npm - decocms - Versions diffs - 4.74.13 → 4.74.14 - Mend

decocms 4.74.13 → 4.74.14

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (235) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2667,7 +2667,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var m$1,OC,R84,bV$,l$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",M84,d$,u$,Z6,_V$=24,DC,_J;var cV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(m$1||(m$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,X0){var W0,b0=0;for(W0=0;W0<X0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,X0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(X0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!X0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(X0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(X0-=64,l+=64,c)r+=64}if(X0>0){S(P0,m0,b0,V);for(j0=0;j0<X0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,X0){return i(h,l,null,0,c,r,X0)}function v(h,l,c,r,X0){var W0=new Uint8Array(32);return R(W0,r,X0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,X0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,X0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(X0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<X0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,X0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,X0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,X0,W0),P(h,l,b0,0)}function Y0(h,l,c,r,X0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,X0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,X0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,X0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,X0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,X0=~(c-1);for(var W0=0;W0<16;W0++)r=X0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,X0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),X0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-X0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function w0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,X0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(X0=0;X0<16;X0++)W0[r+X0]+=l[r]*c[X0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){N0(h,l,l)}function G0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),X0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,w0(X0,c);for(b0=0;b0<16;b0++)P0[b0]=X0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,X0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)X0[b0+16]=m0[b0],X0[b0+32]=S0[b0],X0[b0+48]=P0[b0],X0[b0+64]=j0[b0];var Z1=X0.subarray(32),U1=X0.subarray(16);return G0(Z1,Z1),N0(U1,U1,Z1),d0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=Y0,g=a;function H0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,X0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&X0,l+=W0>>>16,c+=b0&X0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&X0|r<<16,h&X0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,X0=32-l;if(l<32)c=h.hi>>>l|h.lo<<X0,r=h.lo>>>l|h.hi<<X0;else if(l<64)c=h.lo>>>l|h.hi<<X0,r=h.hi>>>l|h.lo<<X0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,X0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,X0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,X0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,X0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],X0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)X0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),X0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),X0[3]=e0(X0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=X0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(h,l,c){var r=new Uint8Array(64),X0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=dG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)X0[W0]=0;for(W0=0;W0<c;W0++)X0[W0]=l[b0-c+W0];X0[c]=128,c=256-128*(c<112?1:0),X0[c-9]=0,z(X0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,X0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(X0,h[3],l[3]),N0(X0,X0,w),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,X0),C0(P0,W0,X0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),X0=G();G0(X0,l[2]),N0(c,l[0],X0),N0(r,l[1],X0),d0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,X0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(X0=255;X0>=0;--X0)r=c[X0/8|0]>>(X0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),Q9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),X0=[G(),G(),G(),G()],W0;if(!c)X(l,32);q8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(X0,r),q5(h,X0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(h,l){var c,r,X0,W0;for(r=63;r>=32;--r){c=0;for(X0=r-32,W0=r-12;X0<W0;++X0)l[X0]+=c-16*l[r]*M8[X0-(r-32)],c=Math.floor((l[X0]+128)/256),l[X0]-=c*256;l[X0]+=c,l[r]=0}c=0;for(X0=0;X0<32;X0++)l[X0]+=c-(l[31]>>4)*M8[X0],c=l[X0]>>8,l[X0]&=255;for(X0=0;X0<32;X0++)l[X0]-=c*M8[X0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;k8(h,l)}function f$(h,l,c,r){var X0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(X0,r,32),X0[0]&=248,X0[31]&=127,X0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=X0[32+m0];q8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];q8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*X0[P0];return k8(h.subarray(32),S0),y0}function w8(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],l),Q0(X0,h[1]),N0(W0,X0,U),T0(X0,X0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,X0),N0(c,c,W0),V0(c,c),N0(c,c,X0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,X0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,X0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var X0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,r))return-1;for(X0=0;X0<c;X0++)h[X0]=l[X0];for(X0=0;X0<32;X0++)h[X0+32]=r[X0];if(q8(b0,h,c),G6(b0),Q9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(X0=0;X0<c;X0++)h[X0]=0;return-1}for(X0=0;X0<c;X0++)h[X0]=l[X0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:Y0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:U,L:M8,pack25519:d0,unpack25519:w0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Q9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return Y0(X0,r,r.length,l,c),X0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(X0,r,r.length,l,c)!==0)return null;return X0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox(h,l,X0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox.open(h,l,X0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var X0=new Uint8Array(r);for(var W0=0;W0<X0.length;W0++)X0[W0]=c[W0];return X0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var X0=0;X0<r.length;X0++)r[X0]=c[X0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),X0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(X0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==_1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=_1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return q8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var X0,W0=new Uint8Array(r);for(X0=0;X0<r;X0+=l)h.getRandomValues(W0.subarray(X0,X0+Math.min(r-X0,l)));for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var X0,W0=h.randomBytes(r);for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}()})(typeof Vg<"u"&&q5Z?q5Z:globalThis.nacl=globalThis.nacl||{});OC=typeof Vg<"u"&&q5Z?q5Z:globalThis.nacl,R84={fromSeed:OC.sign.keyPair.fromSeed,sign:OC.sign.detached,verify:OC.sign.detached.verify,randomBytes:OC.randomBytes,scalarBaseMultiply:OC.scalarMult.base,seal:OC.box,open:OC.box.open};M84=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));DC=[120,107,118,49];q84(R84);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function r$1($){try{$?.clear?.()}catch{}}async function uV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=gV$($),W=p$1(J.sub),K=t$1(new TextEncoder().encode(Z)),U=fV$();try{let w=await yV$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(hV$(w,U))}finally{r$1(U),r$1(K),r$1(W)}}var dV$=O(()=>{cV$()});function g84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function lV$(){let $=new b1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(o$1(),503);if(!Y.natsPublicUrl)return Z.json(o$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(o$1(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await uV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:SV$(Q),userId:X,allowedConnectionTypes:g84(Y.natsPublicUrl)})}return Z.json(VV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var o$1=()=>({error:"link session unavailable"});var mV$=O(()=>{F6();F8();CV$();dV$()});async function u84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function d84($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new qN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function l84($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},h84),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function m84($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<iV$){await O8(nV$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<iV$){await O8(nV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var h84=90000,c84=15000,pV$=()=>{let $=new b1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=eU({orgId:Y.id,virtualMcpId:Q,branch:J}),U=sy({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await _Y(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&iW(F5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return tQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),tQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},c84);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await u84(F,U)){await d84({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await l84({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await m84({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},iV$=60000,nV$=500;var tV$=O(()=>{F6();BC();MY();l5();RE0();on();EV();i90();RX()});function n84($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function p84($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(i84)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var i84=1e4,t84=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},rV$=()=>{let $=new b1;return $.use("*",t84),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await p84(X,Y);return Z.json({apps:n84(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var oV$=O(()=>{F6();F8()});import{z as h1}from"zod";function zK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function Y64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function Q64($,Z,G){try{return JSON.parse($)}catch{throw new eV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function J64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:Q64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function W64($){let Z=$.map((G)=>{let X=G.function.parameters?BY(G.function.parameters):BY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function K64($){if(!$)return;return{openai:{response_format:$}}}function U64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function aV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function sV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var r84=256,o84,a84,s84,e84,$64,Z64,G64,X64,eV$,$C$,ZC$;var GC$=O(()=>{L6();F6();BC();o84=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),a84=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),s84=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(a84).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),e84=h1.object({type:h1.literal("text")}),$64=h1.object({type:h1.literal("json_object")}),Z64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),G64=h1.union([e84,$64,Z64]),X64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(s84),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(o84).