5.string(),joinMode:vd0}),outputSchema:V50,handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if($.joinMode!=="off"&&X.verificationStatus!=="verified")throw Error("Verify the domain before enabling auto-join or requests.");let Y=await Z.storage.organizationDomains.updateJoinMode($.id,$.joinMode);return QN(Y)}}),cd0=Z0({name:"ORGANIZATION_DOMAIN_VERIFY",description:"Check the DNS TXT record for a pending domain and mark it verified if present.",annotations:{title:"Verify Organization Domain",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:A5.object({id:A5.string()}),outputSchema:A5.object({verified:A5.boolean(),domain:V50}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");if(X.verificationStatus==="verified")return{verified:!0,domain:QN(X)};if(!X.verificationToken)throw Error("Domain has no pending DNS verification.");if(!await U0$(X.domain,X.verificationToken))return{verified:!1,domain:QN(X)};let Q=await Z.storage.organizationDomains.markVerified($.id,"dns");return{verified:!0,domain:QN(Q)}}}),ud0=Z0({name:"ORGANIZATION_DOMAIN_REMOVE",description:"Remove a claimed domain from an organization.",annotations:{title:"Remove Organization Domain",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:A5.object({id:A5.string()}),outputSchema:A5.object({success:A5.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationDomains.getById($.id);if(!X||X.organizationId!==G.id)throw Error("Domain not found");return await Z.storage.organizationDomains.removeById($.id),{success:!0}}})});function JN($){return($ instanceof Error?$.message.toLowerCase():"").includes("already a member")}import{z as E9}from"zod";var Ge8,dd0,ld0,md0;var H0$=O(()=>{Q1();R4();Ge8=E9.object({id:E9.string(),userId:E9.string(),status:E9.enum(["pending","approved","denied"]),createdAt:E9.string(),user:E9.object({id:E9.string(),name:E9.string(),email:E9.string(),image:E9.string().nullable()}).nullable()}),dd0=Z0({name:"ORGANIZATION_JOIN_REQUEST_LIST",description:"List pending requests to join the organization.",annotations:{title:"List Join Requests",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({}),outputSchema:E9.object({requests:E9.array(Ge8)}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z);return{requests:(await Z.storage.organizationJoinRequests.listPendingWithUser(G.id)).map((Y)=>({id:Y.id,userId:Y.userId,status:Y.status,createdAt:new Date(Y.createdAt).toISOString(),user:Y.user}))}}}),ld0=Z0({name:"ORGANIZATION_JOIN_REQUEST_APPROVE",description:"Approve a pending join request, adding the user as a member.",annotations:{title:"Approve Join Request",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(!await Z.storage.organizationJoinRequests.decide(X.id,"approved",Y??X.userId))return{success:!0};try{await Z.boundAuth.organization.addMember({organizationId:G.id,userId:X.userId,role:["user"]})}catch(J){if(!JN(J))throw J}if(Y)i1.capture({distinctId:Y,event:"organization_join_request_approved",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}}),md0=Z0({name:"ORGANIZATION_JOIN_REQUEST_DENY",description:"Deny a pending join request.",annotations:{title:"Deny Join Request",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:E9.object({requestId:E9.string()}),outputSchema:E9.object({success:E9.boolean()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=O0(Z),X=await Z.storage.organizationJoinRequests.getById($.requestId);if(!X||X.organizationId!==G.id)throw Error("Join request not found");if(X.status!=="pending")throw Error("Join request has already been decided");let Y=y1(Z);if(await Z.storage.organizationJoinRequests.decide(X.id,"denied",Y??X.userId)&&Y)i1.capture({distinctId:Y,event:"organization_join_request_denied",groups:{organization:G.id},properties:{organization_id:G.id,user_id:X.userId}});return{success:!0}}})});import{z as jX}from"zod";var id0;var N0$=O(()=>{R4();Q1();m3();id0=Z0({name:"ORGANIZATION_MEMBER_ADD",description:"Invite a member to the organization by email with an assigned role.",annotations:{title:"Add Organization Member",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:jX.object({organizationId:jX.string().optional(),userId:jX.string(),role:jX.array(jX.string())}),outputSchema:jX.object({id:jX.string(),organizationId:jX.string(),userId:jX.string(),role:jX.union([jX.string(),jX.array(jX.string())]),createdAt:jX.string().datetime().describe("ISO 8601 timestamp")}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");if(G!==Z.organization?.id)throw Error("Organization ID does not match authenticated organization");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!P60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.addMember({organizationId:G,userId:$.userId,role:$.role});if(!Y)throw Error("Failed to add member");let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_added",groups:{organization:G},properties:{organization_id:G,added_user_id:$.userId,role:$.role}});return{...Y,role:Y.role,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});import{z as Jv}from"zod";var nd0;var B0$=O(()=>{R4();Q1();nd0=Z0({name:"ORGANIZATION_MEMBER_REMOVE",description:"Remove a member from the organization. Revokes all their access immediately.",annotations:{title:"Remove Organization Member",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Jv.object({organizationId:Jv.string().optional(),memberIdOrEmail:Jv.string()}),outputSchema:Jv.object({success:Jv.boolean(),memberIdOrEmail:Jv.string()}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");await Z.boundAuth.organization.removeMember({organizationId:G,memberIdOrEmail:$.memberIdOrEmail});let X=y1(Z);if(X)i1.capture({distinctId:X,event:"organization_member_removed",groups:{organization:G},properties:{organization_id:G,member_id_or_email:$.memberIdOrEmail}});return{success:!0,memberIdOrEmail:$.memberIdOrEmail}}})});import{z as p7}from"zod";var pd0;var O0$=O(()=>{Q1();pd0=Z0({name:"ORGANIZATION_MEMBER_LIST",description:"List all members in the organization with their roles.",annotations:{title:"List Organization Members",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:p7.object({limit:p7.number().optional(),offset:p7.number().optional()}),outputSchema:p7.object({members:p7.array(p7.object({id:p7.string(),organizationId:p7.string(),userId:p7.string(),role:p7.string(),createdAt:p7.string().datetime().describe("ISO 8601 timestamp"),user:p7.object({id:p7.string(),name:p7.string(),email:p7.string(),image:p7.string().optional()}).optional()}))}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=await Z.boundAuth.organization.listMembers({organizationId:G,limit:$.limit,offset:$.offset});return{members:(Array.isArray(X)?X:[]).map((Q)=>({...Q,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});import{z as kZ}from"zod";var td0;var E0$=O(()=>{R4();Q1();m3();td0=Z0({name:"ORGANIZATION_MEMBER_UPDATE_ROLE",description:"Change a member's role (e.g., admin, member) within the organization.",annotations:{title:"Update Member Role",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:kZ.object({organizationId:kZ.string().optional(),memberId:kZ.string(),role:kZ.array(kZ.string())}),outputSchema:kZ.object({id:kZ.string(),organizationId:kZ.string(),userId:kZ.string(),role:kZ.union([kZ.literal("admin"),kZ.literal("member"),kZ.literal("owner")]),createdAt:kZ.string().datetime().describe("ISO 8601 timestamp"),user:kZ.object({email:kZ.string(),name:kZ.string(),image:kZ.string().optional()})}),handler:async($,Z)=>{k0(Z),await Z.access.check();let G=$.organizationId||Z.organization?.id;if(!G)throw Error("Organization ID required (no active organization in context)");let X=Array.isArray($.role)?$.role[0]:$.role;if(X&&!P60(Z.auth.user?.role,X))throw Error(`Insufficient privileges to assign role "${X}"`);let Y=await Z.boundAuth.organization.updateMemberRole({organizationId:G,memberId:$.memberId,role:$.role});if(!Y)throw Error("Failed to update member role");Z.invalidateMemberRole?.(Y.userId,G);let Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"organization_member_role_updated",groups:{organization:G},properties:{organization_id:G,member_id:$.memberId,target_user_id:Y.userId,new_role:Array.isArray($.role)?$.role.join(","):$.role}});return{...Y,createdAt:Y.createdAt instanceof Date?Y.createdAt.toISOString():Y.createdAt}}})});var D0$=O(()=>{pe1();te1();re1();oe1();ae1();ee1();$0$();G0$();Y0$();Q0$();W0$();F0$();H0$();N0$();B0$();O0$();E0$()});var WN="super-agent",L0$="task-board.item.updated";import{z as v5}from"zod";var ri,oi,Ye8,Wv;var ai=O(()=>{ri=v5.enum(["triage","todo","in_progress","in_review","done"]),oi=v5.enum(["none","low","medium","high","urgent"]),Ye8=v5.object({threadId:v5.string(),virtualMcpId:v5.string().nullable(),status:v5.enum(["in_progress","requires_action","failed","completed","expired"]).nullable(),title:v5.string().nullable(),lastMessage:v5.string().nullable(),hasPreview:v5.boolean(),createdAt:v5.string()}),Wv=v5.object({id:v5.string(),organizationId:v5.string(),title:v5.string(),description:v5.string().nullable(),status:ri,priority:oi,assigneeId:v5.string().nullable(),assignedBy:v5.string().nullable(),dueDate:v5.string().datetime().nullable(),threads:v5.array(Ye8),createdBy:v5.string(),createdAt:v5.string().datetime(),updatedBy:v5.string(),updatedAt:v5.string().datetime()})});async function C50($,Z,G){if(G===WN)return;let{members:X}=await $.boundAuth.organization.listMembers({organizationId:Z,filterField:"userId",filterValue:G});if(!X.some((Y)=>Y.userId===G))throw Error("assigneeId is not a member of the organization")}var rd0=O(()=>{ai()});async function KN($,Z){if(!(await $.storage.organizationSettings.get(Z))?.task_board_enabled)throw Error("Task board is not enabled for this organization")}async function od0($,Z,G){let X;try{return await Promise.race([$.aiProviders.listModels(Z,G),new Promise((Q,J)=>{X=setTimeout(()=>J(Error("listModels timeout")),Qe8)})])}finally{if(X)clearTimeout(X)}}function Je8($,Z){switch($){case"fast":return Z.chat.fast;case"smart":return Z.chat.smart;case"thinking":return Z.chat.thinking;case"image":return Z.image;case"web_search":return Z.webSearch;case"deep_research":return Z.deepResearch}}function ad0($,Z,G){let X=$.find((Y)=>Y.modelId===Z);return{title:X?.title??G??Z,providerId:X?.providerId,capabilities:X?.capabilities,limits:X?.limits??null}}async function UJ($,Z){let G=$.organization?.id;if(!G)throw Error("resolveTier called without an organization");let Y=(await $.storage.organizationSettings.get(G))?.simple_mode?.tiers?.[Z]??null,Q=await $.storage.aiProviderKeys.list({organizationId:G});if(Y&&Q.some((w)=>w.id===Y.keyId)){let w=await od0($,Y.keyId,G).catch(()=>[]);return{credentialId:Y.keyId,modelId:Y.modelId,modelMeta:ad0(w,Y.modelId,Y.title)}}if(Q.length===0)throw new Kv(Z);let J={};await Promise.all(Q.map(async(w)=>{J[w.id]=await od0($,w.id,G).catch(()=>[])}));let W=Q.map((w)=>({id:w.id,providerId:w.providerId,label:w.label,presetId:w.presetId,createdBy:w.createdBy,createdAt:w.createdAt})),K=qb0(W,J),U=Je8(Z,K);if(!U)throw new Kv(Z);return{credentialId:U.keyId,modelId:U.modelId,modelMeta:ad0(J[U.keyId]??[],U.modelId,U.title)}}async function z0$($,Z,G){let X=$.organization?.id;if(!X)throw Error("resolveSpecificModel called without an organization");let Y=await od0($,Z,X).catch(()=>[]);return{credentialId:Z,modelId:G,modelMeta:ad0(Y,G)}}async function VQ($,Z){try{return await UJ($,Z)}catch(G){if(G instanceof Kv)return null;return console.warn(`[resolveTier] tier "${Z}" resolution failed:`,G),null}}var Kv,Qe8=5000;var Uv=O(()=>{f8();Kv=class Kv extends Error{tier;constructor($){super(`No model available for tier "${$}". Connect a provider or configure the tier in organization settings.`);this.tier=$;this.name="TierUnavailableError"}}});function _50($){return $.sandboxProviderKind==="agent-sandbox"&&$.harnessId==="decopilot"}function j0$($){return $.harnessId==="decopilot"&&($.sandboxProviderKind==null||$.sandboxProviderKind==="agent-sandbox")}function Ke8($){return{type:"data-run-status",id:"run-status",data:{stage:$}}}function P0$($){if(!$||typeof $!=="object")return!1;return $.type==="data-run-status"}async function mU($,Z,G){if(!$)return;try{await $.publishRawChunk(Z,Ke8(G))}catch{}}var We8,si,sK5;var ei=O(()=>{We8=["waiting-runner","starting-run","gathering-context","preparing-tools","starting-assistant","analyzing-scope"],si=["gathering-context","preparing-tools","starting-assistant","analyzing-scope"],sK5=new Set(We8)});function b50(){return crypto.randomUUID()}var ed0=_((ZU5,I0$)=>{var{defineProperty:sd0,getOwnPropertyDescriptor:Ue8,getOwnPropertyNames:we8}=Object,Fe8=Object.prototype.hasOwnProperty,He8=($,Z)=>{for(var G in Z)sd0($,G,{get:Z[G],enumerable:!0})},Ne8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of we8(Z))if(!Fe8.call($,Y)&&Y!==G)sd0($,Y,{get:()=>Z[Y],enumerable:!(X=Ue8(Z,Y))||X.enumerable})}return $},Be8=($)=>Ne8(sd0({},"__esModule",{value:!0}),$),A0$={};He8(A0$,{SYMBOL_FOR_REQ_CONTEXT:()=>T0$,getContext:()=>Oe8});I0$.exports=Be8(A0$);var T0$=Symbol.for("@vercel/request-context");function Oe8(){return globalThis[T0$]?.get?.()??{}}});var $n=_((GU5,M0$)=>{var{defineProperty:$l0,getOwnPropertyDescriptor:Ee8,getOwnPropertyNames:De8}=Object,Le8=Object.prototype.hasOwnProperty,ze8=($,Z)=>{for(var G in Z)$l0($,G,{get:Z[G],enumerable:!0})},je8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of De8(Z))if(!Le8.call($,Y)&&Y!==G)$l0($,Y,{get:()=>Z[Y],enumerable:!(X=Ee8(Z,Y))||X.enumerable})}return $},Pe8=($)=>je8($l0({},"__esModule",{value:!0}),$),R0$={};ze8(R0$,{VercelOidcTokenError:()=>q0$});M0$.exports=Pe8(R0$);class q0$ extends Error{constructor($,Z){super($);this.name="VercelOidcTokenError",this.cause=Z}toString(){if(this.cause)return`${this.name}: ${this.message}: ${this.cause}`;return`${this.name}: ${this.message}`}}});var C0$=_((XU5,V0$)=>{var{create:Ae8,defineProperty:f50,getOwnPropertyDescriptor:Te8,getOwnPropertyNames:Ie8,getPrototypeOf:Re8}=Object,qe8=Object.prototype.hasOwnProperty,Me8=($,Z)=>{for(var G in Z)f50($,G,{get:Z[G],enumerable:!0})},k0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of Ie8(Z))if(!qe8.call($,Y)&&Y!==G)f50($,Y,{get:()=>Z[Y],enumerable:!(X=Te8(Z,Y))||X.enumerable})}return $},Gl0=($,Z,G)=>(G=$!=null?Ae8(Re8($)):{},k0$(Z||!$||!$.__esModule?f50(G,"default",{value:$,enumerable:!0}):G,$)),ke8=($)=>k0$(f50({},"__esModule",{value:!0}),$),S0$={};Me8(S0$,{findRootDir:()=>Ce8,getUserDataDir:()=>_e8});V0$.exports=ke8(S0$);var Zn=Gl0(u0("path")),Se8=Gl0(u0("fs")),Zl0=Gl0(u0("os")),Ve8=$n();function Ce8(){try{let $=process.cwd();while($!==Zn.default.dirname($)){let Z=Zn.default.join($,".vercel");if(Se8.default.existsSync(Z))return $;$=Zn.default.dirname($)}}catch($){throw new Ve8.VercelOidcTokenError("Token refresh only supported in node server environments")}return null}function _e8(){if(process.env.XDG_DATA_HOME)return process.env.XDG_DATA_HOME;switch(Zl0.default.platform()){case"darwin":return Zn.default.join(Zl0.default.homedir(),"Library/Application Support");case"linux":return Zn.default.join(Zl0.default.homedir(),".local/share");case"win32":if(process.env.LOCALAPPDATA)return process.env.LOCALAPPDATA;return null;default:return null}}});var g0$=_((YU5,y0$)=>{var{create:be8,defineProperty:x50,getOwnPropertyDescriptor:fe8,getOwnPropertyNames:xe8,getPrototypeOf:ve8}=Object,ye8=Object.prototype.hasOwnProperty,ge8=($,Z)=>{for(var G in Z)x50($,G,{get:Z[G],enumerable:!0})},_0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of xe8(Z))if(!ye8.call($,Y)&&Y!==G)x50($,Y,{get:()=>Z[Y],enumerable:!(X=fe8(Z,Y))||X.enumerable})}return $},b0$=($,Z,G)=>(G=$!=null?be8(ve8($)):{},_0$(Z||!$||!$.__esModule?x50(G,"default",{value:$,enumerable:!0}):G,$)),he8=($)=>_0$(x50({},"__esModule",{value:!0}),$),f0$={};ge8(f0$,{isValidAccessToken:()=>le8,readAuthConfig:()=>ue8,writeAuthConfig:()=>de8});y0$.exports=he8(f0$);var Gn=b0$(u0("fs")),x0$=b0$(u0("path")),ce8=Xn();function v0$(){let $=(0,ce8.getVercelDataDir)();if(!$)throw Error(`Unable to find Vercel CLI data directory. Your platform: ${process.platform}. Supported: darwin, linux, win32.`);return x0$.join($,"auth.json")}function ue8(){try{let $=v0$();if(!Gn.existsSync($))return null;let Z=Gn.readFileSync($,"utf8");if(!Z)return null;return JSON.parse(Z)}catch($){return null}}function de8($){let Z=v0$(),G=x0$.dirname(Z);if(!Gn.existsSync(G))Gn.mkdirSync(G,{mode:504,recursive:!0});Gn.writeFileSync(Z,JSON.stringify($,null,2),{mode:384})}function le8($,Z=0){if(!$.token)return!1;if(typeof $.expiresAt!=="number")return!0;let G=Math.floor(Date.now()/1000),X=Z/1000;return $.expiresAt>=G+X}});var d0$=_((QU5,u0$)=>{var{defineProperty:Ql0,getOwnPropertyDescriptor:me8,getOwnPropertyNames:ie8}=Object,ne8=Object.prototype.hasOwnProperty,pe8=($,Z)=>{for(var G in Z)Ql0($,G,{get:Z[G],enumerable:!0})},te8=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of ie8(Z))if(!ne8.call($,Y)&&Y!==G)Ql0($,Y,{get:()=>Z[Y],enumerable:!(X=me8(Z,Y))||X.enumerable})}return $},re8=($)=>te8(Ql0({},"__esModule",{value:!0}),$),h0$={};pe8(h0$,{processTokenResponse:()=>$06,refreshTokenRequest:()=>ee8});u0$.exports=re8(h0$);var Xl0=u0("os"),oe8="https://vercel.com",ae8="cl_HYyOPBNtFMfHhaUn9L4QPfTZz6TP47bp",c0$=`@vercel/oidc node-${process.version} ${(0,Xl0.platform)()} (${(0,Xl0.arch)()}) ${(0,Xl0.hostname)()}`,Yl0=null;async function se8(){if(Yl0)return Yl0;let $=`${oe8}/.well-known/openid-configuration`,Z=await fetch($,{headers:{"user-agent":c0$}});if(!Z.ok)throw Error("Failed to discover OAuth endpoints");let G=await Z.json();if(!G||typeof G.token_endpoint!=="string")throw Error("Invalid OAuth discovery response");let X=G.token_endpoint;return Yl0=X,X}async function ee8($){let Z=await se8();return await fetch(Z,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded","user-agent":c0$},body:new URLSearchParams({client_id:ae8,grant_type:"refresh_token",...$})})}async function $06($){let Z=await $.json();if(!$.ok){let G=typeof Z==="object"&&Z&&"error"in Z?String(Z.error):"Token refresh failed";return[Error(G)]}if(typeof Z!=="object"||Z===null)return[Error("Invalid token response")];if(typeof Z.access_token!=="string")return[Error("Missing access_token in response")];if(Z.token_type!=="Bearer")return[Error("Invalid token_type in response")];if(typeof Z.expires_in!=="number")return[Error("Missing expires_in in response")];return[null,Z]}});var Wl0=_((JU5,n0$)=>{var{defineProperty:Jl0,getOwnPropertyDescriptor:Z06,getOwnPropertyNames:G06}=Object,X06=Object.prototype.hasOwnProperty,Y06=($,Z)=>{for(var G in Z)Jl0($,G,{get:Z[G],enumerable:!0})},Q06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of G06(Z))if(!X06.call($,Y)&&Y!==G)Jl0($,Y,{get:()=>Z[Y],enumerable:!