decocms 4.82.11 → 4.82.13

package/dist/server/server.js

@@ -321,7 +321,7 @@ You are the Agent Manager. You create, configure, and maintain agents (Virtual M
       - Empty selected_tools or selected connections that no longer exist.
    d. Suggest a concrete action per flagged agent: rewrite instructions (workflow 4), narrow scope, merge with another, or delete.
    e. Confirm with the user before any destructive change. Apply with COLLECTION_VIRTUAL_MCP_UPDATE or COLLECTION_VIRTUAL_MCP_DELETE.
-</workflows>`,ig1;var ng1=O(()=>{R8();ig1={id:"studio-agent-manager",title:"Agent Manager",icon:"icon://Bot?color=violet",description:"Create, configure, and manage agents",selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:mg1,resolveRuntime:async({orgId:$,ctx:Z})=>{if(!(await Z.storage.virtualMcps.list($)).some((Y)=>!p_0(Y.id)))return{instructions:xV8,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]};return{instructions:mg1,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]}},getId:rZ.AGENT_MANAGER}});var vV8=`<role>
+</workflows>`,ig1;var ng1=O(()=>{R8();ig1={id:"studio-agent-manager",title:"Agent Manager",icon:"icon://Bot?color=chart-5",description:"Create, configure, and manage agents",selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:mg1,resolveRuntime:async({orgId:$,ctx:Z})=>{if(!(await Z.storage.virtualMcps.list($)).some((Y)=>!p_0(Y.id)))return{instructions:xV8,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]};return{instructions:mg1,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]}},getId:rZ.AGENT_MANAGER}});var vV8=`<role>
 You are the API Key Manager. You create and manage the current user's API keys for this organization, with least-privilege permissions and safe secret handling.
 </role>
 
@@ -379,7 +379,7 @@ You are the API Key Manager. You create and manage the current user's API keys f
    b. Propose a replacement with the same or narrower permissions and a suitable expiration; confirm and create it.
    c. Tell the user to deploy and validate the replacement. Do not revoke the old key in the same step.
    d. Only after the user confirms the replacement is working, follow the revocation workflow for the old key.
-</workflows>`,pg1;var tg1=O(()=>{R8();pg1={id:"studio-api-key-manager",title:"API Key Manager",icon:"icon://Key01?color=red",description:"Create, scope, audit, rotate, and revoke API keys safely",selectedTools:["API_KEY_CREATE","API_KEY_LIST","API_KEY_UPDATE","API_KEY_DELETE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:vV8,getId:rZ.API_KEY_MANAGER}});var yV8=`<role>
+</workflows>`,pg1;var tg1=O(()=>{R8();pg1={id:"studio-api-key-manager",title:"API Key Manager",icon:"icon://Key01?color=destructive",description:"Create, scope, audit, rotate, and revoke API keys safely",selectedTools:["API_KEY_CREATE","API_KEY_LIST","API_KEY_UPDATE","API_KEY_DELETE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:vV8,getId:rZ.API_KEY_MANAGER}});var yV8=`<role>
 You are the Automation Manager. You create, configure, and manage automations \u2014 background agents that run on triggers (cron schedules or events).
 </role>
 
@@ -437,7 +437,7 @@ You are the Automation Manager. You create, configure, and manage automations \u
       - Tighten <constraints> when the current messages are too open-ended.
    e. Save with AUTOMATION_UPDATE using the smallest change set.
    f. Re-read with AUTOMATION_GET to verify the stored result.
-</workflows>`,rg1;var og1=O(()=>{R8();rg1={id:"studio-automation-manager",title:"Automation Manager",icon:"icon://Zap?color=amber",description:"Create, configure, and run automations with triggers",selectedTools:["AUTOMATION_CREATE","AUTOMATION_GET","AUTOMATION_LIST","AUTOMATION_UPDATE","AUTOMATION_DELETE","AUTOMATION_TRIGGER_ADD","AUTOMATION_TRIGGER_REMOVE","AUTOMATION_RUN","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:yV8,getId:rZ.AUTOMATION_MANAGER}});async function ag1($,Z){let G=$.objectStorage;if(!G)return!1;try{return(await G.list({prefix:Z,maxKeys:1})).objects.length>0}catch{return!1}}var gV8=`<role>
+</workflows>`,rg1;var og1=O(()=>{R8();rg1={id:"studio-automation-manager",title:"Automation Manager",icon:"icon://Zap?color=chart-4",description:"Create, configure, and run automations with triggers",selectedTools:["AUTOMATION_CREATE","AUTOMATION_GET","AUTOMATION_LIST","AUTOMATION_UPDATE","AUTOMATION_DELETE","AUTOMATION_TRIGGER_ADD","AUTOMATION_TRIGGER_REMOVE","AUTOMATION_RUN","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:yV8,getId:rZ.AUTOMATION_MANAGER}});async function ag1($,Z){let G=$.objectStorage;if(!G)return!1;try{return(await G.list({prefix:Z,maxKeys:1})).objects.length>0}catch{return!1}}var gV8=`<role>
 You are the Brand Manager. The organization does not have a brand context yet \u2014 your first job is to help the user create one.
 </role>
 
@@ -504,7 +504,7 @@ You are the Brand Manager. You manage the organization's brand contexts (company
    b. Write the HTML \u2014 inline CSS, brand assets from <active_brand> by URL, no external scripts. The preview panel renders it as you stream.
    c. Reply with one short line offering iteration ("Want different copy, layout, or sections?"). Do not restate the URL, do not describe what you wrote, do not list sections \u2014 the user can see the page.
    d. Only ask before writing when the user's brief includes something that can't be defaulted (unusual structure, multi-page bundle). Even then, sketch the default in one line and ask "build this or adjust?" \u2014 never open with a discovery questionnaire.
-</workflows>`,eg1;var $h1=O(()=>{R8();eg1={id:"studio-brand-manager",title:"Brand Manager",icon:"icon://Brand?color=orange",description:"Create, configure, and manage brand contexts (company profiles) for the organization.",selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_GET","BRAND_CONTEXT_LIST","BRAND_CONTEXT_TEST","BRAND_CONTEXT_UPDATE","BRAND_CONTEXT_DELETE","BRAND_CONTEXT_EXTRACT"],selectedConnections:["self"],selectedPrompts:["brand-manager-set-up","brand-manager-complete-profile","brand-manager-create-landing-page"],instructions:sg1,resolveRuntime:async({orgId:$,ctx:Z})=>{let G=await Z.storage.brandContext.list($),X=G.find((Q)=>Q.isDefault)??G[0];if(!X)return{instructions:gV8,selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_EXTRACT"]};let Y=`
+</workflows>`,eg1;var $h1=O(()=>{R8();eg1={id:"studio-brand-manager",title:"Brand Manager",icon:"icon://Brand?color=chart-5",description:"Create, configure, and manage brand contexts (company profiles) for the organization.",selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_GET","BRAND_CONTEXT_LIST","BRAND_CONTEXT_TEST","BRAND_CONTEXT_UPDATE","BRAND_CONTEXT_DELETE","BRAND_CONTEXT_EXTRACT"],selectedConnections:["self"],selectedPrompts:["brand-manager-set-up","brand-manager-complete-profile","brand-manager-create-landing-page"],instructions:sg1,resolveRuntime:async({orgId:$,ctx:Z})=>{let G=await Z.storage.brandContext.list($),X=G.find((Q)=>Q.isDefault)??G[0];if(!X)return{instructions:gV8,selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_EXTRACT"]};let Y=`
 
 <active_brand>
 ${JSON.stringify({id:X.id,name:X.name,domain:X.domain,overview:X.overview,logo:X.logo,colors:X.colors,fonts:X.fonts},null,2)}
@@ -545,7 +545,7 @@ You are the Connection Manager. You create, configure, test, and manage MCP conn
    a. List all connections with COLLECTION_CONNECTIONS_LIST.
    b. Test each connection's health with CONNECTION_TEST.
    c. Report which connections are healthy, erroring, or inactive.
-</workflows>`,Zh1;var Gh1=O(()=>{R8();Zh1={id:"studio-connection-manager",title:"Connection Manager",icon:"icon://Link01?color=cyan",description:"Create, configure, test, and manage connections",selectedTools:["COLLECTION_CONNECTIONS_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_UPDATE","COLLECTION_CONNECTIONS_DELETE","CONNECTION_TEST"],selectedConnections:null,selectedPrompts:[],instructions:hV8,getId:rZ.CONNECTION_MANAGER}});var cV8=`<role>
+</workflows>`,Zh1;var Gh1=O(()=>{R8();Zh1={id:"studio-connection-manager",title:"Connection Manager",icon:"icon://Link01?color=chart-3",description:"Create, configure, test, and manage connections",selectedTools:["COLLECTION_CONNECTIONS_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_UPDATE","COLLECTION_CONNECTIONS_DELETE","CONNECTION_TEST"],selectedConnections:null,selectedPrompts:[],instructions:hV8,getId:rZ.CONNECTION_MANAGER}});var cV8=`<role>
 You are the Store Manager. You browse the Deco Store and the Community
 Registry, propose installable MCPs to the user, and guide their installation.
 </role>
@@ -585,7 +585,7 @@ Registry, propose installable MCPs to the user, and guide their installation.
 3. Reviewing the catalog:
    a. List both registries' contents (or filter by category).
    b. Report categories, popular entries, and any new additions.
-</workflows>`,Xh1;var Yh1=O(()=>{R8();Xh1={id:"studio-store-manager",title:"Store Manager",icon:"icon://Store01?color=emerald",description:"Browse the Deco Store and Community Registry, recommend MCPs, and guide installations.",selectedTools:null,selectedConnections:["registry","community-registry"],selectedPrompts:["store-manager-browse-store"],instructions:cV8,checklist:[{label:"Browse the Deco Store",activeForm:"Browsing the Deco Store",action:{kind:"open-agent-thread",promptName:"store-manager-browse-store"},isCompleted:async({orgId:$,ctx:Z})=>{let G=[G4.SELF($),G4.REGISTRY($),G4.COMMUNITY_REGISTRY($),G4.DEV_ASSETS($)],{totalCount:X}=await Z.storage.connections.list($,{where:{operator:"not",conditions:[{field:["id"],operator:"in",value:G}]},limit:1});return X>0}}],getId:rZ.STORE_MANAGER}});var uV8=`<role>
+</workflows>`,Xh1;var Yh1=O(()=>{R8();Xh1={id:"studio-store-manager",title:"Store Manager",icon:"icon://Store01?color=success",description:"Browse the Deco Store and Community Registry, recommend MCPs, and guide installations.",selectedTools:null,selectedConnections:["registry","community-registry"],selectedPrompts:["store-manager-browse-store"],instructions:cV8,checklist:[{label:"Browse the Deco Store",activeForm:"Browsing the Deco Store",action:{kind:"open-agent-thread",promptName:"store-manager-browse-store"},isCompleted:async({orgId:$,ctx:Z})=>{let G=[G4.SELF($),G4.REGISTRY($),G4.COMMUNITY_REGISTRY($),G4.DEV_ASSETS($)],{totalCount:X}=await Z.storage.connections.list($,{where:{operator:"not",conditions:[{field:["id"],operator:"in",value:G}]},limit:1});return X>0}}],getId:rZ.STORE_MANAGER}});var uV8=`<role>
 You are the Task Manager. You organize and maintain this organization's task board so the team can see what needs attention, what is underway, and what is complete.
 </role>
 
@@ -638,7 +638,7 @@ You are the Task Manager. You organize and maintain this organization's task boa
    a. Resolve the exact item with TASK_BOARD_ITEM_LIST unless its id is already known.
    b. Show the task title and explain that deleting the card is irreversible. Get explicit confirmation immediately before the tool call.
    c. Call TASK_BOARD_ITEM_DELETE only after confirmation, then briefly confirm removal.
-</workflows>`,Qh1;var Jh1=O(()=>{R8();Qh1={id:"studio-task-manager",title:"Task Manager",icon:"icon://Flag01?color=indigo",description:"Create, prioritize, assign, and track work on the task board",selectedTools:["TASK_BOARD_ITEM_CREATE","TASK_BOARD_ITEM_LIST","TASK_BOARD_ITEM_UPDATE","TASK_BOARD_ITEM_DELETE","TASK_BOARD_ITEM_PRS_GET"],selectedConnections:null,selectedPrompts:[],instructions:uV8,getId:rZ.TASK_MANAGER}});var dV8=`<role>
+</workflows>`,Qh1;var Jh1=O(()=>{R8();Qh1={id:"studio-task-manager",title:"Task Manager",icon:"icon://Flag01?color=chart-1",description:"Create, prioritize, assign, and track work on the task board",selectedTools:["TASK_BOARD_ITEM_CREATE","TASK_BOARD_ITEM_LIST","TASK_BOARD_ITEM_UPDATE","TASK_BOARD_ITEM_DELETE","TASK_BOARD_ITEM_PRS_GET"],selectedConnections:null,selectedPrompts:[],instructions:uV8,getId:rZ.TASK_MANAGER}});var dV8=`<role>
 You are the Usage Manager. You analyze how this workspace is actually used \u2014 which agents and connections get traffic, who uses them, what it costs \u2014 and help clean up what's idle.
 </role>
 
@@ -689,7 +689,7 @@ You are the Usage Manager. You analyze how this workspace is actually used \u201
    b. MONITORING_LOGS_LIST with isError true (plus connectionId/toolName/virtualMcpId filters) \u2192 failing calls.
    c. MONITORING_LOG_GET on specific log ids for full input/output when the error message isn't enough.
    d. Report the failing tool/connection, error pattern, and suggest the fix or owner.
-</workflows>`,Wh1;var Kh1=O(()=>{R8();Wh1={id:"studio-usage-manager",title:"Usage Manager",icon:"icon://BarChart10?color=blue",description:"Analyze usage, costs, and clean up idle agents and connections",selectedTools:["MONITORING_STATS","MONITORING_LOGS_LIST","MONITORING_LOG_GET","MONITORING_THREAD_USAGE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_LAST_USED_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_DELETE","ORGANIZATION_MEMBER_LIST"],selectedConnections:null,selectedPrompts:[],instructions:dV8,getId:rZ.USAGE_MANAGER}});function fx0($){return wD.find((Z)=>$.startsWith(`${Z.id}_`))??null}async function lV8($,Z){if("resolveRuntime"in $)return $.resolveRuntime(Z);return{instructions:$.instructions,selectedTools:$.selectedTools}}async function r$0({virtualMcp:$,agentId:Z=$.id,organizationId:G,ctx:X}){let Y=fx0(Z);if(!Y)return $;let Q=await lV8(Y,{orgId:G,ctx:X}),J=Q.selectedTools?[...Q.selectedTools]:null;return{...$,metadata:{...$.metadata??{},instructions:Q.instructions},connections:$.connections.map((W)=>({...W,selected_tools:J}))}}async function o$0($,Z){if(!("checklist"in $))return[];return Promise.all($.checklist.map(async(G)=>({label:G.label,activeForm:G.activeForm,action:G.action,completed:await G.isCompleted(Z),alwaysSuggest:G.alwaysSuggest})))}async function wh1($,Z,G){let X={self:G4.SELF($),registry:G4.REGISTRY($),"community-registry":G4.COMMUNITY_REGISTRY($)};await Promise.all(wD.map(async(Y)=>{let Q=Y.getId($),J=await G.findById(Q,$),K=(Y.selectedConnections??["self"]).map((w)=>X[w]);if(J){await G.update(Q,Z,{metadata:{...J.metadata??{},instructions:Y.instructions},connections:K.map((w)=>{let U=J.connections.find((F)=>F.connection_id===w);return{connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:U?.selected_resources??null,selected_prompts:U?.selected_prompts??null}})});return}await G.create($,Z,{title:Y.title,description:Y.description,icon:Y.icon,status:"active",pinned:!1,metadata:{instructions:Y.instructions},connections:K.map((w)=>({connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:null,selected_prompts:Y.selectedPrompts?[...Y.selectedPrompts]:null}))},{id:Q})}))}var wD;var Jf=O(()=>{R8();ng1();tg1();og1();$h1();Gh1();Yh1();Jh1();Kh1();wD=[eg1,ig1,rg1,Zh1,pg1,Xh1,Qh1,Wh1]});import{DBOS as a$0}from"@dbos-inc/dbos-sdk";async function mV8($){let Z=H6(),G=new Qf(Z.db);await wh1($.orgId,$.createdBy,G)}async function iV8($){let Z=H6(),G=new Qf(Z.db);for(let X of wD){let Y=X.getId($.orgId),Q=await G.findById(Y,$.orgId);if(!Q)continue;let J=X.selectedPrompts?[...X.selectedPrompts]:null;if(Q.connections.every((K)=>{let w=K.selected_prompts;if(J===null)return w===null;if(w===null)return!1;if(w.length!==J.length)return!1;return w.every((U,F)=>U===J[F])}))continue;await G.update(Y,$.createdBy,{connections:Q.connections.map((K)=>({connection_id:K.connection_id,selected_tools:K.selected_tools,selected_resources:K.selected_resources,selected_prompts:J}))})}}async function nV8($){await a$0.runStep(()=>mV8($),{name:"installStudioPack"}),await a$0.runStep(()=>iV8($),{name:"backfillSelectedPrompts"})}async function xx0($){await a$0.startWorkflow(pV8,{workflowID:`install-studio-pack:${tV8}:${$.orgId}`})($)}async function Uh1(){let Z=await H6().db.selectFrom("member").select(["organizationId","userId"]).orderBy("createdAt","asc").execute(),G=new Map;for(let X of Z)if(!G.has(X.organizationId))G.set(X.organizationId,X.userId);await Promise.all(Array.from(G).map(async([X,Y])=>{try{await xx0({orgId:X,createdBy:Y})}catch(Q){console.error("[studio-pack-backfill] enqueue failed",{orgId:X},Q)}}))}var pV8,tV8="v5";var s$0=O(()=>{HQ();bx0();Jf();pV8=a$0.registerWorkflow(nV8,{name:"installStudioPackWorkflow"})});import{jwtVerify as rV8,SignJWT as Fh1}from"jose";import{randomBytes as oV8}from"crypto";function Hh1(){if(qd)return qd;let $=O1(),Z=$.meshJwtSecret??$.betterAuthSecret;if(Z)qd=new TextEncoder().encode(Z);else console.warn("MESH_JWT_SECRET not set - generating random secret (not persistent)"),qd=new Uint8Array(oV8(32));return qd}async function Nh1($,Z="5m"){let G=Hh1();return await new Fh1($).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Z).sign(G)}async function vx0($){try{let Z=Hh1(),{payload:G}=await rV8($,Z);return G}catch{return}}async function XH($,Z,G=3600){let X=O1(),Y=X.meshJwtSecret??X.betterAuthSecret;if(!Y)throw Error("A deterministic JWT secret is required to mint gateway JWTs \u2014 set MESH_JWT_SECRET or BETTER_AUTH_SECRET");let Q=new TextEncoder().encode(Y);return await new Fh1({iss:"mesh",sub:$,...Z&&{email:Z}}).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Math.floor(Date.now()/1000)+G).sign(Q)}var qd=null;var UD=O(()=>{F8()});class Md{constructor(){this._messageQueue=[]}static createLinkedPair(){let $=new Md,Z=new Md;return $._otherTransport=Z,Z._otherTransport=$,[$,Z]}async start(){while(this._messageQueue.length>0){let $=this._messageQueue.shift();this.onmessage?.($.message,$.extra)}}async close(){let $=this._otherTransport;this._otherTransport=void 0,await $?.close(),this.onclose?.()}async send($,Z){if(!this._otherTransport)throw Error("Not connected");if(this._otherTransport.onmessage)this._otherTransport.onmessage($,{authInfo:Z?.authInfo});else this._otherTransport._messageQueue.push({message:$,extra:{authInfo:Z?.authInfo}})}}import{SpanStatusCode as Bh1}from"@opentelemetry/api";function $0($){return{...$,execute:async(Z,G)=>{return await G.timings.measure(`tool.${$.name}`,async()=>G.tracer.startActiveSpan(`tool.${$.name}`,{attributes:{"tool.name":$.name,"organization.id":G.organization?.id??"system","user.id":G.auth.user?.id??G.auth.apiKey?.userId??"anonymous"}},async(X)=>{try{G.toolName=$.name,G.access.setToolName?.($.name);let Y=await $.handler(Z,G);return X.setStatus({code:Bh1.OK}),Y}catch(Y){throw X.setStatus({code:Bh1.ERROR,message:Y.message}),X.recordException(Y),Y}finally{X.end()}}))}}}var Y1=()=>{};function O0($){if(!$.organization)throw Error("This operation requires organization scope");return $.organization}function y1($){return $.auth.user?.id??$.auth.apiKey?.userId}function aV8($){return!!($.auth.user||$.auth.apiKey)}function M0($){if(!aV8($))throw Error("Authentication required")}import{z as J6}from"zod";var e$0,Oh1,Dh1,Eh1,Lh1,zh1,jh1,Ph1,Ah1,Th1;var Wf=O(()=>{e$0=J6.record(J6.string(),J6.array(J6.string())),Oh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),userId:J6.string().describe("ID of the user who owns this API key"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Example: { "self": ["API_KEY_CREATE"], "conn_abc123": ["SEND_MESSAGE"] }'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Dh1=J6.object({name:J6.string().min(1).max(64).describe("Human-readable name for the API key"),permissions:e$0.describe(`Permissions to grant (REQUIRED \u2014 there is no implicit default). Format: { resource: [actions] }. Resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names (e.g., ["ORGANIZATION_GET"]) or ["*"] for all. Example: { "self": ["ORGANIZATION_GET", "COLLECTION_CONNECTIONS_LIST"] }. The key is authorized solely by this allowlist; the creator's role does not widen it.`),expiresIn:J6.number().positive().optional().describe("Expiration time in seconds. If not provided, key never expires."),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("Additional metadata to store with the API key")}),Eh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),key:J6.string().describe("The actual API key value. STORE THIS SECURELY - it will not be shown again!"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Lh1=J6.object({}),zh1=J6.object({items:J6.array(Oh1).describe("List of API keys (without key values)")}),jh1=J6.object({keyId:J6.string().describe("ID of the API key to update"),name:J6.string().min(1).max(64).optional().describe("New name for the API key"),permissions:e$0.optional().describe('New permissions. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names or "*" for all. Example: { "self": ["API_KEY_CREATE"] }. Replaces existing permissions.'),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("New metadata. Replaces existing metadata.")