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:G64.optional(),user:h1.string().optional()});eV$=class eV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};$C$=new b1;$C$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(zK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(zK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(zK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=X64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(zK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=Y64(Q.model);if(!J)return $.json(zK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(zK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(zK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=J64(Q.messages),H=Q.tools?W64(Q.tools):void 0,N=K64(Q.response_format),B=U64(),D=Math.floor(Date.now()/1000);if(Q.stream)return tQ($,async(E)=>{let L=aV$(w,F,H,Q,N,$.req.raw.signal);try{let z=bQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=r84)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:sV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=aV$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:sV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(zK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(zK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(zK(Y.message,"server_error"),500)}});ZC$=$C$});var YC$;var XC$=O(()=>{YC$={name:"decocms",version:"4.74.13",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function H64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??F64}}var QC$,F64="https://ph.studio.decocms.com",JC$;var WC$=O(()=>{F6();sb0();mN();BG();F8();$01();XC$();QC$=new b1;QC$.get("/",($)=>{let Z={version:YC$.version,theme:Lb1(),...pO().logo&&{logo:pO().logo},...yQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:MI$(),posthog:H64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!yQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});JC$=QC$});function gL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function UC$($){return(gL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function wC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(gL0($))}&sz=${Z}`}function KC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function FC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?KC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):KC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as N64}from"path";function fw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function B64($){let Z=gL0($),G=UC$(Z),X=wC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=FC$({brand:G,domain:Z});return[`<title>${fw(J)}</title>`,`<meta name="description" content="${fw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${fw(J)}" />`,`<meta property="og:description" content="${fw(W)}" />`,`<meta property="og:url" content="${fw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${fw(J)}" />`,`<meta name="twitter:description" content="${fw(W)}" />`,`<link rel="canonical" href="${fw(Q)}" />`,`<link rel="icon" href="${fw(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var m$1,OC,R84,bV$,l$1="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",M84,d$,u$,Z6,_V$=24,DC,_J;var cV$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(m$1||(m$1={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,X0){var W0,b0=0;for(W0=0;W0<X0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,X0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(X0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!X0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(X0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(X0-=64,l+=64,c)r+=64}if(X0>0){S(P0,m0,b0,V);for(j0=0;j0<X0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,X0){return i(h,l,null,0,c,r,X0)}function v(h,l,c,r,X0){var W0=new Uint8Array(32);return R(W0,r,X0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,X0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,X0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,X0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(X0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<X0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,X0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,X0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,X0,W0),P(h,l,b0,0)}function Y0(h,l,c,r,X0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,X0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,X0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,X0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,X0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,X0=~(c-1);for(var W0=0;W0<16;W0++)r=X0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,X0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),X0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-X0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function w0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,X0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(X0=0;X0<16;X0++)W0[r+X0]+=l[r]*c[X0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){N0(h,l,l)}function G0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),X0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,w0(X0,c);for(b0=0;b0<16;b0++)P0[b0]=X0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,X0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)X0[b0+16]=m0[b0],X0[b0+32]=S0[b0],X0[b0+48]=P0[b0],X0[b0+64]=j0[b0];var Z1=X0.subarray(32),U1=X0.subarray(16);return G0(Z1,Z1),N0(U1,U1,Z1),d0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=Y0,g=a;function H0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,X0,W0){var b0=new Uint8Array(32);return R0(b0,X0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,X0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&X0,l+=W0>>>16,c+=b0&X0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&X0|r<<16,h&X0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,X0=32-l;if(l<32)c=h.hi>>>l|h.lo<<X0,r=h.lo>>>l|h.hi<<X0;else if(l<64)c=h.lo>>>l|h.hi<<X0,r=h.hi>>>l|h.lo<<X0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,X0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,X0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,X0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,X0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],X0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)X0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),X0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),X0[3]=e0(X0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=X0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var dG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function q8(h,l,c){var r=new Uint8Array(64),X0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=dG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)X0[W0]=0;for(W0=0;W0<c;W0++)X0[W0]=l[b0-c+W0];X0[c]=128,c=256-128*(c<112?1:0),X0[c-9]=0,z(X0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,X0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(X0,h[3],l[3]),N0(X0,X0,w),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,X0),C0(P0,W0,X0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),X0=G();G0(X0,l[2]),N0(c,l[0],X0),N0(r,l[1],X0),d0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,X0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(X0=255;X0>=0;--X0)r=c[X0/8|0]>>(X0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),Q9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),X0=[G(),G(),G(),G()],W0;if(!c)X(l,32);q8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(X0,r),q5(h,X0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var M8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function k8(h,l){var c,r,X0,W0;for(r=63;r>=32;--r){c=0;for(X0=r-32,W0=r-12;X0<W0;++X0)l[X0]+=c-16*l[r]*M8[X0-(r-32)],c=Math.floor((l[X0]+128)/256),l[X0]-=c*256;l[X0]+=c,l[r]=0}c=0;for(X0=0;X0<32;X0++)l[X0]+=c-(l[31]>>4)*M8[X0],c=l[X0]>>8,l[X0]&=255;for(X0=0;X0<32;X0++)l[X0]-=c*M8[X0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;k8(h,l)}function f$(h,l,c,r){var X0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];q8(X0,r,32),X0[0]&=248,X0[31]&=127,X0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=X0[32+m0];q8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];q8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*X0[P0];return k8(h.subarray(32),S0),y0}function w8(h,l){var c=G(),r=G(),X0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],l),Q0(X0,h[1]),N0(W0,X0,U),T0(X0,X0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,X0),N0(c,c,W0),V0(c,c),N0(c,c,X0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,X0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,X0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var X0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(w8(P0,r))return-1;for(X0=0;X0<c;X0++)h[X0]=l[X0];for(X0=0;X0<32;X0++)h[X0+32]=r[X0];if(q8(b0,h,c),G6(b0),Q9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(X0=0;X0<c;X0++)h[X0]=0;return-1}for(X0=0;X0<c;X0++)h[X0]=l[X0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,_1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:Y0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:q8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:_1,crypto_hash_BYTES:Y8,gf:G,D:U,L:M8,pack25519:d0,unpack25519:w0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:k8,scalarmult:Q9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return Y0(X0,r,r.length,l,c),X0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),X0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(X0,r,r.length,l,c)!==0)return null;return X0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox(h,l,X0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var X0=$.box.before(c,r);return $.secretbox.open(h,l,X0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var X0=new Uint8Array(r);for(var W0=0;W0<X0.length;W0++)X0[W0]=c[W0];return X0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var X0=0;X0<r.length;X0++)r[X0]=c[X0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),X0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(X0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==_1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=_1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return q8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var X0,W0=new Uint8Array(r);for(X0=0;X0<r;X0+=l)h.getRandomValues(W0.subarray(X0,X0+Math.min(r-X0,l)));for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var X0,W0=h.randomBytes(r);for(X0=0;X0<r;X0++)c[X0]=W0[X0];y$(W0)})}()})(typeof Vg<"u"&&q5Z?q5Z:globalThis.nacl=globalThis.nacl||{});OC=typeof Vg<"u"&&q5Z?q5Z:globalThis.nacl,R84={fromSeed:OC.sign.keyPair.fromSeed,sign:OC.sign.detached,verify:OC.sign.detached.verify,randomBytes:OC.randomBytes,scalarBaseMultiply:OC.scalarMult.base,seal:OC.box,open:OC.box.open};M84=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));DC=[120,107,118,49];q84(R84);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function r$1($){try{$?.clear?.