(X=Z06(Z,Y))||X.enumerable})}return $},J06=($)=>Q06(Jl0({},"__esModule",{value:!0}),$),l0$={};Y06(l0$,{AccessTokenMissingError:()=>m0$,RefreshAccessTokenFailedError:()=>i0$});n0$.exports=J06(l0$);class m0$ extends Error{constructor(){super("No authentication found. Please log in with the Vercel CLI (vercel login).");this.name="AccessTokenMissingError"}}class i0$ extends Error{constructor($){super("Failed to refresh authentication token.",{cause:$});this.name="RefreshAccessTokenFailedError"}}});var Xn=_((WU5,a0$)=>{var{create:W06,defineProperty:v50,getOwnPropertyDescriptor:K06,getOwnPropertyNames:U06,getPrototypeOf:w06}=Object,F06=Object.prototype.hasOwnProperty,H06=($,Z)=>{for(var G in Z)v50($,G,{get:Z[G],enumerable:!0})},t0$=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of U06(Z))if(!F06.call($,Y)&&Y!==G)v50($,Y,{get:()=>Z[Y],enumerable:!(X=K06(Z,Y))||X.enumerable})}return $},r0$=($,Z,G)=>(G=$!=null?W06(w06($)):{},t0$(Z||!$||!$.__esModule?v50(G,"default",{value:$,enumerable:!0}):G,$)),N06=($)=>t0$(v50({},"__esModule",{value:!0}),$),o0$={};H06(o0$,{assertVercelOidcTokenResponse:()=>Kl0,findProjectInfo:()=>D06,getTokenPayload:()=>j06,getVercelDataDir:()=>B06,getVercelOidcToken:()=>E06,getVercelToken:()=>O06,isExpired:()=>P06,loadToken:()=>z06,saveToken:()=>L06});a0$.exports=N06(o0$);var Yn=r0$(u0("path")),LD=r0$(u0("fs")),Hv=$n(),y50=C0$(),wv=g0$(),p0$=d0$(),Fv=Wl0();function B06(){let Z=(0,y50.getUserDataDir)();if(!Z)return null;return Yn.join(Z,"com.vercel.cli")}async function O06($){let Z=(0,wv.readAuthConfig)();if(!Z?.token)throw new Fv.AccessTokenMissingError;if((0,wv.isValidAccessToken)(Z,$?.expirationBufferMs))return Z.token;if(!Z.refreshToken)throw(0,wv.writeAuthConfig)({}),new Fv.RefreshAccessTokenFailedError("No refresh token available");try{let G=await(0,p0$.refreshTokenRequest)({refresh_token:Z.refreshToken}),[X,Y]=await(0,p0$.processTokenResponse)(G);if(X||!Y)throw(0,wv.writeAuthConfig)({}),new Fv.RefreshAccessTokenFailedError(X);let Q={token:Y.access_token,expiresAt:Math.floor(Date.now()/1000)+Y.expires_in};if(Y.refresh_token)Q.refreshToken=Y.refresh_token;return(0,wv.writeAuthConfig)(Q),Q.token}catch(G){if((0,wv.writeAuthConfig)({}),G instanceof Fv.AccessTokenMissingError||G instanceof Fv.RefreshAccessTokenFailedError)throw G;throw new Fv.RefreshAccessTokenFailedError(G)}}async function E06($,Z,G){let X=`https://api.vercel.com/v1/projects/${Z}/token?source=vercel-oidc-refresh${G?`&teamId=${G}`:""}`,Y=await fetch(X,{method:"POST",headers:{Authorization:`Bearer ${$}`}});if(!Y.ok)throw new Hv.VercelOidcTokenError(`Failed to refresh OIDC token: ${Y.statusText}`);let Q=await Y.json();return Kl0(Q),Q}function Kl0($){if(!$||typeof $!=="object")throw TypeError("Vercel OIDC token is malformed. Expected an object. Please run `vc env pull` and try again");if(!("token"in $)||typeof $.token!=="string")throw TypeError("Vercel OIDC token is malformed. Expected a string-valued token property. Please run `vc env pull` and try again")}function D06(){let $=(0,y50.findRootDir)();if(!$)throw new Hv.VercelOidcTokenError("Unable to find project root directory. Have you linked your project with `vc link?`");let Z=Yn.join($,".vercel","project.json");if(!LD.existsSync(Z))throw new Hv.VercelOidcTokenError("project.json not found, have you linked your project with `vc link?`");let G=JSON.parse(LD.readFileSync(Z,"utf8"));if(typeof G.projectId!=="string"&&typeof G.orgId!=="string")throw TypeError("Expected a string-valued projectId property. Try running `vc link` to re-link your project.");return{projectId:G.projectId,teamId:G.orgId}}function L06($,Z){let G=(0,y50.getUserDataDir)();if(!G)throw new Hv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let X=Yn.join(G,"com.vercel.token",`${Z}.json`),Y=JSON.stringify($);LD.mkdirSync(Yn.dirname(X),{mode:504,recursive:!0}),LD.writeFileSync(X,Y),LD.chmodSync(X,432);return}function z06($){let Z=(0,y50.getUserDataDir)();if(!Z)throw new Hv.VercelOidcTokenError("Unable to find user data directory. Please reach out to Vercel support.");let G=Yn.join(Z,"com.vercel.token",`${$}.json`);if(!LD.existsSync(G))return null;let X=JSON.parse(LD.readFileSync(G,"utf8"));return Kl0(X),X}function j06($){let Z=$.split(".");if(Z.length!==3)throw new Hv.VercelOidcTokenError("Invalid token. Please run `vc env pull` and try again");let G=Z[1].replace(/-/g,"+").replace(/_/g,"/"),X=G.padEnd(G.length+(4-G.length%4)%4,"=");return JSON.parse(Buffer.from(X,"base64").toString("utf8"))}function P06($,Z=0){return $.exp*1000<Date.now()+Z}});var Z1$=_((KU5,$1$)=>{var{defineProperty:Ul0,getOwnPropertyDescriptor:A06,getOwnPropertyNames:T06}=Object,I06=Object.prototype.hasOwnProperty,R06=($,Z)=>{for(var G in Z)Ul0($,G,{get:Z[G],enumerable:!0})},q06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of T06(Z))if(!I06.call($,Y)&&Y!==G)Ul0($,Y,{get:()=>Z[Y],enumerable:!(X=A06(Z,Y))||X.enumerable})}return $},M06=($)=>q06(Ul0({},"__esModule",{value:!0}),$),e0$={};R06(e0$,{refreshToken:()=>k06});$1$.exports=M06(e0$);var s0$=$n(),UN=Xn();async function k06($){let Z=$?.project,G=$?.team;if(!Z&&!G){let Y=(0,UN.findProjectInfo)();Z=Y.projectId,G=Y.teamId}else if(!Z||!G){let Y=(0,UN.findProjectInfo)();Z=Z??Y.projectId,G=G??Y.teamId}if(!Z)throw new s0$.VercelOidcTokenError("Failed to refresh OIDC token: No project specified. Try re-linking your project with `vc link`");let X=(0,UN.loadToken)(Z);if(!X||(0,UN.isExpired)((0,UN.getTokenPayload)(X.token),$?.expirationBufferMs)){let Y=await(0,UN.getVercelToken)({expirationBufferMs:$?.expirationBufferMs});if(X=await(0,UN.getVercelOidcToken)(Y,Z,G),!X)throw new s0$.VercelOidcTokenError("Failed to refresh OIDC token");(0,UN.saveToken)(X,Z)}process.env.VERCEL_OIDC_TOKEN=X.token;return}});var Y1$=_((UU5,X1$)=>{var{defineProperty:Fl0,getOwnPropertyDescriptor:S06,getOwnPropertyNames:V06}=Object,C06=Object.prototype.hasOwnProperty,_06=($,Z)=>{for(var G in Z)Fl0($,G,{get:Z[G],enumerable:!0})},b06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of V06(Z))if(!C06.call($,Y)&&Y!==G)Fl0($,Y,{get:()=>Z[Y],enumerable:!(X=S06(Z,Y))||X.enumerable})}return $},f06=($)=>b06(Fl0({},"__esModule",{value:!0}),$),G1$={};_06(G1$,{getVercelOidcToken:()=>y06,getVercelOidcTokenSync:()=>wl0});X1$.exports=f06(G1$);var x06=ed0(),v06=$n();async function y06($){let Z="",G;try{Z=wl0()}catch(X){G=X}try{let[{getTokenPayload:X,isExpired:Y},{refreshToken:Q}]=await Promise.all([await Promise.resolve().then(() => k(Xn())),await Promise.resolve().then(() => k(Z1$()))]);if(!Z||Y(X(Z),$?.expirationBufferMs))await Q($),Z=wl0()}catch(X){let Y=G instanceof Error?G.message:"";if(X instanceof Error)Y=`${Y}
 ${X.message}`;if(Y)throw new v06.VercelOidcTokenError(Y);throw X}return Z}function wl0(){let $=(0,x06.getContext)().headers?.["x-vercel-oidc-token"]??process.env.VERCEL_OIDC_TOKEN;if(!$)throw Error("The 'x-vercel-oidc-token' header is missing from the request. Do you have the OIDC option enabled in the Vercel project settings?");return $}});var Nl0=_((wU5,K1$)=>{var{defineProperty:Hl0,getOwnPropertyDescriptor:g06,getOwnPropertyNames:h06}=Object,c06=Object.prototype.hasOwnProperty,u06=($,Z)=>{for(var G in Z)Hl0($,G,{get:Z[G],enumerable:!0})},d06=($,Z,G,X)=>{if(Z&&typeof Z==="object"||typeof Z==="function"){for(let Y of h06(Z))if(!c06.call($,Y)&&Y!==G)Hl0($,Y,{get:()=>Z[Y],enumerable:!(X=g06(Z,Y))||X.enumerable})}return $},l06=($)=>d06(Hl0({},"__esModule",{value:!0}),$),W1$={};u06(W1$,{AccessTokenMissingError:()=>J1$.AccessTokenMissingError,RefreshAccessTokenFailedError:()=>J1$.RefreshAccessTokenFailedError,getContext:()=>m06.getContext,getVercelOidcToken:()=>Q1$.getVercelOidcToken,getVercelOidcTokenSync:()=>Q1$.getVercelOidcTokenSync,getVercelToken:()=>i06.getVercelToken});K1$.exports=l06(W1$);var Q1$=Y1$(),m06=ed0(),J1$=Wl0(),i06=Xn()});import{z as iU}from"zod/v4";import{z as j1$}from"zod/v4";import{z as Ol0}from"zod/v4";import{z as L9}from"zod/v4";import{z as YZ}from"zod/v4";import{z as D9}from"zod/v4";import{z as g50}from"zod/v4";import{z as U5}from"zod/v4";import{z as c4}from"zod/v4";import{z as p8}from"zod/v4";import{z as T5}from"zod/v4";import{z as G4}from"zod";import{z as a6}from"zod";async function y1$({response:$,statusCode:Z,defaultMessage:G="Gateway request failed",cause:X,authMethod:Y}){var Q;let J=await o5({value:$,schema:K16});if(!J.success){let F=typeof $==="object"&&$!==null&&"generationId"in $?$.generationId:void 0;return new W16({message:`Invalid error response format: ${G}`,statusCode:Z,response:$,validationError:J.error,cause:X,generationId:F})}let W=J.value,K=W.error.type,U=W.error.message,w=(Q=W.generationId)!=null?Q:void 0;switch(K){case"authentication_error":return h50.createContextualError({apiKeyProvided:Y==="api-key",oidcTokenProvided:Y==="oidc",statusCode:Z,cause:X,generationId:w});case"invalid_request_error":return new r06({message:U,statusCode:Z,cause:X,generationId:w});case"rate_limit_exceeded":return new a06({message:U,statusCode:Z,cause:X,generationId:w});case"model_not_found":{let F=await o5({value:W.error.param,schema:e06});return new $16({message:U,statusCode:Z,modelId:F.success?F.value.modelId:void 0,cause:X,generationId:w})}case"internal_server_error":return new M1$({message:U,statusCode:Z,cause:X,generationId:w});case"failed_dependency":return new X16({message:U,statusCode:Z,cause:X,generationId:w});case"forbidden":return new Q16({message:U,statusCode:Z,cause:X,generationId:w});default:return new M1$({message:U,statusCode:Z,cause:X,generationId:w})}}function U16($){if($.data!==void 0)return $.data;if($.responseBody!=null)try{return JSON.parse($.responseBody)}catch(Z){return $.responseBody}return{}}function d1$($){if(!($ instanceof Error))return!1;let Z=$.code;if(typeof Z==="string")return["UND_ERR_HEADERS_TIMEOUT","UND_ERR_BODY_TIMEOUT","UND_ERR_CONNECT_TIMEOUT"].includes(Z);return!1}async function PX($,Z){var G;if(z9.isInstance($))return $;if(d1$($))return u1$.createTimeoutError({originalMessage:$ instanceof Error?$.message:"Unknown error",cause:$});if(J8.isInstance($)){if($.cause&&d1$($.cause))return u1$.createTimeoutError({originalMessage:$.message,cause:$});return await y1$({response:U16($),statusCode:(G=$.statusCode)!=null?G:500,defaultMessage:"Gateway request failed",cause:$,authMethod:Z})}return await y1$({response:{},statusCode:500,defaultMessage:$ instanceof Error?`Gateway request failed: ${$.message}`:"Unknown Gateway error",cause:$,authMethod:Z})}async function fW($){let Z=await o5({value:$[$$$],schema:F16});return Z.success?Z.value:void 0}function m1$($){if($.type==="file"&&$.data instanceof Uint8Array)return{...$,data:FX($.data)};return $}function S16($){if($.type==="file"&&$.data instanceof Uint8Array)return{...$,data:FX($.data)};return $}async function n16(){var $;return($=Z$$.getContext().headers)==null?void 0:$["x-vercel-id"]}function El0($={}){var Z,G;let X=null,Y=null,Q=(Z=$.metadataCacheRefreshMillis)!=null?Z:300000,J=0,W=(G=yH($.baseURL))!=null?G:"https://ai-gateway.vercel.sh/v3/ai",K=async()=>{try{let z=await r16($);return o6({Authorization:`Bearer ${z.token}`,"ai-gateway-protocol-version":t16,[$$$]:z.authMethod,...$.headers},`ai-sdk/gateway/${p16}`)}catch(z){throw h50.createContextualError({apiKeyProvided:!1,oidcTokenProvided:!1,statusCode:401,cause:z})}},U=()=>{let z=DW({settingValue:void 0,environmentVariableName:"VERCEL_DEPLOYMENT_ID"}),j=DW({settingValue:void 0,environmentVariableName:"VERCEL_ENV"}),P=DW({settingValue:void 0,environmentVariableName:"VERCEL_REGION"}),A=DW({settingValue:void 0,environmentVariableName:"VERCEL_PROJECT_ID"});return async()=>{let M=await n16();return{...z&&{"ai-o11y-deployment-id":z},...j&&{"ai-o11y-environment":j},...P&&{"ai-o11y-region":P},...M&&{"ai-o11y-request-id":M},...A&&{"ai-o11y-project-id":A}}}},w=(z)=>{return new z16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:U()})},F=async()=>{var z,j,P;let A=(P=(j=(z=$._internal)==null?void 0:z.currentDate)==null?void 0:j.call(z).getTime())!=null?P:Date.now();if(!X||A-J>Q)J=A,X=new l1$({baseURL:W,headers:K,fetch:$.fetch}).getAvailableModels().then((M)=>{return Y=M,M}).catch(async(M)=>{throw await PX(M,await fW(await K()))});return Y?Promise.resolve(Y):X},H=async()=>{return new l1$({baseURL:W,headers:K,fetch:$.fetch}).getCredits().catch(async(z)=>{throw await PX(z,await fW(await K()))})},N=async(z)=>{return new O16({baseURL:W,headers:K,fetch:$.fetch}).getSpendReport(z).catch(async(j)=>{throw await PX(j,await fW(await K()))})},B=async(z)=>{return new D16({baseURL:W,headers:K,fetch:$.fetch}).getGenerationInfo(z).catch(async(j)=>{throw await PX(j,await fW(await K()))})},E=function(z){if(new.target)throw Error("The Gateway Provider model function cannot be called with the new keyword.");return w(z)};E.specificationVersion="v3",E.getAvailableModels=F,E.getCredits=H,E.getSpendReport=N,E.getGenerationInfo=B,E.imageModel=(z)=>{return new T16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:U()})},E.languageModel=w;let D=(z)=>{return new j16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:U()})};E.embeddingModel=D,E.textEmbeddingModel=D,E.videoModel=(z)=>{return new k16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:U()})};let L=(z)=>{return new f16(z,{provider:"gateway",baseURL:W,headers:K,fetch:$.fetch,o11yHeaders:U()})};return E.rerankingModel=L,E.reranking=L,E.chat=E.languageModel,E.embedding=E.embeddingModel,E.image=E.imageModel,E.video=E.videoModel,E.tools=i16,E}async function r16($){let Z=DW({settingValue:$.apiKey,environmentVariableName:"AI_GATEWAY_API_KEY"});if(Z)return{token:Z,authMethod:"api-key"};return{token:await G$$.getVercelOidcToken(),authMethod:"oidc"}}var Z$$,G$$,n06="vercel.ai.gateway.error",Bl0,U1$,w1$,z9,i1$="GatewayAuthenticationError",p06,F1$,H1$,N1$,h50,n1$="GatewayInvalidRequestError",t06,B1$,O1$,E1$,r06,p1$="GatewayRateLimitError",o06,D1$,L1$,z1$,a06,t1$="GatewayModelNotFoundError",s06,P1$,e06,A1$,T1$,$16,r1$="GatewayInternalServerError",Z16,I1$,R1$,q1$,M1$,o1$="GatewayFailedDependencyError",G16,k1$,S1$,V1$,X16,a1$="GatewayForbiddenError",Y16,C1$,_1$,b1$,Q16,s1$="GatewayResponseError",J16,f1$,x1$,v1$,W16,K16,e1$="GatewayTimeoutError",w16,g1$,h1$,c1$,u1$,$$$="ai-gateway-auth-method",F16,H16,l1$=class{constructor($){this.config=$}async getAvailableModels(){try{let{value:$}=await NY({url:`${this.config.baseURL}/config`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(N16),failedResponseHandler:P5({errorSchema:L9.any(),errorToMessage:(Z)=>Z}),fetch:this.config.fetch});return $}catch($){throw await PX($)}}async getCredits(){try{let $=new URL(this.config.baseURL),{value:Z}=await NY({url:`${$.origin}/v1/credits`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(B16),failedResponseHandler:P5({errorSchema:L9.any(),errorToMessage:(G)=>G}),fetch:this.config.fetch});return Z}catch($){throw await PX($)}}},N16,B16,O16=class{constructor($){this.config=$}async getSpendReport($){try{let Z=new URL(this.config.baseURL),G=new URLSearchParams;if(G.set("start_date",$.startDate),G.set("end_date",$.endDate),$.groupBy)G.set("group_by",$.groupBy);if($.datePart)G.set("date_part",$.datePart);if($.userId)G.set("user_id",$.userId);if($.model)G.set("model",$.model);if($.provider)G.set("provider",$.provider);if($.credentialType)G.set("credential_type",$.credentialType);if($.tags&&$.tags.length>0)G.set("tags",$.tags.join(","));let{value:X}=await NY({url:`${Z.origin}/v1/report?${G.toString()}`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(E16),failedResponseHandler:P5({errorSchema:YZ.any(),errorToMessage:(Y)=>Y}),fetch:this.config.fetch});return X}catch(Z){throw await PX(Z)}}},E16,D16=class{constructor($){this.config=$}async getGenerationInfo($){try{let Z=new URL(this.config.baseURL),{value:G}=await NY({url:`${Z.origin}/v1/generation?id=${encodeURIComponent($.id)}`,headers:await v$(this.config.headers()),successfulResponseHandler:G8(L16),failedResponseHandler:P5({errorSchema:D9.any(),errorToMessage:(X)=>X}),fetch:this.config.fetch});return G}catch(Z){throw await PX(Z)}}},L16,z16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.supportedUrls={"*/*":[/.*/]}}get provider(){return this.config.provider}async getArgs($){let{abortSignal:Z,...G}=$;return{args:this.maybeEncodeFileParts(G),warnings:[]}}async doGenerate($){let{args:Z,warnings:G}=await this.getArgs($),{abortSignal:X}=$,Y=await v$(this.config.headers());try{let{responseHeaders:Q,value:J,rawValue:W}=await N8({url:this.getUrl(),headers:r$(Y,$.headers,this.getModelConfigHeaders(this.modelId,!1),await v$(this.config.o11yHeaders)),body:Z,successfulResponseHandler:G8(g50.any()),failedResponseHandler:P5({errorSchema:g50.any(),errorToMessage:(K)=>K}),...X&&{abortSignal:X},fetch:this.config.fetch});return{...J,request:{body:Z},response:{headers:Q,body:W},warnings:G}}catch(Q){throw await PX(Q,await fW(Y))}}async doStream($){let{args:Z,warnings:G}=await this.getArgs($),{abortSignal:X}=$,Y=await v$(this.config.headers());try{let{value:Q,responseHeaders:J}=await N8({url:this.getUrl(),headers:r$(Y,$.headers,this.getModelConfigHeaders(this.modelId,!0),await v$(this.config.o11yHeaders)),body:Z,successfulResponseHandler:v7(g50.any()),failedResponseHandler:P5({errorSchema:g50.any(),errorToMessage:(W)=>W}),...X&&{abortSignal:X},fetch:this.config.fetch});return{stream:Q.pipeThrough(new TransformStream({start(W){if(G.length>0)W.enqueue({type:"stream-start",warnings:G})},transform(W,K){if(W.success){let U=W.value;if(U.type==="raw"&&!$.includeRawChunks)return;if(U.type==="response-metadata"&&U.timestamp&&typeof U.timestamp==="string")U.timestamp=new Date(U.timestamp);K.enqueue(U)}else K.error(W.error)}})),request:{body:Z},response:{headers:J}}}catch(Q){throw await PX(Q,await fW(Y))}}isFilePart($){return $&&typeof $==="object"&&"type"in $&&$.type==="file"}maybeEncodeFileParts($){for(let Z of $.prompt)for(let G of Z.content)if(this.isFilePart(G)){let X=G;if(X.data instanceof Uint8Array){let Y=Uint8Array.from(X.data),Q=Buffer.from(Y).toString("base64");X.data=new URL(`data:${X.mediaType||"application/octet-stream"};base64,${Q}`)}}return $}getUrl(){return`${this.config.baseURL}/language-model`}getModelConfigHeaders($,Z){return{"ai-language-model-specification-version":"3","ai-language-model-id":$,"ai-language-model-streaming":String(Z)}}},j16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxEmbeddingsPerCall=2048,this.supportsParallelCalls=!0}get provider(){return this.config.provider}async doEmbed({values:$,headers:Z,abortSignal:G,providerOptions:X}){var Y,Q;let J=await v$(this.config.headers());try{let{responseHeaders:W,value:K,rawValue:U}=await N8({url:this.getUrl(),headers:r$(J,Z!=null?Z:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{values:$,...X?{providerOptions:X}:{}},successfulResponseHandler:G8(A16),failedResponseHandler:P5({errorSchema:U5.any(),errorToMessage:(w)=>w}),...G&&{abortSignal:G},fetch:this.config.fetch});return{embeddings:K.embeddings,usage:(Y=K.usage)!=null?Y:void 0,providerMetadata:K.providerMetadata,response:{headers:W,body:U},warnings:(Q=K.warnings)!=null?Q:[]}}catch(W){throw await PX(W,await fW(J))}}getUrl(){return`${this.config.baseURL}/embedding-model`}getModelConfigHeaders(){return{"ai-embedding-model-specification-version":"3","ai-model-id":this.modelId}}},P16,A16,T16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxImagesPerCall=Number.MAX_SAFE_INTEGER}get provider(){return this.config.provider}async doGenerate({prompt:$,n:Z,size:G,aspectRatio:X,seed:Y,files:Q,mask:J,providerOptions:W,headers:K,abortSignal:U}){var w,F,H,N;let B=await v$(this.config.headers());try{let{responseHeaders:E,value:D,rawValue:L}=await N8({url:this.getUrl(),headers:r$(B,K!