}),Ph1=J6.object({item:Oh1.describe("The updated API key (without key value)")}),Ah1=J6.object({keyId:J6.string().describe("ID of the API key to delete")}),Th1=J6.object({success:J6.boolean().describe("Whether the deletion was successful"),keyId:J6.string().describe("ID of the deleted API key")})});var yx0;var Ih1=O(()=>{q4();Y1();Wf();yx0=$0({name:"API_KEY_CREATE",description:"Create an API key with scoped permissions. The key value is returned only once \u2014 store it immediately.",annotations:{title:"Create API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Dh1,outputSchema:Eh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.create({name:$.name,permissions:$.permissions,expiresIn:$.expiresIn,metadata:{...$.metadata,organization:Z.organization}}),X=G.expiresAt?G.expiresAt instanceof Date?G.expiresAt.toISOString():G.expiresAt:null,Y=G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"api_key_created",...Z.organization?.id?{groups:{organization:Z.organization.id}}:{},properties:{key_id:G.id,key_name:G.name??$.name,organization_id:Z.organization?.id,has_expiry:!!X}});return{id:G.id,name:G.name??$.name,key:G.key,permissions:G.permissions??{},expiresAt:X,createdAt:Y}}})});var gx0;var Rh1=O(()=>{q4();Y1();Wf();gx0=$0({name:"API_KEY_DELETE",description:"Delete and instantly revoke an API key. Cannot be undone.",annotations:{title:"Delete API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ah1,outputSchema:Th1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to delete API key");let Y=(await Z.boundAuth.apiKey.list())?.find((K)=>K.id===$.keyId);if(!Y)throw Error("API key not found");let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot delete API key from another organization");if(await Z.boundAuth.apiKey.delete($.keyId),W)i1.capture({distinctId:G,event:"api_key_deleted",groups:{organization:W},properties:{key_id:$.keyId,organization_id:W}});return{success:!0,keyId:$.keyId}}})});var hx0;var qh1=O(()=>{Y1();Wf();hx0=$0({name:"API_KEY_LIST",description:"List API keys for the current user in the current organization. Returns metadata only \u2014 key values are never shown after creation.",annotations:{title:"List API Keys",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Lh1,outputSchema:zh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.list(),X=Z.organization?.id;return{items:(G??[]).filter((Q)=>{return Q.metadata?.organization?.id===X}).map((Q)=>({id:Q.id,name:Q.name??"Unnamed Key",userId:Q.userId,permissions:Q.permissions??{},expiresAt:Q.expiresAt?Q.expiresAt instanceof Date?Q.expiresAt.toISOString():Q.expiresAt:null,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});var cx0;var Mh1=O(()=>{Y1();Wf();cx0=$0({name:"API_KEY_UPDATE",description:"Update an API key's name, permissions, or metadata. The key value cannot be changed or retrieved.",annotations:{title:"Update API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:jh1,outputSchema:Ph1,handler:async($,Z)=>{if(M0(Z),await Z.access.check(),!y1(Z))throw Error("User ID required to update API key");let Y=(await Z.boundAuth.apiKey.list())?.find((w)=>w.id===$.keyId);if(!Y)throw Error(`API key not found: ${$.keyId}`);let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot update API key from another organization");let K=await Z.boundAuth.apiKey.update({keyId:$.keyId,name:$.name,permissions:$.permissions,metadata:{...$.metadata,organization:Z.organization}});if(!K)throw Error(`Failed to update API key: ${$.keyId}`);return{item:{id:K.id,name:K.name??$.name??"Unnamed Key",userId:K.userId,permissions:K.permissions??{},expiresAt:K.expiresAt?K.expiresAt instanceof Date?K.expiresAt.toISOString():K.expiresAt:null,createdAt:K.createdAt instanceof Date?K.createdAt.toISOString():K.createdAt}}}})});var kh1=O(()=>{Ih1();Rh1();qh1();Mh1();Wf()});function YH($){let Z=$.trim();if(!Z)return{ok:!1,error:"Enter a website URL."};let G=eV8.test(Z),X=$C8.test(Z),Y=ZC8.test(Z);if(G&&!X&&!Y)return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let Q=X?Z:`https://${Z}`,J;try{J=new URL(Q)}catch{return{ok:!1,error:"Enter a valid website URL."}}if(J.protocol!=="http:"&&J.protocol!=="https:")return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let W=J.hostname.split(".");if(W.length<2||W.some((K)=>!K||!GC8.test(K)))return{ok:!1,error:"Enter a valid website URL."};return J.protocol="https:",{ok:!0,value:J.origin}}var eV8,$C8,ZC8,GC8;var kd=O(()=>{eV8=/^[a-zA-Z][a-zA-Z\d+.-]*:/,$C8=/^[a-zA-Z][a-zA-Z\d+.-]*:\/\//,ZC8=/^[^\s/:?#]+\.[^\s/:?#]+:\d+(?:[/?#]|$)/,GC8=/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i});import{z as qG}from"zod";function FD($){if($.baseUrl)return $.baseUrl.replace(/\/+$/,"");return(($.settings??O1()).commerceDiscoveryInternalApiUrl??XC8).replace(/\/+$/,"")}function Vh1($={}){return`${FD($)}/api/v2/mcp`}function HD($){let Z=$.apiKey??($.settings??O1()).commerceDiscoveryInternalApiKey;if(!Z)throw Error("COMMERCE_DISCOVERY_INTERNAL_API_KEY is required to set up Commerce Discovery.");return Z}function $80($){return new URL($).hostname}function QC8($){return $==="ownership_unverified"||$==="already_claimed_by_other_org"}function JC8($,Z={}){switch($){case"ownership_unverified":{let G=Z.email?`O e-mail ${Z.email}`:"Este e-mail",X=Z.domain?` ${Z.domain}`:" este site";return`${G} n\xE3o tem permiss\xE3o para reivindicar${X}. Use um e-mail do dom\xEDnio do site ou pe\xE7a ao suporte para autorizar seu dom\xEDnio.`}case"already_claimed_by_other_org":return"Este site j\xE1 pertence a outra organiza\xE7\xE3o. Fale com o suporte para transferir o acesso.";case"unknown":return"N\xE3o foi poss\xEDvel configurar o Commerce Discovery. Tente novamente ou fale com o suporte.";default:return $}}async function WC8($){let Z=await $.text().catch(()=>"");if(!Z)return"unknown";try{let G=JSON.parse(Z);return QC8(G.error)?G.error:"unknown"}catch{return"unknown"}}async function ux0($){let Z=`Commerce Discovery auth failed with status ${$.status}.`,G=await $.text().catch(()=>"");if(!G)return Z;try{let X=JSON.parse(G),Y=typeof X.error==="string"?X.error:typeof X.message==="string"?X.message:null;return Y?`Commerce Discovery auth failed: ${Y}.`:Z}catch{return Z}}async function _h1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/upgrade`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.orgName?{name:$.orgName}:{},...$.email?{email:$.email}:{},...$.reportUrl?{report_url:$.reportUrl}:{}})});if(!W.ok){let w=await WC8(W);throw new Ch1(w,{email:$.email,domain:Q})}let K=YC8.safeParse(await W.json());if(!K.success)throw Error("Commerce Discovery auth response did not include a token.");return{authorizationToken:K.data.token}}async function bh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/bindings`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,provider:$.provider,resource_id:$.resourceId})});if(W.status===409)return{ok:!1,reason:"resource_already_bound",detail:"Este recurso j\xE1 est\xE1 vinculado a outra loja. Se ele \xE9 seu, fale com o suporte para revis\xE3o manual."};if(W.status===422){let w=Sh1.safeParse(await W.json());return{ok:!1,reason:w.success?w.data.reason??"verification_failed":"verification_failed",detail:(w.success?w.data.detail:void 0)??"N\xE3o foi poss\xEDvel verificar o acesso a este recurso."}}if(!W.ok)throw Error(await ux0(W));let K=Sh1.safeParse(await W.json());if(!K.success||!K.data.binding)throw Error("Commerce Discovery bind response did not include a binding.");return{ok:!0,resourceId:K.data.binding.resource_id,evidence:K.data.binding.evidence}}async function fh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/run`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.githubRepo?{github_repo:$.githubRepo}:{}})});if(W.status===409)return{triggered:!1,reason:"not_upgraded"};if(!W.ok)throw Error(await ux0(W));return{triggered:!0}}async function xh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/connections/status?org_id=${encodeURIComponent($.orgId)}`,W=await Y(J,{method:"GET",headers:{Authorization:`Bearer ${X}`}});if(W.status===404||W.status===409)return{};if(!W.ok)throw Error(await ux0(W));let K=KC8.safeParse(await W.json());return K.success?K.data.providers:{}}var XC8,YC8,Sh1,Ch1,KC8;var Kf=O(()=>{R8();F8();XC8=new URL(x_0).origin,YC8=qG.object({token:qG.string().min(1)}),Sh1=qG.object({binding:qG.object({resource_id:qG.string(),evidence:qG.string()}).optional(),reason:qG.string().optional(),detail:qG.string().optional()});Ch1=class Ch1 extends Error{code;constructor($,Z={}){super(JC8($,Z));this.name="CommerceDiscoveryClaimError",this.code=$}};KC8=qG.object({providers:qG.record(qG.string(),qG.object({connected:qG.boolean(),via:qG.enum(["oauth","sa"]).nullable(),resource:qG.string().nullable()}))})});import{z as wY}from"zod";var wC8,UC8,dx0;var vh1=O(()=>{kd();Y1();Kf();wC8=wY.object({siteUrl:wY.string().min(1).describe("Website URL of the store being bound."),provider:wY.enum(["ga4","gsc"]).describe("Which Google source to bind: ga4 (Analytics) or gsc (Search Console)."),resourceId:wY.string().min(1).describe("The resource id the client typed: GA4 numeric property id, or GSC site (sc-domain:example.com or https://example.com/).")}),UC8=wY.discriminatedUnion("ok",[wY.object({ok:wY.literal(!0),resourceId:wY.string(),evidence:wY.string()}),wY.object({ok:wY.literal(!1),reason:wY.string(),detail:wY.string()})]),dx0=$0({name:"COMMERCE_DISCOVERY_BIND",description:"Bind a GA4 property or GSC site to the org's store via the shared service account (consent-free lane). The client grants deco-reader@\u2026 access to the resource and provides its id; Commerce Discovery verifies the resource belongs to this domain before persisting. Returns ok:false with an actionable pt-BR detail when verification fails or the resource is already bound elsewhere.",annotations:{title:"Bind Commerce Discovery Data Source",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:wC8,outputSchema:UC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return bh1({siteUrl:X.value,orgId:G.id,provider:$.provider,resourceId:$.resourceId.trim()})}})});import{z as qw}from"zod";var FC8,HC8,lx0;var yh1=O(()=>{kd();Y1();Kf();FC8=qw.object({siteUrl:qw.string().min(1).describe("Website URL of the store to inspect.")}),HC8=qw.object({providers:qw.record(qw.string(),qw.object({connected:qw.boolean(),via:qw.enum(["oauth","sa"]).nullable(),resource:qw.string().nullable()}))}),lx0=$0({name:"COMMERCE_DISCOVERY_CONNECTION_STATUS",description:"Read per-provider connection status (ga4/gsc/vtex) for the org's store \u2014 { connected, via: oauth|sa, resource }. The single source of truth for whether a data source is connected, unifying the OAuth (Studio vault) and shared-SA binding lanes. Read-only.",annotations:{title:"Commerce Discovery Connection Status",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:FC8,outputSchema:HC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return{providers:await xh1({siteUrl:X.value,orgId:G.id})}}})});import{z as Sd}from"zod";var NC8,BC8,mx0;var gh1=O(()=>{R8();kd();Y1();Kf();NC8=Sd.object({siteUrl:Sd.string().min(1).describe("Website URL to run the diagnostic for.")}),BC8=Sd.object({triggered:Sd.boolean(),reason:Sd.string().optional()}),mx0=$0({name:"COMMERCE_DISCOVERY_RUN",description:"Trigger the Commerce Discovery diagnostic run for the current organization's store. Call once the data sources (GA4/GSC/VTEX) are connected \u2014 this run resolves credentials and produces the enriched report.",annotations:{title:"Run Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:NC8,outputSchema:BC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);let Y=G4.COMMERCE_DISCOVERY(G.id),J=(await Z.storage.connections.findById(Y,G.id))?.configuration_state,W=J&&typeof J==="object"&&typeof J.github_repo==="string"&&J.github_repo.length>0?J.github_repo:void 0;return fh1({siteUrl:X.value,orgId:G.id,githubRepo:W})}})});var QH=O(()=>{l10()});import{z as wW}from"zod";async function LC8($,Z,G,X){let Y=await $.storage.connections.findById(Z,G);if(Y)return Y;throw X}async function zC8($,Z,G,X){let Y=await $.storage.virtualMcps.findById(Z,G);if(Y)return Y;throw X}var ix0,OC8=3600000,DC8,EC8,nx0;var hh1=O(()=>{R8();kd();Y1();KW();QH();Kf();ix0=v_0,DC8=wW.object({siteUrl:wW.string().min(1).describe("Website URL to configure.")}),EC8=wW.object({connection:aZ,virtualMcp:sZ,reportApp:wW.object({connectionId:wW.string(),virtualMcpId:wW.string(),toolName:wW.literal(ix0)}),created:wW.object({connection:wW.boolean(),virtualMcp:wW.boolean()})});nx0=$0({name:"COMMERCE_DISCOVERY_SETUP",description:"Create or return the Commerce Discovery connection and virtual MCP for the current organization.",annotations:{title:"Set Up Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:DC8,outputSchema:EC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check("COLLECTION_CONNECTIONS_CREATE");let X=y1(Z);if(!X)throw Error("User ID required to set up Commerce Discovery");let Y=YH($.siteUrl);if(!Y.ok)throw Error(Y.error);let Q=G4.COMMERCE_DISCOVERY(G.id),J=m_0(G.id),W=new URLSearchParams({virtualmcpid:J,main:`app:${Q}:${ix0}`}),K={email:Z.auth.user?.email,reportUrl:`${Z.baseUrl}/${encodeURIComponent(G.slug??G.id)}/${crypto.randomUUID()}?${W.toString()}`},w=await Z.storage.connections.findById(Q,G.id),U={connection:!1,virtualMcp:!1},F=await _h1({siteUrl:Y.value,orgId:G.id,orgName:G.name,...K}),H=Vh1();if(w)console.log("[commerce-discovery] syncing connection to claimed site",{orgId:G.id,siteUrl:Y.value,connectionId:Q}),w=await Z.storage.connections.update(w.id,{connection_url:H,connection_token:F.authorizationToken,metadata:{...w.metadata??{},siteUrl:Y.value}});else{console.log("[commerce-discovery] creating connection",{orgId:G.id,siteUrl:Y.value,connectionId:Q});try{let E=i_0(G.id,F.authorizationToken,H);w=await Z.storage.connections.create({...E,metadata:{...E.metadata??{},siteUrl:Y.value},organization_id:G.id,created_by:X}),U.connection=!0}catch(E){w=await LC8(Z,Q,G.id,E)}}let N=await Z.storage.virtualMcps.findById(J,G.id);if(!N){console.log("[commerce-discovery] creating virtual MCP",{orgId:G.id,siteUrl:Y.value,connectionId:w.id,virtualMcpId:J});try{N=await Z.storage.virtualMcps.create(G.id,X,n_0(G.id,w.id),{id:J}),U.virtualMcp=!0}catch(E){N=await zC8(Z,J,G.id,E)}}if(!N.pinned)N=await Z.storage.virtualMcps.update(N.id,X,{pinned:!0});let B=await Z.db.selectFrom("organization").select(["createdAt"]).where("id","=",G.id).executeTakeFirst();if((B?Date.now()-new Date(B.createdAt).getTime():Number.POSITIVE_INFINITY)<OC8){if((await Z.storage.organizationSettings.get(G.id))?.reports_only==null)await Z.storage.organizationSettings.upsert(G.id,{reports_only:!0})}return{connection:w,virtualMcp:N,reportApp:{connectionId:w.id,virtualMcpId:N.id,toolName:ix0},created:U}}})});var ch1=O(()=>{vh1();yh1();gh1();hh1()});var px0=_((uh1)=>{Object.defineProperty(uh1,"__esModule",{value:!0});uh1.kvPrefix=uh1.KvWatchInclude=void 0;uh1.KvWatchInclude={LastValue:"",AllHistory:"history",UpdatesOnly:"updates"};uh1.kvPrefix="KV_"});var eh1=_((ah1)=>{Object.defineProperty(ah1,"__esModule",{value:!0});ah1.KvStatusImpl=ah1.Bucket=ah1.Kvm=ah1.kvOperationHdr=void 0;ah1.Base64KeyCodec=AC8;ah1.NoopKvCodecs=tx0;ah1.defaultBucketOpts=mh1;ah1.validateKey=ih1;ah1.validateSearchKey=nh1;ah1.hasWildcards=ph1;ah1.validateBucket=Z80;var C5=rX(),r4=Do(),V5=px0();function AC8(){let $=(Z,G)=>{let X=[];for(let Y of Z.split("."))switch(Y){case">":case"*":X.push(Y);break;default:X.push(G(Y));break}return X.join(".")};return{encode(Z){return $(Z,btoa)},decode(Z){return $(Z,atob)}}}function tx0(){return{key:{encode($){return $},decode($){return $}},value:{encode($){return typeof $==="string"?new TextEncoder().encode($):$},decode($){return $}}}}function mh1(){return{replicas:1,history:1,timeout:2000,max_bytes:-1,maxValueSize:-1,codec:tx0(),storage:r4.StorageType.File}}ah1.kvOperationHdr="KV-Operation";var lh1="$KV",TC8=/^[-/=.\w]+$/,IC8=/^[-/=.>*\w]+$/,RC8=/^[-\w]+$/;function ih1($){if($.startsWith(".")||$.endsWith(".")||!TC8.test($))throw Error(`invalid key: ${$}`)}function nh1($){if($.startsWith(".")||$.endsWith(".")||$.includes("..")||!IC8.test($))throw Error(`invalid key: ${$}`)}function ph1($){if($.startsWith(".")||$.endsWith("."))throw Error(`invalid key: ${$}`);let Z=$.split("."),G=!1;for(let X=0;X<Z.length;X++)switch(Z[X]){case"*":G=!0;break;case">":if(X!==Z.length-1)throw Error(`invalid key: ${$}`);G=!0;break;default:}return G}function Z80($){if(!RC8.test($))throw Error(`invalid bucket name: ${$}`)}class th1{js;constructor($){this.js=(0,r4.toJetStreamClient)($)}create($,Z={}){return this.#$($,Z)}open($,Z={}){return Z.bindOnly=!0,this.#$($,Z)}#$($,Z={}){let{ok:G,min:X}=this.js.nc.features.get(C5.Feature.JS_KV);if(!G)return Promise.reject(Error(`kv is only supported on servers ${X} or better`));if(Z.bindOnly)return wf.bind(this.js,$,Z);return wf.create(this.js,$,Z)}list(){let $=(G)=>{let Y=G.streams.filter((J)=>{return J.config.name.startsWith(V5.kvPrefix)});Y.forEach((J)=>{J.config.sealed=J.config.sealed||!1,J.config.deny_delete=J.config.deny_delete||!1,J.config.deny_purge=J.config.deny_purge||!1,J.config.allow_rollup_hdrs=J.config.allow_rollup_hdrs||!1});let Q="";if(Y.length)Q=this.js.nc.info?.cluster??"";return Y.map((J)=>{return new G80(J,Q)})},Z=`${this.js.prefix}.STREAM.LIST`;return new r4.ListerImpl(Z,$,this.js)}}ah1.Kvm=th1;class wf{js;jsm;stream;bucket;direct;codec;prefix;editPrefix;useJsPrefix;_prefixLen;constructor($,Z,G){Z80($),this.js=Z,this.jsm=G,this.bucket=$,this.prefix=lh1,this.editPrefix="",this.useJsPrefix=!1,this._prefixLen=0}static async create($,Z,G={}){Z80(Z);let X=await $.jetstreamManager(),Y=new wf(Z,$,X);return await Y.init(G),Y}static async bind($,Z,G={}){let X=$.getOptions()?.checkAPI||G.bindOnly===!1,Y=await $.jetstreamManager(X),Q={config:{allow_direct:G.allow_direct}};Z80(Z);let J=new wf(Z,$,Y);return Q.config.name=G.streamName??J.bucketName(),Object.assign(J,Q),J.stream=Q.config.name,J.codec=G.codec||tx0(),J.direct=Q.config.allow_direct??!1,J.initializePrefixes(Q),J}async init($={}){let Z=Object.assign(mh1(),$);this.codec=Z.codec;let G={};if(this.stream=G.name=$.streamName??this.bucketName(),G.retention=r4.RetentionPolicy.Limits,G.max_msgs_per_subject=Z.history,Z.max_bytes)G.max_bytes=Z.max_bytes;if(G.max_msg_size=Z.maxValueSize,G.storage=Z.storage,$.placement)G.placement=$.placement;if($.republish)G.republish=$.republish;if($.description)G.description=$.description;if($.markerTTL)G.allow_msg_ttl=!0,G.subject_delete_marker_ttl=(0,C5.nanos)(Z.markerTTL);if($.mirror){let w=Object.assign({},$.mirror);if(!w.name.startsWith(V5.kvPrefix))w.name=`${V5.kvPrefix}${w.name}`;G.mirror=w,G.mirror_direct=!0}else if($.sources){let w=$.sources.map((U)=>{let F=Object.assign({},U),H=F.name.startsWith(V5.kvPrefix)?F.name.substring(V5.kvPrefix.length):F.name;if(!F.name.startsWith(V5.kvPrefix))F.name=`${V5.kvPrefix}${F.name}`;if(!U.external&&H!==this.bucket)F.subject_transforms=[{src:`$KV.${H}.>`,dest:`$KV.${this.bucket}.>`}];return F});G.sources=w,G.subjects=[this.subjectForBucket()]}else G.subjects=[this.subjectForBucket()];if($.metadata)G.metadata=$.metadata;if(typeof $.compression==="boolean")G.compression=$.compression?r4.StoreCompression.S2:r4.StoreCompression.None;let X=this.js.nc,Y=X.getServerVersion(),Q=Y?(0,C5.compare)(Y,(0,C5.parseSemVer)("2.7.2"))>=0:!1;G.discard=Q?r4.DiscardPolicy.New:r4.DiscardPolicy.Old;let{ok:J,min:W}=X.features.get(C5.Feature.JS_ALLOW_DIRECT);if(!J&&$.allow_direct===!0){let w=Y?`${Y.major}.${Y.minor}.${Y.micro}`:"unknown";return Promise.reject(Error(`allow_direct is not available on server version ${w} - requires ${W}`))}if($.allow_direct=typeof $.allow_direct==="boolean"?$.allow_direct:J,G.allow_direct=$.allow_direct,this.direct=G.allow_direct,G.num_replicas=Z.replicas,Z.ttl)G.max_age=(0,C5.nanos)(Z.ttl);G.allow_rollup_hdrs=!0;let K;try{if(K=await this.jsm.streams.info(G.name),!K.config.allow_direct&&this.direct===!0)this.direct=!1}catch(w){if(w.message==="stream not found")K=await this.jsm.streams.add(G);else throw w}this.initializePrefixes(K)}initializePrefixes($){this._prefixLen=0,this.prefix=`$KV.${this.bucket}`,this.useJsPrefix=this.js.apiPrefix!=="$JS.API";let{mirror:Z}=$.config;if(Z){let G=Z.name;if(G.startsWith(V5.kvPrefix))G=G.substring(V5.kvPrefix.length);if(Z.external&&Z.external.api!==""){let X=Z.name.substring(V5.kvPrefix.length);this.useJsPrefix=!1,this.prefix=`$KV.${X}`,this.editPrefix=`${Z.external.api}.$KV.${G}`}else this.editPrefix=this.prefix}}bucketName(){return this.stream??`${V5.kvPrefix}${this.bucket}`}subjectForBucket(){return`${this.prefix}.${this.bucket}.>`}subjectForKey($,Z=!1){let G=[];if(Z){if(this.useJsPrefix)G.push(this.js.apiPrefix);if(this.editPrefix!