()}catch{}}async function uV$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=gV$($),W=p$1(J.sub),K=t$1(new TextEncoder().encode(Z)),U=fV$();try{let w=await yV$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(hV$(w,U))}finally{r$1(U),r$1(K),r$1(W)}}var dV$=O(()=>{cV$()});function g84($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function lV$(){let $=new b1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(o$1(),503);if(!Y.natsPublicUrl)return Z.json(o$1(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(o$1(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await uV$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:SV$(Q),userId:X,allowedConnectionTypes:g84(Y.natsPublicUrl)})}return Z.json(VV$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var o$1=()=>({error:"link session unavailable"});var mV$=O(()=>{F6();F8();CV$();dV$()});async function u84($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function d84($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new qN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function l84($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},h84),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function m84($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<iV$){await O8(nV$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<iV$){await O8(nV$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var h84=90000,c84=15000,pV$=()=>{let $=new b1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=eU({orgId:Y.id,virtualMcpId:Q,branch:J}),U=sy({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await _Y(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&iW(F5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return tQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),tQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},c84);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await u84(F,U)){await d84({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await l84({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await m84({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},iV$=60000,nV$=500;var tV$=O(()=>{F6();BC();MY();l5();RE0();on();EV();i90();RX()});function n84($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function p84($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(i84)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var i84=1e4,t84=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},rV$=()=>{let $=new b1;return $.use("*",t84),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await p84(X,Y);return Z.json({apps:n84(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var oV$=O(()=>{F6();F8()});import{z as h1}from"zod";function zK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function Y64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function Q64($,Z,G){try{return JSON.parse($)}catch{throw new eV$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function J64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:Q64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function W64($){let Z=$.map((G)=>{let X=G.function.parameters?BY(G.function.parameters):BY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function K64($){if(!$)return;return{openai:{response_format:$}}}function U64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function aV$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function sV$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var r84=256,o84,a84,s84,e84,$64,Z64,G64,X64,eV$,$C$,ZC$;var GC$=O(()=>{L6();F6();BC();o84=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),a84=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),s84=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(a84).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),e84=h1.object({type:h1.literal("text")}),$64=h1.object({type:h1.literal("json_object")}),Z64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),G64=h1.union([e84,$64,Z64]),X64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(s84),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(o84).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:G64.optional(),user:h1.string().optional()});eV$=class eV$ extends Error{constructor($){super($);this.name="MessageConversionError"}};$C$=new b1;$C$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(zK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(zK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(zK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=X64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(zK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=Y64(Q.model);if(!J)return $.json(zK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(zK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(zK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=J64(Q.messages),H=Q.tools?W64(Q.tools):void 0,N=K64(Q.response_format),B=U64(),D=Math.floor(Date.now()/1000);if(Q.stream)return tQ($,async(E)=>{let L=aV$(w,F,H,Q,N,$.req.raw.signal);try{let z=bQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=r84)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:sV$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=aV$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:sV$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(zK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(zK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(zK(Y.message,"server_error"),500)}});ZC$=$C$});var YC$;var XC$=O(()=>{YC$={name:"decocms",version:"4.74.14",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function H64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??F64}}var QC$,F64="https://ph.studio.decocms.com",JC$;var WC$=O(()=>{F6();sb0();mN();BG();F8();$01();XC$();QC$=new b1;QC$.get("/",($)=>{let Z={version:YC$.version,theme:Lb1(),...pO().logo&&{logo:pO().logo},...yQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:MI$(),posthog:H64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!yQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});JC$=QC$});function gL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function UC$($){return(gL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function wC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(gL0($))}&sz=${Z}`}function KC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function FC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?KC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):KC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as N64}from"path";function fw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function B64($){let Z=gL0($),G=UC$(Z),X=wC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=FC$({brand:G,domain:Z});return[`<title>${fw(J)}</title>`,`<meta name="description" content="${fw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${fw(J)}" />`,`<meta property="og:description" content="${fw(W)}" />`,`<meta property="og:url" content="${fw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${fw(J)}" />`,`<meta name="twitter:description" content="${fw(W)}" />`,`<link rel="canonical" href="${fw(Q)}" />`,`<link rel="icon" href="${fw(X)}" sizes="any" />`].join(`
     `)}function O64($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function HC$($){let Z=new b1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?N64($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=B64(X);return G.html(O64(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var NC$=O(()=>{F6();F8()});import{z as Q1}from"zod";var LC,D64,E64,L64,z64,BC$;var OC$=O(()=>{LC=Q1.enum(["good","bad","neutral"]),D64=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:LC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),E64=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(D64)),L64={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},z64=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:LC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:LC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:LC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:LC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(E64).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:LC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:LC.optional()})).min(1)})]),BC$=Q1.object({...L64,template:z64})});function DC$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=BC$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var EC$=O(()=>{OC$()});function Kr($,Z){return fetch(`${WD({})}${$}`,Z)}async function j64($,Z){let G=await Kr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=DC$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var P64,zC,LC$;var zC$=O(()=>{F6();wJ();Xf();EC$();P64=new Set(["complete","errored","terminated","unknown"]),zC=new b1;zC.use("*",async($,Z)=>{let G=await d8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});zC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await j64(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});zC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Kr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${KD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});zC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Kr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${KD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:P64.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});zC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Kr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});zC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Kr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});LC$=zC});function jC$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var PC$,A64,T64,AC$;var TC$=O(()=>{F6();f3();sv();Vb();PC$=new b1,A64=["range","if-none-match","if-modified-since"],T64=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];PC$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Ug($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Qp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&b3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,U,w]=K,F=Buffer.from(w,"base64"),H=new Headers({"Content-Type":U,"Cache-Control":"private, max-age=86400"});return jC$(H,U),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of A64){let U=$.req.header(K);if(U)Q.set(K,U)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of T64){let U=J.headers.get(K);if(U)W.set(K,U)}return W.set("Cache-Control","private, max-age=86400"),jC$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});AC$=PC$});var Ur=_((jC)=>{var I64=jC&&jC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),R64=jC&&jC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))I64(Z,$,G)};Object.defineProperty(jC,"__esModule",{value:!0});R64(tX(),jC)});var qC$=_((IC$)=>{Object.defineProperty(IC$,"__esModule",{value:!0});IC$.version=void 0;IC$.version="3.4.0"});var SC$=_((jK)=>{var q64=jK&&jK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(jK,"__esModule",{value:!0});jK.NodeTransport=jK.VERSION=void 0;jK.nodeResolveHost=_64;var n4=Ur(),M64=c0("net"),a$1=c0("tls"),k64=c0("path"),MC$=c0("fs"),S64=q64(c0("dns")),V64=qC$();jK.VERSION=V64.version;var C64="nats.js";class kC${socket;version;lang;yields=[];signal=(0,n4.deferred)();closedNotification=(0,n4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=C64,this.version=jK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,n4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw n4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new n4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new n4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,n4.deferred)(),G,X=(0,M64.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,n4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=n4.DataBuffer.concat(...this.yields),Y=(0,n4.extractProtocolMessage)(X);if(Y!=="")try{let Q=n4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,n4.deferred)();try{if($=(0,k64.resolve)($),!(0,MC$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,MC$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,n4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,n4.deferred)();try{let Y=(0,a$1.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,n4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,n4.deferred)();try{let X=(0,a$1.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,n4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,n4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof a$1.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,n4.render)($)}`);let Z=(0,n4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}jK.NodeTransport=kC$;function _64($){let Z=(0,n4.deferred)();return S64.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var fC$=_((bC$)=>{Object.defineProperty(bC$,"__esModule",{value:!0});bC$.connect=b64;var VC$=SC$(),CC$=Ur(),_C$=Ur();function b64($={}){if((0,_C$.hasWsProtocol)($))return Promise.reject(_C$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,CC$.setTransportFactory)({factory:()=>{return new VC$.NodeTransport},dnsResolveFn:VC$.nodeResolveHost}),CC$.NatsConnectionImpl.connect($)}});var xC$=_((xw)=>{var x64=xw&&xw.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),v64=xw&&xw.