=null?K:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{prompt:$,n:Z,...G&&{size:G},...X&&{aspectRatio:X},...Y&&{seed:Y},...W&&{providerOptions:W},...Q&&{files:Q.map((z)=>m1$(z))},...J&&{mask:m1$(J)}},successfulResponseHandler:G8(M16),failedResponseHandler:P5({errorSchema:c4.any(),errorToMessage:(z)=>z}),...U&&{abortSignal:U},fetch:this.config.fetch});return{images:D.images,warnings:(w=D.warnings)!=null?w:[],providerMetadata:D.providerMetadata,response:{timestamp:new Date,modelId:this.modelId,headers:E},...D.usage!=null&&{usage:{inputTokens:(F=D.usage.inputTokens)!=null?F:void 0,outputTokens:(H=D.usage.outputTokens)!=null?H:void 0,totalTokens:(N=D.usage.totalTokens)!=null?N:void 0}}}}catch(E){throw await PX(E,await fW(B))}}getUrl(){return`${this.config.baseURL}/image-model`}getModelConfigHeaders(){return{"ai-image-model-specification-version":"3","ai-model-id":this.modelId}}},I16,R16,q16,M16,k16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3",this.maxVideosPerCall=Number.MAX_SAFE_INTEGER}get provider(){return this.config.provider}async doGenerate({prompt:$,n:Z,aspectRatio:G,resolution:X,duration:Y,fps:Q,seed:J,image:W,providerOptions:K,headers:U,abortSignal:w}){var F;let H=await v$(this.config.headers());try{let{responseHeaders:N,value:B}=await N8({url:this.getUrl(),headers:r$(H,U!=null?U:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders),{accept:"text/event-stream"}),body:{prompt:$,n:Z,...G&&{aspectRatio:G},...X&&{resolution:X},...Y&&{duration:Y},...Q&&{fps:Q},...J&&{seed:J},...K&&{providerOptions:K},...W&&{image:S16(W)}},successfulResponseHandler:async({response:E,url:D,requestBodyValues:L})=>{if(E.body==null)throw new J8({message:"SSE response body is empty",url:D,requestBodyValues:L,statusCode:E.status});let j=VU({stream:E.body,schema:b16}).getReader(),{done:P,value:A}=await j.read();if(j.releaseLock(),P||!A)throw new J8({message:"SSE stream ended without a data event",url:D,requestBodyValues:L,statusCode:E.status});if(!A.success)throw new J8({message:"Failed to parse video SSE event",cause:A.error,url:D,requestBodyValues:L,statusCode:E.status});let M=A.value;if(M.type==="error")throw new J8({message:M.message,statusCode:M.statusCode,url:D,requestBodyValues:L,responseHeaders:Object.fromEntries([...E.headers]),responseBody:JSON.stringify(M),data:{error:{message:M.message,type:M.errorType,param:M.param}}});return{value:{videos:M.videos,warnings:M.warnings,providerMetadata:M.providerMetadata},responseHeaders:Object.fromEntries([...E.headers])}},failedResponseHandler:P5({errorSchema:p8.any(),errorToMessage:(E)=>E}),...w&&{abortSignal:w},fetch:this.config.fetch});return{videos:B.videos,warnings:(F=B.warnings)!=null?F:[],providerMetadata:B.providerMetadata,response:{timestamp:new Date,modelId:this.modelId,headers:N}}}catch(N){throw await PX(N,await fW(H))}}getUrl(){return`${this.config.baseURL}/video-model`}getModelConfigHeaders(){return{"ai-video-model-specification-version":"3","ai-model-id":this.modelId}}},V16,C16,_16,b16,f16=class{constructor($,Z){this.modelId=$,this.config=Z,this.specificationVersion="v3"}get provider(){return this.config.provider}async doRerank({documents:$,query:Z,topN:G,headers:X,abortSignal:Y,providerOptions:Q}){var J;let W=await v$(this.config.headers());try{let{responseHeaders:K,value:U,rawValue:w}=await N8({url:this.getUrl(),headers:r$(W,X!=null?X:{},this.getModelConfigHeaders(),await v$(this.config.o11yHeaders)),body:{documents:$,query:Z,...G!=null?{topN:G}:{},...Q?{providerOptions:Q}:{}},successfulResponseHandler:G8(v16),failedResponseHandler:P5({errorSchema:T5.any(),errorToMessage:(F)=>F}),...Y&&{abortSignal:Y},fetch:this.config.fetch});return{ranking:U.ranking,providerMetadata:U.providerMetadata,response:{headers:K,body:w},warnings:(J=U.warnings)!=null?J:[]}}catch(K){throw await PX(K,await fW(W))}}getUrl(){return`${this.config.baseURL}/reranking-model`}getModelConfigHeaders(){return{"ai-reranking-model-specification-version":"3","ai-model-id":this.modelId}}},x16,v16,y16,g16,h16,c16=($={})=>h16($),u16,d16,l16,m16=($={})=>l16($),i16,p16="3.0.133",t16="0.0.1",c50;var Qn=O(()=>{$1();n1();$1();$1();$1();$1();$1();$1();$1();$1();$1();n1();$1();$1();$1();$1();Z$$=k(Nl0(),1),G$$=k(Nl0(),1),Bl0=Symbol.for(n06),z9=class $ extends(w1$=Error,U1$=Bl0,w1$){constructor({message:Z,statusCode:G=500,cause:X,generationId:Y,isRetryable:Q=G!=null&&(G===408||G===409||G===429||G>=500)}){super(Y?`${Z} [${Y}]`:Z);this[U1$]=!0,this.statusCode=G,this.cause=X,this.generationId=Y,this.isRetryable=Q}static isInstance(Z){return $.hasMarker(Z)}static hasMarker(Z){return typeof Z==="object"&&Z!==null&&Bl0 in Z&&Z[Bl0]===!0}},p06=`vercel.ai.gateway.error.${i1$}`,F1$=Symbol.for(p06),h50=class $ extends(N1$=z9,H1$=F1$,N1$){constructor({message:Z="Authentication failed",statusCode:G=401,cause:X,generationId:Y}={}){super({message:Z,statusCode:G,cause:X,generationId:Y});this[H1$]=!0,this.name=i1$,this.type="authentication_error"}static isInstance(Z){return z9.hasMarker(Z)&&F1$ in Z}static createContextualError({apiKeyProvided:Z,oidcTokenProvided:G,message:X="Authentication failed",statusCode:Y=401,cause:Q,generationId:J}){let W;if(Z)W=`AI Gateway authentication failed: Invalid API key.
 
 Create a new API key: https://vercel.com/d?to=%2F%5Bteam%5D%2F%7E%2Fai%2Fapi-keys
@@ -2659,7 +2659,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var x$1,BC,o$4,BV$,f$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",s$4,d$,u$,Z6,NV$=24,OC,VJ;var PV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(x$1||(x$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function E(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function D(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,X0){var W0,b0=0;for(W0=0;W0<X0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,X0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=E(r,4*S0),b0[1+S0]=E(c,4*S0),b0[6+S0]=E(l,4*S0),b0[11+S0]=E(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)W0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=W0[g0]}if(X0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-E(r,4*S0)|0,b0[6+S0]=b0[6+S0]-E(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function q(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!X0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(X0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(X0-=64,l+=64,c)r+=64}if(X0>0){S(P0,m0,b0,V);for(j0=0;j0<X0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,X0){return i(h,l,null,0,c,r,X0)}function v(h,l,c,r,X0){var W0=new Uint8Array(32);return q(W0,r,X0,V),f(h,l,c,r.subarray(16),W0)}function $0(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(32);return q(m0,W0,b0,V),i(h,l,c,r,X0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function E0(h,l,c,r,X0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=W0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(X0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<X0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,X0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?g0[m0-P0]:320*g0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,X0,W0){var b0=new Uint8Array(16);return E0(b0,0,c,r,X0,W0),P(h,l,b0,0)}function Y0(h,l,c,r,X0){var W0;if(c<32)return-1;$0(h,0,l,0,c,r,X0),E0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,X0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,X0),J0(l,16,l,32,c-32,b0)!==0)return-1;$0(h,0,l,0,c,r,X0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function x0(h,l,c){var r,X0=~(c-1);for(var W0=0;W0<16;W0++)r=X0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function i0(h,l){var c,r,X0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),X0=W0[15]>>16&1,W0[14]&=65535,x0(b0,W0,1-X0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function f0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return i0(c,h),i0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return i0(l,h),l[0]&1}function N0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function _0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function H0(h,l,c){var r,X0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(X0=0;X0<16;X0++)W0[r+X0]+=l[r]*c[X0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){H0(h,l,l)}function G0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)H0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)H0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),X0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,N0(X0,c);for(b0=0;b0<16;b0++)P0[b0]=X0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,x0(m0,P0,W0),x0(S0,j0,W0),_0(g0,m0,S0),T0(m0,m0,S0),_0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,g0),Q0(o0,m0),H0(m0,S0,m0),H0(S0,P0,g0),_0(g0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),H0(m0,S0,K),_0(m0,m0,j0),H0(S0,S0,m0),H0(m0,j0,o0),H0(j0,P0,X0),Q0(P0,g0),x0(m0,P0,W0),x0(S0,j0,W0);for(b0=0;b0<16;b0++)X0[b0+16]=m0[b0],X0[b0+32]=S0[b0],X0[b0+48]=P0[b0],X0[b0+64]=j0[b0];var Z1=X0.subarray(32),U1=X0.subarray(16);return G0(Z1,Z1),H0(U1,U1,Z1),i0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),q(h,Y,r,V)}var q0=Y0,g=a;function F0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),q0(h,l,c,r,b0)}function v0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,X0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&X0,l+=W0>>>16,c+=b0&X0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&X0|r<<16,h&X0|l<<16)}function d0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,X0=32-l;if(l<32)c=h.hi>>>l|h.lo<<X0,r=h.lo>>>l|h.hi<<X0;else if(l<64)c=h.lo>>>l|h.hi<<X0,r=h.hi>>>l|h.lo<<X0;return new Z(c,r)}function L6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,X0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,X0)}function Q4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,X0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,X0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),d0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),d0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],X0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=D(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=D(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)X0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),X0[7]=e0(m0,d5(W0[0]),Q4(W0[0],W0[1],W0[2])),X0[3]=e0(X0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=X0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(h,l,c){var r=new Uint8Array(64),X0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=dG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)X0[W0]=0;for(W0=0;W0<c;W0++)X0[W0]=l[b0-c+W0];X0[c]=128,c=256-128*(c<112?1:0),X0[c-9]=0,z(X0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,X0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),H0(c,c,j0),_0(r,h[0],h[1]),_0(j0,l[0],l[1]),H0(r,r,j0),H0(X0,h[3],l[3]),H0(X0,X0,w),H0(W0,h[2],l[2]),_0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,X0),_0(P0,W0,X0),_0(S0,r,c),H0(h[0],b0,m0),H0(h[1],S0,P0),H0(h[2],P0,m0),H0(h[3],b0,S0)}function $5(h,l,c){var r;for(r=0;r<4;r++)x0(h[r],l[r],c)}function R5(h,l){var c=G(),r=G(),X0=G();G0(X0,l[2]),H0(c,l[0],X0),H0(r,l[1],X0),i0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,X0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(X0=255;X0>=0;--X0)r=c[X0/8|0]>>(X0&7)&1,$5(h,l,r),_6(l,h),_6(h,h),$5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),H0(c[3],F,H),Q9(h,c,l)}function f1(h,l,c){var r=new Uint8Array(64),X0=[G(),G(),G(),G()],W0;if(!c)X(l,32);q8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(X0,r),R5(h,X0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(h,l){var c,r,X0,W0;for(r=63;r>=32;--r){c=0;for(X0=r-32,W0=r-12;X0<W0;++X0)l[X0]+=c-16*l[r]*M8[X0-(r-32)],c=Math.floor((l[X0]+128)/256),l[X0]-=c*256;l[X0]+=c,l[r]=0}c=0;for(X0=0;X0<32;X0++)l[X0]+=c-(l[31]>>4)*M8[X0],c=l[X0]>>8,l[X0]&=255;for(X0=0;X0<32;X0++)l[X0]-=c*M8[X0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;k8(h,l)}function f$(h,l,c,r){var X0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(X0,r,32),X0[0]&=248,X0[31]&=127,X0[31]|=64;var g0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=X0[32+m0];q8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];q8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*X0[P0];return k8(h.subarray(32),S0),g0}function w8(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),N0(h[1],l),Q0(X0,h[1]),H0(W0,X0,U),T0(X0,X0,h[2]),_0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),H0(P0,m0,b0),H0(c,P0,X0),H0(c,c,W0),V0(c,c),H0(c,c,X0),H0(c,c,W0),H0(c,c,W0),H0(h[0],c,W0),Q0(r,h[0]),H0(r,r,W0),f0(r,X0))H0(h[0],h[0],N);if(Q0(r,h[0]),H0(r,r,W0),f0(r,X0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return H0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var X0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,r))return-1;for(X0=0;X0<c;X0++)h[X0]=l[X0];for(X0=0;X0<32;X0++)h[X0+32]=r[X0];if(q8(b0,h,c),G6(b0),Q9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),R5(W0,m0),c-=64,A(l,0,W0,0)){for(X0=0;X0<c;X0++)h[X0]=0;return-1}for(X0=0;X0<c;X0++)h[X0]=l[X0+64];return c}var k$=32,i6=24,s6=32,r8=16,Z5=32,C=32,d=32,u=32,I=32,t=i6,y0=s6,l0=r8,W1=64,F1=32,g1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:$0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:E0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:Y0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:F0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:f1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:U,L:M8,pack25519:i0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Q9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==i6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(s6+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+s6]=h[W0];return Y0(X0,r,r.length,l,c),X0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(X0,r,r.length,l,c)!==0)return null;return X0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(Z5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox(h,l,X0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox.open(h,l,X0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var X0=new Uint8Array(r);for(var W0=0;W0<X0.length;W0++)X0[W0]=c[W0];return X0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var X0=0;X0<r.length;X0++)r[X0]=c[X0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),X0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(X0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return f1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==_1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return f1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=_1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return q8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var X0,W0=new Uint8Array(r);for(X0=0;X0<r;X0+=l)h.getRandomValues(W0.subarray(X0,X0+Math.min(r-X0,l)));for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}else if(h=u0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var X0,W0=h.randomBytes(r);for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}()})(typeof Mg<"u"&&b4Z?b4Z:globalThis.nacl=globalThis.nacl||{});BC=typeof Mg<"u"&&b4Z?b4Z:globalThis.nacl,o$4={fromSeed:BC.sign.keyPair.fromSeed,sign:BC.sign.detached,verify:BC.sign.detached.verify,randomBytes:BC.randomBytes,scalarBaseMultiply:BC.scalarMult.base,seal:BC.box,open:BC.box.open};s$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));OC=[120,107,118,49];a$4(o$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(VJ||(VJ={}))});function c$1($){try{$?.clear?.()}catch{}}async function AV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=zV$($),W=g$1(J.sub),K=h$1(new TextEncoder().encode(Z)),U=OV$();try{let w=await LV$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:VJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(jV$(w,U))}finally{c$1(U),c$1(K),c$1(W)}}var TV$=O(()=>{PV$()});function U84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function IV$(){let $=new v1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(u$1(),503);if(!Y.natsPublicUrl)return Z.json(u$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(u$1(),503)}let Q=SJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await AV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:wV$(Q),userId:X,allowedConnectionTypes:U84(Y.natsPublicUrl)})}return Z.json(FV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var u$1=()=>({error:"link session unavailable"});var RV$=O(()=>{I6();F8();HV$();TV$()});async function H84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function N84($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new IN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function B84($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},w84),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=pn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function O84($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<qV$){await O8(MV$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<qV$){await O8(MV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var w84=90000,F84=15000,kV$=()=>{let $=new v1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{k0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=aU({orgId:Y.id,virtualMcpId:Q,branch:J}),U=ry({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let D=await CY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&dW(w5(w),X,J,H),E=!!B&&B.sandboxHandle===U;if(!F)return pQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),pQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},F84);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await H84(F,U)){await N84({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await B84({stream:D,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await O84({stream:D,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},qV$=60000,MV$=500;var SV$=O(()=>{I6();NC();qY();l5();PD0();tn();EV();u90();RX()});function D84($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function L84($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(E84)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var E84=1e4,z84=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},VV$=()=>{let $=new v1;return $.use("*",z84),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await L84(X,Y);return Z.json({apps:D84(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var CV$=O(()=>{I6();F8()});import{z as h1}from"zod";function EK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function S84($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function V84($,Z,G){try{return JSON.parse($)}catch{throw new fV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function C84($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:V84(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function _84($){let Z=$.map((G)=>{let X=G.function.parameters?BY(G.function.parameters):BY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function b84($){if(!