=="")G.push(this.editPrefix);else G.push(this.prefix)}else if(this.prefix)G.push(this.prefix);return G.push($),G.join(".")}fullKeyName($){if(this.prefix!=="")return`${this.prefix}.${$}`;return`${lh1}.${this.bucket}.${$}`}get prefixLen(){if(this._prefixLen===0)this._prefixLen=this.prefix.length+1;return this._prefixLen}encodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.encode(G));break}return Z.join(".")}decodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.decode(G));break}return Z.join(".")}validateKey=ih1;validateSearchKey=nh1;hasWildcards=ph1;close(){return Promise.resolve()}dataLen($,Z){let G=Z?Z.get(r4.JsHeaders.MessageSizeHdr)||"":"";if(G!=="")return parseInt(G,10);return $.length}smToEntry($){return new rh1(this.bucket,this.prefixLen,$,this.codec)}jmToWatchEntry($,Z){return new oh1(this.bucket,this.prefixLen,$,Z,this.codec)}async create($,Z,G){let X;try{let Q={previousSeq:0},J=await this._put($,Z,Q,G);return Promise.resolve(J)}catch(Q){if(X=Q,Q instanceof r4.JetStreamApiError){let J=Q;if(J.code!==r4.JetStreamApiCodes.StreamWrongLastSequence&&J.code!==r4.JetStreamApiCodes.StreamWrongLastSequenceUnknown)return Promise.reject(Q)}}let Y=0;try{let Q=await this.get($);if(Q?.operation==="DEL"||Q?.operation==="PURGE")return Y=Q!==null?Q.revision:0,this._put($,Z,{previousSeq:Y},G);else return Promise.reject(X)}catch(Q){return Promise.reject(Q)}}update($,Z,G,X){if(G<=0)throw Error("version must be greater than 0");return this.put($,Z,{previousSeq:G,timeout:X})}async _put($,Z,G={},X){let Y=this.encodeKey($);this.validateKey(Y),Z=this.codec.value.encode(Z);let Q={timeout:G?.timeout};if(G.previousSeq!==void 0){let J=(0,C5.headers)();Q.headers=J,J.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`)}if(X)(Q.headers||(0,C5.headers)()).set(r4.PubHeaders.MessageTTL,X);try{return(await this.js.publish(this.subjectForKey(Y,!0),Z,Q)).seq}catch(J){return Promise.reject(J)}}put($,Z,G={}){return this._put($,Z,G)}async get($,Z){let G=this.encodeKey($);this.validateKey(G);let X={last_by_subj:this.subjectForKey(G)};if(Z&&Z.revision>0)X={seq:Z.revision};let Y=null;try{if(this.direct)Y=await this.jsm.direct.getMessage(this.bucketName(),X);else Y=await this.jsm.streams.getMessage(this.bucketName(),X);if(Y===null)return null;let Q=this.smToEntry(Y);if(Q.rawKey!==G)return null;return Q}catch(Q){throw Q}}purge($,Z){return this._deleteOrPurge($,"PURGE",Z)}delete($,Z){return this._deleteOrPurge($,"DEL",Z)}async purgeDeletes($=1800000){let Z=[],G=await this.history({key:">"});await(async()=>{for await(let J of G)if(J.operation==="DEL"||J.operation==="PURGE")Z.push(J)})().then(),G.stop();let X=Date.now()-$,Y=Z.map((J)=>{let W=this.subjectForKey(J.key);if(J.created.getTime()>=X)return this.jsm.streams.purge(this.stream,{filter:W,keep:1});else return this.jsm.streams.purge(this.stream,{filter:W,keep:0})}),Q=await Promise.all(Y);return Q.unshift({success:!0,purged:0}),Q.reduce((J,W)=>{return J.purged+=W.purged,J})}async _deleteOrPurge($,Z,G){if(!this.hasWildcards($))return this._doDeleteOrPurge($,Z,G);let X=await this.keys($),Y=[];for await(let Q of X)if(Y.push(this._doDeleteOrPurge(Q,Z)),Y.length===100)await Promise.all(Y),Y.length=0;if(Y.length>0)await Promise.all(Y)}async _doDeleteOrPurge($,Z,G){let X=this.encodeKey($);this.validateKey(X);let Y=(0,C5.headers)();if(Y.set(ah1.kvOperationHdr,Z),Z==="PURGE"){let Q=G;if(Y.set(r4.JsHeaders.RollupHdr,r4.JsHeaders.RollupValueSubject),typeof Q?.ttl==="string"&&Q.ttl!=="")Y.set(r4.PubHeaders.MessageTTL,`${Q.ttl}`)}if(G?.previousSeq)Y.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`);await this.js.publish(this.subjectForKey(X,!0),C5.Empty,{headers:Y})}_buildCC($,Z,G={}){let Y=(!Array.isArray($)?[$]:$).map((W)=>{let K=this.encodeKey(W);return this.validateSearchKey(W),this.fullKeyName(K)}),Q=r4.DeliverPolicy.LastPerSubject;if(Z===V5.KvWatchInclude.AllHistory)Q=r4.DeliverPolicy.All;if(Z===V5.KvWatchInclude.UpdatesOnly)Q=r4.DeliverPolicy.New;let J=void 0;if(Y.length===1)J=Y[0],Y=void 0;return Object.assign({deliver_policy:Q,ack_policy:r4.AckPolicy.None,filter_subjects:Y,filter_subject:J,flow_control:!0,idle_heartbeat:(0,C5.nanos)(5000)},G)}remove($){return this.purge($)}async history($={}){let Z=$.key??">",G={};G.headers_only=$.headers_only||!1;let X=new C5.QueuedIteratorImpl,Y=()=>{X.stop()},Q=this._buildCC(Z,V5.KvWatchInclude.AllHistory,G),J=await this.js.consumers.getPushConsumer(this.stream,Q);if(X._data=J,(await J.info(!0)).num_pending===0)return X.push(Y),X;let K=await J.consume({callback:(w)=>{let U=this.jmToWatchEntry(w,!1);if(X.push(U),X.received++,w.info.pending===0)X.push(Y)}});return K.closed().then(()=>{X.push(Y)}),(async()=>{for await(let w of K.status())switch(w.type){case"heartbeat":X.push(()=>{X.stop()});break}})().then(),X.iterClosed.then(()=>{K.stop()}),X}canSetWatcherName(){let $=this.js.nc,{ok:Z}=$.features.get(C5.Feature.JS_NEW_CONSUMER_CREATE_API);return Z}async watch($={}){let Z=$.key??">",G=new C5.QueuedIteratorImpl,X={};X.headers_only=$.headers_only||!1;let Y=V5.KvWatchInclude.LastValue;if($.include===V5.KvWatchInclude.AllHistory)Y=V5.KvWatchInclude.AllHistory;else if($.include===V5.KvWatchInclude.UpdatesOnly)Y=V5.KvWatchInclude.UpdatesOnly;let Q=$.ignoreDeletes===!0,J=this._buildCC(Z,Y,X);if(J.name=`KV_WATCHER_${C5.nuid.next()}`,$.resumeFromRevision&&$.resumeFromRevision>0)J.deliver_policy=r4.DeliverPolicy.StartSequence,J.opt_start_seq=$.resumeFromRevision;let W=await this.js.consumers.getPushConsumer(this.stream,J),w=(await W.info(!0)).num_pending,U=Y===V5.KvWatchInclude.UpdatesOnly||w===0;G._data=W;let F=0,H=await W.consume({callback:(N)=>{if(!U)F++,U=F>=w;let B=this.jmToWatchEntry(N,U);if(Q&&B.operation==="DEL")return;G.push(B),G.received++}});return G.iterClosed.then(()=>{H.stop()}),H.closed().then(()=>{G.push(()=>{G.stop()})}),G}async keys($=">"){let Z=new C5.QueuedIteratorImpl,G=this._buildCC($,V5.KvWatchInclude.LastValue,{headers_only:!0}),X=await this.js.consumers.getPushConsumer(this.stream,G);if((await X.info()).num_pending===0)return Z.stop(),Z;Z._data=X;let Q=await X.consume({callback:(J)=>{let W=J.headers?.get(ah1.kvOperationHdr);if(W!=="DEL"&&W!=="PURGE"){let K=this.decodeKey(J.subject.substring(this.prefixLen));Z.push(K)}if(J.info.pending===0)Q.stop()}});return(async()=>{for await(let J of Q.status())switch(J.type){case"heartbeat":Z.push(()=>{Z.stop()});break}})().then(),Q.closed().then(()=>{Z.push(()=>{Z.stop()})}),Z.iterClosed.then(()=>{Q.stop()}),Z}purgeBucket($){return this.jsm.streams.purge(this.bucketName(),$)}destroy(){return this.jsm.streams.delete(this.bucketName())}async status(){let Z=this.js.nc.info?.cluster??"",G=this.bucketName(),X=await this.jsm.streams.info(G);return new G80(X,Z)}}ah1.Bucket=wf;class G80{si;cluster;constructor($,Z=""){this.si=$,this.cluster=Z}get bucket(){return this.si.config.name.startsWith(V5.kvPrefix)?this.si.config.name.substring(V5.kvPrefix.length):this.si.config.name}get values(){return this.si.state.messages}get history(){return this.si.config.max_msgs_per_subject}get ttl(){return(0,C5.millis)(this.si.config.max_age)}get markerTTL(){if(typeof this.si.config.subject_delete_marker_ttl==="number")return(0,C5.millis)(this.si.config.subject_delete_marker_ttl);return 0}get bucket_location(){return this.cluster}get backingStore(){return this.si.config.storage}get storage(){return this.si.config.storage}get replicas(){return this.si.config.num_replicas}get description(){return this.si.config.description??""}get maxBucketSize(){return this.si.config.max_bytes}get maxValueSize(){return this.si.config.max_msg_size}get max_bytes(){return this.si.config.max_bytes}get placement(){return this.si.config.placement||{cluster:"",tags:[]}}get placementCluster(){return this.si.config.placement?.cluster??""}get republish(){return this.si.config.republish??{src:"",dest:""}}get streamInfo(){return this.si}get size(){return this.si.state.bytes}get metadata(){return this.si.config.metadata??{}}get compression(){if(this.si.config.compression)return this.si.config.compression!==r4.StoreCompression.None;return!1}}ah1.KvStatusImpl=G80;class rh1{bucket;sm;prefixLen;codec;constructor($,Z,G,X){this.bucket=$,this.prefixLen=Z,this.sm=G,this.codec=X}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get delta(){return 0}get created(){return this.sm.time}get revision(){return this.sm.seq}get operation(){if(this.sm.header?.has("Nats-Marker-Reason")){if(this.sm.header?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.header?.get(ah1.kvOperationHdr)||"PUT"}get length(){let $=this.sm.header.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}class oh1{bucket;sm;prefixLen;update;codec;constructor($,Z,G,X,Y){this.bucket=$,this.prefixLen=Z,this.sm=G,this.update=X,this.codec=Y}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get created(){return new Date((0,C5.millis)(this.sm.info.timestampNanos))}get revision(){return this.sm.seq}get operation(){if(this.sm.headers?.has("Nats-Marker-Reason")){if(this.sm.headers?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.headers?.get(ah1.kvOperationHdr)||"PUT"}get delta(){return this.sm.info.pending}get length(){let $=this.sm.headers?.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}get isUpdate(){return this.update}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}});var rx0=_((h3)=>{Object.defineProperty(h3,"__esModule",{value:!0});h3.validateKey=h3.validateBucket=h3.NoopKvCodecs=h3.Kvm=h3.defaultBucketOpts=h3.Bucket=h3.Base64KeyCodec=h3.KvWatchInclude=h3.kvPrefix=void 0;var $c1=px0();Object.defineProperty(h3,"kvPrefix",{enumerable:!0,get:function(){return $c1.kvPrefix}});Object.defineProperty(h3,"KvWatchInclude",{enumerable:!0,get:function(){return $c1.KvWatchInclude}});var ND=eh1();Object.defineProperty(h3,"Base64KeyCodec",{enumerable:!0,get:function(){return ND.Base64KeyCodec}});Object.defineProperty(h3,"Bucket",{enumerable:!0,get:function(){return ND.Bucket}});Object.defineProperty(h3,"defaultBucketOpts",{enumerable:!0,get:function(){return ND.defaultBucketOpts}});Object.defineProperty(h3,"Kvm",{enumerable:!0,get:function(){return ND.Kvm}});Object.defineProperty(h3,"NoopKvCodecs",{enumerable:!0,get:function(){return ND.NoopKvCodecs}});Object.defineProperty(h3,"validateBucket",{enumerable:!0,get:function(){return ND.validateBucket}});Object.defineProperty(h3,"validateKey",{enumerable:!0,get:function(){return ND.validateKey}})});var ox0=_((JH)=>{Object.defineProperty(JH,"__esModule",{value:!0});JH.NoopKvCodecs=JH.Kvm=JH.defaultBucketOpts=JH.Bucket=JH.Base64KeyCodec=JH.KvWatchInclude=void 0;var vC8=rx0();Object.defineProperty(JH,"KvWatchInclude",{enumerable:!0,get:function(){return vC8.KvWatchInclude}});var Cd=rx0();Object.defineProperty(JH,"Base64KeyCodec",{enumerable:!0,get:function(){return Cd.Base64KeyCodec}});Object.defineProperty(JH,"Bucket",{enumerable:!0,get:function(){return Cd.Bucket}});Object.defineProperty(JH,"defaultBucketOpts",{enumerable:!0,get:function(){return Cd.defaultBucketOpts}});Object.defineProperty(JH,"Kvm",{enumerable:!0,get:function(){return Cd.Kvm}});Object.defineProperty(JH,"NoopKvCodecs",{enumerable:!0,get:function(){return Cd.NoopKvCodecs}})});function X80(){let $=new TextEncoder,Z=new TextDecoder;return{encode:(G)=>$.encode(JSON.stringify(G)),decode:(G)=>JSON.parse(Z.decode(G))}}class sx0{options;kv=null;codec=X80();constructor($){this.options=$}async init(){let $=this.options.getJetStream();if(!$)return;this.kv=await new Gc1.Kvm($).create(gC8,{storage:Zc1.StorageType.Memory})}async get($,Z){if(!this.kv)return null;try{let G=await this.kv.get(`${$}.${Z}`);if(!G?.value?.length)return null;if(G.operation==="DEL"||G.operation==="PURGE")return null;return this.codec.decode(G.value)}catch{return null}}async set($,Z,G){if(!this.kv)return;try{await this.kv.put(`${$}.${Z}`,this.codec.encode(G))}catch{}}async invalidate($){if(!this.kv)return;await Promise.all(["tools","resources","prompts"].map(async(G)=>{try{await this.kv.delete(`${G}.${$}`)}catch{}}))}teardown(){this.kv=null}}function hC8($,Z,G){if(G<=0)return!0;if($===void 0)return!0;return Z-$>=G}function Y80($){return $ instanceof S1&&$.code===v1.MethodNotFound}function cC8($){return $ instanceof S1&&$.code===-32000&&/connection closed/i.test($.message)}async function KH($,Z,G,X,Y,Q=0){if(!X)try{return await G()}catch(w){if(Y80(w))return[];return _d.add(1,{type:$,outcome:"error",stage:"no_cache"}),null}let J=`${$}:${Z}`,W=await X.get($,Z);if(W===null)try{let w=await G();return X.set($,Z,w).catch(()=>{}),ax0.set(J,Date.now()),_d.add(1,{type:$,outcome:"miss",stage:"miss"}),w}catch(w){if(Y80(w))return X.set($,Z,[]).catch(()=>{}),[];return _d.add(1,{type:$,outcome:"error",stage:"miss"}),null}if(_d.add(1,{type:$,outcome:"hit",stage:"hit"}),hC8(ax0.get(J),Date.now(),Q)&&!Q80.has(J)){Q80.add(J),ax0.set(J,Date.now());let w=G().then((U)=>X.set($,Z,U)).catch((U)=>{if(Y80(U)||cC8(U)){if(Y80(U))X.set($,Z,[]).catch(()=>{});return}_d.add(1,{type:$,outcome:"error",stage:"revalidation"})}).finally(()=>Q80.delete(J));Y?.(w)}return W}function ex0($){Xc1=$}function t5(){return Xc1}var Zc1,Gc1,_d,gC8="DECOCMS_MCP_LISTS",Q80,ax0,WH=30000,Xc1=null;var UY=O(()=>{E5();B5();Zc1=k(dB(),1),Gc1=k(ox0(),1),_d=E8.createCounter("mcp_list_cache.fetches",{description:"MCP list cache fetch outcomes (hit, miss, error)",unit:"{fetches}"});Q80=new Set;E8.createObservableGauge("mcp_list_cache.pending_revalidations",{description:"In-flight background MCP list revalidations on this pod",unit:"{revalidations}"}).addCallback(($)=>$.observe(Q80.size));ax0=new Map});var bd=($,Z)=>{if(Z===null||Z===void 0)return;let G=$.replace(/\[(\w+)\]/g,".$1").split(".").filter(Boolean),X=Z;for(let Y of G){if(X===null||X===void 0||typeof X!=="object")return;X=X[Y]}return X};function J80($){let Z=$.split("::");if(Z.length!==2||!Z[0]||!Z[1])throw Error(`Invalid scope format: ${$}. Expected format: "KEY::SCOPE"`);return Z}function uC8($){try{return J80($)}catch{return null}}function dC8($){if(typeof $==="object"&&$!==null&&"value"in $){let Z=$.value;if(typeof Z==="string")return Z}return null}function $v0($,Z){let G={};if(!$||!Z)return G;for(let X of Z){if(X==="*"){G["*"]=["*"];continue}let Y=uC8(X);if(!Y)continue;let[Q,J]=Y,W=bd(Q,$),K=dC8(W);if(K){if(!G[K])G[K]=[];G[K].push(J)}}return G}function Yc1($,Z){let G=$v0($,Z);return new Set(Object.keys(G).filter((X)=>X!=="*"))}var Zv0=()=>{};async function Qc1($){if(!$.refreshToken)return{success:!1,permanent:!1,error:"No refresh token available"};if(!$.tokenEndpoint)return{success:!1,permanent:!1,error:"No token endpoint available"};if(!$.clientId)return{success:!1,permanent:!1,error:"No client ID available"};try{let Z=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId});if($.clientSecret)Z.set("client_secret",$.clientSecret);if($.scope)Z.set("scope",$.scope);let G=await fetch($.tokenEndpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:Z.toString()});if(!G.ok){let Y=await G.text(),Q,J;try{let K=JSON.parse(Y);Q=K.error,J=K.error_description}catch{}let W=G.status===400&&!!Q&&lC8.has(Q);return(W?console.error:console.warn)("[TokenRefresh] refresh failed",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,status:G.status,errorCode:Q,errorDescription:J,permanent:W}),{success:!1,permanent:W,status:G.status,errorCode:Q,error:J||Q||`Token refresh failed: ${G.status}`}}let X=await G.json();return{success:!0,accessToken:X.access_token,refreshToken:X.refresh_token||$.refreshToken,expiresIn:X.expires_in,scope:X.scope}}catch(Z){return console.warn("[TokenRefresh] network/parse error",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,message:Z instanceof Error?Z.message:String(Z)}),{success:!1,permanent:!1,error:Z instanceof Error?Z.message:"Token refresh failed"}}}var lC8;var Jc1=O(()=>{lC8=new Set(["invalid_grant","bad_refresh_token"])});import{createHash as mC8,randomBytes as iC8,timingSafeEqual as Om4}from"crypto";function pC8($){return $.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function Xv0($){return mC8("sha256").update($).digest("hex")}function wc1($){let Z=Gv0.length+1,G=Z+Kc1;if(!$.startsWith(`${Gv0}_`)||$.length<=G+1||$[G]!=="_")return null;let X=$.slice(Z,G),Y=$.slice(G+1);if(!Wc1.test(X)||!Wc1.test(Y))return null;return X}function Uc1(){let $=pC8(iC8(nC8)),Z=$.slice(0,Kc1),G=`${Gv0}_${Z}_${$}`;return{plaintext:G,prefix:Z,hash:Xv0(G)}}var Gv0="stv",nC8=32,Kc1=12,Wc1;var Fc1=O(()=>{Wc1=/^[A-Za-z0-9_-]+$/});function Hc1($){return{id:$.id,organizationId:$.organization_id,subjectConnectionId:$.subject_connection_id,tokenHash:$.token_hash,tokenPrefix:$.token_prefix,name:$.name,revokedAt:$.revoked_at,lastUsedAt:$.last_used_at,createdAt:$.created_at,updatedAt:$.updated_at}}class Yv0{db;constructor($){this.db=$}async createOrRotateWorkloadToken($){let Z=$.name??"default";return await this.db.transaction().execute(async(X)=>{if(!await X.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Subject connection not found in organization");let Q=Uc1(),J=new Date().toISOString();await X.updateTable("connection_workload_tokens").set({revoked_at:J,updated_at:J}).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",Z).where("revoked_at","is",null).execute();let W=await X.insertInto("connection_workload_tokens").values({id:q6("cwt"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,token_hash:Q.hash,token_prefix:Q.prefix,name:Z,revoked_at:null,last_used_at:null,created_at:J,updated_at:J}).returningAll().executeTakeFirstOrThrow();return{plaintextToken:Q.plaintext,record:Hc1(W)}})}async findActiveWorkloadToken($){let Z=await this.db.selectFrom("connection_workload_tokens").selectAll().where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",$.name??"default").where("revoked_at","is",null).executeTakeFirst();return Z?Hc1(Z):null}async revokeWorkloadToken($){let Z=new Date().toISOString();await this.db.updateTable("connection_workload_tokens").set({revoked_at:Z,updated_at:Z}).where("id","=",$.tokenId).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("revoked_at","is",null).execute()}async authenticateWorkloadToken($){let Z=wc1($);if(!Z)return null;let G=Xv0($),X=await this.db.selectFrom("connection_workload_tokens").select(["id","organization_id","subject_connection_id","token_prefix"]).where("token_prefix","=",Z).where("token_hash","=",G).where("revoked_at","is",null).executeTakeFirst();if(!X)return null;let Y=new Date().toISOString();return await this.db.updateTable("connection_workload_tokens").set({last_used_at:Y,updated_at:Y}).where("id","=",X.id).execute(),{tokenId:X.id,tokenPrefix:X.token_prefix,organizationId:X.organization_id,subjectConnectionId:X.subject_connection_id}}async replaceGrantsForSubject($){await this.db.transaction().execute(async(Z)=>{if(!await Z.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Referenced connection not found in organization");let X=[...new Set($.grants.map((J)=>J.targetConnectionId))];if(X.length>0){if((await Z.selectFrom("connections").select("id").where("organization_id","=",$.organizationId).where("id","in",X).execute()).length!==X.length)throw Error("Referenced connection not found in organization")}if(await Z.deleteFrom("connection_credential_grants").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).execute(),$.grants.length===0)return;let Y=new Date().toISOString(),Q=$.grants.map((J)=>({id:q6("ccg"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,target_connection_id:J.targetConnectionId,scope:J.scope,created_by:$.createdBy,created_at:Y,updated_at:Y}));await Z.insertInto("connection_credential_grants").values(Q).execute()})}async hasGrant($){return!!await this.db.selectFrom("connection_credential_grants").select("id").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("target_connection_id","=",$.targetConnectionId).where("scope","=",$.scope).executeTakeFirst()}}var W80="credential:access-token:read",K80="credential:configuration:read";var w80=O(()=>{RG();Fc1()});function BD($){let Z=String($??"");if(Z&&!Z.includes("T"))return Z.replace(" ","T")+"Z";return Z}function q$($){return $.replace(/\0/g,"").replace(/\\/g,"\\\\").replace(/'/g,"''")}function l8($){let Z=Number($??0);return Number.isFinite(Z)?Z:0}function rC8($){if(!tC8.has($))throw Error(`Invalid groupByColumn: ${$}`);return $}function Qv0($){if(!oC8.test($))throw Error(`Invalid JSONPath: ${$}`);if($.startsWith("$."))return $;if($.startsWith("."))return`$${$}`;return`$.