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))x64(Z,$,G)};Object.defineProperty(xw,"__esModule",{value:!0});xw.connect=void 0;var y64=fC$();Object.defineProperty(xw,"connect",{enumerable:!0,get:function(){return y64.connect}});v64(Ur(),xw)});function hC$($){let Z=$?.connectFn??u64,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function U(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function w(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,U()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:c64,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,w(G),U();return}catch{B++;let D=lX(h64,g64,B-1,2,0.5);await O8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?vC$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=gC$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function u64($){return yC$.connect($)}var vC$,yC$,gC$,g64=100,h64=3000,c64=3000;var cC$=O(()=>{l5();vC$=k(Yh(),1),yC$=k(xC$(),1),gC$=k(gB(),1)});function Cg($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function s$1($,Z){return`${$}.${Z}`}class e$1{cache;constructor($){this.cache=Cg({ttlMs:$?.ttlMs??d64,maxSize:$?.maxSize??l64})}async get($,Z){return this.cache.get(s$1($,Z))??null}async set($,Z,G){this.cache.set(s$1($,Z),G)}async invalidate($,Z){this.cache.delete(s$1($,Z))}teardown(){this.cache.clear()}}var d64=600000,l64=5000;var uC$=()=>{};function hL0($,Z){return`${$}:${Z}`}function $81($){let Z=Cg({ttlMs:$?.ttlMs??m64,maxSize:$?.maxSize??i64}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,U){let w=G?.();if(!w)return;try{w.publish(dC$,Y.encode(JSON.stringify({organizationId:K,keyId:U,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,U){return Z.get(hL0(K,U))},set(K,U,w){Z.set(hL0(K,U),w)},invalidate(K,U){Z.delete(hL0(K,U)),W(K,U)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(dC$),(async()=>{for await(let U of J)try{let w=JSON.parse(Q.decode(U.data));if(w.originId===X)continue;Z.delete(hL0(w.organizationId,w.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var dC$="studio.ai-provider-keys.invalidate",m64=30000,i64=5000;var lC$=()=>{};class Z81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var mC$=($)=>{let Z;return()=>Z??=$()},G81,X81;var iC$=O(()=>{B5();G81=mC$(()=>D8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),X81=mC$(()=>D8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function s64(){return{name:rU,subjects:[`${Xm0}.>`],storage:bJ.StorageType.File,max_age:t64,max_bytes:o64,max_msgs_per_subject:a64,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:r64,num_replicas:1}}class tC${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function nC$($){let Z=pC$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function G44($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,p64().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class Y81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=s64();try{await Z.streams.info(rU),await Z.streams.update(rU,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(rU),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=G44(Z,X),J=!1,W=()=>{if(J)return;J=!0;let U=J4$(Z);Y.publish(U.subject,U.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(U)=>{let w=performance.now(),F=Qm0(U,{runId:Z}),H=performance.now()-w;if(G81().record(H),X81().add(1,{"org.id":X??"unknown"}),Z44?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?nC$(N.headers):void 0)};return(async()=>{let U=$.getReader(),w=0,F=0,H;try{while(!0){let{done:N,value:B}=await U.read();if(N)break;if(K(B),F++,++w>=64)w=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(U.releaseLock(),W(),$44)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Qm0(Z,{runId:$,dedup:G});if(G81().record(performance.now()-Y),X81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:nC$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=Q4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=EN($),W;try{W=await(await X.consumers.get(rU,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let w=w90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(W90()).pipeThrough(K90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{w.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),w.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await w.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(rU,{filter:EN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,pC$,n64=($)=>{let Z;return()=>Z??=$()},p64,t64=86400000000000,r64=120000000000,o64=4294967296,a64=500000,e64,$44,Z44;var rC$=O(()=>{Wm0();F90();Jm0();B5();iC$();bJ=k(gB(),1),pC$=k(Yh(),1),p64=n64(()=>D8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));e64=process.env.STREAM_ENCODE_TRACE==="1",$44=process.env.DECOPILOT_STREAM_TRACE==="1";Z44=e64?new tC$:null});import{z as X8}from"zod";var oC$,aC$,PK,Q81,sC$,eC$,$_$,Z_$,X44,G_$,X_$,Y_$,Q_$,J_$,Y44,W_$,s9Z,Q44,J44=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},K_$=($)=>{return new TextEncoder().encode(JSON.stringify($))},U_$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?Q44[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${J44(Y.error)}`);return Y.data};var w_$=O(()=>{oC$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),aC$=X8.array(X8.tuple([X8.string(),X8.string()])),PK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),Q81=X8.string().min(1),sC$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:PK,method:X8.string().min(1),url:X8.string().min(1),headers:aC$,replySubject:Q81,bodySubject:Q81.optional(),abortSubject:Q81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),eC$=X8.object({type:X8.literal("request.chunk"),requestId:PK,seq:X8.number().int().nonnegative(),data:oC$}),$_$=X8.object({type:X8.literal("request.end"),requestId:PK,seq:X8.number().int().nonnegative()}),Z_$=X8.object({type:X8.literal("request.error"),requestId:PK,code:X8.string().min(1),message:X8.string()}),X44=X8.union([eC$,$_$,Z_$]),G_$=X8.object({type:X8.literal("response.ack"),requestId:PK}),X_$=X8.object({type:X8.literal("response.start"),requestId:PK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:aC$}),Y_$=X8.object({type:X8.literal("response.chunk"),requestId:PK,seq:X8.number().int().nonnegative(),data:oC$}),Q_$=X8.object({type:X8.literal("response.end"),requestId:PK,seq:X8.number().int().nonnegative()}),J_$=X8.object({type:X8.literal("response.error"),requestId:PK,code:X8.string().min(1),message:X8.string()}),Y44=X8.union([G_$,X_$,Y_$,Q_$,J_$]),W_$=X8.object({type:X8.literal("abort"),requestId:PK,reason:X8.string().optional()}),s9Z=X8.union([sC$,X44,Y44,W_$]),Q44={"request.start":sC$,"request.chunk":eC$,"request.end":$_$,"request.error":Z_$,"response.ack":G_$,"response.start":X_$,"response.chunk":Y_$,"response.end":Q_$,"response.error":J_$,abort:W_$}});var W44=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},K44=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},U44=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},w44=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},F_$=($)=>{return W44(btoa(U44($)))},H_$=($)=>{return w44(atob(K44($)))},F44;var N_$=O(()=>{F44=class F44{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*P44($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class S44{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var H44=30000,N44=1000,B44=65536,oQ,O44=($)=>{return"connection"in $},D44=($)=>{let Z=O44($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??H44,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??N44,maxChunkBytes:Z.maxChunkBytes??B44,diagnostics:Z.diagnostics}},B_$=($)=>{return Array.from($.entries())},E44=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},L44=($,Z,G)=>{if(E44(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return B_$(G.headers);return B_$(G.headers)},O_$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},z44=()=>{return crypto.randomUUID().replaceAll("-","")},j44=($)=>{try{$?.unsubscribe()}catch{}},A44=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},T44=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},PB=($,Z,G)=>{$.publish(Z,K_$(G))},I44=($)=>{return $.type.startsWith("response.")},J81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},R44=($)=>{if($==="idle")return new oQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new oQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},D_$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((U,w)=>{if(X.aborted){w(X.reason);return}let F=()=>w(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((U,w)=>{Q=setTimeout(()=>{w(R44(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=U_$(W.value.data);if(!I44(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},q44=async($)=>{let Z=!1;while(!0){let G=await D_$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new oQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new oQ(G.value.code,G.value.message);throw new oQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},M44=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){PB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of P44(J,$.maxChunkBytes)){if(X)return;PB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:F_$(W)}),G++}}}catch(Q){if(X)return;PB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},k44=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await D_$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new oQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(H_$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new oQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){PB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},AB=($)=>{let Z=D44($);return A44(Z.maxChunkBytes),async(G,X)=>{let Y=MV$(G),Q=new Request(G,X),J=z44(),W=kV$(Y.hostname,J),K=new AbortController,U=new AbortController,w=!1,F,H,N,B,D=!1,E=(P=new oQ("tunnel_closed","tunnel request closed"))=>{if(w)return;if(w=!0,j44(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(U.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new oQ("tunnel_aborted",J81(Q.signal));PB(Z.connection,W.abort,{type:"abort",requestId:J,reason:J81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new oQ("tunnel_aborted",J81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new oQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);PB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:L44(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};PB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)PB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?M44({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:U.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await q44({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(T44(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:O_$(P.headers)});return new Response(k44({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:O_$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var E_$=O(()=>{w_$();N_$();fL0();oQ=class oQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var cL0=O(()=>{E_$()});function L_$($){let Z=$.createFetch??V44,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return W81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return W81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return W81}}}var W81,V44=($,Z)=>AB({connection:$,firstFrameTimeoutMs:Z});var z_$=O(()=>{cL0();Jr();W81={online:!1,capabilities:[]}});async function*C44($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function j_$($){let Z=$.createFetch??((G)=>AB({connection:G,idleTimeoutMs:_44}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),U={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)U.body=Y.body;let w=await K(`tunnel://${W}${Y.path}`,U);yield*C44(w)}}var _44=45000;var P_$=O(()=>{cL0();Jr()});import{z as fJ}from"zod";function A_$($){return JSON.stringify($)}var MZZ;var T_$=O(()=>{MZZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function I_$($){let Z=$.createFetch??