$)return;return{openai:{response_format:$}}}function f84(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function _V$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function bV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var j84=256,P84,A84,T84,I84,R84,q84,M84,k84,fV$,xV$,vV$;var yV$=O(()=>{D6();I6();NC();P84=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),A84=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),T84=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(A84).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),I84=h1.object({type:h1.literal("text")}),R84=h1.object({type:h1.literal("json_object")}),q84=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),M84=h1.union([I84,R84,q84]),k84=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(T84),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(P84).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:M84.optional(),user:h1.string().optional()});fV$=class fV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};xV$=new v1;xV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(EK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(EK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(EK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=k84.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(EK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=S84(Q.model);if(!J)return $.json(EK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(EK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(EK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=C84(Q.messages),H=Q.tools?_84(Q.tools):void 0,N=b84(Q.response_format),B=f84(),E=Math.floor(Date.now()/1000);if(Q.stream)return pQ($,async(D)=>{let L=_V$(w,F,H,Q,N,$.req.raw.signal);try{let z=_Q(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=j84)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:bV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=_V$(w,F,H,Q,N,$.req.raw.signal),L=await NN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:bV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(EK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(EK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(EK(Y.message,"server_error"),500)}});vV$=xV$});var hV$;var gV$=O(()=>{hV$={name:"decocms",version:"4.64.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function y84(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??v84}}var cV$,v84="https://ph.studio.decocms.com",uV$;var dV$=O(()=>{I6();tb0();dN();BG();F8();te0();gV$();cV$=new v1;cV$.get("/",($)=>{let Z={version:hV$.version,theme:Wb1(),...iO().logo&&{logo:iO().logo},...vQ()&&{internalUrl:se()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:UI$(),posthog:y84(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!vQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});uV$=cV$});function fL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function mV$($){return(fL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function iV$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(fL0($))}&sz=${Z}`}function lV$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function nV$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?lV$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):lV$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as g84}from"path";function Cw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function h84($){let Z=fL0($),G=mV$(Z),X=iV$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=nV$({brand:G,domain:Z});return[`<title>${Cw(J)}</title>`,`<meta name="description" content="${Cw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${Cw(J)}" />`,`<meta property="og:description" content="${Cw(W)}" />`,`<meta property="og:url" content="${Cw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${Cw(J)}" />`,`<meta name="twitter:description" content="${Cw(W)}" />`,`<link rel="canonical" href="${Cw(Q)}" />`,`<link rel="icon" href="${Cw(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var x$1,BC,o$4,BV$,f$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",s$4,d$,u$,Z6,NV$=24,OC,VJ;var PV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(x$1||(x$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function E(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function D(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,X0){var W0,b0=0;for(W0=0;W0<X0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,X0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,g0;for(S0=0;S0<4;S0++)b0[5*S0]=E(r,4*S0),b0[1+S0]=E(c,4*S0),b0[6+S0]=E(l,4*S0),b0[11+S0]=E(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=b0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)W0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)b0[g0]=W0[g0]}if(X0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-E(r,4*S0)|0,b0[6+S0]=b0[6+S0]-E(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function q(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!X0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(X0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(X0-=64,l+=64,c)r+=64}if(X0>0){S(P0,m0,b0,V);for(j0=0;j0<X0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,X0){return i(h,l,null,0,c,r,X0)}function v(h,l,c,r,X0){var W0=new Uint8Array(32);return q(W0,r,X0,V),f(h,l,c,r.subarray(16),W0)}function $0(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(32);return q(m0,W0,b0,V),i(h,l,c,r,X0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function E0(h,l,c,r,X0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=W0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(X0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<X0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,X0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?g0[m0-P0]:320*g0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,X0,W0){var b0=new Uint8Array(16);return E0(b0,0,c,r,X0,W0),P(h,l,b0,0)}function Y0(h,l,c,r,X0){var W0;if(c<32)return-1;$0(h,0,l,0,c,r,X0),E0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,X0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,X0),J0(l,16,l,32,c-32,b0)!==0)return-1;$0(h,0,l,0,c,r,X0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function x0(h,l,c){var r,X0=~(c-1);for(var W0=0;W0<16;W0++)r=X0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function i0(h,l){var c,r,X0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),X0=W0[15]>>16&1,W0[14]&=65535,x0(b0,W0,1-X0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function f0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return i0(c,h),i0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return i0(l,h),l[0]&1}function N0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function _0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function H0(h,l,c){var r,X0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(X0=0;X0<16;X0++)W0[r+X0]+=l[r]*c[X0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){H0(h,l,l)}function G0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)H0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)H0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),X0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),g0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,N0(X0,c);for(b0=0;b0<16;b0++)P0[b0]=X0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,x0(m0,P0,W0),x0(S0,j0,W0),_0(g0,m0,S0),T0(m0,m0,S0),_0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,g0),Q0(o0,m0),H0(m0,S0,m0),H0(S0,P0,g0),_0(g0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),H0(m0,S0,K),_0(m0,m0,j0),H0(S0,S0,m0),H0(m0,j0,o0),H0(j0,P0,X0),Q0(P0,g0),x0(m0,P0,W0),x0(S0,j0,W0);for(b0=0;b0<16;b0++)X0[b0+16]=m0[b0],X0[b0+32]=S0[b0],X0[b0+48]=P0[b0],X0[b0+64]=j0[b0];var Z1=X0.subarray(32),U1=X0.subarray(16);return G0(Z1,Z1),H0(U1,U1,Z1),i0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),q(h,Y,r,V)}var q0=Y0,g=a;function F0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),q0(h,l,c,r,b0)}function v0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,X0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&X0,l+=W0>>>16,c+=b0&X0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&X0|r<<16,h&X0|l<<16)}function d0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,X0=32-l;if(l<32)c=h.hi>>>l|h.lo<<X0,r=h.lo>>>l|h.hi<<X0;else if(l<64)c=h.lo>>>l|h.hi<<X0,r=h.hi>>>l|h.lo<<X0;return new Z(c,r)}function L6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,X0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,X0)}function Q4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,X0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,X0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),d0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),d0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],X0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=D(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=D(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)X0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),X0[7]=e0(m0,d5(W0[0]),Q4(W0[0],W0[1],W0[2])),X0[3]=e0(X0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=X0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(h,l,c){var r=new Uint8Array(64),X0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=dG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)X0[W0]=0;for(W0=0;W0<c;W0++)X0[W0]=l[b0-c+W0];X0[c]=128,c=256-128*(c<112?1:0),X0[c-9]=0,z(X0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,X0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),H0(c,c,j0),_0(r,h[0],h[1]),_0(j0,l[0],l[1]),H0(r,r,j0),H0(X0,h[3],l[3]),H0(X0,X0,w),H0(W0,h[2],l[2]),_0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,X0),_0(P0,W0,X0),_0(S0,r,c),H0(h[0],b0,m0),H0(h[1],S0,P0),H0(h[2],P0,m0),H0(h[3],b0,S0)}function $5(h,l,c){var r;for(r=0;r<4;r++)x0(h[r],l[r],c)}function R5(h,l){var c=G(),r=G(),X0=G();G0(X0,l[2]),H0(c,l[0],X0),H0(r,l[1],X0),i0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,X0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(X0=255;X0>=0;--X0)r=c[X0/8|0]>>(X0&7)&1,$5(h,l,r),_6(l,h),_6(h,h),$5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),H0(c[3],F,H),Q9(h,c,l)}function f1(h,l,c){var r=new Uint8Array(64),X0=[G(),G(),G(),G()],W0;if(!c)X(l,32);q8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(X0,r),R5(h,X0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(h,l){var c,r,X0,W0;for(r=63;r>=32;--r){c=0;for(X0=r-32,W0=r-12;X0<W0;++X0)l[X0]+=c-16*l[r]*M8[X0-(r-32)],c=Math.floor((l[X0]+128)/256),l[X0]-=c*256;l[X0]+=c,l[r]=0}c=0;for(X0=0;X0<32;X0++)l[X0]+=c-(l[31]>>4)*M8[X0],c=l[X0]>>8,l[X0]&=255;for(X0=0;X0<32;X0++)l[X0]-=c*M8[X0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;k8(h,l)}function f$(h,l,c,r){var X0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(X0,r,32),X0[0]&=248,X0[31]&=127,X0[31]|=64;var g0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=X0[32+m0];q8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];q8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*X0[P0];return k8(h.subarray(32),S0),g0}function w8(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),N0(h[1],l),Q0(X0,h[1]),H0(W0,X0,U),T0(X0,X0,h[2]),_0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),H0(P0,m0,b0),H0(c,P0,X0),H0(c,c,W0),V0(c,c),H0(c,c,X0),H0(c,c,W0),H0(c,c,W0),H0(h[0],c,W0),Q0(r,h[0]),H0(r,r,W0),f0(r,X0))H0(h[0],h[0],N);if(Q0(r,h[0]),H0(r,r,W0),f0(r,X0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return H0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var X0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,r))return-1;for(X0=0;X0<c;X0++)h[X0]=l[X0];for(X0=0;X0<32;X0++)h[X0+32]=r[X0];if(q8(b0,h,c),G6(b0),Q9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),R5(W0,m0),c-=64,A(l,0,W0,0)){for(X0=0;X0<c;X0++)h[X0]=0;return-1}for(X0=0;X0<c;X0++)h[X0]=l[X0+64];return c}var k$=32,i6=24,s6=32,r8=16,Z5=32,C=32,d=32,u=32,I=32,t=i6,y0=s6,l0=r8,W1=64,F1=32,g1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:$0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:E0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:Y0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:F0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:f1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:U,L:M8,pack25519:i0,unpack25519:N0,M:H0,A:_0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Q9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==i6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(s6+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+s6]=h[W0];return Y0(X0,r,r.length,l,c),X0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(X0,r,r.length,l,c)!==0)return null;return X0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(Z5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox(h,l,X0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox.open(h,l,X0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var X0=new Uint8Array(r);for(var W0=0;W0<X0.length;W0++)X0[W0]=c[W0];return X0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var X0=0;X0<r.length;X0++)r[X0]=c[X0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),X0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(X0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return f1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==_1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return f1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=_1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return q8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var X0,W0=new Uint8Array(r);for(X0=0;X0<r;X0+=l)h.getRandomValues(W0.subarray(X0,X0+Math.min(r-X0,l)));for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}else if(h=u0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var X0,W0=h.randomBytes(r);for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}()})(typeof Mg<"u"&&b4Z?b4Z:globalThis.nacl=globalThis.nacl||{});BC=typeof Mg<"u"&&b4Z?b4Z:globalThis.nacl,o$4={fromSeed:BC.sign.keyPair.fromSeed,sign:BC.sign.detached,verify:BC.sign.detached.verify,randomBytes:BC.randomBytes,scalarBaseMultiply:BC.scalarMult.base,seal:BC.box,open:BC.box.open};s$4=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));OC=[120,107,118,49];a$4(o$4);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(VJ||(VJ={}))});function c$1($){try{$?.clear?.()}catch{}}async function AV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=zV$($),W=g$1(J.sub),K=h$1(new TextEncoder().encode(Z)),U=OV$();try{let w=await LV$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:VJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(jV$(w,U))}finally{c$1(U),c$1(K),c$1(W)}}var TV$=O(()=>{PV$()});function U84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function IV$(){let $=new v1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(u$1(),503);if(!Y.natsPublicUrl)return Z.json(u$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(u$1(),503)}let Q=SJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await AV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:wV$(Q),userId:X,allowedConnectionTypes:U84(Y.natsPublicUrl)})}return Z.json(FV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var u$1=()=>({error:"link session unavailable"});var RV$=O(()=>{I6();F8();HV$();TV$()});async function H84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function N84($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new IN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function B84($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},w84),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=pn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function O84($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<qV$){await O8(MV$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<qV$){await O8(MV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var w84=90000,F84=15000,kV$=()=>{let $=new v1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{k0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=aU({orgId:Y.id,virtualMcpId:Q,branch:J}),U=ry({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let D=await CY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&dW(w5(w),X,J,H),E=!!B&&B.sandboxHandle===U;if(!F)return pQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),pQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},F84);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await H84(F,U)){await N84({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await B84({stream:D,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await O84({stream:D,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},qV$=60000,MV$=500;var SV$=O(()=>{I6();NC();qY();l5();PD0();tn();EV();u90();RX()});function D84($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function L84($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(E84)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var E84=1e4,z84=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},VV$=()=>{let $=new v1;return $.use("*",z84),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await L84(X,Y);return Z.json({apps:D84(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var CV$=O(()=>{I6();F8()});import{z as h1}from"zod";function EK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function S84($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function V84($,Z,G){try{return JSON.parse($)}catch{throw new fV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function C84($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:V84(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function _84($){let Z=$.map((G)=>{let X=G.function.parameters?BY(G.function.parameters):BY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function b84($){if(!$)return;return{openai:{response_format:$}}}function f84(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function _V$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function bV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var j84=256,P84,A84,T84,I84,R84,q84,M84,k84,fV$,xV$,vV$;var yV$=O(()=>{D6();I6();NC();P84=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),A84=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),T84=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(A84).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),I84=h1.object({type:h1.literal("text")}),R84=h1.object({type:h1.literal("json_object")}),q84=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),M84=h1.union([I84,R84,q84]),k84=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(T84),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(P84).