${$}`}function wv0($){return $.replace(/^\$\./,"").split(".").map((G)=>`'${q$(G)}'`).join(", ")}function eC8($){let Z=aC8.exec($);if(!Z||!Z[1]||!Z[2])throw Error(`Invalid interval: ${$}`);let G=parseInt(Z[1],10),X=Z[2],Y=sC8[X];if(G<1||G>Y)throw Error(`Invalid interval amount: ${G}${X} (max ${Y}${X})`);return{amount:G,unit:X}}function wH($,Z,G="timestamp"){let{amount:X,unit:Y}=eC8($),J={m:"MINUTE",h:"HOUR",d:"DAY"}[Y];if(Z==="duckdb")return`time_bucket(INTERVAL '${X} ${J}', CAST(${G} AS TIMESTAMP))`;return`toStartOfInterval(${G}, INTERVAL ${X} ${J})`}function fd($,Z,G){if(G==="duckdb")return`json_extract_string(${$}, '${Z}')`;let X=wv0(Z);return`JSONExtractString(${$}, ${X})`}function $_8($,Z,G){if(G==="duckdb")return`CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`JSONExtractFloat(${$}, ${X})`}function Nc1($,Z,G){if(G==="duckdb")return`TRY_CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`toFloat64OrZero(JSONExtractString(${$}, ${X}))`}function Jv0($){if($===null||$===void 0)return{};if(typeof $==="object")return $;let Z=String($);try{return JSON.parse(Z)}catch{return{_decocms_truncated:Z}}}function Wv0($){return{id:String($.id??""),organizationId:String($.organization_id??""),connectionId:String($.connection_id??""),toolName:String($.tool_name??""),input:Jv0($.input),output:Jv0($.output),isError:$.is_error===1||$.is_error===!0||$.is_error==="1"||typeof $.is_error==="bigint"&&$.is_error===1n,errorMessage:$.error_message!=null?String($.error_message):null,durationMs:Number($.duration_ms??0),timestamp:(()=>{if($.timestamp instanceof Date)return $.timestamp.toISOString();let Z=String($.timestamp??""),G=new Date(Z.includes("T")?Z:Z.replace(" ","T")+"Z");return Number.isNaN(G.getTime())?Z:G.toISOString()})(),userId:$.user_id!=null?String($.user_id):null,requestId:String($.request_id??""),userAgent:$.user_agent!=null?String($.user_agent):null,virtualMcpId:$.virtual_mcp_id!=null?String($.virtual_mcp_id):null,properties:$.properties?Jv0($.properties):null}}function Ec1($,Z){let G=[];if($.properties)for(let[X,Y]of Object.entries($.properties)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') = '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') = '${J}'`)}if($.propertyKeys)for(let X of $.propertyKeys){let Y=q$(X);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Y}') IS NOT NULL AND json_extract_string(properties, '$.${Y}') != ''`);else G.push(`JSONExtractString(properties, '${Y}') IS NOT NULL AND JSONExtractString(properties, '${Y}') != ''`)}if($.propertyPatterns)for(let[X,Y]of Object.entries($.propertyPatterns)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') ILIKE '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') ILIKE '${J}'`)}if($.propertyInValues)for(let[X,Y]of Object.entries($.propertyInValues)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`list_contains(string_split(json_extract_string(properties, '$.${Q}'), ','), '${J}')`);else G.push(`has(splitByChar(',', JSONExtractString(properties, '${Q}')), '${J}')`)}return G}function Oc1($,Z){let G=[];if(u3(G,Z?.startDate,$),!Z)return G;if(Z.connectionIds?.length){let X=Z.connectionIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`connection_id IN (${X})`)}if(Z.toolNames?.length){let X=Z.toolNames.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`tool_name IN (${X})`)}if(Z.virtualMcpIds?.length){let X=Z.virtualMcpIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`virtual_mcp_id IN (${X})`)}if(Z.endDate)G.push(c3(Z.endDate,$));if(Z.propertyFilters)G.push(...Ec1(Z.propertyFilters,$));return G}function Dc1($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) >= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} >= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} >= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function c3($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) <= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} <= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} <= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function u3($,Z,G,X="timestamp"){if(Z)$.push(Dc1(Z,G,X));else if(G==="clickhouse")$.push(Dc1(new Date(Date.now()-Z_8),G,X))}class Uv0{engine;sourceFactory;metricEngine;metricSourceFactory;dialect;metricsFromLogs;constructor($,Z,G,X,Y="clickhouse",Q=!1){this.engine=$;this.sourceFactory=Z;this.metricEngine=G;this.metricSourceFactory=X;this.dialect=Y;this.metricsFromLogs=Q}async query($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if($.connectionId)G.push(`connection_id = '${q$($.connectionId)}'`);if($.excludeConnectionIds?.length){let H=$.excludeConnectionIds.map((N)=>`'${q$(N)}'`).join(",");G.push(`connection_id NOT IN (${H})`)}if($.virtualMcpId)G.push(`virtual_mcp_id = '${q$($.virtualMcpId)}'`);if($.toolName)G.push(`tool_name = '${q$($.toolName)}'`);if($.isError!==void 0)G.push(`is_error = ${$.isError?1:0}`);if(u3(G,$.startDate,this.dialect),$.endDate)G.push(c3($.endDate,this.dialect));if($.propertyFilters)G.push(...Ec1($.propertyFilters,this.dialect));let X=1000,Y=Math.min(Math.max(1,Math.floor($.limit??50)),X),Q=Math.max(0,Math.floor($.offset??0)),J=G.join(" AND ");if(this.dialect==="duckdb"){let H=`SELECT ${Bc1}, count(*) OVER () AS _total FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,N=await this.engine.query(H);if(N.length===0)return{logs:[],total:0};let B=Number(N[0]._total??0);return{logs:N.map(Wv0),total:B}}let W=`SELECT count(*) AS total FROM ${Z} WHERE ${J}`,K=`SELECT ${Bc1} FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,[w,U]=await Promise.all([this.engine.query(W),this.engine.query(K)]),F=Number(w[0]?.total??0);return{logs:U.map(Wv0),total:F}}async getById($,Z){if(!$||!Z)return null;let X=`SELECT * FROM ${this.sourceFactory($)} WHERE organization_id = '${q$($)}' AND id = '${q$(Z)}' LIMIT 1`,Y=await this.engine.query(X);if(Y.length===0)return null;return Wv0(Y[0])}async getStats($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if(u3(G,$.startDate,this.dialect),$.endDate)G.push(c3($.endDate,this.dialect));let X=`SELECT count(*) AS total_calls, coalesce(sum(CASE WHEN is_error = 1 THEN 1.0 ELSE 0.0 END) / NULLIF(count(*), 0), 0) AS error_rate, coalesce(avg(duration_ms), 0) AS avg_duration_ms FROM ${Z} WHERE ${G.join(" AND ")}`,Q=(await this.engine.query(X))[0]??{};return{totalCalls:Number(Q.total_calls??0),errorRate:Number(Q.error_rate??0),avgDurationMs:Number(Q.avg_duration_ms??0)}}async queryLlmUsageStats($){let Z={totalCalls:0,totalErrors:0,avgDurationMs:0,p50DurationMs:0,p95DurationMs:0,totalInputTokens:0,totalOutputTokens:0,totalTokens:0,totalCostUsd:0,topTools:[],timeseries:[]};if(!$.organizationId||!$.connectionId)return Z;let G=this.dialect,X=G==="clickhouse",Y=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),Q=wH($.interval,G,"timestamp"),J=(L)=>`coalesce(${Nc1("properties",`$.${L}`,G)}, 0)`,W=X?"count()":"count(*)",K=X?"countIf(is_error = 1)":"count(*) FILTER (WHERE is_error = 1)",w=(L)=>X?`quantile(${L})(duration_ms)`:`quantile_cont(duration_ms, ${L})`,U=[`organization_id = '${q$($.organizationId)}'`,`connection_id = '${q$($.connectionId)}'`];if(u3(U,$.startDate,G),$.endDate)U.push(c3($.endDate,G));if($.userIds?.length){let L=$.userIds.slice(0,100).map((z)=>`'${q$(z)}'`).join(",");U.push(`user_id IN (${L})`)}let F=U.join(" AND "),H=Math.min(Math.max(1,Math.floor($.topN??5)),20),N=`${W} AS calls,
+</workflows>`,Wh1;var Kh1=O(()=>{R8();Wh1={id:"studio-usage-manager",title:"Usage Manager",icon:"icon://BarChart10?color=chart-2",description:"Analyze usage, costs, and clean up idle agents and connections",selectedTools:["MONITORING_STATS","MONITORING_LOGS_LIST","MONITORING_LOG_GET","MONITORING_THREAD_USAGE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_LAST_USED_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_DELETE","ORGANIZATION_MEMBER_LIST"],selectedConnections:null,selectedPrompts:[],instructions:dV8,getId:rZ.USAGE_MANAGER}});function fx0($){return wD.find((Z)=>$.startsWith(`${Z.id}_`))??null}async function lV8($,Z){if("resolveRuntime"in $)return $.resolveRuntime(Z);return{instructions:$.instructions,selectedTools:$.selectedTools}}async function r$0({virtualMcp:$,agentId:Z=$.id,organizationId:G,ctx:X}){let Y=fx0(Z);if(!Y)return $;let Q=await lV8(Y,{orgId:G,ctx:X}),J=Q.selectedTools?[...Q.selectedTools]:null;return{...$,metadata:{...$.metadata??{},instructions:Q.instructions},connections:$.connections.map((W)=>({...W,selected_tools:J}))}}async function o$0($,Z){if(!("checklist"in $))return[];return Promise.all($.checklist.map(async(G)=>({label:G.label,activeForm:G.activeForm,action:G.action,completed:await G.isCompleted(Z),alwaysSuggest:G.alwaysSuggest})))}async function wh1($,Z,G){let X={self:G4.SELF($),registry:G4.REGISTRY($),"community-registry":G4.COMMUNITY_REGISTRY($)};await Promise.all(wD.map(async(Y)=>{let Q=Y.getId($),J=await G.findById(Q,$),K=(Y.selectedConnections??["self"]).map((w)=>X[w]);if(J){await G.update(Q,Z,{metadata:{...J.metadata??{},instructions:Y.instructions},connections:K.map((w)=>{let U=J.connections.find((F)=>F.connection_id===w);return{connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:U?.selected_resources??null,selected_prompts:U?.selected_prompts??null}})});return}await G.create($,Z,{title:Y.title,description:Y.description,icon:Y.icon,status:"active",pinned:!1,metadata:{instructions:Y.instructions},connections:K.map((w)=>({connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:null,selected_prompts:Y.selectedPrompts?[...Y.selectedPrompts]:null}))},{id:Q})}))}var wD;var Jf=O(()=>{R8();ng1();tg1();og1();$h1();Gh1();Yh1();Jh1();Kh1();wD=[eg1,ig1,rg1,Zh1,pg1,Xh1,Qh1,Wh1]});import{DBOS as a$0}from"@dbos-inc/dbos-sdk";async function mV8($){let Z=H6(),G=new Qf(Z.db);await wh1($.orgId,$.createdBy,G)}async function iV8($){let Z=H6(),G=new Qf(Z.db);for(let X of wD){let Y=X.getId($.orgId),Q=await G.findById(Y,$.orgId);if(!Q)continue;let J=X.selectedPrompts?[...X.selectedPrompts]:null;if(Q.connections.every((K)=>{let w=K.selected_prompts;if(J===null)return w===null;if(w===null)return!1;if(w.length!==J.length)return!1;return w.every((U,F)=>U===J[F])}))continue;await G.update(Y,$.createdBy,{connections:Q.connections.map((K)=>({connection_id:K.connection_id,selected_tools:K.selected_tools,selected_resources:K.selected_resources,selected_prompts:J}))})}}async function nV8($){await a$0.runStep(()=>mV8($),{name:"installStudioPack"}),await a$0.runStep(()=>iV8($),{name:"backfillSelectedPrompts"})}async function xx0($){await a$0.startWorkflow(pV8,{workflowID:`install-studio-pack:${tV8}:${$.orgId}`})($)}async function Uh1(){let Z=await H6().db.selectFrom("member").select(["organizationId","userId"]).orderBy("createdAt","asc").execute(),G=new Map;for(let X of Z)if(!G.has(X.organizationId))G.set(X.organizationId,X.userId);await Promise.all(Array.from(G).map(async([X,Y])=>{try{await xx0({orgId:X,createdBy:Y})}catch(Q){console.error("[studio-pack-backfill] enqueue failed",{orgId:X},Q)}}))}var pV8,tV8="v5";var s$0=O(()=>{HQ();bx0();Jf();pV8=a$0.registerWorkflow(nV8,{name:"installStudioPackWorkflow"})});import{jwtVerify as rV8,SignJWT as Fh1}from"jose";import{randomBytes as oV8}from"crypto";function Hh1(){if(qd)return qd;let $=O1(),Z=$.meshJwtSecret??$.betterAuthSecret;if(Z)qd=new TextEncoder().encode(Z);else console.warn("MESH_JWT_SECRET not set - generating random secret (not persistent)"),qd=new Uint8Array(oV8(32));return qd}async function Nh1($,Z="5m"){let G=Hh1();return await new Fh1($).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Z).sign(G)}async function vx0($){try{let Z=Hh1(),{payload:G}=await rV8($,Z);return G}catch{return}}async function XH($,Z,G=3600){let X=O1(),Y=X.meshJwtSecret??X.betterAuthSecret;if(!Y)throw Error("A deterministic JWT secret is required to mint gateway JWTs \u2014 set MESH_JWT_SECRET or BETTER_AUTH_SECRET");let Q=new TextEncoder().encode(Y);return await new Fh1({iss:"mesh",sub:$,...Z&&{email:Z}}).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Math.floor(Date.now()/1000)+G).sign(Q)}var qd=null;var UD=O(()=>{F8()});class Md{constructor(){this._messageQueue=[]}static createLinkedPair(){let $=new Md,Z=new Md;return $._otherTransport=Z,Z._otherTransport=$,[$,Z]}async start(){while(this._messageQueue.length>0){let $=this._messageQueue.shift();this.onmessage?.($.message,$.extra)}}async close(){let $=this._otherTransport;this._otherTransport=void 0,await $?.close(),this.onclose?.()}async send($,Z){if(!this._otherTransport)throw Error("Not connected");if(this._otherTransport.onmessage)this._otherTransport.onmessage($,{authInfo:Z?.authInfo});else this._otherTransport._messageQueue.push({message:$,extra:{authInfo:Z?.authInfo}})}}import{SpanStatusCode as Bh1}from"@opentelemetry/api";function $0($){return{...$,execute:async(Z,G)=>{return await G.timings.measure(`tool.${$.name}`,async()=>G.tracer.startActiveSpan(`tool.${$.name}`,{attributes:{"tool.name":$.name,"organization.id":G.organization?.id??"system","user.id":G.auth.user?.id??G.auth.apiKey?.userId??"anonymous"}},async(X)=>{try{G.toolName=$.name,G.access.setToolName?.($.name);let Y=await $.handler(Z,G);return X.setStatus({code:Bh1.OK}),Y}catch(Y){throw X.setStatus({code:Bh1.ERROR,message:Y.message}),X.recordException(Y),Y}finally{X.end()}}))}}}var Y1=()=>{};function O0($){if(!$.organization)throw Error("This operation requires organization scope");return $.organization}function y1($){return $.auth.user?.id??$.auth.apiKey?.userId}function aV8($){return!!($.auth.user||$.auth.apiKey)}function M0($){if(!aV8($))throw Error("Authentication required")}import{z as J6}from"zod";var e$0,Oh1,Dh1,Eh1,Lh1,zh1,jh1,Ph1,Ah1,Th1;var Wf=O(()=>{e$0=J6.record(J6.string(),J6.array(J6.string())),Oh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),userId:J6.string().describe("ID of the user who owns this API key"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Example: { "self": ["API_KEY_CREATE"], "conn_abc123": ["SEND_MESSAGE"] }'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Dh1=J6.object({name:J6.string().min(1).max(64).describe("Human-readable name for the API key"),permissions:e$0.describe(`Permissions to grant (REQUIRED \u2014 there is no implicit default). Format: { resource: [actions] }. Resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names (e.g., ["ORGANIZATION_GET"]) or ["*"] for all. Example: { "self": ["ORGANIZATION_GET", "COLLECTION_CONNECTIONS_LIST"] }. The key is authorized solely by this allowlist; the creator's role does not widen it.`),expiresIn:J6.number().positive().optional().describe("Expiration time in seconds. If not provided, key never expires."),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("Additional metadata to store with the API key")}),Eh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),key:J6.string().describe("The actual API key value. STORE THIS SECURELY - it will not be shown again!"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Lh1=J6.object({}),zh1=J6.object({items:J6.array(Oh1).describe("List of API keys (without key values)")}),jh1=J6.object({keyId:J6.string().describe("ID of the API key to update"),name:J6.string().min(1).max(64).optional().describe("New name for the API key"),permissions:e$0.optional().describe('New permissions. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names or "*" for all. Example: { "self": ["API_KEY_CREATE"] }. Replaces existing permissions.'),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("New metadata. Replaces existing metadata.")}),Ph1=J6.object({item:Oh1.describe("The updated API key (without key value)")}),Ah1=J6.object({keyId:J6.string().describe("ID of the API key to delete")}),Th1=J6.object({success:J6.boolean().describe("Whether the deletion was successful"),keyId:J6.string().describe("ID of the deleted API key")})});var yx0;var Ih1=O(()=>{q4();Y1();Wf();yx0=$0({name:"API_KEY_CREATE",description:"Create an API key with scoped permissions. The key value is returned only once \u2014 store it immediately.",annotations:{title:"Create API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Dh1,outputSchema:Eh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.create({name:$.name,permissions:$.permissions,expiresIn:$.expiresIn,metadata:{...$.metadata,organization:Z.organization}}),X=G.expiresAt?G.expiresAt instanceof Date?G.expiresAt.toISOString():G.expiresAt:null,Y=G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"api_key_created",...Z.organization?.id?{groups:{organization:Z.organization.id}}:{},properties:{key_id:G.id,key_name:G.name??$.name,organization_id:Z.organization?.id,has_expiry:!!X}});return{id:G.id,name:G.name??$.name,key:G.key,permissions:G.permissions??{},expiresAt:X,createdAt:Y}}})});var gx0;var Rh1=O(()=>{q4();Y1();Wf();gx0=$0({name:"API_KEY_DELETE",description:"Delete and instantly revoke an API key. Cannot be undone.",annotations:{title:"Delete API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ah1,outputSchema:Th1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to delete API key");let Y=(await Z.boundAuth.apiKey.list())?.find((K)=>K.id===$.keyId);if(!Y)throw Error("API key not found");let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot delete API key from another organization");if(await Z.boundAuth.apiKey.delete($.keyId),W)i1.capture({distinctId:G,event:"api_key_deleted",groups:{organization:W},properties:{key_id:$.keyId,organization_id:W}});return{success:!0,keyId:$.keyId}}})});var hx0;var qh1=O(()=>{Y1();Wf();hx0=$0({name:"API_KEY_LIST",description:"List API keys for the current user in the current organization. Returns metadata only \u2014 key values are never shown after creation.",annotations:{title:"List API Keys",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Lh1,outputSchema:zh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.list(),X=Z.organization?.id;return{items:(G??[]).filter((Q)=>{return Q.metadata?.organization?.id===X}).map((Q)=>({id:Q.id,name:Q.name??"Unnamed Key",userId:Q.userId,permissions:Q.permissions??{},expiresAt:Q.expiresAt?Q.expiresAt instanceof Date?Q.expiresAt.toISOString():Q.expiresAt:null,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});var cx0;var Mh1=O(()=>{Y1();Wf();cx0=$0({name:"API_KEY_UPDATE",description:"Update an API key's name, permissions, or metadata. The key value cannot be changed or retrieved.",annotations:{title:"Update API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:jh1,outputSchema:Ph1,handler:async($,Z)=>{if(M0(Z),await Z.access.check(),!y1(Z))throw Error("User ID required to update API key");let Y=(await Z.boundAuth.apiKey.list())?.find((w)=>w.id===$.keyId);if(!Y)throw Error(`API key not found: ${$.keyId}`);let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot update API key from another organization");let K=await Z.boundAuth.apiKey.update({keyId:$.keyId,name:$.name,permissions:$.permissions,metadata:{...$.metadata,organization:Z.organization}});if(!K)throw Error(`Failed to update API key: ${$.keyId}`);return{item:{id:K.id,name:K.name??$.name??"Unnamed Key",userId:K.userId,permissions:K.permissions??{},expiresAt:K.expiresAt?K.expiresAt instanceof Date?K.expiresAt.toISOString():K.expiresAt:null,createdAt:K.createdAt instanceof Date?K.createdAt.toISOString():K.createdAt}}}})});var kh1=O(()=>{Ih1();Rh1();qh1();Mh1();Wf()});function YH($){let Z=$.trim();if(!Z)return{ok:!1,error:"Enter a website URL."};let G=eV8.test(Z),X=$C8.test(Z),Y=ZC8.test(Z);if(G&&!X&&!Y)return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let Q=X?Z:`https://${Z}`,J;try{J=new URL(Q)}catch{return{ok:!1,error:"Enter a valid website URL."}}if(J.protocol!=="http:"&&J.protocol!=="https:")return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let W=J.hostname.split(".");if(W.length<2||W.some((K)=>!K||!GC8.test(K)))return{ok:!1,error:"Enter a valid website URL."};return J.protocol="https:",{ok:!0,value:J.origin}}var eV8,$C8,ZC8,GC8;var kd=O(()=>{eV8=/^[a-zA-Z][a-zA-Z\d+.-]*:/,$C8=/^[a-zA-Z][a-zA-Z\d+.-]*:\/\//,ZC8=/^[^\s/:?#]+\.[^\s/:?#]+:\d+(?:[/?#]|$)/,GC8=/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i});import{z as qG}from"zod";function FD($){if($.baseUrl)return $.baseUrl.replace(/\/+$/,"");return(($.settings??O1()).commerceDiscoveryInternalApiUrl??XC8).replace(/\/+$/,"")}function Vh1($={}){return`${FD($)}/api/v2/mcp`}function HD($){let Z=$.apiKey??($.settings??O1()).commerceDiscoveryInternalApiKey;if(!Z)throw Error("COMMERCE_DISCOVERY_INTERNAL_API_KEY is required to set up Commerce Discovery.");return Z}function $80($){return new URL($).hostname}function QC8($){return $==="ownership_unverified"||$==="already_claimed_by_other_org"}function JC8($,Z={}){switch($){case"ownership_unverified":{let G=Z.email?`O e-mail ${Z.email}`:"Este e-mail",X=Z.domain?` ${Z.domain}`:" este site";return`${G} n\xE3o tem permiss\xE3o para reivindicar${X}. Use um e-mail do dom\xEDnio do site ou pe\xE7a ao suporte para autorizar seu dom\xEDnio.