((G)=>AB({connection:G,idleTimeoutMs:b44}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function R_$($){let Z=$.createFetch??AB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:A_$(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var b44=45000;var q_$=O(()=>{cL0();T_$();Jr()});function uL0($,Z,G,X){if(!X)return!1;return $.emit(Z,_3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var M_$=O(()=>{f8()});class K81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as f44,rm as dL0}from"fs/promises";import{join as lL0}from"path";async function mL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-x44),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await PC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await k_$($,Y,Z);else if(!Y.startsWith(".")){let Q=lL0($,Y),J=await PC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await k_$(Q,K,Z)}if((await PC(Q)).length===0)await dL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function k_$($,Z,G){let X=0,Y=lL0($,Z),Q=await PC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=lL0(Y,W),U=await PC(K);for(let F of U){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=lL0(K,F);await dL0(N,{recursive:!0,force:!0}),X++}}if((await PC(K)).length===0)await dL0(K,{recursive:!0,force:!0})}if((await PC(Y)).length===0)await dL0(Y,{recursive:!0,force:!0});return X}async function PC($){try{return(await f44($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var x44=30;var U81=()=>{};import{DBOS as w81,SchedulerMode as v44}from"@dbos-inc/dbos-sdk";async function g44(){let $=[eQ(),TC(),RK()],Z=0;for(let G of $)try{Z+=await mL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function h44($,Z){await w81.runStep(()=>g44(),{name:"monitoringRetention"})}function V_$(){if(S_$)return;S_$=!0;let $=w81.registerWorkflow(h44,{name:"monitoringRetentionWorkflow"});w81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:y44,mode:v44.ExactlyOncePerIntervalWhenActive})}var y44="23 4 * * *",S_$=!1;var C_$=O(()=>{mX();U81()});function __$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await ZN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Iu0($.db,Z,X.role);return Y.boundAuth=Tu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new fD(G,void 0,Y.boundAuth,X.role,"self"),i40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var b_$=O(()=>{xD();Mi()});function c44(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function d44(){for(let $ of u44)$()}function f_$($){let Z=[...F81.logs,$];F81={...F81,logs:Z.length>500?Z.slice(-500):Z},d44()}function H81(){return l44}var F81,u44,l44=!1;var N81=O(()=>{F81=c44(),u44=new Set});import{EventEmitter as m44}from"events";var B81;var x_$=O(()=>{N81();B81=new m44;B81.on("request",($)=>{f_$($)})});function v_$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=_g(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>_g(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${$5.tool}${N}${$5.dim}(${E})${$5.reset}`}else if(H.method)Q=`${$5.dim}${_g(H.method)}${$5.reset}`}}catch{}}let W=_g(Y);if(Y.startsWith("/mcp/conn_")){let w=Y.split("/")[2]??"";W=`/mcp/${$5.mcp}${_g(w.slice(0,12))}\u2026${$5.reset}`}else if(Y==="/mcp")W=`${$5.mcp}/mcp${$5.reset}`;else if(Y==="/mcp/registry")W=`${$5.mcp}/mcp/registry${$5.reset}`;let K=n44(X),U=J?"\u25C0":"\u2190";if(!H81())console.log(`${$5.dim}${U}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let w=Date.now()-G,F=$.res.status,H=i44(F),N=w<1000?`${w}ms`:`${(w/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!H81())console.log(`${$5.dim}${B}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${$5.reset} ${$5.duration}${N}${$5.reset}`);B81.emit("request",{method:X,path:_g(Y),status:F,duration:w,timestamp:new Date})}}}var $5,i44=($)=>{if($>=500)return $5.serverError;if($>=400)return $5.clientError;if($>=300)return $5.redirect;return $5.ok},n44=($)=>{return $5[$]||$5.reset},_g=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var y_$=O(()=>{N81();x_$();$5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as u_$}from"crypto";import{mkdir as p44,readdir as t44,rm as g_$,stat as d_$}from"fs/promises";import{join as D81,relative as r44}from"path";import{z as T$}from"zod";function m_$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return D81(o44,Z)}function i_$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function O81($,Z){let G=m_$($),X=i_$(Z);return D81(G,X)}function a44($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return u_$("sha256",Y).update(Q).digest("hex")}function c_$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=a44(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${i_$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function n_$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${u_$("md5","etag").update(X).digest("hex")}"`}async function p_$($,Z,G,X,Y){try{let Q=await t44($,{withFileTypes:!0});for(let J of Q){let W=D81($,J.name),U=r44(Z,W).replace(/\\/g,"/");if(G&&!U.startsWith(G))continue;if(J.isDirectory())if(X){let w=U+"/";if(!G||w.startsWith(G)){if(!(G?U.slice(G.length):U).includes("/"))Y.commonPrefixes.add(w)}}else await p_$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let w=U.slice(G.length);if(w.includes(X)){let F=w.indexOf(X),H=G+w.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let w=await d_$(W);Y.objects.push({key:U,size:w.size,lastModified:w.mtime.toISOString(),etag:n_$(W,w.mtime,w.size)})}catch{}}}}catch{}}function t_$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,U=Q.continuationToken,w=m_$(X);await p44(w,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await p_$(w,w,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(U){if(H=F.objects.findIndex((E)=>E.key>U),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=O81(X,Q.key),W=await d_$(J);return{contentType:U11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:n_$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??h_$;return{url:c_$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??h_$;return{url:c_$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=O81(X,Q.key);try{return await g_$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let U=O81(X,K);try{await g_$(U),J.push(K)}catch(w){W.push({key:K,message:w instanceof Error?w.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function E81($,Z,G){let X=t_$(Z,G),Y=new NU({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:z5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(U)=>{try{let w=await J.handler(U);return{content:[{type:"text",text:JSON.stringify(w)}],structuredContent:w}}catch(w){return{content:[{type:"text",text:`Error: ${w.message}`}],isError:!0}}})}let Q=new vY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),sW(Y,Q,$,"mcp:dev-assets")}async function r_$($,Z,G,X){let Q=t_$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var o44="./data/assets",h_$=3600,l_$,o_$;var a_$=O(()=>{F8();Up();F6();xu();Gy();jG();$L0();l_$=new b1;l_$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return E81($.req.raw,Z,X)});o_$=l_$});var s_$={};X6(s_$,{mountDevRoutes:()=>s44});function s44($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return E81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),U=await r_$(W,K,Y,J);if(U.isError)return X.json(U.content,500);return X.json(U.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",o_$);let G=new b1;G.use("*",pQ({mountPath:"/api/dev-assets"})),G.route("/",eE0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var e_$=O(()=>{F6();G11();$L0();a_$()});var $b$=O(()=>{nu0();pu0();OE()});var iL0=O(()=>{$b$()});var Gb$={};X6(Gb$,{streamAgent:()=>Zb$,createDecopilotClient:()=>$54});async function e44($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (L6(),el0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function Zb$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (L6(),el0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,U=K?.id,w={messages:X.messages,...U?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(w),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let D=JSON.parse(N);if(D?.error)B=D.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await e44(F.body);return Q({stream:H})}function $54($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return Zb$(Y,X,W,Q,J)}}}import{z as uX}from"zod";function Xb$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=Z54.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:uX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:uX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var Z54,I7Z,G54=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},z81=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},nL0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},X54=($,Z,G)=>{let X=nL0($,Z,G);return new Proxy(Zv.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},Y54=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => Gb$);return J(X,Z.token,$,Y,Q)}}},L81=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>L81(G,Z));if(typeof $==="object"){if(G54($))return Y54($,Z);if(z81($))return X54($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=L81(Y,Z);return G}return $},Yb$=($)=>{return L81($.state,$)};var bg=O(()=>{iL0();Z54=new Map;I7Z=uX.object({id:uX.string(),title:uX.string(),capabilities:uX.object({vision:uX.boolean().optional(),text:uX.boolean().optional(),tools:uX.boolean().optional(),reasoning:uX.boolean().optional()}).passthrough().optional(),provider:uX.string().optional().nullable(),limits:uX.object({contextWindow:uX.number().optional(),maxOutputTokens:uX.number().optional()}).passthrough().optional()})});var Q54,Qb$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},J54=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=Qb$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},Jb$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=Qb$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??Q54;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},Wb$=($,Z,G)=>{let X=new Headers($.headers);return J54(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var Kb$=O(()=>{Q54=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function Ub$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function W54($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function wb$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function Fb$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function Hb$($){return{handleProtectedResourceMetadata:(U)=>{let w=AK(new URL(U.url)),F=`${w.origin}/mcp`;return Response.json({resource:F,authorization_servers:[w.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(U)=>{let F=AK(new URL(U.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(U)=>{let w=AK(new URL(U.url)),F=w.searchParams.get("redirect_uri"),H=w.searchParams.get("response_type"),N=w.searchParams.get("state"),B=w.searchParams.get("code_challenge"),D=w.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let E=AK(new URL(`${w.origin}/oauth/callback`)),L=E.toString(),j=wb$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:D??void 0,oauthCallbackUri:L});E.searchParams.set("state",j);let P=$.authorizationUrl(E.toString());return Response.redirect(P,302)},handleOAuthCallback:async(U)=>{let w=AK(new URL(U.url)),F=w.searchParams.get("code"),H=w.searchParams.get("state"),N=w.searchParams.get("error"),B=H?Fb$(H):null;if(N){let D=w.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let E=AK(new URL(B.redirectUri));if(E.searchParams.set("error",N),E.searchParams.set("error_description",D),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}return Response.json({error:N,error_description:D},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let D=B.oauthCallbackUri??AK(new URL(`${w.origin}/oauth/callback`)).toString(),E={code:F,redirect_uri:D},L=await $.exchangeCode(E),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=wb$(z),P=AK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(D){console.error("OAuth callback error:",D);let E=AK(new URL(B.redirectUri));if(E.searchParams.set("error","server_error"),E.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)E.searchParams.set("state",B.clientState);return Response.redirect(E.toString(),302)}},handleToken:async(U)=>{try{let w=U.headers.get("content-type")??"",F;if(w.includes("application/x-www-form-urlencoded")){let z=await U.formData();F=Object.fromEntries(z.entries())}else{let z=await U.