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:M84.optional(),user:h1.string().optional()});fV$=class fV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};xV$=new v1;xV$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(EK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(EK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(EK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=k84.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(EK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=S84(Q.model);if(!J)return $.json(EK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(EK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(EK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=C84(Q.messages),H=Q.tools?_84(Q.tools):void 0,N=b84(Q.response_format),B=f84(),E=Math.floor(Date.now()/1000);if(Q.stream)return pQ($,async(D)=>{let L=_V$(w,F,H,Q,N,$.req.raw.signal);try{let z=_Q(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=j84)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:bV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=_V$(w,F,H,Q,N,$.req.raw.signal),L=await NN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:bV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(EK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(EK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(EK(Y.message,"server_error"),500)}});vV$=xV$});var hV$;var gV$=O(()=>{hV$={name:"decocms",version:"4.65.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function y84(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??v84}}var cV$,v84="https://ph.studio.decocms.com",uV$;var dV$=O(()=>{I6();tb0();dN();BG();F8();te0();gV$();cV$=new v1;cV$.get("/",($)=>{let Z={version:hV$.version,theme:Wb1(),...iO().logo&&{logo:iO().logo},...vQ()&&{internalUrl:se()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:UI$(),posthog:y84(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!vQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});uV$=cV$});function fL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function mV$($){return(fL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function iV$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(fL0($))}&sz=${Z}`}function lV$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function nV$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?lV$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):lV$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as g84}from"path";function Cw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function h84($){let Z=fL0($),G=mV$(Z),X=iV$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=nV$({brand:G,domain:Z});return[`<title>${Cw(J)}</title>`,`<meta name="description" content="${Cw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${Cw(J)}" />`,`<meta property="og:description" content="${Cw(W)}" />`,`<meta property="og:url" content="${Cw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${Cw(J)}" />`,`<meta name="twitter:description" content="${Cw(W)}" />`,`<link rel="canonical" href="${Cw(Q)}" />`,`<link rel="icon" href="${Cw(X)}" sizes="any" />`].join(`
     `)}function c84($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function pV$($){let Z=new v1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?g84($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=h84(X);return G.html(c84(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var tV$=O(()=>{I6();F8()});import{z as Y1}from"zod";var DC,u84,d84,l84,m84,rV$;var oV$=O(()=>{DC=Y1.enum(["good","bad","neutral"]),u84=Y1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Y1.object({kind:Y1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Y1.coerce.string().optional(),tone:DC.optional(),muted:Y1.boolean().optional(),delta:Y1.coerce.string().optional(),deltaDir:Y1.enum(["up","down","neutral"]).optional(),points:Y1.array(Y1.coerce.number()).optional(),label:Y1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),d84=Y1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Y1.array(u84)),l84={key:Y1.coerce.string(),title:Y1.coerce.string(),eyebrow:Y1.coerce.string().optional(),headline:Y1.coerce.string(),annotation:Y1.coerce.string().optional(),methodology:Y1.coerce.string().optional(),sources:Y1.array(Y1.object({name:Y1.coerce.string(),logoUrl:Y1.coerce.string()})).optional()},m84=Y1.discriminatedUnion("template",[Y1.object({template:Y1.literal("cover"),score:Y1.object({value:Y1.coerce.number(),max:Y1.coerce.number().optional(),grade:Y1.coerce.string().optional(),label:Y1.coerce.string().optional()}).optional(),brandImage:Y1.coerce.string().optional(),screenshot:Y1.coerce.string().optional(),mobileScreenshot:Y1.coerce.string().optional()}),Y1.object({template:Y1.literal("cta"),ctaUrl:Y1.coerce.string().optional(),ctaLabel:Y1.coerce.string().optional(),bullets:Y1.array(Y1.coerce.string()).optional()}),Y1.object({template:Y1.literal("series"),points:Y1.array(Y1.coerce.number()).min(2),xLabels:Y1.array(Y1.coerce.string()).min(1),unit:Y1.coerce.string().optional(),callout:Y1.object({index:Y1.coerce.number(),value:Y1.coerce.string(),tone:DC.optional()})}),Y1.object({template:Y1.literal("threshold"),value:Y1.coerce.string().default(""),metricLabel:Y1.coerce.string().optional(),ratio:Y1.coerce.number(),thresholdRatio:Y1.coerce.number().optional(),thresholdLabel:Y1.coerce.string().default(""),tone:DC.optional()}),Y1.object({template:Y1.literal("stats"),stats:Y1.array(Y1.object({value:Y1.coerce.string(),label:Y1.coerce.string(),tone:DC.optional()})).min(1)}),Y1.object({template:Y1.literal("bars"),items:Y1.array(Y1.object({value:Y1.coerce.string(),label:Y1.coerce.string(),ratio:Y1.coerce.number(),tone:DC.optional()})).min(1)}),Y1.object({template:Y1.literal("gauges"),gauges:Y1.array(Y1.object({label:Y1.coerce.string(),value:Y1.coerce.string(),status:Y1.enum(["good","warn","bad"]).catch("warn"),caption:Y1.coerce.string().optional(),ratio:Y1.coerce.number().optional()})).min(1)}),Y1.object({template:Y1.literal("checklist"),checks:Y1.array(Y1.object({label:Y1.coerce.string(),status:Y1.enum(["pass","fail","warn"]).catch("fail"),value:Y1.coerce.string().optional()})).min(1)}),Y1.object({template:Y1.literal("table"),columns:Y1.array(Y1.object({label:Y1.coerce.string(),align:Y1.enum(["left","right"]).optional()})).min(1),rows:Y1.array(d84).min(1),highlightRow:Y1.coerce.number().optional()}),Y1.object({template:Y1.literal("products"),products:Y1.array(Y1.object({name:Y1.coerce.string(),price:Y1.coerce.string().optional(),image:Y1.coerce.string().optional(),url:Y1.coerce.string().optional()})).min(1)}),Y1.object({template:Y1.literal("list"),entries:Y1.array(Y1.object({label:Y1.coerce.string(),severity:Y1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Y1.coerce.number().optional()}),Y1.object({template:Y1.literal("keywords"),volumeLabel:Y1.coerce.string().optional(),keywords:Y1.array(Y1.object({term:Y1.coerce.string(),volume:Y1.coerce.string(),position:Y1.coerce.number().catch(0)})).min(1)}),Y1.object({template:Y1.literal("competitor"),metricLabel:Y1.coerce.string().optional(),competitors:Y1.array(Y1.object({name:Y1.coerce.string(),value:Y1.coerce.string(),tone:DC.optional(),isYou:Y1.boolean().optional()})).min(1)}),Y1.object({template:Y1.literal("scorecard"),rivalLabel:Y1.coerce.string().optional(),dimensions:Y1.array(Y1.object({label:Y1.coerce.string(),you:Y1.coerce.string(),rival:Y1.coerce.string().optional(),rivalName:Y1.coerce.string().optional(),tone:DC.optional()})).min(1)})]),rV$=Y1.object({...l84,template:m84})});function aV$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=rV$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var sV$=O(()=>{oV$()});function Jr($,Z){return fetch(`${QE({})}${$}`,Z)}async function i84($,Z){let G=await Jr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=aV$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var n84,LC,eV$;var $C$=O(()=>{I6();KJ();Gf();sV$();n84=new Set(["complete","errored","terminated","unknown"]),LC=new v1;LC.use("*",async($,Z)=>{let G=await d8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});LC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await i84(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});LC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Jr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${JE({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});LC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Jr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${JE({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:n84.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});LC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Jr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});LC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Jr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});eV$=LC});function ZC$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var GC$,p84,t84,XC$;var YC$=O(()=>{I6();_3();rv();Sb();GC$=new v1,p84=["range","if-none-match","if-modified-since"],t84=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];GC$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Jg($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Xp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&C3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,U,w]=K,F=Buffer.from(w,"base64"),H=new Headers({"Content-Type":U,"Cache-Control":"private, max-age=86400"});return ZC$(H,U),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of p84){let U=$.req.header(K);if(U)Q.set(K,U)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of t84){let U=J.headers.get(K);if(U)W.set(K,U)}return W.set("Cache-Control","private, max-age=86400"),ZC$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});XC$=GC$});var Wr=_((zC)=>{var r84=zC&&zC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),o84=zC&&zC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))r84(Z,$,G)};Object.defineProperty(zC,"__esModule",{value:!0});o84(tX(),zC)});var WC$=_((QC$)=>{Object.defineProperty(QC$,"__esModule",{value:!0});QC$.version=void 0;QC$.version="3.4.0"});var wC$=_((DK)=>{var a84=DK&&DK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(DK,"__esModule",{value:!0});DK.NodeTransport=DK.VERSION=void 0;DK.nodeResolveHost=X64;var i4=Wr(),s84=u0("net"),d$1=u0("tls"),e84=u0("path"),KC$=u0("fs"),$64=a84(u0("dns")),Z64=WC$();DK.VERSION=Z64.version;var G64="nats.js";class UC${socket;version;lang;yields=[];signal=(0,i4.deferred)();closedNotification=(0,i4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=G64,this.version=DK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,i4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw i4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new i4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new i4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,i4.deferred)(),G,X=(0,s84.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,i4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=i4.DataBuffer.concat(...this.yields),Y=(0,i4.extractProtocolMessage)(X);if(Y!=="")try{let Q=i4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,i4.deferred)();try{if($=(0,e84.resolve)($),!(0,KC$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,KC$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,i4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,i4.deferred)();try{let Y=(0,d$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,i4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,i4.deferred)();try{let X=(0,d$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,i4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,i4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof d$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,i4.render)($)}`);let Z=(0,i4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}DK.NodeTransport=UC$;function X64($){let Z=(0,i4.deferred)();return $64.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var OC$=_((BC$)=>{Object.defineProperty(BC$,"__esModule",{value:!0});BC$.connect=Y64;var FC$=wC$(),HC$=Wr(),NC$=Wr();function Y64($={}){if((0,NC$.hasWsProtocol)($))return Promise.reject(NC$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,HC$.setTransportFactory)({factory:()=>{return new FC$.NodeTransport},dnsResolveFn:FC$.nodeResolveHost}),HC$.NatsConnectionImpl.connect($)}});var EC$=_((_w)=>{var J64=_w&&_w.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),W64=_w&&_w.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))J64(Z,$,G)};Object.defineProperty(_w,"__esModule",{value:!0});_w.connect=void 0;var K64=OC$();Object.defineProperty(_w,"connect",{enumerable:!0,get:function(){return K64.connect}});W64(Wr(),_w)});function jC$($){let Z=$?.connectFn??H64,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function U(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function w(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,U()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:F64,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,w(G),U();return}catch{B++;let E=lX(w64,U64,B-1,2,0.5);await O8(E)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?DC$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=zC$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function H64($){return LC$.connect($)}var DC$,LC$,zC$,U64=100,w64=3000,F64=3000;var PC$=O(()=>{l5();DC$=k(Zh(),1),LC$=k(EC$(),1),zC$=k(vB(),1)});function kg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function l$1($,Z){return`${$}.${Z}`}class m$1{cache;constructor($){this.cache=kg({ttlMs:$?.ttlMs??N64,maxSize:$?.maxSize??B64})}async get($,Z){return this.cache.get(l$1($,Z))??null}async set($,Z,G){this.cache.set(l$1($,Z),G)}async invalidate($,Z){this.cache.delete(l$1($,Z))}teardown(){this.cache.clear()}}var N64=600000,B64=5000;var AC$=()=>{};function xL0($,Z){return`${$}:${Z}`}function i$1($){let Z=kg({ttlMs:$?.ttlMs??O64,maxSize:$?.maxSize??E64}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,U){let w=G?.();if(!w)return;try{w.publish(TC$,Y.encode(JSON.stringify({organizationId:K,keyId:U,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,U){return Z.get(xL0(K,U))},set(K,U,w){Z.set(xL0(K,U),w)},invalidate(K,U){Z.delete(xL0(K,U)),W(K,U)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(TC$),(async()=>{for await(let U of J)try{let w=JSON.parse(Q.decode(U.data));if(w.originId===X)continue;Z.delete(xL0(w.organizationId,w.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var TC$="studio.ai-provider-keys.invalidate",O64=30000,E64=5000;var IC$=()=>{};class n$1{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var RC$=($)=>{let Z;return()=>Z??=$()},p$1,t$1;var qC$=O(()=>{N5();p$1=RC$(()=>E8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),t$1=RC$(()=>E8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function T64(){return{name:pU,subjects:[`${el0}.>`],storage:CJ.StorageType.File,max_age:z64,max_bytes:P64,max_msgs_per_subject:A64,discard:CJ.DiscardPolicy.Old,retention:CJ.RetentionPolicy.Limits,duplicate_window:j64,num_replicas:1}}class SC${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function MC$($){let Z=kC$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function M64($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,L64().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class r$1{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await CJ.jetstreamManager($),G=T64();try{await Z.streams.info(pU),await Z.streams.update(pU,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(pU),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=M64(Z,X),J=!1,W=()=>{if(J)return;J=!0;let U=t6$(Z);Y.publish(U.subject,U.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(U)=>{let w=performance.now(),F=Zm0(U,{runId:Z}),H=performance.now()-w;if(p$1().record(H),t$1().add(1,{"org.id":X??"unknown"}),q64?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?MC$(N.headers):void 0)};return(async()=>{let U=$.getReader(),w=0,F=0,H;try{while(!0){let{done:N,value:B}=await U.read();if(N)break;if(K(B),F++,++w>=64)w=0,await new Promise((E)=>setImmediate(E))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(U.releaseLock(),W(),R64)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Zm0(Z,{runId:$,dedup:G});if(p$1().record(performance.now()-Y),t$1().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:MC$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=p6$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?CJ.DeliverPolicy.New:CJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=ON($),W;try{W=await(await X.consumers.get(pU,{filter_subjects:J,deliver_policy:Y})).consume()}catch(E){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",E?.message??E),null}let w=K90({messages:async function*(){try{for await(let E of W)yield{subject:E.subject,data:E.data,headers:E.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(Q90()).pipeThrough(J90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{w.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),w.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(E){for(;;){let{done:D,value:L}=await w.read();if(D){B(),E.close();return}let z=L;if(z.kind==="done"){if(Q){B(),E.close();return}continue}E.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(pU,{filter:ON($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var CJ,kC$,D64=($)=>{let Z;return()=>Z??