`}case"already_claimed_by_other_org":return"Este site j\xE1 pertence a outra organiza\xE7\xE3o. Fale com o suporte para transferir o acesso.";case"unknown":return"N\xE3o foi poss\xEDvel configurar o Commerce Discovery. Tente novamente ou fale com o suporte.";default:return $}}async function WC8($){let Z=await $.text().catch(()=>"");if(!Z)return"unknown";try{let G=JSON.parse(Z);return QC8(G.error)?G.error:"unknown"}catch{return"unknown"}}async function ux0($){let Z=`Commerce Discovery auth failed with status ${$.status}.`,G=await $.text().catch(()=>"");if(!G)return Z;try{let X=JSON.parse(G),Y=typeof X.error==="string"?X.error:typeof X.message==="string"?X.message:null;return Y?`Commerce Discovery auth failed: ${Y}.`:Z}catch{return Z}}async function _h1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/upgrade`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.orgName?{name:$.orgName}:{},...$.email?{email:$.email}:{},...$.reportUrl?{report_url:$.reportUrl}:{}})});if(!W.ok){let w=await WC8(W);throw new Ch1(w,{email:$.email,domain:Q})}let K=YC8.safeParse(await W.json());if(!K.success)throw Error("Commerce Discovery auth response did not include a token.");return{authorizationToken:K.data.token}}async function bh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/bindings`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,provider:$.provider,resource_id:$.resourceId})});if(W.status===409)return{ok:!1,reason:"resource_already_bound",detail:"Este recurso j\xE1 est\xE1 vinculado a outra loja. Se ele \xE9 seu, fale com o suporte para revis\xE3o manual."};if(W.status===422){let w=Sh1.safeParse(await W.json());return{ok:!1,reason:w.success?w.data.reason??"verification_failed":"verification_failed",detail:(w.success?w.data.detail:void 0)??"N\xE3o foi poss\xEDvel verificar o acesso a este recurso."}}if(!W.ok)throw Error(await ux0(W));let K=Sh1.safeParse(await W.json());if(!K.success||!K.data.binding)throw Error("Commerce Discovery bind response did not include a binding.");return{ok:!0,resourceId:K.data.binding.resource_id,evidence:K.data.binding.evidence}}async function fh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/run`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.githubRepo?{github_repo:$.githubRepo}:{}})});if(W.status===409)return{triggered:!1,reason:"not_upgraded"};if(!W.ok)throw Error(await ux0(W));return{triggered:!0}}async function xh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/connections/status?org_id=${encodeURIComponent($.orgId)}`,W=await Y(J,{method:"GET",headers:{Authorization:`Bearer ${X}`}});if(W.status===404||W.status===409)return{};if(!W.ok)throw Error(await ux0(W));let K=KC8.safeParse(await W.json());return K.success?K.data.providers:{}}var XC8,YC8,Sh1,Ch1,KC8;var Kf=O(()=>{R8();F8();XC8=new URL(x_0).origin,YC8=qG.object({token:qG.string().min(1)}),Sh1=qG.object({binding:qG.object({resource_id:qG.string(),evidence:qG.string()}).optional(),reason:qG.string().optional(),detail:qG.string().optional()});Ch1=class Ch1 extends Error{code;constructor($,Z={}){super(JC8($,Z));this.name="CommerceDiscoveryClaimError",this.code=$}};KC8=qG.object({providers:qG.record(qG.string(),qG.object({connected:qG.boolean(),via:qG.enum(["oauth","sa"]).nullable(),resource:qG.string().nullable()}))})});import{z as wY}from"zod";var wC8,UC8,dx0;var vh1=O(()=>{kd();Y1();Kf();wC8=wY.object({siteUrl:wY.string().min(1).describe("Website URL of the store being bound."),provider:wY.enum(["ga4","gsc"]).describe("Which Google source to bind: ga4 (Analytics) or gsc (Search Console)."),resourceId:wY.string().min(1).describe("The resource id the client typed: GA4 numeric property id, or GSC site (sc-domain:example.com or https://example.com/).")}),UC8=wY.discriminatedUnion("ok",[wY.object({ok:wY.literal(!0),resourceId:wY.string(),evidence:wY.string()}),wY.object({ok:wY.literal(!1),reason:wY.string(),detail:wY.string()})]),dx0=$0({name:"COMMERCE_DISCOVERY_BIND",description:"Bind a GA4 property or GSC site to the org's store via the shared service account (consent-free lane). The client grants deco-reader@\u2026 access to the resource and provides its id; Commerce Discovery verifies the resource belongs to this domain before persisting. Returns ok:false with an actionable pt-BR detail when verification fails or the resource is already bound elsewhere.",annotations:{title:"Bind Commerce Discovery Data Source",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:wC8,outputSchema:UC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return bh1({siteUrl:X.value,orgId:G.id,provider:$.provider,resourceId:$.resourceId.trim()})}})});import{z as qw}from"zod";var FC8,HC8,lx0;var yh1=O(()=>{kd();Y1();Kf();FC8=qw.object({siteUrl:qw.string().min(1).describe("Website URL of the store to inspect.")}),HC8=qw.object({providers:qw.record(qw.string(),qw.object({connected:qw.boolean(),via:qw.enum(["oauth","sa"]).nullable(),resource:qw.string().nullable()}))}),lx0=$0({name:"COMMERCE_DISCOVERY_CONNECTION_STATUS",description:"Read per-provider connection status (ga4/gsc/vtex) for the org's store \u2014 { connected, via: oauth|sa, resource }. The single source of truth for whether a data source is connected, unifying the OAuth (Studio vault) and shared-SA binding lanes. Read-only.",annotations:{title:"Commerce Discovery Connection Status",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:FC8,outputSchema:HC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return{providers:await xh1({siteUrl:X.value,orgId:G.id})}}})});import{z as Sd}from"zod";var NC8,BC8,mx0;var gh1=O(()=>{R8();kd();Y1();Kf();NC8=Sd.object({siteUrl:Sd.string().min(1).describe("Website URL to run the diagnostic for.")}),BC8=Sd.object({triggered:Sd.boolean(),reason:Sd.string().optional()}),mx0=$0({name:"COMMERCE_DISCOVERY_RUN",description:"Trigger the Commerce Discovery diagnostic run for the current organization's store. Call once the data sources (GA4/GSC/VTEX) are connected \u2014 this run resolves credentials and produces the enriched report.",annotations:{title:"Run Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:NC8,outputSchema:BC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);let Y=G4.COMMERCE_DISCOVERY(G.id),J=(await Z.storage.connections.findById(Y,G.id))?.configuration_state,W=J&&typeof J==="object"&&typeof J.github_repo==="string"&&J.github_repo.length>0?J.github_repo:void 0;return fh1({siteUrl:X.value,orgId:G.id,githubRepo:W})}})});var QH=O(()=>{l10()});import{z as wW}from"zod";async function LC8($,Z,G,X){let Y=await $.storage.connections.findById(Z,G);if(Y)return Y;throw X}async function zC8($,Z,G,X){let Y=await $.storage.virtualMcps.findById(Z,G);if(Y)return Y;throw X}var ix0,OC8=3600000,DC8,EC8,nx0;var hh1=O(()=>{R8();kd();Y1();KW();QH();Kf();ix0=v_0,DC8=wW.object({siteUrl:wW.string().min(1).describe("Website URL to configure.")}),EC8=wW.object({connection:aZ,virtualMcp:sZ,reportApp:wW.object({connectionId:wW.string(),virtualMcpId:wW.string(),toolName:wW.literal(ix0)}),created:wW.object({connection:wW.boolean(),virtualMcp:wW.boolean()})});nx0=$0({name:"COMMERCE_DISCOVERY_SETUP",description:"Create or return the Commerce Discovery connection and virtual MCP for the current organization.",annotations:{title:"Set Up Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:DC8,outputSchema:EC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check("COLLECTION_CONNECTIONS_CREATE");let X=y1(Z);if(!X)throw Error("User ID required to set up Commerce Discovery");let Y=YH($.siteUrl);if(!Y.ok)throw Error(Y.error);let Q=G4.COMMERCE_DISCOVERY(G.id),J=m_0(G.id),W=new URLSearchParams({virtualmcpid:J,main:`app:${Q}:${ix0}`}),K={email:Z.auth.user?.email,reportUrl:`${Z.baseUrl}/${encodeURIComponent(G.slug??G.id)}/${crypto.randomUUID()}?${W.toString()}`},w=await Z.storage.connections.findById(Q,G.id),U={connection:!1,virtualMcp:!1},F=await _h1({siteUrl:Y.value,orgId:G.id,orgName:G.name,...K}),H=Vh1();if(w)console.log("[commerce-discovery] syncing connection to claimed site",{orgId:G.id,siteUrl:Y.value,connectionId:Q}),w=await Z.storage.connections.update(w.id,{connection_url:H,connection_token:F.authorizationToken,metadata:{...w.metadata??{},siteUrl:Y.value}});else{console.log("[commerce-discovery] creating connection",{orgId:G.id,siteUrl:Y.value,connectionId:Q});try{let E=i_0(G.id,F.authorizationToken,H);w=await Z.storage.connections.create({...E,metadata:{...E.metadata??{},siteUrl:Y.value},organization_id:G.id,created_by:X}),U.connection=!0}catch(E){w=await LC8(Z,Q,G.id,E)}}let N=await Z.storage.virtualMcps.findById(J,G.id);if(!N){console.log("[commerce-discovery] creating virtual MCP",{orgId:G.id,siteUrl:Y.value,connectionId:w.id,virtualMcpId:J});try{N=await Z.storage.virtualMcps.create(G.id,X,n_0(G.id,w.id),{id:J}),U.virtualMcp=!0}catch(E){N=await zC8(Z,J,G.id,E)}}if(!N.pinned)N=await Z.storage.virtualMcps.update(N.id,X,{pinned:!0});let B=await Z.db.selectFrom("organization").select(["createdAt"]).where("id","=",G.id).executeTakeFirst();if((B?Date.now()-new Date(B.createdAt).getTime():Number.POSITIVE_INFINITY)<OC8){if((await Z.storage.organizationSettings.get(G.id))?.reports_only==null)await Z.storage.organizationSettings.upsert(G.id,{reports_only:!0})}return{connection:w,virtualMcp:N,reportApp:{connectionId:w.id,virtualMcpId:N.id,toolName:ix0},created:U}}})});var ch1=O(()=>{vh1();yh1();gh1();hh1()});var px0=_((uh1)=>{Object.defineProperty(uh1,"__esModule",{value:!0});uh1.kvPrefix=uh1.KvWatchInclude=void 0;uh1.KvWatchInclude={LastValue:"",AllHistory:"history",UpdatesOnly:"updates"};uh1.kvPrefix="KV_"});var eh1=_((ah1)=>{Object.defineProperty(ah1,"__esModule",{value:!0});ah1.KvStatusImpl=ah1.Bucket=ah1.Kvm=ah1.kvOperationHdr=void 0;ah1.Base64KeyCodec=AC8;ah1.NoopKvCodecs=tx0;ah1.defaultBucketOpts=mh1;ah1.validateKey=ih1;ah1.validateSearchKey=nh1;ah1.hasWildcards=ph1;ah1.validateBucket=Z80;var C5=rX(),r4=Do(),V5=px0();function AC8(){let $=(Z,G)=>{let X=[];for(let Y of Z.split("."))switch(Y){case">":case"*":X.push(Y);break;default:X.push(G(Y));break}return X.join(".")};return{encode(Z){return $(Z,btoa)},decode(Z){return $(Z,atob)}}}function tx0(){return{key:{encode($){return $},decode($){return $}},value:{encode($){return typeof $==="string"?new TextEncoder().encode($):$},decode($){return $}}}}function mh1(){return{replicas:1,history:1,timeout:2000,max_bytes:-1,maxValueSize:-1,codec:tx0(),storage:r4.StorageType.File}}ah1.kvOperationHdr="KV-Operation";var lh1="$KV",TC8=/^[-/=.\w]+$/,IC8=/^[-/=.>*\w]+$/,RC8=/^[-\w]+$/;function ih1($){if($.startsWith(".")||$.endsWith(".")||!TC8.test($))throw Error(`invalid key: ${$}`)}function nh1($){if($.startsWith(".")||$.endsWith(".")||$.includes("..")||!IC8.test($))throw Error(`invalid key: ${$}`)}function ph1($){if($.startsWith(".")||$.endsWith("."))throw Error(`invalid key: ${$}`);let Z=$.split("."),G=!1;for(let X=0;X<Z.length;X++)switch(Z[X]){case"*":G=!0;break;case">":if(X!==Z.length-1)throw Error(`invalid key: ${$}`);G=!0;break;default:}return G}function Z80($){if(!RC8.test($))throw Error(`invalid bucket name: ${$}`)}class th1{js;constructor($){this.js=(0,r4.toJetStreamClient)($)}create($,Z={}){return this.#$($,Z)}open($,Z={}){return Z.bindOnly=!0,this.#$($,Z)}#$($,Z={}){let{ok:G,min:X}=this.js.nc.features.get(C5.Feature.JS_KV);if(!G)return Promise.reject(Error(`kv is only supported on servers ${X} or better`));if(Z.bindOnly)return wf.bind(this.js,$,Z);return wf.create(this.js,$,Z)}list(){let $=(G)=>{let Y=G.streams.filter((J)=>{return J.config.name.startsWith(V5.kvPrefix)});Y.forEach((J)=>{J.config.sealed=J.config.sealed||!1,J.config.deny_delete=J.config.deny_delete||!1,J.config.deny_purge=J.config.deny_purge||!1,J.config.allow_rollup_hdrs=J.config.allow_rollup_hdrs||!1});let Q="";if(Y.length)Q=this.js.nc.info?.cluster??"";return Y.map((J)=>{return new G80(J,Q)})},Z=`${this.js.prefix}.STREAM.LIST`;return new r4.ListerImpl(Z,$,this.js)}}ah1.Kvm=th1;class wf{js;jsm;stream;bucket;direct;codec;prefix;editPrefix;useJsPrefix;_prefixLen;constructor($,Z,G){Z80($),this.js=Z,this.jsm=G,this.bucket=$,this.prefix=lh1,this.editPrefix="",this.useJsPrefix=!1,this._prefixLen=0}static async create($,Z,G={}){Z80(Z);let X=await $.jetstreamManager(),Y=new wf(Z,$,X);return await Y.init(G),Y}static async bind($,Z,G={}){let X=$.getOptions()?.checkAPI||G.bindOnly===!1,Y=await $.jetstreamManager(X),Q={config:{allow_direct:G.allow_direct}};Z80(Z);let J=new wf(Z,$,Y);return Q.config.name=G.streamName??J.bucketName(),Object.assign(J,Q),J.stream=Q.config.name,J.codec=G.codec||tx0(),J.direct=Q.config.allow_direct??!1,J.initializePrefixes(Q),J}async init($={}){let Z=Object.assign(mh1(),$);this.codec=Z.codec;let G={};if(this.stream=G.name=$.streamName??this.bucketName(),G.retention=r4.RetentionPolicy.Limits,G.max_msgs_per_subject=Z.history,Z.max_bytes)G.max_bytes=Z.max_bytes;if(G.max_msg_size=Z.maxValueSize,G.storage=Z.storage,$.placement)G.placement=$.placement;if($.republish)G.republish=$.republish;if($.description)G.description=$.description;if($.markerTTL)G.allow_msg_ttl=!0,G.subject_delete_marker_ttl=(0,C5.nanos)(Z.markerTTL);if($.mirror){let w=Object.assign({},$.mirror);if(!w.name.startsWith(V5.kvPrefix))w.name=`${V5.kvPrefix}${w.name}`;G.mirror=w,G.mirror_direct=!0}else if($.sources){let w=$.sources.map((U)=>{let F=Object.assign({},U),H=F.name.startsWith(V5.kvPrefix)?F.name.substring(V5.kvPrefix.length):F.name;if(!F.name.startsWith(V5.kvPrefix))F.name=`${V5.kvPrefix}${F.name}`;if(!U.external&&H!==this.bucket)F.subject_transforms=[{src:`$KV.${H}.>`,dest:`$KV.${this.bucket}.>`}];return F});G.sources=w,G.subjects=[this.subjectForBucket()]}else G.subjects=[this.subjectForBucket()];if($.metadata)G.metadata=$.metadata;if(typeof $.compression==="boolean")G.compression=$.compression?r4.StoreCompression.S2:r4.StoreCompression.None;let X=this.js.nc,Y=X.getServerVersion(),Q=Y?(0,C5.compare)(Y,(0,C5.parseSemVer)("2.7.2"))>=0:!1;G.discard=Q?r4.DiscardPolicy.New:r4.DiscardPolicy.Old;let{ok:J,min:W}=X.features.get(C5.Feature.JS_ALLOW_DIRECT);if(!J&&$.allow_direct===!0){let w=Y?`${Y.major}.${Y.minor}.${Y.micro}`:"unknown";return Promise.reject(Error(`allow_direct is not available on server version ${w} - requires ${W}`))}if($.allow_direct=typeof $.allow_direct==="boolean"?$.allow_direct:J,G.allow_direct=$.allow_direct,this.direct=G.allow_direct,G.num_replicas=Z.replicas,Z.ttl)G.max_age=(0,C5.nanos)(Z.ttl);G.allow_rollup_hdrs=!0;let K;try{if(K=await this.jsm.streams.info(G.name),!K.config.allow_direct&&this.direct===!0)this.direct=!1}catch(w){if(w.message==="stream not found")K=await this.jsm.streams.add(G);else throw w}this.initializePrefixes(K)}initializePrefixes($){this._prefixLen=0,this.prefix=`$KV.${this.bucket}`,this.useJsPrefix=this.js.apiPrefix!=="$JS.API";let{mirror:Z}=$.config;if(Z){let G=Z.name;if(G.startsWith(V5.kvPrefix))G=G.substring(V5.kvPrefix.length);if(Z.external&&Z.external.api!==""){let X=Z.name.substring(V5.kvPrefix.length);this.useJsPrefix=!1,this.prefix=`$KV.${X}`,this.editPrefix=`${Z.external.api}.$KV.${G}`}else this.editPrefix=this.prefix}}bucketName(){return this.stream??`${V5.kvPrefix}${this.bucket}`}subjectForBucket(){return`${this.prefix}.${this.bucket}.>`}subjectForKey($,Z=!1){let G=[];if(Z){if(this.useJsPrefix)G.push(this.js.apiPrefix);if(this.editPrefix!=="")G.push(this.editPrefix);else G.push(this.prefix)}else if(this.prefix)G.push(this.prefix);return G.push($),G.join(".")}fullKeyName($){if(this.prefix!=="")return`${this.prefix}.${$}`;return`${lh1}.${this.bucket}.${$}`}get prefixLen(){if(this._prefixLen===0)this._prefixLen=this.prefix.length+1;return this._prefixLen}encodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.encode(G));break}return Z.join(".")}decodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.decode(G));break}return Z.join(".")}validateKey=ih1;validateSearchKey=nh1;hasWildcards=ph1;close(){return Promise.resolve()}dataLen($,Z){let G=Z?Z.get(r4.JsHeaders.MessageSizeHdr)||"":"";if(G!=="")return parseInt(G,10);return $.length}smToEntry($){return new rh1(this.bucket,this.prefixLen,$,this.codec)}jmToWatchEntry($,Z){return new oh1(this.bucket,this.prefixLen,$,Z,this.codec)}async create($,Z,G){let X;try{let Q={previousSeq:0},J=await this._put($,Z,Q,G);return Promise.resolve(J)}catch(Q){if(X=Q,Q instanceof r4.JetStreamApiError){let J=Q;if(J.code!==r4.JetStreamApiCodes.StreamWrongLastSequence&&J.code!==r4.JetStreamApiCodes.StreamWrongLastSequenceUnknown)return Promise.reject(Q)}}let Y=0;try{let Q=await this.get($);if(Q?.operation==="DEL"||Q?.operation==="PURGE")return Y=Q!==null?Q.revision:0,this._put($,Z,{previousSeq:Y},G);else return Promise.reject(X)}catch(Q){return Promise.reject(Q)}}update($,Z,G,X){if(G<=0)throw Error("version must be greater than 0");return this.put($,Z,{previousSeq:G,timeout:X})}async _put($,Z,G={},X){let Y=this.encodeKey($);this.validateKey(Y),Z=this.codec.value.encode(Z);let Q={timeout:G?.timeout};if(G.previousSeq!==void 0){let J=(0,C5.headers)();Q.headers=J,J.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`)}if(X)(Q.headers||(0,C5.headers)()).set(r4.PubHeaders.MessageTTL,X);try{return(await this.js.publish(this.subjectForKey(Y,!0),Z,Q)).seq}catch(J){return Promise.reject(J)}}put($,Z,G={}){return this._put($,Z,G)}async get($,Z){let G=this.encodeKey($);this.validateKey(G);let X={last_by_subj:this.subjectForKey(G)};if(Z&&Z.revision>0)X={seq:Z.revision};let Y=null;try{if(this.direct)Y=await this.jsm.direct.getMessage(this.bucketName(),X);else Y=await this.jsm.streams.getMessage(this.bucketName(),X);if(Y===null)return null;let Q=this.smToEntry(Y);if(Q.rawKey!==G)return null;return Q}catch(Q){throw Q}}purge($,Z){return this._deleteOrPurge($,"PURGE",Z)}delete($,Z){return this._deleteOrPurge($,"DEL",Z)}async purgeDeletes($=1800000){let Z=[],G=await this.history({key:">"});await(async()=>{for await(let J of G)if(J.operation==="DEL"||J.operation==="PURGE")Z.push(J)})().then(),G.stop();let X=Date.now()-$,Y=Z.map((J)=>{let W=this.subjectForKey(J.key);if(J.created.getTime()>=X)return this.jsm.streams.purge(this.stream,{filter:W,keep:1});else return this.jsm.streams.purge(this.stream,{filter:W,keep:0})}),Q=await Promise.all(Y);return Q.unshift({success:!0,purged:0}),Q.reduce((J,W)=>{return J.purged+=W.purged,J})}async _deleteOrPurge($,Z,G){if(!this.hasWildcards($))return this._doDeleteOrPurge($,Z,G);let X=await this.keys($),Y=[];for await(let Q of X)if(Y.push(this._doDeleteOrPurge(Q,Z)),Y.length===100)await Promise.all(Y),Y.length=0;if(Y.length>0)await Promise.all(Y)}async _doDeleteOrPurge($,Z,G){let X=this.encodeKey($);this.validateKey(X);let Y=(0,C5.headers)();if(Y.set(ah1.kvOperationHdr,Z),Z==="PURGE"){let Q=G;if(Y.set(r4.JsHeaders.RollupHdr,r4.JsHeaders.RollupValueSubject),typeof Q?.ttl==="string"&&Q.ttl!=="")Y.set(r4.PubHeaders.MessageTTL,`${Q.ttl}`)}if(G?.previousSeq)Y.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`);await this.js.publish(this.subjectForKey(X,!0),C5.Empty,{headers:Y})}_buildCC($,Z,G={}){let Y=(!Array.isArray($)?[$]:$).map((W)=>{let K=this.encodeKey(W);return this.validateSearchKey(W),this.fullKeyName(K)}),Q=r4.DeliverPolicy.LastPerSubject;if(Z===V5.KvWatchInclude.AllHistory)Q=r4.DeliverPolicy.All;if(Z===V5.KvWatchInclude.UpdatesOnly)Q=r4.DeliverPolicy.New;let J=void 0;if(Y.length===1)J=Y[0],Y=void 0;return Object.assign({deliver_policy:Q,ack_policy:r4.AckPolicy.None,filter_subjects:Y,filter_subject:J,flow_control:!0,idle_heartbeat:(0,C5.nanos)(5000)},G)}remove($){return this.purge($)}async history($={}){let Z=$.key??">",G={};G.headers_only=$.headers_only||!1;let X=new C5.QueuedIteratorImpl,Y=()=>{X.stop()},Q=this._buildCC(Z,V5.KvWatchInclude.AllHistory,G),J=await this.js.consumers.getPushConsumer(this.stream,Q);if(X._data=J,(await J.info(!0)).num_pending===0)return X.push(Y),X;let K=await J.consume({callback:(w)=>{let U=this.jmToWatchEntry(w,!1);if(X.push(U),X.received++,w.info.pending===0)X.push(Y)}});return K.closed().then(()=>{X.push(Y)}),(async()=>{for await(let w of K.status())switch(w.type){case"heartbeat":X.push(()=>{X.stop()});break}})().then(),X.iterClosed.then(()=>{K.stop()}),X}canSetWatcherName(){let $=this.js.nc,{ok:Z}=$.features.get(C5.Feature.JS_NEW_CONSUMER_CREATE_API);return Z}async watch($={}){let Z=$.key??">",G=new C5.QueuedIteratorImpl,X={};X.headers_only=$.headers_only||!1;let Y=V5.KvWatchInclude.LastValue;if($.include===V5.KvWatchInclude.AllHistory)Y=V5.KvWatchInclude.AllHistory;else if($.include===V5.KvWatchInclude.UpdatesOnly)Y=V5.KvWatchInclude.UpdatesOnly;let Q=$.ignoreDeletes===!0,J=this._buildCC(Z,Y,X);if(J.name=`KV_WATCHER_${C5.nuid.next()}`,$.resumeFromRevision&&$.resumeFromRevision>0)J.deliver_policy=r4.DeliverPolicy.StartSequence,J.opt_start_seq=$.resumeFromRevision;let W=await this.js.consumers.getPushConsumer(this.stream,J),w=(await W.info(!0)).num_pending,U=Y===V5.KvWatchInclude.UpdatesOnly||w===0;G._data=W;let F=0,H=await W.consume({callback:(N)=>{if(!U)F++,U=F>=w;let B=this.jmToWatchEntry(N,U);if(Q&&B.operation==="DEL")return;G.push(B),G.received++}});return G.iterClosed.then(()=>{H.stop()}),H.closed().then(()=>{G.push(()=>{G.stop()})}),G}async keys($=">"){let Z=new C5.QueuedIteratorImpl,G=this._buildCC($,V5.KvWatchInclude.LastValue,{headers_only:!0}),X=await this.js.consumers.getPushConsumer(this.stream,G);if((await X.info()).num_pending===0)return Z.stop(),Z;Z._data=X;let Q=await X.consume({callback:(J)=>{let W=J.headers?.get(ah1.kvOperationHdr);if(W!