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:D}=F;if(B==="refresh_token"){if(typeof D!=="string"||!D)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(D)}catch(P){if(P instanceof j81)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let E=Fb$(H);if(!E||!E.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(E.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(E.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==E.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:E.accessToken,token_type:E.tokenType};if(E.refreshToken)L.refresh_token=E.refreshToken;if(E.expiresIn!==void 0)L.expires_in=E.expiresIn;if(E.scope)L.scope=E.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(w){return console.error("Token exchange error:",w),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(U)=>{try{let w=await U.json();if(!w.redirect_uris||w.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let D of w.redirect_uris)if(!W54(D))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${D}`},{status:400});let F=Ub$(32),H=w.token_endpoint_auth_method!=="none"?Ub$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:w.client_name,redirect_uris:w.redirect_uris,grant_types:w.grant_types??["authorization_code"],response_types:w.response_types??["code"],token_endpoint_auth_method:w.token_endpoint_auth_method??"client_secret_post",scope:w.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(w){return console.error("Client registration error:",w),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(U)=>{let H=`Bearer resource_metadata="${`${AK(new URL(U.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(U)=>U.headers.has("Authorization")}}var j81,AK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var P81=O(()=>{j81=class j81 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as K54}from"async_hooks";var Nb$,wr;var A81=O(()=>{Nb$=new K54,wr={getStore:()=>{return Nb$.getStore()},run:($,Z,...G)=>Nb$.run($,Z,...G)}});var Ob$="SELF",tL0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},Db$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},Bb$="::",Eb$=($)=>{let Z=$.indexOf(Bb$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+Bb$.length);return[G,X]},U54=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},Lb$=($)=>{if(tL0($))return[];return Object.keys($)},w54=($,Z)=>{if(tL0($))return $.events;let G=$[Z];if(!G)return[];if(Db$(G))return G.events;return Object.keys(G)},pL0=($,Z,G)=>{if($===Ob$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!z81(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},F54=($,Z,G)=>{let X=Z;if(tL0($)){let Q=[];for(let J of $.events){let W=Eb$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,U]=W,w=pL0(K,X,G);if(!w)continue;Q.push({eventType:U,publisher:w})}return Q}let Y=[];for(let Q of Lb$($)){let J=pL0(Q,X,G);if(!J)continue;let W=w54($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},H54=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},N54=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},B54=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},O54=async($,Z,G,X,Y)=>{let Q=X;if(tL0($)){let w=new Set;for(let H of $.events){let N=Eb$(H);if(!N)continue;let[B,D]=N,E=pL0(B,Q,Y);if(!E)continue;w.add(`${E}:${D}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return w.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let w of Lb$($)){let F=pL0(w,Q,Y);if(F)J.set(F,w)}let W=H54(Z),K=[];for(let[w,F]of W){let H=J.get(w);if(!H)continue;let N=$[H];if(!N)continue;if(Db$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(E){let L={};for(let z of F)L[z.id]={success:!1,error:E instanceof Error?E.message:String(E)};return{results:L}}})());continue}let B=N,D=N54(F);for(let[E,L]of D){let z=B[E];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let U=await Promise.all(K);if(U.length===0)return{success:!0};return B54(U)},zb$;var T81=O(()=>{bg();zb$={subscriptions:F54,execute:O54,parseCron:U54}});function D54($,Z){let G=nL0("self",{meshUrl:$,token:Z});return Zv.forConnection(G)}function E54($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function jb$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=D54($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((w)=>w.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((w)=>({connection_id:w.connectionId,selected_tools:w.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),U=[];for(let w of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:w.name,virtual_mcp_id:K.id,messages:w.messages,models:w.models,tools:w.tools,active:w.active??!0}),H=[];for(let N of w.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(E54(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}U.push({id:F.id,name:w.name,triggers:H})}return{id:K.id,automations:U,automationIds:U.map((w)=>w.id),alreadyExisted:!1}}}var I81=O(()=>{bg();iL0()});import{z as FZ}from"zod";function vw($){return{...$,execute:(Z)=>{let G=Fr(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var Fr=($)=>{let Z=wr.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},Pb$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},L54=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?Xb$(FZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[vw({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:FZ.object({state:Z??FZ.unknown(),scopes:FZ.array(FZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:FZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:FZ.object({baseUrl:FZ.string(),org:FZ.string(),subjectConnectionId:FZ.string(),token:FZ.string()}).optional()}),outputSchema:FZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:U,token:w,connectionId:F}=Pb$(J);await Y(J.runtimeContext.env,{createAgent:jb$(U,w,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[vw({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:E50,outputSchema:L50,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:U}=Pb$(J);return zb$.execute($.handlers,J.context.events,W,K,U)}})]:[],vw({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:FZ.object({}),outputSchema:FZ.object({stateSchema:FZ.unknown(),scopes:FZ.array(FZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},Ab$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(D)=>{if(J(D))return[D];Q();let E=await D(B);if(Array.isArray(E))return E;return[E]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...L54({...$}));let D;if(typeof $.prompts==="function")Q(),D=await $.prompts(N);else D=await W($.prompts,N);let E;if(typeof $.resources==="function")Q(),E=await $.resources(N);else E=await W($.resources,N);let L={tools:B,prompts:D,resources:E};return Z=L,L}catch(B){throw G=null,B}})(),G},U=(N,B)=>{for(let D of B.tools)N.registerTool(D.id,{_meta:D._meta,title:D.title,description:D.description,annotations:D.annotations,inputSchema:D.inputSchema&&"shape"in D.inputSchema?D.inputSchema:FZ.object({}),outputSchema:D.outputSchema&&typeof D.outputSchema==="object"&&"shape"in D.outputSchema?D.outputSchema:void 0},async(E)=>{let L=Fr(),z=await D.execute({context:E,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let D of B.prompts)N.registerPrompt(D.name,{title:D.title,description:D.description,argsSchema:D.argsSchema?D.argsSchema:FZ.object({}).shape},async(E)=>{let L=Fr();return await D.execute({args:E,runtimeContext:L},L)});for(let D of B.resources)N.resource(D.name,D.uri,{description:D.description,mimeType:D.mimeType},async(E)=>{let L=Fr(),z=await D.read({uri:E,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},w=async(N)=>{await $.before?.(N);let{instructions:B,...D}=$.serverInfo??{},E=new NU({...D,name:D.name??"@deco/mcp-api",version:D.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:z5,...B&&{instructions:B}}),L=await K(N);U(E,L);let z="tools/list",j=E.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:E,...L}};return{fetch:async(N,B)=>{let{server:D}=await w(B),E=new vY;await D.connect(E);let L=()=>{try{E.close?.()}catch{}try{D.close?.()}catch{}};try{let z=await E.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let D=wr.getStore();if(!D)throw Error("Missing state, did you forget to call State.bind?");let E=D?.env,{tools:L}=await K(E),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=Fr();return j({context:B,runtimeContext:P},P)}}};var rL0=O(()=>{au0();jG();xu();Gy();bg();T81();A81();I81();T81();I81()});import{decodeJwt as Tb$}from"jose";var z54=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},Ib$=($)=>()=>{return{...$??{}}},j54=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=Tb$(G),U=K.metadata??{};W={authorization:J,state:K.state??U.state??{},token:G,meshUrl:K.meshUrl??U.meshUrl,connectionId:K.connectionId??U.connectionId,organizationId:K.organizationId??U.organizationId,organizationName:K.organizationName??U.organizationName,organizationSlug:K.organizationSlug??U.organizationSlug,ensureAuthenticated:Ib$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=Tb$(G.token),U=K.metadata??{},w=K.appName;W.authorization??=J,W.callerApp=w,W.connectionId??=K.connectionId??U.connectionId,W.organizationId??=K.organizationId??U.organizationId,W.organizationName??=K.organizationName??U.organizationName,W.organizationSlug??=K.organizationSlug??U.organizationSlug,W.ensureAuthenticated=Ib$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=Yb$(W),z54({env:Q,server:Z,url:X}),Q},P54,Rb$=($)=>{let Z=Ab$($),G=$.cors??P54,X=$.oauth,Y=X?Hb$(X):null,Q=async(J,W,K)=>{let U=new URL(J.url);if(Y){if(U.pathname==="/.well-known/oauth-protected-resource"||U.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(U.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(U.pathname==="/authorize")return Y.handleAuthorize(J);if(U.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(U.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((U.pathname==="/register"||U.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(U.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let w=J.clone();try{if((await w.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(U.pathname.startsWith("/mcp/call-tool")){let w=U.pathname.split("/").pop();if(!w)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:w,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return Jb$(J,G??{});let U=j54({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),w=await wr.run({req:J,env:U,ctx:K},async()=>await Q(J,U,K));if(G!==!1)return Wb$(w,J,G??{});return w}}};var qb$=O(()=>{bg();Kb$();P81();P81();A81();rL0();rL0();bg();iL0();P54={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as R81}from"zod";function I54($,Z){let G=vw({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:py,outputSchema:ty,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},U=`${Z}:${JSON.stringify(K)}`,w=Mb$.get(U);if(w)return w;let F=await $.listPublic(Z,K);return Mb$.set(U,F),F}}),X=vw({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:FK,outputSchema:eV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let U=await $.findByIdOrName(Z,K);if(U&&U.is_public)return{item:U};return{item:null}}}),Y=vw({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:FK,outputSchema:R81.object({versions:R81.array(eV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let U=await $.findByIdOrName(Z,K);if(U&&U.is_public)return{versions:[U]};return{versions:[]}}}),Q=vw({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:QE0,outputSchema:JE0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=vw({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:R81.object({}),outputSchema:ry,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function kb$($){let Z=$.db,G=new Xx(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=I54(G,Q.id),W=Rb$({tools:J}),K=new URL(X.req.url),U=X.req.path.indexOf("/registry"),w=U>=0?X.req.path.slice(U+9):"",F=new URL(w||"/",K.origin);K.searchParams.forEach((B,D)=>{F.searchParams.set(D,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var A54=3600000,T54=500,Mb$;var Sb$=O(()=>{qb$();rL0();oy0();Y9();Mb$=Cg({ttlMs:A54,maxSize:T54,updateRecencyOnGet:!0})});import{sql as R54}from"kysely";import{randomUUID as Vb$}from"crypto";import{z as q54}from"zod";async function k54($){let Z=new Date().toISOString(),G=Vb$(),X=G4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:Vb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await R54`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function S54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function V54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",$C).