=$()},L64,z64=86400000000000,j64=120000000000,P64=4294967296,A64=500000,I64,R64,q64;var VC$=O(()=>{Xm0();U90();Gm0();N5();qC$();CJ=k(vB(),1),kC$=k(Zh(),1),L64=D64(()=>E8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));I64=process.env.STREAM_ENCODE_TRACE==="1",R64=process.env.DECOPILOT_STREAM_TRACE==="1";q64=I64?new SC$:null});import{z as X8}from"zod";var CC$,_C$,LK,o$1,bC$,fC$,xC$,vC$,k64,yC$,gC$,hC$,cC$,uC$,S64,dC$,Q9Z,V64,C64=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},lC$=($)=>{return new TextEncoder().encode(JSON.stringify($))},mC$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?V64[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${C64(Y.error)}`);return Y.data};var iC$=O(()=>{CC$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),_C$=X8.array(X8.tuple([X8.string(),X8.string()])),LK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),o$1=X8.string().min(1),bC$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:LK,method:X8.string().min(1),url:X8.string().min(1),headers:_C$,replySubject:o$1,bodySubject:o$1.optional(),abortSubject:o$1,deadlineUnixMs:X8.number().int().nonnegative().optional()}),fC$=X8.object({type:X8.literal("request.chunk"),requestId:LK,seq:X8.number().int().nonnegative(),data:CC$}),xC$=X8.object({type:X8.literal("request.end"),requestId:LK,seq:X8.number().int().nonnegative()}),vC$=X8.object({type:X8.literal("request.error"),requestId:LK,code:X8.string().min(1),message:X8.string()}),k64=X8.union([fC$,xC$,vC$]),yC$=X8.object({type:X8.literal("response.ack"),requestId:LK}),gC$=X8.object({type:X8.literal("response.start"),requestId:LK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:_C$}),hC$=X8.object({type:X8.literal("response.chunk"),requestId:LK,seq:X8.number().int().nonnegative(),data:CC$}),cC$=X8.object({type:X8.literal("response.end"),requestId:LK,seq:X8.number().int().nonnegative()}),uC$=X8.object({type:X8.literal("response.error"),requestId:LK,code:X8.string().min(1),message:X8.string()}),S64=X8.union([yC$,gC$,hC$,cC$,uC$]),dC$=X8.object({type:X8.literal("abort"),requestId:LK,reason:X8.string().optional()}),Q9Z=X8.union([bC$,k64,S64,dC$]),V64={"request.start":bC$,"request.chunk":fC$,"request.end":xC$,"request.error":vC$,"response.ack":yC$,"response.start":gC$,"response.chunk":hC$,"response.end":cC$,"response.error":uC$,abort:dC$}});var _64=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},b64=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},f64=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},x64=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},nC$=($)=>{return _64(btoa(f64($)))},pC$=($)=>{return x64(atob(b64($)))},v64;var tC$=O(()=>{v64=class v64{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*n64($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class $44{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var y64=30000,g64=1000,h64=65536,rQ,c64=($)=>{return"connection"in $},u64=($)=>{let Z=c64($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??y64,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??g64,maxChunkBytes:Z.maxChunkBytes??h64,diagnostics:Z.diagnostics}},rC$=($)=>{return Array.from($.entries())},d64=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},l64=($,Z,G)=>{if(d64(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return rC$(G.headers);return rC$(G.headers)},oC$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},m64=()=>{return crypto.randomUUID().replaceAll("-","")},i64=($)=>{try{$?.unsubscribe()}catch{}},p64=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},t64=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},zB=($,Z,G)=>{$.publish(Z,lC$(G))},r64=($)=>{return $.type.startsWith("response.")},a$1=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},o64=($)=>{if($==="idle")return new rQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new rQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},aC$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((U,w)=>{if(X.aborted){w(X.reason);return}let F=()=>w(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((U,w)=>{Q=setTimeout(()=>{w(o64(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=mC$(W.value.data);if(!r64(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},a64=async($)=>{let Z=!1;while(!0){let G=await aC$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new rQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new rQ(G.value.code,G.value.message);throw new rQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},s64=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){zB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of n64(J,$.maxChunkBytes)){if(X)return;zB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:nC$(W)}),G++}}}catch(Q){if(X)return;zB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},e64=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await aC$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new rQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(pC$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new rQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){zB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},jB=($)=>{let Z=u64($);return p64(Z.maxChunkBytes),async(G,X)=>{let Y=KV$(G),Q=new Request(G,X),J=m64(),W=UV$(Y.hostname,J),K=new AbortController,U=new AbortController,w=!1,F,H,N,B,E=!1,D=(P=new rQ("tunnel_closed","tunnel request closed"))=>{if(w)return;if(w=!0,i64(F),Q.body&&!E)Q.body.cancel(P).catch(()=>{});if(U.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new rQ("tunnel_aborted",a$1(Q.signal));zB(Z.connection,W.abort,{type:"abort",requestId:J,reason:a$1(Q.signal)}),K.abort(P),D(P)};if(Q.signal.aborted)throw new rQ("tunnel_aborted",a$1(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new rQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);zB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),D(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:l64(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};zB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!E)zB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(E)return;E=!0,(Q.body?s64({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:U.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await a64({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(t64(Q.method,P.status))return D(),new Response(null,{status:P.status,statusText:P.statusText,headers:oC$(P.headers)});return new Response(e64({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:D}),{status:P.status,statusText:P.statusText,headers:oC$(P.headers)})}catch(P){throw D(P instanceof Error?P:Error(String(P))),P}}};var sC$=O(()=>{iC$();tC$();VL0();rQ=class rQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var vL0=O(()=>{sC$()});function eC$($){let Z=$.createFetch??Z44,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return s$1;let Q=SJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return s$1;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return s$1}}}var s$1,Z44=($,Z)=>jB({connection:$,firstFrameTimeoutMs:Z});var $_$=O(()=>{vL0();Yr();s$1={online:!1,capabilities:[]}});async function*G44($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function Z_$($){let Z=$.createFetch??((G)=>jB({connection:G,idleTimeoutMs:X44}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=SJ(X),K=Z(J),U={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)U.body=Y.body;let w=await K(`tunnel://${W}${Y.path}`,U);yield*G44(w)}}var X44=45000;var G_$=O(()=>{vL0();Yr()});import{z as _J}from"zod";function X_$($){return JSON.stringify($)}var f9Z;var Y_$=O(()=>{f9Z=_J.discriminatedUnion("type",[_J.object({type:_J.literal("cancel"),runId:_J.string()}),_J.object({type:_J.literal("cancel_req"),reqId:_J.string()}),_J.object({type:_J.literal("keep_alive")}),_J.object({type:_J.literal("shutdown")})])});function Q_$($){let Z=$.createFetch??((G)=>jB({connection:G,idleTimeoutMs:Y44}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=SJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function J_$($){let Z=$.createFetch??jB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=SJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:X_$(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var Y44=45000;var W_$=O(()=>{vL0();Y_$();Yr()});function yL0($,Z,G,X){if(!X)return!1;return $.emit(Z,V3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var K_$=O(()=>{f8()});class e$1{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as Q44,rm as gL0}from"fs/promises";import{join as hL0}from"path";async function cL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-J44),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await jC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await U_$($,Y,Z);else if(!Y.startsWith(".")){let Q=hL0($,Y),J=await jC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await U_$(Q,K,Z)}if((await jC(Q)).length===0)await gL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function U_$($,Z,G){let X=0,Y=hL0($,Z),Q=await jC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=hL0(Y,W),U=await jC(K);for(let F of U){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=hL0(K,F);await gL0(N,{recursive:!0,force:!0}),X++}}if((await jC(K)).length===0)await gL0(K,{recursive:!0,force:!0})}if((await jC(Y)).length===0)await gL0(Y,{recursive:!0,force:!0});return X}async function jC($){try{return(await Q44($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var J44=30;var $81=()=>{};import{DBOS as Z81,SchedulerMode as W44}from"@dbos-inc/dbos-sdk";async function U44(){let $=[aQ(),AC(),TK()],Z=0;for(let G of $)try{Z+=await cL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function w44($,Z){await Z81.runStep(()=>U44(),{name:"monitoringRetention"})}function F_$(){if(w_$)return;w_$=!0;let $=Z81.registerWorkflow(w44,{name:"monitoringRetentionWorkflow"});Z81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:K44,mode:W44.ExactlyOncePerIntervalWhenActive})}var K44="23 4 * * *",w_$=!1;var H_$=O(()=>{mX();$81()});function N_$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await sH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await ju0($.db,Z,X.role);return Y.boundAuth=zu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new _E(G,void 0,Y.boundAuth,X.role,"self"),l40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var B_$=O(()=>{bE();Ii()});function F44(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function N44(){for(let $ of H44)$()}function O_$($){let Z=[...G81.logs,$];G81={...G81,logs:Z.length>500?Z.slice(-500):Z},N44()}function X81(){return B44}var G81,H44,B44=!1;var Y81=O(()=>{G81=F44(),H44=new Set});import{EventEmitter as O44}from"events";var Q81;var E_$=O(()=>{Y81();Q81=new O44;Q81.on("request",($)=>{O_$($)})});function D_$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=Sg(H.params.name),B=H.params.arguments||{},E=Object.keys(B).map((L)=>Sg(L)),D=E.length>0?E.slice(0,3).join(",")+(E.length>3?"\u2026":""):"";Q=`${e4.tool}${N}${e4.dim}(${D})${e4.reset}`}else if(H.method)Q=`${e4.dim}${Sg(H.method)}${e4.reset}`}}catch{}}let W=Sg(Y);if(Y.startsWith("/mcp/conn_")){let w=Y.split("/")[2]??"";W=`/mcp/${e4.mcp}${Sg(w.slice(0,12))}\u2026${e4.reset}`}else if(Y==="/mcp")W=`${e4.mcp}/mcp${e4.reset}`;else if(Y==="/mcp/registry")W=`${e4.mcp}/mcp/registry${e4.reset}`;let K=D44(X),U=J?"\u25C0":"\u2190";if(!X81())console.log(`${e4.dim}${U}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let w=Date.now()-G,F=$.res.status,H=E44(F),N=w<1000?`${w}ms`:`${(w/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!X81())console.log(`${e4.dim}${B}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${e4.reset} ${e4.duration}${N}${e4.reset}`);Q81.emit("request",{method:X,path:Sg(Y),status:F,duration:w,timestamp:new Date})}}}var e4,E44=($)=>{if($>=500)return e4.serverError;if($>=400)return e4.clientError;if($>=300)return e4.redirect;return e4.ok},D44=($)=>{return e4[$]||e4.reset},Sg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var L_$=O(()=>{Y81();E_$();e4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as A_$}from"crypto";import{mkdir as L44,readdir as z44,rm as z_$,stat as T_$}from"fs/promises";import{join as W81,relative as j44}from"path";import{z as T$}from"zod";function R_$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return W81(P44,Z)}function q_$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function J81($,Z){let G=R_$($),X=q_$(Z);return W81(G,X)}function A44($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return A_$("sha256",Y).update(Q).digest("hex")}function P_$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=A44(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${q_$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function M_$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${A_$("md5","etag").update(X).digest("hex")}"`}async function k_$($,Z,G,X,Y){try{let Q=await z44($,{withFileTypes:!0});for(let J of Q){let W=W81($,J.name),U=j44(Z,W).replace(/\\/g,"/");if(G&&!U.startsWith(G))continue;if(J.isDirectory())if(X){let w=U+"/";if(!G||w.startsWith(G)){if(!(G?U.slice(G.length):U).includes("/"))Y.commonPrefixes.add(w)}}else await k_$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let w=U.slice(G.length);if(w.includes(X)){let F=w.indexOf(X),H=G+w.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let w=await T_$(W);Y.objects.push({key:U,size:w.size,lastModified:w.mtime.toISOString(),etag:M_$(W,w.mtime,w.size)})}catch{}}}}catch{}}function S_$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,U=Q.continuationToken,w=R_$(X);await L44(w,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await k_$(w,w,J,K,F),F.objects.sort((D,L)=>D.key.localeCompare(L.key));let H=0;if(U){if(H=F.objects.findIndex((D)=>D.key>U),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,E=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:E,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=J81(X,Q.key),W=await T_$(J);return{contentType:X11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:M_$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??j_$;return{url:P_$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??j_$;return{url:P_$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=J81(X,Q.key);try{return await z_$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let U=J81(X,K);try{await z_$(U),J.push(K)}catch(w){W.push({key:K,message:w instanceof Error?w.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function K81($,Z,G){let X=S_$(Z,G),Y=new FU({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:L5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(U)=>{try{let w=await J.handler(U);return{content:[{type:"text",text:JSON.stringify(w)}],structuredContent:w}}catch(w){return{content:[{type:"text",text:`Error: ${w.message}`}],isError:!0}}})}let Q=new xY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),rW(Y,Q,$,"mcp:dev-assets")}async function V_$($,Z,G,X){let Q=S_$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var P44="./data/assets",j_$=3600,I_$,C_$;var __$=O(()=>{F8();Wp();I6();_u();ev();jG();oD0();I_$=new v1;I_$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return K81($.req.raw,Z,X)});C_$=I_$});var b_$={};X6(b_$,{mountDevRoutes:()=>T44});function T44($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return K81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),U=await V_$(W,K,Y,J);if(U.isError)return X.json(U.content,500);return X.json(U.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",C_$);let G=new v1;G.use("*",nQ({mountPath:"/api/dev-assets"})),G.route("/",rD0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var f_$=O(()=>{I6();o01();oD0();__$()});var x_$=O(()=>{du0();lu0();BD()});var uL0=O(()=>{x_$()});var y_$={};X6(y_$,{streamAgent:()=>v_$,createDecopilotClient:()=>R44});async function I44($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (D6(),rl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function v_$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (D6(),rl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,U=K?.id,w={messages:X.messages,...U?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(w),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let E=JSON.parse(N);if(E?.error)B=E.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await I44(F.body);return Q({stream:H})}function R44($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return v_$(Y,X,W,Q,J)}}}import{z as uX}from"zod";function g_$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=q44.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:uX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:uX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var q44,CZZ,M44=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},w81=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},dL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},k44=($,Z,G)=>{let X=dL0($,Z,G);return new Proxy($v.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},S44=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => y_$);return J(X,Z.token,$,Y,Q)}}},U81=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>U81(G,Z));if(typeof $==="object"){if(M44($))return S44($,Z);if(w81($))return k44($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=U81(Y,Z);return G}return $},h_$=($)=>{return U81($.state,$)};var Vg=O(()=>{uL0();q44=new Map;CZZ=uX.object({id:uX.string(),title:uX.string(),capabilities:uX.object({vision:uX.boolean().optional(),text:uX.boolean().optional(),tools:uX.boolean().optional(),reasoning:uX.boolean().optional()}).passthrough().optional(),provider:uX.string().optional().nullable(),limits:uX.object({contextWindow:uX.number().optional(),maxOutputTokens:uX.number().optional()}).passthrough().optional()})});var V44,c_$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},C44=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=c_$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},u_$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=c_$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??V44;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},d_$=($,Z,G)=>{let X=new Headers($.headers);return C44(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var l_$=O(()=>{V44=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function m_$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function _44($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function i_$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function n_$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function p_$($){return{handleProtectedResourceMetadata:(U)=>{let w=zK(new URL(U.url)),F=`${w.origin}/mcp`;return Response.json({resource:F,authorization_servers:[w.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(U)=>{let F=zK(new URL(U.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(U)=>{let w=zK(new URL(U.url)),F=w.searchParams.get("redirect_uri"),H=w.searchParams.get("response_type"),N=w.searchParams.get("state"),B=w.searchParams.get("code_challenge"),E=w.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let D=zK(new URL(`${w.origin}/oauth/callback`)),L=D.toString(),j=i_$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:E??void 0,oauthCallbackUri:L});D.searchParams.set("state",j);let P=$.authorizationUrl(D.toString());return Response.redirect(P,302)},handleOAuthCallback:async(U)=>{let w=zK(new URL(U.url)),F=w.searchParams.get("code"),H=w.searchParams.get("state"),N=w.searchParams.get("error"),B=H?n_$(H):null;if(N){let E=w.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let D=zK(new URL(B.redirectUri));if(D.searchParams.set("error",N),D.searchParams.set("error_description",E),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}return Response.json({error:N,error_description:E},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let E=B.oauthCallbackUri??zK(new URL(`${w.origin}/oauth/callback`)).toString(),D={code:F,redirect_uri:E},L=await $.exchangeCode(D),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=i_$(z),P=zK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(E){console.error("OAuth callback error:",E);let D=zK(new URL(B.redirectUri));if(D.searchParams.set("error","server_error"),D.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}},handleToken:async(U)=>{try{let w=U.headers.get("content-type")??"",F;if(w.includes("application/x-www-form-urlencoded")){let z=await U.formData();F=Object.fromEntries(z.entries())}else{let z=await U.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:E}=F;if(B==="refresh_token"){if(typeof E!=="string"||!E)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(E)}catch(P){if(P instanceof F81)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let D=n_$(H);if(!D||!D.