=="DEL"&&W!=="PURGE"){let K=this.decodeKey(J.subject.substring(this.prefixLen));Z.push(K)}if(J.info.pending===0)Q.stop()}});return(async()=>{for await(let J of Q.status())switch(J.type){case"heartbeat":Z.push(()=>{Z.stop()});break}})().then(),Q.closed().then(()=>{Z.push(()=>{Z.stop()})}),Z.iterClosed.then(()=>{Q.stop()}),Z}purgeBucket($){return this.jsm.streams.purge(this.bucketName(),$)}destroy(){return this.jsm.streams.delete(this.bucketName())}async status(){let Z=this.js.nc.info?.cluster??"",G=this.bucketName(),X=await this.jsm.streams.info(G);return new G80(X,Z)}}ah1.Bucket=wf;class G80{si;cluster;constructor($,Z=""){this.si=$,this.cluster=Z}get bucket(){return this.si.config.name.startsWith(V5.kvPrefix)?this.si.config.name.substring(V5.kvPrefix.length):this.si.config.name}get values(){return this.si.state.messages}get history(){return this.si.config.max_msgs_per_subject}get ttl(){return(0,C5.millis)(this.si.config.max_age)}get markerTTL(){if(typeof this.si.config.subject_delete_marker_ttl==="number")return(0,C5.millis)(this.si.config.subject_delete_marker_ttl);return 0}get bucket_location(){return this.cluster}get backingStore(){return this.si.config.storage}get storage(){return this.si.config.storage}get replicas(){return this.si.config.num_replicas}get description(){return this.si.config.description??""}get maxBucketSize(){return this.si.config.max_bytes}get maxValueSize(){return this.si.config.max_msg_size}get max_bytes(){return this.si.config.max_bytes}get placement(){return this.si.config.placement||{cluster:"",tags:[]}}get placementCluster(){return this.si.config.placement?.cluster??""}get republish(){return this.si.config.republish??{src:"",dest:""}}get streamInfo(){return this.si}get size(){return this.si.state.bytes}get metadata(){return this.si.config.metadata??{}}get compression(){if(this.si.config.compression)return this.si.config.compression!==r4.StoreCompression.None;return!1}}ah1.KvStatusImpl=G80;class rh1{bucket;sm;prefixLen;codec;constructor($,Z,G,X){this.bucket=$,this.prefixLen=Z,this.sm=G,this.codec=X}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get delta(){return 0}get created(){return this.sm.time}get revision(){return this.sm.seq}get operation(){if(this.sm.header?.has("Nats-Marker-Reason")){if(this.sm.header?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.header?.get(ah1.kvOperationHdr)||"PUT"}get length(){let $=this.sm.header.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}class oh1{bucket;sm;prefixLen;update;codec;constructor($,Z,G,X,Y){this.bucket=$,this.prefixLen=Z,this.sm=G,this.update=X,this.codec=Y}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get created(){return new Date((0,C5.millis)(this.sm.info.timestampNanos))}get revision(){return this.sm.seq}get operation(){if(this.sm.headers?.has("Nats-Marker-Reason")){if(this.sm.headers?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.headers?.get(ah1.kvOperationHdr)||"PUT"}get delta(){return this.sm.info.pending}get length(){let $=this.sm.headers?.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}get isUpdate(){return this.update}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}});var rx0=_((h3)=>{Object.defineProperty(h3,"__esModule",{value:!0});h3.validateKey=h3.validateBucket=h3.NoopKvCodecs=h3.Kvm=h3.defaultBucketOpts=h3.Bucket=h3.Base64KeyCodec=h3.KvWatchInclude=h3.kvPrefix=void 0;var $c1=px0();Object.defineProperty(h3,"kvPrefix",{enumerable:!0,get:function(){return $c1.kvPrefix}});Object.defineProperty(h3,"KvWatchInclude",{enumerable:!0,get:function(){return $c1.KvWatchInclude}});var ND=eh1();Object.defineProperty(h3,"Base64KeyCodec",{enumerable:!0,get:function(){return ND.Base64KeyCodec}});Object.defineProperty(h3,"Bucket",{enumerable:!0,get:function(){return ND.Bucket}});Object.defineProperty(h3,"defaultBucketOpts",{enumerable:!0,get:function(){return ND.defaultBucketOpts}});Object.defineProperty(h3,"Kvm",{enumerable:!0,get:function(){return ND.Kvm}});Object.defineProperty(h3,"NoopKvCodecs",{enumerable:!0,get:function(){return ND.NoopKvCodecs}});Object.defineProperty(h3,"validateBucket",{enumerable:!0,get:function(){return ND.validateBucket}});Object.defineProperty(h3,"validateKey",{enumerable:!0,get:function(){return ND.validateKey}})});var ox0=_((JH)=>{Object.defineProperty(JH,"__esModule",{value:!0});JH.NoopKvCodecs=JH.Kvm=JH.defaultBucketOpts=JH.Bucket=JH.Base64KeyCodec=JH.KvWatchInclude=void 0;var vC8=rx0();Object.defineProperty(JH,"KvWatchInclude",{enumerable:!0,get:function(){return vC8.KvWatchInclude}});var Cd=rx0();Object.defineProperty(JH,"Base64KeyCodec",{enumerable:!0,get:function(){return Cd.Base64KeyCodec}});Object.defineProperty(JH,"Bucket",{enumerable:!0,get:function(){return Cd.Bucket}});Object.defineProperty(JH,"defaultBucketOpts",{enumerable:!0,get:function(){return Cd.defaultBucketOpts}});Object.defineProperty(JH,"Kvm",{enumerable:!0,get:function(){return Cd.Kvm}});Object.defineProperty(JH,"NoopKvCodecs",{enumerable:!0,get:function(){return Cd.NoopKvCodecs}})});function X80(){let $=new TextEncoder,Z=new TextDecoder;return{encode:(G)=>$.encode(JSON.stringify(G)),decode:(G)=>JSON.parse(Z.decode(G))}}class sx0{options;kv=null;codec=X80();constructor($){this.options=$}async init(){let $=this.options.getJetStream();if(!$)return;this.kv=await new Gc1.Kvm($).create(gC8,{storage:Zc1.StorageType.Memory})}async get($,Z){if(!this.kv)return null;try{let G=await this.kv.get(`${$}.${Z}`);if(!G?.value?.length)return null;if(G.operation==="DEL"||G.operation==="PURGE")return null;return this.codec.decode(G.value)}catch{return null}}async set($,Z,G){if(!this.kv)return;try{await this.kv.put(`${$}.${Z}`,this.codec.encode(G))}catch{}}async invalidate($){if(!this.kv)return;await Promise.all(["tools","resources","prompts"].map(async(G)=>{try{await this.kv.delete(`${G}.${$}`)}catch{}}))}teardown(){this.kv=null}}function hC8($,Z,G){if(G<=0)return!0;if($===void 0)return!0;return Z-$>=G}function Y80($){return $ instanceof S1&&$.code===v1.MethodNotFound}function cC8($){return $ instanceof S1&&$.code===-32000&&/connection closed/i.test($.message)}async function KH($,Z,G,X,Y,Q=0){if(!X)try{return await G()}catch(w){if(Y80(w))return[];return _d.add(1,{type:$,outcome:"error",stage:"no_cache"}),null}let J=`${$}:${Z}`,W=await X.get($,Z);if(W===null)try{let w=await G();return X.set($,Z,w).catch(()=>{}),ax0.set(J,Date.now()),_d.add(1,{type:$,outcome:"miss",stage:"miss"}),w}catch(w){if(Y80(w))return X.set($,Z,[]).catch(()=>{}),[];return _d.add(1,{type:$,outcome:"error",stage:"miss"}),null}if(_d.add(1,{type:$,outcome:"hit",stage:"hit"}),hC8(ax0.get(J),Date.now(),Q)&&!Q80.has(J)){Q80.add(J),ax0.set(J,Date.now());let w=G().then((U)=>X.set($,Z,U)).catch((U)=>{if(Y80(U)||cC8(U)){if(Y80(U))X.set($,Z,[]).catch(()=>{});return}_d.add(1,{type:$,outcome:"error",stage:"revalidation"})}).finally(()=>Q80.delete(J));Y?.(w)}return W}function ex0($){Xc1=$}function t5(){return Xc1}var Zc1,Gc1,_d,gC8="DECOCMS_MCP_LISTS",Q80,ax0,WH=30000,Xc1=null;var UY=O(()=>{E5();B5();Zc1=k(dB(),1),Gc1=k(ox0(),1),_d=E8.createCounter("mcp_list_cache.fetches",{description:"MCP list cache fetch outcomes (hit, miss, error)",unit:"{fetches}"});Q80=new Set;E8.createObservableGauge("mcp_list_cache.pending_revalidations",{description:"In-flight background MCP list revalidations on this pod",unit:"{revalidations}"}).addCallback(($)=>$.observe(Q80.size));ax0=new Map});var bd=($,Z)=>{if(Z===null||Z===void 0)return;let G=$.replace(/\[(\w+)\]/g,".$1").split(".").filter(Boolean),X=Z;for(let Y of G){if(X===null||X===void 0||typeof X!=="object")return;X=X[Y]}return X};function J80($){let Z=$.split("::");if(Z.length!==2||!Z[0]||!Z[1])throw Error(`Invalid scope format: ${$}. Expected format: "KEY::SCOPE"`);return Z}function uC8($){try{return J80($)}catch{return null}}function dC8($){if(typeof $==="object"&&$!==null&&"value"in $){let Z=$.value;if(typeof Z==="string")return Z}return null}function $v0($,Z){let G={};if(!$||!Z)return G;for(let X of Z){if(X==="*"){G["*"]=["*"];continue}let Y=uC8(X);if(!Y)continue;let[Q,J]=Y,W=bd(Q,$),K=dC8(W);if(K){if(!G[K])G[K]=[];G[K].push(J)}}return G}function Yc1($,Z){let G=$v0($,Z);return new Set(Object.keys(G).filter((X)=>X!=="*"))}var Zv0=()=>{};async function Qc1($){if(!$.refreshToken)return{success:!1,permanent:!1,error:"No refresh token available"};if(!$.tokenEndpoint)return{success:!1,permanent:!1,error:"No token endpoint available"};if(!$.clientId)return{success:!1,permanent:!1,error:"No client ID available"};try{let Z=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId});if($.clientSecret)Z.set("client_secret",$.clientSecret);if($.scope)Z.set("scope",$.scope);let G=await fetch($.tokenEndpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:Z.toString()});if(!G.ok){let Y=await G.text(),Q,J;try{let K=JSON.parse(Y);Q=K.error,J=K.error_description}catch{}let W=G.status===400&&!!Q&&lC8.has(Q);return(W?console.error:console.warn)("[TokenRefresh] refresh failed",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,status:G.status,errorCode:Q,errorDescription:J,permanent:W}),{success:!1,permanent:W,status:G.status,errorCode:Q,error:J||Q||`Token refresh failed: ${G.status}`}}let X=await G.json();return{success:!0,accessToken:X.access_token,refreshToken:X.refresh_token||$.refreshToken,expiresIn:X.expires_in,scope:X.scope}}catch(Z){return console.warn("[TokenRefresh] network/parse error",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,message:Z instanceof Error?Z.message:String(Z)}),{success:!1,permanent:!1,error:Z instanceof Error?Z.message:"Token refresh failed"}}}var lC8;var Jc1=O(()=>{lC8=new Set(["invalid_grant","bad_refresh_token"])});import{createHash as mC8,randomBytes as iC8,timingSafeEqual as Om4}from"crypto";function pC8($){return $.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function Xv0($){return mC8("sha256").update($).digest("hex")}function wc1($){let Z=Gv0.length+1,G=Z+Kc1;if(!$.startsWith(`${Gv0}_`)||$.length<=G+1||$[G]!=="_")return null;let X=$.slice(Z,G),Y=$.slice(G+1);if(!Wc1.test(X)||!Wc1.test(Y))return null;return X}function Uc1(){let $=pC8(iC8(nC8)),Z=$.slice(0,Kc1),G=`${Gv0}_${Z}_${$}`;return{plaintext:G,prefix:Z,hash:Xv0(G)}}var Gv0="stv",nC8=32,Kc1=12,Wc1;var Fc1=O(()=>{Wc1=/^[A-Za-z0-9_-]+$/});function Hc1($){return{id:$.id,organizationId:$.organization_id,subjectConnectionId:$.subject_connection_id,tokenHash:$.token_hash,tokenPrefix:$.token_prefix,name:$.name,revokedAt:$.revoked_at,lastUsedAt:$.last_used_at,createdAt:$.created_at,updatedAt:$.updated_at}}class Yv0{db;constructor($){this.db=$}async createOrRotateWorkloadToken($){let Z=$.name??"default";return await this.db.transaction().execute(async(X)=>{if(!await X.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Subject connection not found in organization");let Q=Uc1(),J=new Date().toISOString();await X.updateTable("connection_workload_tokens").set({revoked_at:J,updated_at:J}).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",Z).where("revoked_at","is",null).execute();let W=await X.insertInto("connection_workload_tokens").values({id:q6("cwt"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,token_hash:Q.hash,token_prefix:Q.prefix,name:Z,revoked_at:null,last_used_at:null,created_at:J,updated_at:J}).returningAll().executeTakeFirstOrThrow();return{plaintextToken:Q.plaintext,record:Hc1(W)}})}async findActiveWorkloadToken($){let Z=await this.db.selectFrom("connection_workload_tokens").selectAll().where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",$.name??"default").where("revoked_at","is",null).executeTakeFirst();return Z?Hc1(Z):null}async revokeWorkloadToken($){let Z=new Date().toISOString();await this.db.updateTable("connection_workload_tokens").set({revoked_at:Z,updated_at:Z}).where("id","=",$.tokenId).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("revoked_at","is",null).execute()}async authenticateWorkloadToken($){let Z=wc1($);if(!Z)return null;let G=Xv0($),X=await this.db.selectFrom("connection_workload_tokens").select(["id","organization_id","subject_connection_id","token_prefix"]).where("token_prefix","=",Z).where("token_hash","=",G).where("revoked_at","is",null).executeTakeFirst();if(!X)return null;let Y=new Date().toISOString();return await this.db.updateTable("connection_workload_tokens").set({last_used_at:Y,updated_at:Y}).where("id","=",X.id).execute(),{tokenId:X.id,tokenPrefix:X.token_prefix,organizationId:X.organization_id,subjectConnectionId:X.subject_connection_id}}async replaceGrantsForSubject($){await this.db.transaction().execute(async(Z)=>{if(!await Z.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Referenced connection not found in organization");let X=[...new Set($.grants.map((J)=>J.targetConnectionId))];if(X.length>0){if((await Z.selectFrom("connections").select("id").where("organization_id","=",$.organizationId).where("id","in",X).execute()).length!==X.length)throw Error("Referenced connection not found in organization")}if(await Z.deleteFrom("connection_credential_grants").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).execute(),$.grants.length===0)return;let Y=new Date().toISOString(),Q=$.grants.map((J)=>({id:q6("ccg"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,target_connection_id:J.targetConnectionId,scope:J.scope,created_by:$.createdBy,created_at:Y,updated_at:Y}));await Z.insertInto("connection_credential_grants").values(Q).execute()})}async hasGrant($){return!!await this.db.selectFrom("connection_credential_grants").select("id").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("target_connection_id","=",$.targetConnectionId).where("scope","=",$.scope).executeTakeFirst()}}var W80="credential:access-token:read",K80="credential:configuration:read";var w80=O(()=>{RG();Fc1()});function BD($){let Z=String($??"");if(Z&&!Z.includes("T"))return Z.replace(" ","T")+"Z";return Z}function q$($){return $.replace(/\0/g,"").replace(/\\/g,"\\\\").replace(/'/g,"''")}function l8($){let Z=Number($??0);return Number.isFinite(Z)?Z:0}function rC8($){if(!tC8.has($))throw Error(`Invalid groupByColumn: ${$}`);return $}function Qv0($){if(!oC8.test($))throw Error(`Invalid JSONPath: ${$}`);if($.startsWith("$."))return $;if($.startsWith("."))return`$${$}`;return`$.${$}`}function wv0($){return $.replace(/^\$\./,"").split(".").map((G)=>`'${q$(G)}'`).join(", ")}function eC8($){let Z=aC8.exec($);if(!Z||!Z[1]||!Z[2])throw Error(`Invalid interval: ${$}`);let G=parseInt(Z[1],10),X=Z[2],Y=sC8[X];if(G<1||G>Y)throw Error(`Invalid interval amount: ${G}${X} (max ${Y}${X})`);return{amount:G,unit:X}}function wH($,Z,G="timestamp"){let{amount:X,unit:Y}=eC8($),J={m:"MINUTE",h:"HOUR",d:"DAY"}[Y];if(Z==="duckdb")return`time_bucket(INTERVAL '${X} ${J}', CAST(${G} AS TIMESTAMP))`;return`toStartOfInterval(${G}, INTERVAL ${X} ${J})`}function fd($,Z,G){if(G==="duckdb")return`json_extract_string(${$}, '${Z}')`;let X=wv0(Z);return`JSONExtractString(${$}, ${X})`}function $_8($,Z,G){if(G==="duckdb")return`CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`JSONExtractFloat(${$}, ${X})`}function Nc1($,Z,G){if(G==="duckdb")return`TRY_CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`toFloat64OrZero(JSONExtractString(${$}, ${X}))`}function Jv0($){if($===null||$===void 0)return{};if(typeof $==="object")return $;let Z=String($);try{return JSON.parse(Z)}catch{return{_decocms_truncated:Z}}}function Wv0($){return{id:String($.id??""),organizationId:String($.organization_id??""),connectionId:String($.connection_id??""),toolName:String($.tool_name??""),input:Jv0($.input),output:Jv0($.output),isError:$.is_error===1||$.is_error===!0||$.is_error==="1"||typeof $.is_error==="bigint"&&$.is_error===1n,errorMessage:$.error_message!=null?String($.error_message):null,durationMs:Number($.duration_ms??0),timestamp:(()=>{if($.timestamp instanceof Date)return $.timestamp.toISOString();let Z=String($.timestamp??""),G=new Date(Z.includes("T")?Z:Z.replace(" ","T")+"Z");return Number.isNaN(G.getTime())?Z:G.toISOString()})(),userId:$.user_id!=null?String($.user_id):null,requestId:String($.request_id??""),userAgent:$.user_agent!=null?String($.user_agent):null,virtualMcpId:$.virtual_mcp_id!=null?String($.virtual_mcp_id):null,properties:$.properties?Jv0($.properties):null}}function Ec1($,Z){let G=[];if($.properties)for(let[X,Y]of Object.entries($.properties)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') = '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') = '${J}'`)}if($.propertyKeys)for(let X of $.propertyKeys){let Y=q$(X);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Y}') IS NOT NULL AND json_extract_string(properties, '$.${Y}') != ''`);else G.push(`JSONExtractString(properties, '${Y}') IS NOT NULL AND JSONExtractString(properties, '${Y}') != ''`)}if($.propertyPatterns)for(let[X,Y]of Object.entries($.propertyPatterns)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') ILIKE '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') ILIKE '${J}'`)}if($.propertyInValues)for(let[X,Y]of Object.entries($.propertyInValues)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`list_contains(string_split(json_extract_string(properties, '$.${Q}'), ','), '${J}')`);else G.push(`has(splitByChar(',', JSONExtractString(properties, '${Q}')), '${J}')`)}return G}function Oc1($,Z){let G=[];if(u3(G,Z?.startDate,$),!Z)return G;if(Z.connectionIds?.length){let X=Z.connectionIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`connection_id IN (${X})`)}if(Z.toolNames?.length){let X=Z.toolNames.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`tool_name IN (${X})`)}if(Z.virtualMcpIds?.length){let X=Z.virtualMcpIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`virtual_mcp_id IN (${X})`)}if(Z.endDate)G.push(c3(Z.endDate,$));if(Z.propertyFilters)G.push(...Ec1(Z.propertyFilters,$));return G}function Dc1($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) >= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} >= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} >= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function c3($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) <= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} <= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} <= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function u3($,Z,G,X="timestamp"){if(Z)$.push(Dc1(Z,G,X));else if(G==="clickhouse")$.push(Dc1(new Date(Date.now()-Z_8),G,X))}class Uv0{engine;sourceFactory;metricEngine;metricSourceFactory;dialect;metricsFromLogs;constructor($,Z,G,X,Y="clickhouse",Q=!1){this.engine=$;this.sourceFactory=Z;this.metricEngine=G;this.metricSourceFactory=X;this.dialect=Y;this.metricsFromLogs=Q}async query($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if($.connectionId)G.push(`connection_id = '${q$($.connectionId)}'`);if($.excludeConnectionIds?.length){let H=$.excludeConnectionIds.map((N)=>`'${q$(N)}'`).join(",");G.push(`connection_id NOT IN (${H})`)}if($.virtualMcpId)G.push(`virtual_mcp_id = '${q$($.virtualMcpId)}'`);if($.toolName)G.push(`tool_name = '${q$($.toolName)}'`);if($.isError!==void 0)G.push(`is_error = ${$.isError?1:0}`);if(u3(G,$.startDate,this.dialect),$.endDate)G.push(c3($.endDate,this.dialect));if($.propertyFilters)G.push(...Ec1($.propertyFilters,this.dialect));let X=1000,Y=Math.min(Math.max(1,Math.floor($.limit??50)),X),Q=Math.max(0,Math.floor($.offset??0)),J=G.join(" AND ");if(this.dialect==="duckdb"){let H=`SELECT ${Bc1}, count(*) OVER () AS _total FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,N=await this.engine.query(H);if(N.length===0)return{logs:[],total:0};let B=Number(N[0]._total??0);return{logs:N.map(Wv0),total:B}}let W=`SELECT count(*) AS total FROM ${Z} WHERE ${J}`,K=`SELECT ${Bc1} FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,[w,U]=await Promise.all([this.engine.query(W),this.engine.query(K)]),F=Number(w[0]?.total??0);return{logs:U.map(Wv0),total:F}}async getById($,Z){if(!$||!Z)return null;let X=`SELECT * FROM ${this.sourceFactory($)} WHERE organization_id = '${q$($)}' AND id = '${q$(Z)}' LIMIT 1`,Y=await this.engine.query(X);if(Y.length===0)return null;return Wv0(Y[0])}async getStats($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if(u3(G,$.startDate,this.dialect),$.endDate)G.push(c3($.endDate,this.dialect));let X=`SELECT count(*) AS total_calls, coalesce(sum(CASE WHEN is_error = 1 THEN 1.0 ELSE 0.0 END) / NULLIF(count(*), 0), 0) AS error_rate, coalesce(avg(duration_ms), 0) AS avg_duration_ms FROM ${Z} WHERE ${G.join(" AND ")}`,Q=(await this.engine.query(X))[0]??{};return{totalCalls:Number(Q.total_calls??0),errorRate:Number(Q.error_rate??0),avgDurationMs:Number(Q.avg_duration_ms??0)}}async queryLlmUsageStats($){let Z={totalCalls:0,totalErrors:0,avgDurationMs:0,p50DurationMs:0,p95DurationMs:0,totalInputTokens:0,totalOutputTokens:0,totalTokens:0,totalCostUsd:0,topTools:[],timeseries:[]};if(!$.organizationId||!$.connectionId)return Z;let G=this.dialect,X=G==="clickhouse",Y=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),Q=wH($.interval,G,"timestamp"),J=(L)=>`coalesce(${Nc1("properties",`$.${L}`,G)}, 0)`,W=X?"count()":"count(*)",K=X?"countIf(is_error = 1)":"count(*) FILTER (WHERE is_error = 1)",w=(L)=>X?`quantile(${L})(duration_ms)`:`quantile_cont(duration_ms, ${L})`,U=[`organization_id = '${q$($.organizationId)}'`,`connection_id = '${q$($.connectionId)}'`];if(u3(U,$.startDate,G),$.endDate)U.push(c3($.endDate,G));if($.userIds?.length){let L=$.userIds.slice(0,100).map((z)=>`'${q$(z)}'`).join(",");U.push(`user_id IN (${L})`)}let F=U.join(" AND "),H=Math.min(Math.max(1,Math.floor($.topN??5)),20),N=`${W} AS calls,