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):_b$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?Cb$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:Cb$,rateLimitWindow:M54,rateLimitMax:_b$}}async function C54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function _54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function bb$($){let{db:Z,db:G}=$,X=new Yx(G),Y=new Qx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await S54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await V54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await C54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let U;try{U=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let w=CP$.safeParse(U);if(!w.success)return Q.json({error:"Invalid publish request payload",details:q54.treeifyError(w.error)},400);let F=await _54(G,W,w.data.data.id,w.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:w.data.data.id,title:w.data.data.title,description:w.data.data.description??null,_meta:w.data.data._meta,server:w.data.data.server,requester_name:w.data.requester?.name??null,requester_email:w.data.requester?.email??null});try{await k54({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:w.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:w.data.data.title,requester_email:w.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var Cb$=!0,M54="hour",_b$=100;var fb$=O(()=>{q4();f8();oy();ay0();sy0();Y9()});var xb$={};X6(xb$,{createPublishRequestHandler:()=>bb$,createPublicMCPHandler:()=>kb$});var vb$=O(()=>{Sb$();fb$()});var Rp0={};X6(Rp0,{watchHandler:()=>ub$,getProxyDispatch:()=>v54,createApp:()=>i54});import{readFileSync as b54}from"fs";import{PrometheusSerializer as f54}from"@opentelemetry/exporter-prometheus";import{DBOS as fg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as c54,oAuthProtectedResourceMetadata as u54}from"better-auth/plugins";async function x54($){let Z=$.connect(),G;try{G=await Promise.race([Z,gb$(yb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),gb$(yb$)]),G.release(),!0}catch{return G.release(!0),!1}}function gb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function v54(){if(!q81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return q81}async function y54($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${T_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function g54($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function i54($={}){let Z=$.database??H6(),G=!1;j9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new e$1,J,W,K,U,w,F=null;if($.disableNats)J=$81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new wp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},w=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:f0}=await H0.read();if(f0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=hC$();let g=O1().natsCredsPath,H0;if(g)try{H0=b54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,H0?{creds:H0}:void 0);let f0=Yg0()?new rx0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let e0=new Pt0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=$81({getConnection:()=>F.getConnection()}),W=new Z81({getConnection:()=>F.getConnection()}),K=new Y81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),U=L_$({getConnection:()=>F.getConnection()}),w=I_$({getConnection:()=>F.getConnection()});let u0=R_$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,z6)=>{u0.publishControlFrame(e1,z6).catch((J4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",J4)})},stop:()=>T1.stop()},WI$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Oi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(xg)await xg();ox0(X),At0(Y);let N={storage:new Hx(Z.db),sseHub:j9},B=new Em0(N),D=new el(Z.db),E=new K81(D);E.start(),W.start((g)=>{b90(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),xg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Di1(),Y.teardown(),ox0(null),At0(null)};let L=new b1;if(L.use("*",nb0({enabled:(g)=>bb(g,"debug")==="1"})),L.use("*",Bz0),L.use("/*",Kb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",v_$());L.use("*",async(g,H0)=>{if(await H0(),hg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await x54(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let f0=H0.postgres.status==="up",e0=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:H0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await Lz0.collect(),f0=h54.serialize(H0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!d54.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let f0=await fg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:f0,max:e0}=f4$();return g.json({pending:f0,active:H0,max:e0})}),L.route("/api/config",JC$),L.route("/api/_reports",LC$),L.route("/report",HC$($.clientDir)),L.route("/api/auth/custom",kI$),L.all("/api/auth/admin/*",CI$),L.all("/api/auth/*",async(g)=>{return await d8.handler(g.req.raw)});let z=ta1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",YC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",YC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",ki),L.route("/",sa1()),L.use("/oauth-proxy/:connectionId/*",YC),L.all("/oauth-proxy/:connectionId/*",hb$);let j=async(g)=>{let f0=await l54()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",YC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await m54()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=JI$({ttlMs:120000}),M=await fa1({db:Z.db,auth:d8,encryption:{key:O1().encryptionKey},observability:{tracer:gw,meter:D8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:U,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});ZN.set(M);let S=new jU(O1().encryptionKey);O21({db:Z.db,baseUrl:j3()});let R=Y60(Z.db),V=new il(Z.db),i=__$({db:Z.db});Dt0({storage:R,studioContextFactory:i}),Cm0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:j9},prepareLinkWorkFn:Tq$,workPublisher:w}),qm0({dispatchRunFn:Pq$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:j9}});let f=new Hx(Z.db),v=new $m(Z.db);E4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await cb$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let f0=await f.completeRunIfNotCompleted(g,H0);if(uL0(j9,H0,g,f0),f0)await Tm0(v,g,H0);return f0},markRunRequiresAction:async(g,H0)=>{let f0=await f.requiresActionIfInProgress(g,H0);return uL0(j9,H0,g,f0),f0},markRunFailed:async(g,H0,f0,e0)=>{let u0=await f.markRunFailed(g,H0,f0,e0);if(uL0(j9,H0,g,u0),u0)await Tm0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await f.messageParts().replaceMessageParts(g,LN(g,H0),[])},persistTitle:(g,H0,f0)=>f.update(g,H0,{title:f0}),onTitleUpdated:async({runId:g,orgId:H0,title:f0})=>{let e0=await f.get(g,H0).catch(()=>null);j9.emit(H0,_3(g,e0?.status??"in_progress",{title:f0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await f.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:f0,usage:e0})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:f0,reason:e0,kind:u0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),rJ$({studioContextFactory:i,systemDatabaseUrl:_x1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),V_$(),D21();let Z0=async(g,H0,f0)=>{let e0=await R.findById(g,H0);if(!e0)throw Error("Automation not found");return zt0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},o=new Fg(R,({automation:g,trigger:H0,contextMessages:f0,idempotencyKey:e0})=>Kp({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:f0},{idempotencyKey:e0})),B0=[eQ(),TC(),RK()];for(let g of B0)mL0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(Hz0(g.req.path))return H0();let f0={measure:async(u0,T1)=>{UQ(g,u0);try{return await T1()}finally{QY(g,u0)}}},e0=await ZN.create(g.req.raw,{timings:f0});e0.automationRunner=Z0,g.set("studioContext",e0);try{await H0()}finally{let u0=e0.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),O8(30000)]).catch((e1)=>console.error("[mesh] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",QC),L.use("/api/:org/v1/*",QC),L.use("/api/:org/files/*",QC),L.use("*",async(g,H0)=>{let f0=g.req.path;if(f0.startsWith("/api/org-sso/")||f0.startsWith("/api/auth/")||f0.startsWith("/api/tools/management")||f0.startsWith("/oauth-proxy/")||f0.startsWith(`${Z01}/`))return H0();let e0=g.get("studioContext");if(!e0?.organization?.id||!e0?.auth?.user?.id)return H0();if(!(await e0.storage.orgSsoConfig.getByOrgId(e0.organization.id))?.enforced)return H0();if(!await e0.storage.orgSsoSessions.isValid(e0.auth.user.id,e0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new b1;J0.use("*",pQ({mountPath:"/api/org-sso"})),J0.route("/",jE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:tb0,grouped:nO()})}),L.use("/mcp/*",async(g,H0)=>{UQ(g,"mcp");try{return await H0()}finally{QY(g,"mcp")}});let Y0=async(g,H0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let e0=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${e0.origin}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",Y0),L.use("/mcp/gateway/:virtualMcpId?",Y0),L.use("/mcp/virtual-mcp/:virtualMcpId?",Y0),L.use("/mcp/self",Y0),b3()){let{mountDevRoutes:g}=(e_$(),Zz0(s_$));g(L,Y0)}let a=new b1;a.use("*",pQ({mountPath:"/mcp"})),a.route("/",JB0()),L.route("/mcp",a);let A0=new b1;A0.use("*",pQ({mountPath:"/mcp/self"})),A0.route("/",SL0()),L.route("/mcp/self",A0);let U0=new b1;U0.use("*",pQ({mountPath:"/mcp"})),U0.route("/",UB0()),L.route("/mcp",U0),L.use("/api/:org/models/*",async(g,H0)=>{UQ(g,"llm_models");try{return await H0()}finally{QY(g,"llm_models")}});let v0=$11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:U});if(L.route("/api",v0),F!=null)q81=j_$({getConnection:()=>F?.getConnection()??null});L.route("/api",lV$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(H0),e0=null;if(f0){let T1=(f0[1]??"").trim();e0=await qV$(T1,d8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let u0=U?await U(e0):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",QC),L.route("/api",AC$);let d0=new b1;d0.use("*",pQ({mountPath:"/api"})),d0.route("/",VL0()),L.route("/api",d0),L.route("/api",ZC$);let i0=new b1;i0.use("*",pQ({mountPath:"/api"})),i0.route("/",CL0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",i0);let n0=new pl(Z.db),w0=new b1;w0.use("*",pQ({mountPath:"/api"})),w0.route("/",oE0()),L.route("/api",w0),L.route("/api/deco-sites",iq$()),L.route("/api/deco-apps",rV$());let C0=new b1;C0.use("*",pQ({mountPath:"/api/deco-sites"})),C0.route("/",sE0()),L.route("/api/deco-sites",C0);let T0=new b1;T0.use("*",pQ({mountPath:"/api/vm-events"})),T0.route("/",pV$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:N0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (vb$(),xb$)),G0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=N0(G0),n=Q0(G0);L.use("/org/:orgRef/registry/publish-request",YC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",YC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(Z01,_I$());let e=IV$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:j9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:b3(),mcpAuth:Y0,oauthProxyHandler:hb$,watchHandler:ub$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(_q$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([j9.stop(),xg?Promise.resolve(xg()).finally(()=>{xg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await lY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await fx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await fg.registerQueue(dY,{partitionQueue:!0,concurrency:Nt0,minPollingIntervalMs:Bt0}),await fg.registerQueue(sQ,{partitionQueue:!0,concurrency:Vm0}),await fg.registerQueue(IK,{partitionQueue:!0,concurrency:Rm0}),await fg.registerQueue(yw,{partitionQueue:!0,concurrency:tJ$}),await Y11(R),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>fg.deleteQueue(g))),await Ot0(Z.pool),Yh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),E21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var cb$,yb$=5000,q81=null,xg=null,hb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await ZN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await rx(J.connection_url),K,U=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=U.origin;let w=await Si(K);if(!w.