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(D.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(D.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==D.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:D.accessToken,token_type:D.tokenType};if(D.refreshToken)L.refresh_token=D.refreshToken;if(D.expiresIn!==void 0)L.expires_in=D.expiresIn;if(D.scope)L.scope=D.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(w){return console.error("Token exchange error:",w),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(U)=>{try{let w=await U.json();if(!w.redirect_uris||w.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let E of w.redirect_uris)if(!_44(E))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${E}`},{status:400});let F=m_$(32),H=w.token_endpoint_auth_method!=="none"?m_$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:w.client_name,redirect_uris:w.redirect_uris,grant_types:w.grant_types??["authorization_code"],response_types:w.response_types??["code"],token_endpoint_auth_method:w.token_endpoint_auth_method??"client_secret_post",scope:w.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(w){return console.error("Client registration error:",w),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(U)=>{let H=`Bearer resource_metadata="${`${zK(new URL(U.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(U)=>U.headers.has("Authorization")}}var F81,zK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var H81=O(()=>{F81=class F81 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as b44}from"async_hooks";var t_$,Kr;var N81=O(()=>{t_$=new b44,Kr={getStore:()=>{return t_$.getStore()},run:($,Z,...G)=>t_$.run($,Z,...G)}});var o_$="SELF",mL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},a_$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},r_$="::",s_$=($)=>{let Z=$.indexOf(r_$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+r_$.length);return[G,X]},f44=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},e_$=($)=>{if(mL0($))return[];return Object.keys($)},x44=($,Z)=>{if(mL0($))return $.events;let G=$[Z];if(!G)return[];if(a_$(G))return G.events;return Object.keys(G)},lL0=($,Z,G)=>{if($===o_$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!w81(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},v44=($,Z,G)=>{let X=Z;if(mL0($)){let Q=[];for(let J of $.events){let W=s_$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,U]=W,w=lL0(K,X,G);if(!w)continue;Q.push({eventType:U,publisher:w})}return Q}let Y=[];for(let Q of e_$($)){let J=lL0(Q,X,G);if(!J)continue;let W=x44($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},y44=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},g44=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},h44=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},c44=async($,Z,G,X,Y)=>{let Q=X;if(mL0($)){let w=new Set;for(let H of $.events){let N=s_$(H);if(!N)continue;let[B,E]=N,D=lL0(B,Q,Y);if(!D)continue;w.add(`${D}:${E}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return w.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let w of e_$($)){let F=lL0(w,Q,Y);if(F)J.set(F,w)}let W=y44(Z),K=[];for(let[w,F]of W){let H=J.get(w);if(!H)continue;let N=$[H];if(!N)continue;if(a_$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(D){let L={};for(let z of F)L[z.id]={success:!1,error:D instanceof Error?D.message:String(D)};return{results:L}}})());continue}let B=N,E=g44(F);for(let[D,L]of E){let z=B[D];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let U=await Promise.all(K);if(U.length===0)return{success:!0};return h44(U)},$b$;var B81=O(()=>{Vg();$b$={subscriptions:v44,execute:c44,parseCron:f44}});function u44($,Z){let G=dL0("self",{meshUrl:$,token:Z});return $v.forConnection(G)}function d44($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function Zb$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=u44($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((w)=>w.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((w)=>({connection_id:w.connectionId,selected_tools:w.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),U=[];for(let w of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:w.name,virtual_mcp_id:K.id,messages:w.messages,models:w.models,tools:w.tools,active:w.active??!0}),H=[];for(let N of w.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(d44(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}U.push({id:F.id,name:w.name,triggers:H})}return{id:K.id,automations:U,automationIds:U.map((w)=>w.id),alreadyExisted:!1}}}var O81=O(()=>{Vg();uL0()});import{z as wZ}from"zod";function bw($){return{...$,execute:(Z)=>{let G=Ur(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var Ur=($)=>{let Z=Kr.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},Gb$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},l44=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?g_$(wZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[bw({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:wZ.object({state:Z??wZ.unknown(),scopes:wZ.array(wZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:wZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:wZ.object({baseUrl:wZ.string(),org:wZ.string(),subjectConnectionId:wZ.string(),token:wZ.string()}).optional()}),outputSchema:wZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:U,token:w,connectionId:F}=Gb$(J);await Y(J.runtimeContext.env,{createAgent:Zb$(U,w,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[bw({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:O50,outputSchema:E50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:U}=Gb$(J);return $b$.execute($.handlers,J.context.events,W,K,U)}})]:[],bw({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:wZ.object({}),outputSchema:wZ.object({stateSchema:wZ.unknown(),scopes:wZ.array(wZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},Xb$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(E)=>{if(J(E))return[E];Q();let D=await E(B);if(Array.isArray(D))return D;return[D]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...l44({...$}));let E;if(typeof $.prompts==="function")Q(),E=await $.prompts(N);else E=await W($.prompts,N);let D;if(typeof $.resources==="function")Q(),D=await $.resources(N);else D=await W($.resources,N);let L={tools:B,prompts:E,resources:D};return Z=L,L}catch(B){throw G=null,B}})(),G},U=(N,B)=>{for(let E of B.tools)N.registerTool(E.id,{_meta:E._meta,title:E.title,description:E.description,annotations:E.annotations,inputSchema:E.inputSchema&&"shape"in E.inputSchema?E.inputSchema:wZ.object({}),outputSchema:E.outputSchema&&typeof E.outputSchema==="object"&&"shape"in E.outputSchema?E.outputSchema:void 0},async(D)=>{let L=Ur(),z=await E.execute({context:D,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let E of B.prompts)N.registerPrompt(E.name,{title:E.title,description:E.description,argsSchema:E.argsSchema?E.argsSchema:wZ.object({}).shape},async(D)=>{let L=Ur();return await E.execute({args:D,runtimeContext:L},L)});for(let E of B.resources)N.resource(E.name,E.uri,{description:E.description,mimeType:E.mimeType},async(D)=>{let L=Ur(),z=await E.read({uri:D,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},w=async(N)=>{await $.before?.(N);let{instructions:B,...E}=$.serverInfo??{},D=new FU({...E,name:E.name??"@deco/mcp-api",version:E.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:L5,...B&&{instructions:B}}),L=await K(N);U(D,L);let z="tools/list",j=D.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:D,...L}};return{fetch:async(N,B)=>{let{server:E}=await w(B),D=new xY;await E.connect(D);let L=()=>{try{D.close?.()}catch{}try{E.close?.()}catch{}};try{let z=await D.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let E=Kr.getStore();if(!E)throw Error("Missing state, did you forget to call State.bind?");let D=E?.env,{tools:L}=await K(D),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=Ur();return j({context:B,runtimeContext:P},P)}}};var iL0=O(()=>{pu0();jG();_u();ev();Vg();B81();N81();O81();B81();O81()});import{decodeJwt as Yb$}from"jose";var m44=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},Qb$=($)=>()=>{return{...$??{}}},i44=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=Yb$(G),U=K.metadata??{};W={authorization:J,state:K.state??U.state??{},token:G,meshUrl:K.meshUrl??U.meshUrl,connectionId:K.connectionId??U.connectionId,organizationId:K.organizationId??U.organizationId,organizationName:K.organizationName??U.organizationName,organizationSlug:K.organizationSlug??U.organizationSlug,ensureAuthenticated:Qb$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=Yb$(G.token),U=K.metadata??{},w=K.appName;W.authorization??=J,W.callerApp=w,W.connectionId??=K.connectionId??U.connectionId,W.organizationId??=K.organizationId??U.organizationId,W.organizationName??=K.organizationName??U.organizationName,W.organizationSlug??=K.organizationSlug??U.organizationSlug,W.ensureAuthenticated=Qb$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=h_$(W),m44({env:Q,server:Z,url:X}),Q},n44,Jb$=($)=>{let Z=Xb$($),G=$.cors??n44,X=$.oauth,Y=X?p_$(X):null,Q=async(J,W,K)=>{let U=new URL(J.url);if(Y){if(U.pathname==="/.well-known/oauth-protected-resource"||U.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(U.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(U.pathname==="/authorize")return Y.handleAuthorize(J);if(U.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(U.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((U.pathname==="/register"||U.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(U.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let w=J.clone();try{if((await w.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(U.pathname.startsWith("/mcp/call-tool")){let w=U.pathname.split("/").pop();if(!w)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:w,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return u_$(J,G??{});let U=i44({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),w=await Kr.run({req:J,env:U,ctx:K},async()=>await Q(J,U,K));if(G!==!1)return d_$(w,J,G??{});return w}}};var Wb$=O(()=>{Vg();l_$();H81();H81();N81();iL0();iL0();Vg();uL0();n44={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as E81}from"zod";function r44($,Z){let G=bw({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:my,outputSchema:iy,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},U=`${Z}:${JSON.stringify(K)}`,w=Kb$.get(U);if(w)return w;let F=await $.listPublic(Z,K);return Kb$.set(U,F),F}}),X=bw({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:KK,outputSchema:sV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let U=await $.findByIdOrName(Z,K);if(U&&U.is_public)return{item:U};return{item:null}}}),Y=bw({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:KK,outputSchema:E81.object({versions:E81.array(sV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let U=await $.findByIdOrName(Z,K);if(U&&U.is_public)return{versions:[U]};return{versions:[]}}}),Q=bw({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:ZD0,outputSchema:GD0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=bw({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:E81.object({}),outputSchema:ny,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function Ub$($){let Z=$.db,G=new Gx(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=r44(G,Q.id),W=Jb$({tools:J}),K=new URL(X.req.url),U=X.req.path.indexOf("/registry"),w=U>=0?X.req.path.slice(U+9):"",F=new URL(w||"/",K.origin);K.searchParams.forEach((B,E)=>{F.searchParams.set(E,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var p44=3600000,t44=500,Kb$;var wb$=O(()=>{Wb$();iL0();ny0();Y9();Kb$=kg({ttlMs:p44,maxSize:t44,updateRecencyOnGet:!0})});import{sql as o44}from"kysely";import{randomUUID as Fb$}from"crypto";import{z as a44}from"zod";async function e44($){let Z=new Date().toISOString(),G=Fb$(),X=Z4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:Fb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await o44`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function $54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function Z54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",eV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):Nb$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?Hb$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:Hb$,rateLimitWindow:s44,rateLimitMax:Nb$}}async function G54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function X54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function Bb$($){let{db:Z,db:G}=$,X=new Xx(G),Y=new Yx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await $54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await Z54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await G54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let U;try{U=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let w=NP$.safeParse(U);if(!w.success)return Q.json({error:"Invalid publish request payload",details:a44.treeifyError(w.error)},400);let F=await X54(G,W,w.data.data.id,w.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:w.data.data.id,title:w.data.data.title,description:w.data.data.description??null,_meta:w.data.data._meta,server:w.data.data.server,requester_name:w.data.requester?.name??null,requester_email:w.data.requester?.email??null});try{await e44({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:w.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:w.data.data.title,requester_email:w.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var Hb$=!0,s44="hour",Nb$=100;var Ob$=O(()=>{R4();f8();py();py0();ty0();Y9()});var Eb$={};X6(Eb$,{createPublishRequestHandler:()=>Bb$,createPublicMCPHandler:()=>Ub$});var Db$=O(()=>{wb$();Ob$()});var jp0={};X6(jp0,{watchHandler:()=>Ab$,getProxyDispatch:()=>W54,createApp:()=>E54});import{readFileSync as Y54}from"fs";import{PrometheusSerializer as Q54}from"@opentelemetry/exporter-prometheus";import{DBOS as Cg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as F54,oAuthProtectedResourceMetadata as H54}from"better-auth/plugins";async function J54($){let Z=$.connect(),G;try{G=await Promise.race([Z,zb$(Lb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),zb$(Lb$)]),G.release(),!0}catch{return G.release(!0),!1}}function zb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function W54(){if(!D81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return D81}async function K54($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${H_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function U54($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function E54($={}){let Z=$.database??F6(),G=!1;j9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new m$1,J,W,K,U,w,F=null;if($.disableNats)J=i$1(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Kp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},w=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let F0=g.getReader();try{while(!0){let{done:v0}=await F0.read();if(v0)break}}catch{}finally{F0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=jC$();let g=O1().natsCredsPath,F0;if(g)try{F0=Y54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,F0?{creds:F0}:void 0);let v0=$g0()?new ix0({getJetStream:()=>F.getJetStream()}):null;v0?.init().catch(()=>{}),X=v0;let e0=new Et0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=i$1({getConnection:()=>F.getConnection()}),W=new n$1({getConnection:()=>F.getConnection()}),K=new r$1({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),U=eC$({getConnection:()=>F.getConnection()}),w=Q_$({getConnection:()=>F.getConnection()});let d0=J_$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,L6)=>{d0.publishControlFrame(e1,L6).catch((Q4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",Q4)})},stop:()=>T1.stop()},lT$(F),F.onReady(()=>{v0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Yi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(_g)await _g();nx0(X),Dt0(Y);let N={storage:new Fx(Z.db),sseHub:j9},B=new Nm0(N),E=new ol(Z.db),D=new e$1(E);D.start(),W.start((g)=>{S90(g),B.execute({type:"CANCEL",taskId:g}).catch((F0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",F0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),_g=async()=>{await B.stopAll(),B.dispose(),D.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Qi1(),Y.teardown(),nx0(null),Dt0(null)};let L=new v1;if(L.use("*",db0({enabled:(g)=>_b(g,"debug")==="1"})),L.use("*",wz0),L.use("/*",a_1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,F0)=>{if(await F0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",D_$());L.use("*",async(g,F0)=>{if(await F0(),vg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(fZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(fZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(fZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let F0={};if(F0.postgres={status:await J54(Z.pool)?"up":"down"},F)F0.nats=F.isConnected()?{status:"up"}:{status:"down"};else F0.nats={status:"down"};let v0=F0.postgres.status==="up",e0=v0?200:503;return g.json({status:v0?"ready":"not_ready",services:F0},e0)}),L.get(fZ.METRICS,async(g)=>{try{let F0=await Bz0.collect(),v0=w54.serialize(F0.resourceMetrics);return g.text(v0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(F0){return console.error("Failed to collect metrics:",F0),g.text("# Error collecting metrics",500)}}),L.get(`${fZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let F0=g.req.param("queueName");if(!N54.has(F0))return g.json({error:`Unknown queue: ${F0}`},404);let v0=await Cg.listQueuedWorkflows({queueName:F0,status:"ENQUEUED"});return g.json({queue_length:v0.length})}),L.get(fZ.HOSTED_RUN_PENDING,(g)=>{let{active:F0,pending:v0,max:e0}=A4$();return g.json({pending:v0,active:F0,max:e0})}),L.route("/api/config",uV$),L.route("/api/_reports",eV$),L.route("/report",pV$($.clientDir)),L.route("/api/auth/custom",wI$),L.all("/api/auth/admin/*",NI$),L.all("/api/auth/*",async(g)=>{return await d8.handler(g.req.raw)});let z=ya1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",XC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",XC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Ri),L.route("/",ua1()),L.use("/oauth-proxy/:connectionId/*",XC),L.all("/oauth-proxy/:connectionId/*",jb$);let j=async(g)=>{let v0=await B54()(g.req.raw),e0=await v0.json();return Response.json(e0,v0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",XC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let v0=await O54()(g.req.raw),e0=await v0.json();return Response.json(e0,v0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=dT$({ttlMs:120000}),M=await Ta1({db:Z.db,auth:d8,encryption:{key:O1().encryptionKey},observability:{tracer:xw,meter:E8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:U,publishLinkControlFrame:(g,F0)=>W.publishControlFrame(g,F0)});sH.set(M);let S=new LU(O1().encryptionKey);Y21({db:Z.db,baseUrl:L3()});let q=G60(Z.db),V=new dl(Z.db),i=N_$({db:Z.db});Ft0({storage:q,studioContextFactory:i}),Mm0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:j9},prepareLinkWorkFn:Qq$,workPublisher:w}),Am0({dispatchRunFn:Xq$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:j9}});let f=new Fx(Z.db),v=new al(Z.db);Q4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await Pb$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let F0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return F0?