   ${K} AS errors,
   avg(duration_ms) AS avg,
   sum(${J("input_tokens")}) AS in_tok,
@@ -2722,7 +2722,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var G81,jC,U64,zC$,Z81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",H64,d$,u$,Z6,LC$=24,PC,_J;var qC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(G81||(G81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof xg<"u"&&BZZ?BZZ:globalThis.nacl=globalThis.nacl||{});jC=typeof xg<"u"&&BZZ?BZZ:globalThis.nacl,U64={fromSeed:jC.sign.keyPair.fromSeed,sign:jC.sign.detached,verify:jC.sign.detached.verify,randomBytes:jC.randomBytes,scalarBaseMultiply:jC.scalarMult.base,seal:jC.box,open:jC.box.open};H64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));PC=[120,107,118,49];F64(U64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function W81($){try{$?.clear?.()}catch{}}async function MC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=IC$($),W=Q81(J.sub),K=J81(new TextEncoder().encode(Z)),w=jC$();try{let U=await TC$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(RC$(U,w))}finally{W81(w),W81(K),W81(W)}}var kC$=O(()=>{qC$()});function T64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function SC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(K81(),503);if(!Y.natsPublicUrl)return Z.json(K81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(K81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await MC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:OC$(Q),userId:X,allowedConnectionTypes:T64(Y.natsPublicUrl)})}return Z.json(DC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var K81=()=>({error:"link session unavailable"});var VC$=O(()=>{Y6();F8();EC$();kC$()});async function q64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function M64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function k64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},I64),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=an(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function S64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<CC$){await D8(_C$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<CC$){await D8(_C$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var I64=90000,R64=15000,bC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Xg({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return rQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),rQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},R64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await q64(F,w)){await M64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await k64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await S64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},CC$=60000,_C$=500;var fC$=O(()=>{Y6();zC();kY();l5();bE0();sn();AV();p90();qX()});function C64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function _64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(V64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var V64=1e4,b64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xC$=()=>{let $=new V1;return $.use("*",b64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await _64(X,Y);return Z.json({apps:C64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var vC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function PK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function l64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function m64($,Z,G){try{return JSON.parse($)}catch{throw new hC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function i64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:m64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function n64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function p64($){if(!$)return;return{openai:{response_format:$}}}function t64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function yC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function gC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var f64=256,x64,v64,y64,g64,h64,c64,u64,d64,hC$,cC$,uC$;var dC$=O(()=>{L6();Y6();zC();x64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),v64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),y64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(v64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),g64=h1.object({type:h1.literal("text")}),h64=h1.object({type:h1.literal("json_object")}),c64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),u64=h1.union([g64,h64,c64]),d64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(y64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(x64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:u64.optional(),user:h1.string().optional()});hC$=class hC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};cC$=new V1;cC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(PK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(PK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(PK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=d64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(PK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=l64(Q.model);if(!J)return $.json(PK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(PK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(PK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=i64(Q.messages),H=Q.tools?n64(Q.tools):void 0,N=p64(Q.response_format),B=t64(),D=Math.floor(Date.now()/1000);if(Q.stream)return rQ($,async(E)=>{let L=yC$(U,F,H,Q,N,$.req.raw.signal);try{let z=fQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=f64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:gC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=yC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:gC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(PK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(PK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(PK(Y.message,"server_error"),500)}});uC$=cC$});var mC$;var lC$=O(()=>{mC$={name:"decocms",version:"4.82.11",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function a64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??o64}}var iC$,o64="https://ph.studio.decocms.com",nC$;var pC$=O(()=>{Y6();Zf0();pN();OG();F8();H01();lC$();iC$=new V1;iC$.get("/",($)=>{let Z={version:mC$.version,theme:Ab1(),...aO().logo&&{logo:aO().logo},...gQ()&&{internalUrl:G00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:FR$(),posthog:a64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!gQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});nC$=iC$});function nL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function rC$($){return(nL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function oC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(nL0($))}&sz=${Z}`}function tC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function aC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?tC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):tC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as s64}from"path";function gU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function e64($){let Z=nL0($),G=rC$(Z),X=oC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=aC$({brand:G,domain:Z});return[`<title>${gU(J)}</title>`,`<meta name="description" content="${gU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${gU(J)}" />`,`<meta property="og:description" content="${gU(W)}" />`,`<meta property="og:url" content="${gU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${gU(J)}" />`,`<meta name="twitter:description" content="${gU(W)}" />`,`<link rel="canonical" href="${gU(Q)}" />`,`<link rel="icon" href="${gU(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var G81,jC,U64,zC$,Z81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",H64,d$,u$,Z6,LC$=24,PC,_J;var qC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(G81||(G81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof xg<"u"&&BZZ?BZZ:globalThis.nacl=globalThis.nacl||{});jC=typeof xg<"u"&&BZZ?BZZ:globalThis.nacl,U64={fromSeed:jC.sign.keyPair.fromSeed,sign:jC.sign.detached,verify:jC.sign.detached.verify,randomBytes:jC.randomBytes,scalarBaseMultiply:jC.scalarMult.base,seal:jC.box,open:jC.box.open};H64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));PC=[120,107,118,49];F64(U64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function W81($){try{$?.clear?.()}catch{}}async function MC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=IC$($),W=Q81(J.sub),K=J81(new TextEncoder().encode(Z)),w=jC$();try{let U=await TC$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(RC$(U,w))}finally{W81(w),W81(K),W81(W)}}var kC$=O(()=>{qC$()});function T64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function SC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(K81(),503);if(!Y.natsPublicUrl)return Z.json(K81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(K81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await MC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:OC$(Q),userId:X,allowedConnectionTypes:T64(Y.natsPublicUrl)})}return Z.json(DC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var K81=()=>({error:"link session unavailable"});var VC$=O(()=>{Y6();F8();EC$();kC$()});async function q64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function M64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function k64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},I64),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=an(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function S64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<CC$){await D8(_C$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<CC$){await D8(_C$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var I64=90000,R64=15000,bC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Xg({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return rQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),rQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},R64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await q64(F,w)){await M64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await k64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await S64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},CC$=60000,_C$=500;var fC$=O(()=>{Y6();zC();kY();l5();bE0();sn();AV();p90();qX()});function C64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function _64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(V64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var V64=1e4,b64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xC$=()=>{let $=new V1;return $.use("*",b64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await _64(X,Y);return Z.json({apps:C64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var vC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function PK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function l64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function m64($,Z,G){try{return JSON.parse($)}catch{throw new hC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function i64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:m64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function n64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function p64($){if(!$)return;return{openai:{response_format:$}}}function t64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function yC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function gC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var f64=256,x64,v64,y64,g64,h64,c64,u64,d64,hC$,cC$,uC$;var dC$=O(()=>{L6();Y6();zC();x64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),v64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),y64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(v64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),g64=h1.object({type:h1.literal("text")}),h64=h1.object({type:h1.literal("json_object")}),c64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),u64=h1.union([g64,h64,c64]),d64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(y64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(x64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:u64.optional(),user:h1.string().optional()});hC$=class hC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};cC$=new V1;cC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(PK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(PK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(PK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=d64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(PK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=l64(Q.model);if(!J)return $.json(PK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(PK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(PK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=i64(Q.messages),H=Q.tools?n64(Q.tools):void 0,N=p64(Q.response_format),B=t64(),D=Math.floor(Date.now()/1000);if(Q.stream)return rQ($,async(E)=>{let L=yC$(U,F,H,Q,N,$.req.raw.signal);try{let z=fQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=f64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:gC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=yC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:gC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(PK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(PK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(PK(Y.message,"server_error"),500)}});uC$=cC$});var mC$;var lC$=O(()=>{mC$={name:"decocms",version:"4.82.13",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function a64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??o64}}var iC$,o64="https://ph.studio.decocms.com",nC$;var pC$=O(()=>{Y6();Zf0();pN();OG();F8();H01();lC$();iC$=new V1;iC$.get("/",($)=>{let Z={version:mC$.version,theme:Ab1(),...aO().logo&&{logo:aO().logo},...gQ()&&{internalUrl:G00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:FR$(),posthog:a64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!gQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});nC$=iC$});function nL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function rC$($){return(nL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function oC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(nL0($))}&sz=${Z}`}function tC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function aC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?tC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):tC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as s64}from"path";function gU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function e64($){let Z=nL0($),G=rC$(Z),X=oC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=aC$({brand:G,domain:Z});return[`<title>${gU(J)}</title>`,`<meta name="description" content="${gU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${gU(J)}" />`,`<meta property="og:description" content="${gU(W)}" />`,`<meta property="og:url" content="${gU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${gU(J)}" />`,`<meta name="twitter:description" content="${gU(W)}" />`,`<link rel="canonical" href="${gU(Q)}" />`,`<link rel="icon" href="${gU(X)}" sizes="any" />`].join(`
     `)}function $44($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function sC$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?s64($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=e64(X);return G.html($44(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var eC$=O(()=>{Y6();F8()});import{z as Q1}from"zod";var TC,Z44,G44,X44,Y44,$_$;var Z_$=O(()=>{TC=Q1.enum(["good","bad","neutral"]),Z44=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:TC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),G44=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(Z44)),X44={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},Y44=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:TC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:TC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:TC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:TC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(G44).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:TC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:TC.optional()})).min(1)})]),$_$=Q1.object({...X44,template:Y44})});function G_$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=$_$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var X_$=O(()=>{Z_$()});function Hr($,Z){return fetch(`${FD({})}${$}`,Z)}async function Q44($,Z){let G=await Hr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=G_$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var J44,IC,Y_$;var Q_$=O(()=>{Y6();CQ();Kf();X_$();J44=new Set(["complete","errored","terminated","unknown"]),IC=new V1;IC.use("*",async($,Z)=>{let G=await O8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});IC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await Q44(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});IC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Hr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${HD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});IC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Hr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${HD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:J44.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});IC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Hr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});IC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Hr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});Y_$=IC});function J_$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var W_$,W44,K44,K_$;var w_$=O(()=>{Y6();x3();$y();xb();W_$=new V1,W44=["range","if-none-match","if-modified-since"],K44=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];W_$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Bg($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Wp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&f3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return J_$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of W44){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of K44){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),J_$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});K_$=W_$});var Nr=_((RC)=>{var w44=RC&&RC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),U44=RC&&RC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))w44(Z,$,G)};Object.defineProperty(RC,"__esModule",{value:!0});U44(rX(),RC)});var H_$=_((U_$)=>{Object.defineProperty(U_$,"__esModule",{value:!0});U_$.version=void 0;U_$.version="3.4.0"});var O_$=_((AK)=>{var F44=AK&&AK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(AK,"__esModule",{value:!0});AK.NodeTransport=AK.VERSION=void 0;AK.nodeResolveHost=E44;var n4=Nr(),H44=c0("net"),w81=c0("tls"),N44=c0("path"),N_$=c0("fs"),B44=F44(c0("dns")),O44=H_$();AK.VERSION=O44.version;var D44="nats.js";class B_${socket;version;lang;yields=[];signal=(0,n4.deferred)();closedNotification=(0,n4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=D44,this.version=AK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,n4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw n4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new n4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new n4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,n4.deferred)(),G,X=(0,H44.