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await w.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let R=N.searchParams.get("redirect_uri");if(R){let V=O1().baseUrl??B.origin;try{let i=new URL(R),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",R)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(I_1(J.connection_url))try{let V=await y54(Y,J.organization_id),i=g54(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let o=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=o||null,P=B0||null}}catch{}let R=await $.req.formData();if(R.has("resource"))R.set("resource",J.connection_url);let V=R.get("client_id"),i=R.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of R.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let R=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...R?.slug?{organization_slug:R.slug}:{},...R?.name?{organization_name:R.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[R,V]of A.headers.entries())if(!S.includes(R.toLowerCase()))M.set(R,V);if(X==="token"&&A.ok){let R=await A.text();try{let V=JSON.parse(R);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await ox(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new b5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(R,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},ub$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return tQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!j9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(w)=>{W.writeSSE({id:w.id,event:w.type,data:JSON.stringify(w)}).catch(()=>{j9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let U=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(U)})},30000);await new Promise((w)=>{W.onAbort(()=>{clearInterval(U),j9.remove(X,J),w()})})})},h54,d54,l54=()=>u54(d8),m54=()=>c54(d8);var qp0=O(()=>{l5();F8();L21();BG();Vb();f8();F6();Z$0();Ub1();pb0();wJ();Mi();pe0();HQ();B5();q4();$01();bI$();Q01();Vq$();Z11();YJ();n40();G11();bq$();X11();RV$();mV$();tV$();K11();oV$();WB0();Vi();GC$();wB0();b$1();WC$();NC$();zC$();TC$();_$1();C$1();Ar();Nd();cC$();KY();A60();rl();It0();uC$();lC$();rC$();z_$();P_$();q_$();Lm0();M_$();Eg0();Vg0();Pv();Ag0();C_$();o$0();U81();mX();Q11();Tv();Am0();Om0();o$0();o01();uy0();dy0();b_$();fb();y_$();BC();pe0();ev();f90();cb$=k(gB(),1);h54=new f54,d54=new Set([dY,sQ,IK,yw])});var ib$={};X6(ib$,{resolveClientDir:()=>s54,resolveAssetPathWithTraversalCheck:()=>mb$,isPathWithinDirectory:()=>lb$,createAssetHandler:()=>e54});import{resolve as Hr,dirname as n54,join as p54,extname as t54,basename as r54,sep as db$}from"path";function o54($,Z){if($===Z||r54($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${db$}assets${db$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function lb$($,Z){let G=Hr(Z),X=Hr($);return X===G||X.startsWith(G+"/")}function mb$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Hr(Z,G);if(!lb$(X,Z))return null;return X}function s54($,Z="../client"){let G=new URL($),X=n54(G.pathname);return Hr(X,Z)}function e54($={}){let{env:Z="production",clientDir:G=a54,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=mb$({requestPath:W,clientDir:G});if(!K)return null;let U=p54(K,"index.html"),w=Hr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(t54(K))?[U,w]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:o54(B,w)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var a54="./dist/client";var nb$=()=>{};var pb$={};X6(pb$,{tryUpgradePreviewWs:()=>J94,tryHandlePreviewHttp:()=>Q94,previewWebSocketHandler:()=>W94,parsePreviewBaseDomain:()=>Y94,isPreviewWsData:()=>oL0,extractHandleFromHost:()=>M81});function G94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function X94(){return new Response(Z94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function Y94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function M81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function Q94($,Z){let G=M81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Br(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(DV)&&G94($))return X94();return Y.headers.delete(DV),Y}function Br($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function oL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function J94($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=M81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Br(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Br(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Br(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),U=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],w={kind:"preview",upstreamUrl:W,upstreamProtocols:U,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:w}))return Br(426,"upgrade failed");return}function Nr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var $94=256,Z94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',W94;var tb$=O(()=>{Pp0();W94={open($){let Z=$.data;if(!oL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Nr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Nr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Nr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!oL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=$94){Nr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!oL0(Z))return;Nr($,Z,1000,"")}}});var sb$={};X6(sb$,{printBanner:()=>U94,bannerLines:()=>ab$,BANNER_LINES:()=>rb$,BANNER_GRADIENT:()=>ob$});function K94($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function ab$($){let Z=rb$.map((G,X)=>{let[Y,Q,J]=K94(ob$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function U94($){console.log("");for(let Z of ab$($))console.log(Z);console.log("")}var rb$,ob$;var eb$=O(()=>{rb$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],ob$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Zf$={};X6(Zf$,{bootstrapDevLinkSession:()=>L94});import{existsSync as w94}from"fs";import{chmod as F94,mkdir as H94,rename as N94,writeFile as B94}from"fs/promises";import{dirname as O94,join as $f$}from"path";function D94($){return $f$($,"dev-link")}function E94($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return $f$(D94($),"session.json")}async function L94($,Z){let G=E94($),X=H6().db,Y=yQ()?await Yp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(w94(G))try{let U=await Bun.file(G).json(),w=U.user?.sub,F=U.accessToken;if(w===Y.id&&typeof F==="string"){if(await d8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:w}}}catch{}let Q=null;try{Q=await d8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await H94(O94(G),{recursive:!0});let W=`${G}.tmp`;return await B94(W,JSON.stringify(J,null,2),{mode:384}),await F94(W,384),await N94(W,G),{path:G,userSub:Y.id}}var Gf$=O(()=>{HQ();wJ();mN()});l5();var g81="4";function h81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:g81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();Xz0();B5();function Dx$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Az0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function j61(){let $=Dx$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Az0($,"--cpu-prof-dir")??process.cwd(),name:Az0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Az0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Rz0();var Rr;function S61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=RB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Rr=setInterval(()=>void Z().catch(()=>{}),$),Rr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Rr)clearInterval(Rr)}}import*as zx$ from"bun:jsc";var{startSamplingProfiler:jx$,samplingProfilerStackTraces:Px$}=zx$;function V61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{jx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Px$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let w of W){let F=w.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??w.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let U=[...K.entries()].sort((w,F)=>F[1]-w[1]).slice(0,8).map(([w,F])=>({frame:w,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:U}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function C61(){j61();let $=[S61(),k61(),V61()];return()=>{for(let Z of $)Z()}}import{existsSync as q94}from"fs";var dX=O1();L61();var{DBOS:Or,DBOSClient:z94}=await import("@dbos-inc/dbos-sdk");function Wf$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var j94=[dY,sQ,IK,yw],P94=dX.dispatchRole==="worker"?j94:dX.dispatchRole==="api"?[]:void 0;Or.setConfig(h81({systemDatabaseUrl:Wf$(dX.databaseUrl,dX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:dX.podName,listenQueues:P94}));var{createApp:A94}=await Promise.resolve().then(() => (qp0(),Rp0)),{isServerPath:T94}=await Promise.resolve().then(() => (Ar(),Z61)),{createAssetHandler:I94,resolveClientDir:Kf$}=await Promise.resolve().then(() => (nb$(),ib$)),R94=dX.port,Xf$=Kf$(import.meta.url,"../client"),Uf$=q94(Xf$)?Xf$:Kf$(import.meta.url,"../dist/client"),M94=I94({clientDir:Uf$,isServerPath:T94}),k94={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function S94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(k94))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:V94,tryHandlePreviewHttp:C94,tryUpgradePreviewWs:_94,previewWebSocketHandler:k81,isPreviewWsData:S81}=await Promise.resolve().then(() => (tb$(),pb$)),{getOrInitSharedRunner:b94}=await Promise.resolve().then(() => (on(),Z3$)),wf$=V94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Yf$={baseDomain:wf$??"",getRunner:b94},aL0=await A94({clientDir:Uf$}),V81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Qf$=process.env.DBOS_CONDUCTOR_URL?.trim();await Or.launch({...V81?{conductorKey:V81}:{},...V81&&Qf$?{conductorURL:Qf$}:{}});console.log(`[dbos] application version: ${Or.applicationVersion}`);var C81=5,_81=0;await aQ(async()=>{_81++;try{return await aL0.initDbos()}catch($){let Z=_81>=C81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${_81}/${C81} failed, ${Z}`,$),$}},{maxAttempts:C81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!dX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (eb$(),sb$));console.log("");for(let Z of $())console.log(Z)}var f94=Bun.serve({idleTimeout:0,port:R94,hostname:"0.0.0.0",fetch:async($,Z)=>{if(wf$){let X=await _94($,Z,Yf$);if(X===void 0)return;if(X)return X;let Y=await C94($,Yf$);if(Y)return Y}let G=await M94($);if(G)return S94(G);return aL0.fetch($,{server:Z})},websocket:{open($){if(S81($.data))k81.open($)},message($,Z){if(S81($.data))k81.message($,Z)},close($){if(S81($.data))k81.close($)}},development:!1}),x94=C61();if(dX.localMode)Promise.resolve().then(() => (mN(),cN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Gf$(),Zf$)),Y=dX.baseUrl??`http://localhost:${dX.port}`,Q=await X(dX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (mN(),cN0));Z()}catch{}});var Jf$=!1;async function v94($){let Z;try{Z=await z94.create({systemDatabaseUrl:Wf$(dX.databaseUrl,dX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:sQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:sQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function sL0($){if(Jf$)return;Jf$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{x94(),aL0.markShuttingDown();let Q=u81(dX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await O8(Q),await f94.stop(!0);let J=Or.executorID;await Or.shutdown(),await v94(J),await aL0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>sL0("SIGTERM"));process.on("SIGINT",()=>sL0("SIGINT"));process.on("SIGHUP",()=>sL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),sL0("uncaughtException")});