{orgId:F0.organization_id,createdBy:F0.created_by,version:F0.message_storage_version??1,status:F0.status,runFenceToken:F0.run_fence_token,title:F0.title??null}:null},completeRunIfNotCompleted:async(g,F0)=>{let v0=await f.completeRunIfNotCompleted(g,F0);if(yL0(j9,F0,g,v0),v0)await zm0(v,g,F0);return v0},markRunRequiresAction:async(g,F0)=>{let v0=await f.requiresActionIfInProgress(g,F0);return yL0(j9,F0,g,v0),v0},markRunFailed:async(g,F0,v0,e0)=>{let d0=await f.markRunFailed(g,F0,v0,e0);if(yL0(j9,F0,g,d0),d0)await zm0(v,g,F0);return d0},clearSynthesizedError:async(g,F0)=>{await f.messageParts().replaceMessageParts(g,EN(g,F0),[])},persistTitle:(g,F0,v0)=>f.update(g,F0,{title:v0}),onTitleUpdated:async({runId:g,orgId:F0,title:v0})=>{let e0=await f.get(g,F0).catch(()=>null);j9.emit(F0,V3(g,e0?.status??"in_progress",{title:v0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:F0})=>{await f.bumpProgress(g,F0)},recordCompleted:async({runId:g,orgId:F0,distinctId:v0,usage:e0})=>{i1.capture({distinctId:v0,event:"chat_message_completed",groups:{organization:F0},properties:{organization_id:F0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:F0,distinctId:v0,reason:e0,kind:d0})=>{i1.capture({distinctId:v0,event:"chat_message_failed",groups:{organization:F0},properties:{organization_id:F0,thread_id:g,transport:"projector",error_category:d0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),CJ$({studioContextFactory:i,systemDatabaseUrl:Px1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),F_$(),Q21();let $0=async(g,F0,v0)=>{let e0=await q.findById(g,F0);if(!e0)throw Error("Automation not found");return Bt0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},o=new Kg(q,({automation:g,trigger:F0,contextMessages:v0,idempotencyKey:e0})=>Jp({automationId:g.id,organizationId:g.organization_id,triggerId:F0.id,contextMessages:v0},{idempotencyKey:e0})),B0=[aQ(),AC(),TK()];for(let g of B0)cL0(g).then(()=>{}).catch((F0)=>console.error("[monitoring] Retention cleanup failed:",F0));let E0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));E0(),setInterval(E0,86400000).unref(),L.use("*",async(g,F0)=>{if(Kz0(g.req.path))return F0();let v0={measure:async(d0,T1)=>{KQ(g,d0);try{return await T1()}finally{QY(g,d0)}}},e0=await sH.create(g.req.raw,{timings:v0});e0.automationRunner=$0,g.set("studioContext",e0);try{await F0()}finally{let d0=e0.pendingRevalidations;if(d0.length>0)Promise.race([Promise.allSettled(d0),O8(30000)]).catch((e1)=>console.error("[mesh] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",YC),L.use("/api/:org/v1/*",YC),L.use("/api/:org/files/*",YC),L.use("*",async(g,F0)=>{let v0=g.req.path;if(v0.startsWith("/api/org-sso/")||v0.startsWith("/api/auth/")||v0.startsWith("/api/tools/management")||v0.startsWith("/oauth-proxy/")||v0.startsWith(`${re0}/`))return F0();let e0=g.get("studioContext");if(!e0?.organization?.id||!e0?.auth?.user?.id)return F0();if(!(await e0.storage.orgSsoConfig.getByOrgId(e0.organization.id))?.enforced)return F0();if(!await e0.storage.orgSsoSessions.isValid(e0.auth.user.id,e0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return F0()});let J0=new v1;J0.use("*",nQ({mountPath:"/api/org-sso"})),J0.route("/",ED0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:mb0,grouped:mO()})}),L.use("/mcp/*",async(g,F0)=>{KQ(g,"mcp");try{return await F0()}finally{QY(g,"mcp")}});let Y0=async(g,F0)=>{let v0=g.var.studioContext;if(!v0.auth.user?.id&&!v0.auth.apiKey?.id){let e0=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${e0.origin}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await F0()};if(L.use("/mcp/:connectionId?",Y0),L.use("/mcp/gateway/:virtualMcpId?",Y0),L.use("/mcp/virtual-mcp/:virtualMcpId?",Y0),L.use("/mcp/self",Y0),C3()){let{mountDevRoutes:g}=(f_$(),aL0(b_$));g(L,Y0)}let a=new v1;a.use("*",nQ({mountPath:"/mcp"})),a.route("/",GB0()),L.route("/mcp",a);let A0=new v1;A0.use("*",nQ({mountPath:"/mcp/self"})),A0.route("/",RL0()),L.route("/mcp/self",A0);let U0=new v1;U0.use("*",nQ({mountPath:"/mcp"})),U0.route("/",QB0()),L.route("/mcp",U0),L.use("/api/:org/models/*",async(g,F0)=>{KQ(g,"llm_models");try{return await F0()}finally{QY(g,"llm_models")}});let x0=t01({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:U});if(L.route("/api",x0),F!=null)D81=Z_$({getConnection:()=>F?.getConnection()??null});L.route("/api",IV$()),L.get("/api/links/me",async(g)=>{try{let F0=g.req.header("authorization")??"",v0=/^Bearer\s+(.+)$/i.exec(F0),e0=null;if(v0){let T1=(v0[1]??"").trim();e0=await WV$(T1,d8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let d0=U?await U(e0):{online:!1,capabilities:[]};if(!d0.online)return g.json(null);return g.json({hostname:d0.hostname,cliVersion:d0.cliVersion})}catch(F0){return console.error("[links/me] presence probe failed; reporting offline:",F0 instanceof Error?F0.message:String(F0)),g.json(null)}}),L.use("/api/:org/files/*",YC),L.route("/api",XC$);let i0=new v1;i0.use("*",nQ({mountPath:"/api"})),i0.route("/",qL0()),L.route("/api",i0),L.route("/api",vV$);let f0=new v1;f0.use("*",nQ({mountPath:"/api"})),f0.route("/",ML0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",f0);let n0=new ml(Z.db),N0=new v1;N0.use("*",nQ({mountPath:"/api"})),N0.route("/",nD0()),L.route("/api",N0),L.route("/api/deco-sites",Mq$()),L.route("/api/deco-apps",VV$());let _0=new v1;_0.use("*",nQ({mountPath:"/api/deco-sites"})),_0.route("/",tD0()),L.route("/api/deco-sites",_0);let T0=new v1;T0.use("*",nQ({mountPath:"/api/vm-events"})),T0.route("/",kV$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:H0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (Db$(),Eb$)),G0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=H0(G0),n=Q0(G0);L.use("/org/:orgRef/registry/publish-request",XC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",XC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(re0,BI$());let e=QV$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:j9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:C3(),mcpAuth:Y0,oauthProxyHandler:jb$,watchHandler:Ab$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(Bq$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([j9.stop(),_g?Promise.resolve(_g()).finally(()=>{_g=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await dY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await Tx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await Cg.registerQueue(uY,{partitionQueue:!0,concurrency:Kt0,minPollingIntervalMs:Ut0}),await Cg.registerQueue(oQ,{partitionQueue:!0,concurrency:qm0}),await Cg.registerQueue(AK,{partitionQueue:!0,concurrency:Pm0}),await Cg.registerQueue(fw,{partitionQueue:!0,concurrency:VJ$}),await s01(q),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>Cg.deleteQueue(g))),await wt0(Z.pool),pg1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),J21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var Pb$,Lb$=5000,D81=null,_g=null,jb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await sH.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await tx(J.connection_url),K,U=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=U.origin;let w=await qi(K);if(!w.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await w.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=O1().baseUrl??B.origin;try{let i=new URL(q),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(N_1(J.connection_url))try{let V=await K54(Y,J.organization_id),i=U54(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let E={Accept:$.req.header("Accept")||"application/json"},D=$.req.header("Content-Type");if(D)E["Content-Type"]=D;let L=$.req.header("Authorization");if(L)E.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&D?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),$0=v.indexOf(":");if($0!==-1){let o=decodeURIComponent(v.slice(0,$0)),B0=decodeURIComponent(v.slice($0+1));j=o||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),i=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,$0]of q.entries())f.append(v,$0.toString());z=f.toString()}else if(X==="register"&&D?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,$0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...$0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),E["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:E,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await rx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new _5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},Ab$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return pQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!j9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(w)=>{W.writeSSE({id:w.id,event:w.type,data:JSON.stringify(w)}).catch(()=>{j9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let U=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(U)})},30000);await new Promise((w)=>{W.onAbort(()=>{clearInterval(U),j9.remove(X,J),w()})})})},w54,N54,B54=()=>H54(d8),O54=()=>F54(d8);var Pp0=O(()=>{l5();F8();W21();BG();Sb();f8();I6();e10();s_1();lb0();KJ();Ii();ue0();FQ();N5();R4();te0();OI$();ee0();Hq$();r01();GJ();m40();o01();Oq$();a01();JV$();RV$();SV$();G11();CV$();XB0();Mi();yV$();JB0();I$1();dV$();tV$();$C$();YC$();T$1();A$1();jr();wd();PC$();KY();j60();nl();zt0();AC$();IC$();VC$();$_$();G_$();W_$();Bm0();K_$();Ng0();qg0();VD();Lg0();H_$();t$0();$81();mX();e01();Pv();Lm0();Fm0();t$0();m01();yy0();gy0();B_$();bb();L_$();NC();ue0();ov();V90();Pb$=k(vB(),1);w54=new Q54,N54=new Set([uY,oQ,AK,fw])});var qb$={};X6(qb$,{resolveClientDir:()=>T54,resolveAssetPathWithTraversalCheck:()=>Rb$,isPathWithinDirectory:()=>Ib$,createAssetHandler:()=>I54});import{resolve as wr,dirname as D54,join as L54,extname as z54,basename as j54,sep as Tb$}from"path";function P54($,Z){if($===Z||j54($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${Tb$}assets${Tb$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function Ib$($,Z){let G=wr(Z),X=wr($);return X===G||X.startsWith(G+"/")}function Rb$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=wr(Z,G);if(!Ib$(X,Z))return null;return X}function T54($,Z="../client"){let G=new URL($),X=D54(G.pathname);return wr(X,Z)}function I54($={}){let{env:Z="production",clientDir:G=A54,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Rb$({requestPath:W,clientDir:G});if(!K)return null;let U=L54(K,"index.html"),w=wr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(z54(K))?[U,w]:[];for(let B of[K,...N])try{let E=Bun.file(B);if(await E.exists())return new Response(E,{headers:P54(B,w)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var A54="./dist/client";var Mb$=()=>{};var kb$={};X6(kb$,{tryUpgradePreviewWs:()=>C54,tryHandlePreviewHttp:()=>V54,previewWebSocketHandler:()=>_54,parsePreviewBaseDomain:()=>S54,isPreviewWsData:()=>nL0,extractHandleFromHost:()=>L81});function M54($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function k54(){return new Response(q54,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function S54($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function L81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function V54($,Z){let G=L81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Hr(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(OV)&&M54($))return k54();return Y.headers.delete(OV),Y}function Hr($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function nL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function C54($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=L81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Hr(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Hr(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Hr(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),U=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],w={kind:"preview",upstreamUrl:W,upstreamProtocols:U,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:w}))return Hr(426,"upgrade failed");return}function Fr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var R54=256,q54='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',_54;var Sb$=O(()=>{Ep0();_54={open($){let Z=$.data;if(!nL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Fr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Fr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Fr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!nL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=R54){Fr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!nL0(Z))return;Fr($,Z,1000,"")}}});var bb$={};X6(bb$,{printBanner:()=>f54,bannerLines:()=>_b$,BANNER_LINES:()=>Vb$,BANNER_GRADIENT:()=>Cb$});function b54($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function _b$($){let Z=Vb$.map((G,X)=>{let[Y,Q,J]=b54(Cb$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function f54($){console.log("");for(let Z of _b$($))console.log(Z);console.log("")}var Vb$,Cb$;var fb$=O(()=>{Vb$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Cb$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var vb$={};X6(vb$,{bootstrapDevLinkSession:()=>l54});import{existsSync as x54}from"fs";import{chmod as v54,mkdir as y54,rename as g54,writeFile as h54}from"fs/promises";import{dirname as c54,join as xb$}from"path";function u54($){return xb$($,"dev-link")}function d54($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return xb$(u54($),"session.json")}async function l54($,Z){let G=d54($),X=F6().db,Y=vQ()?await Gp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(x54(G))try{let U=await Bun.file(G).json(),w=U.user?.sub,F=U.accessToken;if(w===Y.id&&typeof F==="string"){if(await d8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:w}}}catch{}let Q=null;try{Q=await d8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await y54(c54(G),{recursive:!0});let W=`${G}.tmp`;return await h54(W,JSON.stringify(J,null,2),{mode:384}),await v54(W,384),await g54(W,G),{path:G,userSub:Y.id}}var yb$=O(()=>{FQ();KJ();dN()});l5();var M81="4";function k81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:M81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();eL0();N5();function af$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Lz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function U61(){let $=af$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Lz0($,"--cpu-prof-dir")??process.cwd(),name:Lz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Lz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Pz0();var Tr;function L61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=TB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Tr=setInterval(()=>void Z().catch(()=>{}),$),Tr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Tr)clearInterval(Tr)}}import*as $x$ from"bun:jsc";var{startSamplingProfiler:Zx$,samplingProfilerStackTraces:Gx$}=$x$;function z61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Zx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Gx$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let w of W){let F=w.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??w.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let U=[...K.entries()].sort((w,F)=>F[1]-w[1]).slice(0,8).map(([w,F])=>({frame:w,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:U}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function j61(){U61();let $=[L61(),D61(),z61()];return()=>{for(let Z of $)Z()}}import{existsSync as a54}from"fs";var dX=O1();W61();var{DBOS:Nr,DBOSClient:m54}=await import("@dbos-inc/dbos-sdk");function db$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var i54=[uY,oQ,AK,fw],n54=dX.dispatchRole==="worker"?i54:dX.dispatchRole==="api"?[]:void 0;Nr.setConfig(k81({systemDatabaseUrl:db$(dX.databaseUrl,dX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:dX.podName,listenQueues:n54}));var{createApp:p54}=await Promise.resolve().then(() => (Pp0(),jp0)),{isServerPath:t54}=await Promise.resolve().then(() => (jr(),m81)),{createAssetHandler:r54,resolveClientDir:lb$}=await Promise.resolve().then(() => (Mb$(),qb$)),o54=dX.port,gb$=lb$(import.meta.url,"../client"),mb$=a54(gb$)?gb$:lb$(import.meta.url,"../dist/client"),s54=r54({clientDir:mb$,isServerPath:t54}),e54={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function $94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(e54))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:Z94,tryHandlePreviewHttp:G94,tryUpgradePreviewWs:X94,previewWebSocketHandler:z81,isPreviewWsData:j81}=await Promise.resolve().then(() => (Sb$(),kb$)),{getOrInitSharedRunner:Y94}=await Promise.resolve().then(() => (tn(),yQ$)),ib$=Z94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),hb$={baseDomain:ib$??"",getRunner:Y94},pL0=await p54({clientDir:mb$}),P81=process.env.DBOS_CONDUCTOR_KEY?.trim(),cb$=process.env.DBOS_CONDUCTOR_URL?.trim();await Nr.launch({...P81?{conductorKey:P81}:{},...P81&&cb$?{conductorURL:cb$}:{}});console.log(`[dbos] application version: ${Nr.applicationVersion}`);await pL0.initDbos();if(!dX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (fb$(),bb$));console.log("");for(let Z of $())console.log(Z)}var Q94=Bun.serve({idleTimeout:0,port:o54,hostname:"0.0.0.0",fetch:async($,Z)=>{if(ib$){let X=await X94($,Z,hb$);if(X===void 0)return;if(X)return X;let Y=await G94($,hb$);if(Y)return Y}let G=await s54($);if(G)return $94(G);return pL0.fetch($,{server:Z})},websocket:{open($){if(j81($.data))z81.open($)},message($,Z){if(j81($.data))z81.message($,Z)},close($){if(j81($.data))z81.close($)}},development:!1}),J94=j61();if(dX.localMode)Promise.resolve().then(() => (dN(),vN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (yb$(),vb$)),Y=dX.baseUrl??`http://localhost:${dX.port}`,Q=await X(dX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (dN(),vN0));Z()}catch{}});var ub$=!1;async function W94($){let Z;try{Z=await m54.create({systemDatabaseUrl:db$(dX.databaseUrl,dX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:oQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:oQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function tL0($){if(ub$)return;ub$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{J94(),pL0.markShuttingDown();let Q=V81(dX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await O8(Q),await Q94.stop(!0);let J=Nr.executorID;await Nr.shutdown(),await W94(J),await pL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>tL0("SIGTERM"));process.on("SIGINT",()=>tL0("SIGINT"));process.on("SIGHUP",()=>tL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),tL0("uncaughtException")});