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,n4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=n4.DataBuffer.concat(...this.yields),Y=(0,n4.extractProtocolMessage)(X);if(Y!=="")try{let Q=n4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,n4.deferred)();try{if($=(0,N44.resolve)($),!(0,N_$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,N_$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,n4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,n4.deferred)();try{let Y=(0,w81.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,n4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,n4.deferred)();try{let X=(0,w81.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,n4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,n4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof w81.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,n4.render)($)}`);let Z=(0,n4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}AK.NodeTransport=B_$;function E44($){let Z=(0,n4.deferred)();return B44.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var j_$=_((z_$)=>{Object.defineProperty(z_$,"__esModule",{value:!0});z_$.connect=L44;var D_$=O_$(),E_$=Nr(),L_$=Nr();function L44($={}){if((0,L_$.hasWsProtocol)($))return Promise.reject(L_$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,E_$.setTransportFactory)({factory:()=>{return new D_$.NodeTransport},dnsResolveFn:D_$.nodeResolveHost}),E_$.NatsConnectionImpl.connect($)}});var P_$=_((hU)=>{var j44=hU&&hU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),P44=hU&&hU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))j44(Z,$,G)};Object.defineProperty(hU,"__esModule",{value:!0});hU.connect=void 0;var A44=j_$();Object.defineProperty(hU,"connect",{enumerable:!0,get:function(){return A44.connect}});P44(Nr(),hU)});function R_$($){let Z=$?.connectFn??q44,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:R44,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=mX(I44,T44,B-1,2,0.5);await D8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?A_$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=I_$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function q44($){return T_$.connect($)}var A_$,T_$,I_$,T44=100,I44=3000,R44=3000;var q_$=O(()=>{l5();A_$=k(Wh(),1),T_$=k(P_$(),1),I_$=k(dB(),1)});function U81($,Z){return`${$}.${Z}`}class F81{cache;constructor($){this.cache=ey({ttlMs:$?.ttlMs??M44,maxSize:$?.maxSize??k44})}async get($,Z){return this.cache.get(U81($,Z))??null}async set($,Z,G){this.cache.set(U81($,Z),G)}async invalidate($,Z){this.cache.delete(U81($,Z))}teardown(){this.cache.clear()}}var M44=600000,k44=5000;var M_$=()=>{};function pL0($,Z){return`${$}:${Z}`}function H81($){let Z=ey({ttlMs:$?.ttlMs??S44,maxSize:$?.maxSize??V44}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(k_$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(pL0(K,w))},set(K,w,U){Z.set(pL0(K,w),U)},invalidate(K,w){Z.delete(pL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(k_$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(pL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var k_$="studio.ai-provider-keys.invalidate",S44=30000,V44=5000;var S_$=()=>{};class N81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var V_$=($)=>{let Z;return()=>Z??=$()},B81,O81;var C_$=O(()=>{B5();B81=V_$(()=>E8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),O81=V_$(()=>E8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function y44(){return{name:aw,subjects:[`${Jm0}.>`],storage:bJ.StorageType.File,max_age:b44,max_bytes:x44,max_msgs_per_subject:v44,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:f44,num_replicas:1}}class f_${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function __$($){let Z=b_$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function u44($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,_44().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class D81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=y44();try{await Z.streams.info(aw),await Z.streams.update(aw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(aw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=u44(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=N4$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Km0(w,{runId:Z}),H=performance.now()-U;if(B81().record(H),O81().add(1,{"org.id":X??"unknown"}),c44?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?__$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),h44)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Km0(Z,{runId:$,dedup:G});if(B81().record(performance.now()-Y),O81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:__$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=H4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=zN($),W;try{W=await(await X.consumers.get(aw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=H90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(w90()).pipeThrough(U90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(aw,{filter:zN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,b_$,C44=($)=>{let Z;return()=>Z??=$()},_44,b44=86400000000000,f44=120000000000,x44=4294967296,v44=500000,g44,h44,c44;var x_$=O(()=>{Um0();N90();wm0();B5();C_$();bJ=k(dB(),1),b_$=k(Wh(),1),_44=C44(()=>E8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));g44=process.env.STREAM_ENCODE_TRACE==="1",h44=process.env.DECOPILOT_STREAM_TRACE==="1";c44=g44?new f_$:null});import{z as X8}from"zod";var v_$,y_$,TK,E81,g_$,h_$,c_$,u_$,d44,d_$,l_$,m_$,i_$,n_$,l44,p_$,h7Z,m44,i44=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},t_$=($)=>{return new TextEncoder().encode(JSON.stringify($))},r_$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?m44[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${i44(Y.error)}`);return Y.data};var o_$=O(()=>{v_$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),y_$=X8.array(X8.tuple([X8.string(),X8.string()])),TK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),E81=X8.string().min(1),g_$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:TK,method:X8.string().min(1),url:X8.string().min(1),headers:y_$,replySubject:E81,bodySubject:E81.optional(),abortSubject:E81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),h_$=X8.object({type:X8.literal("request.chunk"),requestId:TK,seq:X8.number().int().nonnegative(),data:v_$}),c_$=X8.object({type:X8.literal("request.end"),requestId:TK,seq:X8.number().int().nonnegative()}),u_$=X8.object({type:X8.literal("request.error"),requestId:TK,code:X8.string().min(1),message:X8.string()}),d44=X8.union([h_$,c_$,u_$]),d_$=X8.object({type:X8.literal("response.ack"),requestId:TK}),l_$=X8.object({type:X8.literal("response.start"),requestId:TK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:y_$}),m_$=X8.object({type:X8.literal("response.chunk"),requestId:TK,seq:X8.number().int().nonnegative(),data:v_$}),i_$=X8.object({type:X8.literal("response.end"),requestId:TK,seq:X8.number().int().nonnegative()}),n_$=X8.object({type:X8.literal("response.error"),requestId:TK,code:X8.string().min(1),message:X8.string()}),l44=X8.union([d_$,l_$,m_$,i_$,n_$]),p_$=X8.object({type:X8.literal("abort"),requestId:TK,reason:X8.string().optional()}),h7Z=X8.union([g_$,d44,l44,p_$]),m44={"request.start":g_$,"request.chunk":h_$,"request.end":c_$,"request.error":u_$,"response.ack":d_$,"response.start":l_$,"response.chunk":m_$,"response.end":i_$,"response.error":n_$,abort:p_$}});var n44=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},p44=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},t44=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},r44=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},a_$=($)=>{return n44(btoa(t44($)))},s_$=($)=>{return r44(atob(p44($)))},o44;var e_$=O(()=>{o44=class o44{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*J54($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class B54{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var a44=30000,s44=1000,e44=65536,aQ,$54=($)=>{return"connection"in $},Z54=($)=>{let Z=$54($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??a44,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??s44,maxChunkBytes:Z.maxChunkBytes??e44,diagnostics:Z.diagnostics}},$b$=($)=>{return Array.from($.entries())},G54=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},X54=($,Z,G)=>{if(G54(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return $b$(G.headers);return $b$(G.headers)},Zb$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},Y54=()=>{return crypto.randomUUID().replaceAll("-","")},Q54=($)=>{try{$?.unsubscribe()}catch{}},W54=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},K54=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},RB=($,Z,G)=>{$.publish(Z,t_$(G))},w54=($)=>{return $.type.startsWith("response.")},L81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},U54=($)=>{if($==="idle")return new aQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new aQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},Gb$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(U54(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=r_$(W.value.data);if(!w54(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},F54=async($)=>{let Z=!1;while(!0){let G=await Gb$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new aQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new aQ(G.value.code,G.value.message);throw new aQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},H54=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){RB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of J54(J,$.maxChunkBytes)){if(X)return;RB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:a_$(W)}),G++}}}catch(Q){if(X)return;RB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},N54=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await Gb$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new aQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(s_$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new aQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){RB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},qB=($)=>{let Z=Z54($);return W54(Z.maxChunkBytes),async(G,X)=>{let Y=NC$(G),Q=new Request(G,X),J=Y54(),W=BC$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new aQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,Q54(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new aQ("tunnel_aborted",L81(Q.signal));RB(Z.connection,W.abort,{type:"abort",requestId:J,reason:L81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new aQ("tunnel_aborted",L81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new aQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);RB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:X54(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};RB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)RB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?H54({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await F54({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(K54(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:Zb$(P.headers)});return new Response(N54({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:Zb$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var Xb$=O(()=>{o_$();e_$();dL0();aQ=class aQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var tL0=O(()=>{Xb$()});function Yb$($){let Z=$.createFetch??O54,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return z81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return z81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return z81}}}var z81,O54=($,Z)=>qB({connection:$,firstFrameTimeoutMs:Z});var Qb$=O(()=>{tL0();Ur();z81={online:!1,capabilities:[]}});async function*D54($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function Jb$($){let Z=$.createFetch??((G)=>qB({connection:G,idleTimeoutMs:E54}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*D54(U)}}var E54=45000;var Wb$=O(()=>{tL0();Ur()});import{z as fJ}from"zod";function Kb$($){return JSON.stringify($)}var BGZ;var wb$=O(()=>{BGZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function Ub$($){let Z=$.createFetch??((G)=>qB({connection:G,idleTimeoutMs:L54}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function Fb$($){let Z=$.createFetch??qB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:Kb$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var L54=45000;var Hb$=O(()=>{tL0();wb$();Ur()});function rL0($,Z,G,X){if(!X)return!1;return $.emit(Z,b3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var Nb$=O(()=>{R8()});class j81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as z54,rm as oL0}from"fs/promises";import{join as aL0}from"path";async function sL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-j54),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await qC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await Bb$($,Y,Z);else if(!Y.startsWith(".")){let Q=aL0($,Y),J=await qC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await Bb$(Q,K,Z)}if((await qC(Q)).length===0)await oL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function Bb$($,Z,G){let X=0,Y=aL0($,Z),Q=await qC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=aL0(Y,W),w=await qC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=aL0(K,F);await oL0(N,{recursive:!0,force:!0}),X++}}if((await qC(K)).length===0)await oL0(K,{recursive:!0,force:!0})}if((await qC(Y)).length===0)await oL0(Y,{recursive:!0,force:!0});return X}async function qC($){try{return(await z54($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var j54=30;var P81=()=>{};import{DBOS as A81,SchedulerMode as P54}from"@dbos-inc/dbos-sdk";async function T54(){let $=[$3(),kC(),qK()],Z=0;for(let G of $)try{Z+=await sL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function I54($,Z){await A81.runStep(()=>T54(),{name:"monitoringRetention"})}function Db$(){if(Ob$)return;Ob$=!0;let $=A81.registerWorkflow(I54,{name:"monitoringRetentionWorkflow"});A81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:A54,mode:P54.ExactlyOncePerIntervalWhenActive})}var A54="23 4 * * *",Ob$=!1;var Eb$=O(()=>{iX();P81()});function Lb$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await XN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Mu0($.db,Z,X.role);return Y.boundAuth=qu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new gD(G,void 0,Y.boundAuth,X.role,"self"),p40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var zb$=O(()=>{hD();Vi()});function R54(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function M54(){for(let $ of q54)$()}function jb$($){let Z=[...T81.logs,$];T81={...T81,logs:Z.length>500?Z.slice(-500):Z},M54()}function I81(){return k54}var T81,q54,k54=!1;var R81=O(()=>{T81=R54(),q54=new Set});import{EventEmitter as S54}from"events";var q81;var Pb$=O(()=>{R81();q81=new S54;q81.on("request",($)=>{jb$($)})});function Ab$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=vg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>vg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${$5.tool}${N}${$5.dim}(${E})${$5.reset}`}else if(H.method)Q=`${$5.dim}${vg(H.method)}${$5.reset}`}}catch{}}let W=vg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${$5.mcp}${vg(U.slice(0,12))}\u2026${$5.reset}`}else if(Y==="/mcp")W=`${$5.mcp}/mcp${$5.reset}`;else if(Y==="/mcp/registry")W=`${$5.mcp}/mcp/registry${$5.reset}`;let K=C54(X),w=J?"\u25C0":"\u2190";if(!I81())console.log(`${$5.dim}${w}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=V54(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!I81())console.log(`${$5.dim}${B}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${$5.reset} ${$5.duration}${N}${$5.reset}`);q81.emit("request",{method:X,path:vg(Y),status:F,duration:U,timestamp:new Date})}}}var $5,V54=($)=>{if($>=500)return $5.serverError;if($>=400)return $5.clientError;if($>=300)return $5.redirect;return $5.ok},C54=($)=>{return $5[$]||$5.reset},vg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Tb$=O(()=>{R81();Pb$();$5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as Mb$}from"crypto";import{mkdir as _54,readdir as b54,rm as Ib$,stat as kb$}from"fs/promises";import{join as k81,relative as f54}from"path";import{z as T$}from"zod";function Vb$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return k81(x54,Z)}function Cb$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function M81($,Z){let G=Vb$($),X=Cb$(Z);return k81(G,X)}function v54($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return Mb$("sha256",Y).update(Q).digest("hex")}function qb$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=v54(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${Cb$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function _b$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${Mb$("md5","etag").update(X).digest("hex")}"`}async function bb$($,Z,G,X,Y){try{let Q=await b54($,{withFileTypes:!0});for(let J of Q){let W=k81($,J.name),w=f54(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await bb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await kb$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:_b$(W,U.mtime,U.size)})}catch{}}}}catch{}}function fb$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=Vb$(X);await _54(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await bb$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=M81(X,Q.key),W=await kb$(J);return{contentType:P11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:_b$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Rb$;return{url:qb$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Rb$;return{url:qb$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=M81(X,Q.key);try{return await Ib$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=M81(X,K);try{await Ib$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function S81($,Z,G){let X=fb$(Z,G),Y=new Ow({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:z5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new yY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),eW(Y,Q,$,"mcp:dev-assets")}async function xb$($,Z,G,X){let Q=fb$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var x54="./data/assets",Rb$=3600,Sb$,vb$;var yb$=O(()=>{F8();Fp();Y6();gu();Yy();jG();KL0();Sb$=new V1;Sb$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return S81($.req.raw,Z,X)});vb$=Sb$});var gb$={};X6(gb$,{mountDevRoutes:()=>y54});function y54($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return S81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await xb$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",vb$);let G=new V1;G.use("*",tQ({mountPath:"/api/dev-assets"})),G.route("/",WL0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var hb$=O(()=>{Y6();B11();KL0();yb$()});import{sql as g54}from"kysely";import{randomUUID as cb$}from"crypto";import{z as h54}from"zod";async function u54($){let Z=new Date().toISOString(),G=cb$(),X=G4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:cb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await g54`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function d54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function l54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",QC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):db$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?ub$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:ub$,rateLimitWindow:c54,rateLimitMax:db$}}async function m54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function i54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function lb$($){let{db:Z,db:G}=$,X=new wx(G),Y=new Ux(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await d54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await l54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await m54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=BA$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:h54.treeifyError(U.error)},400);let F=await i54(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await u54({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var ub$=!0,c54="hour",db$=100;var mb$=O(()=>{q4();R8();Zg();$g0();Zg0();Q9()});var ib$={};X6(ib$,{createPublishRequestHandler:()=>lb$,createPublicMCPHandler:()=>jA$});var nb$=O(()=>{$g();mb$()});var kp0={};X6(kp0,{watchHandler:()=>ab$,getProxyDispatch:()=>r54,createApp:()=>Y94});import{readFileSync as n54}from"fs";import{PrometheusSerializer as p54}from"@opentelemetry/exporter-prometheus";import{DBOS as yg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as e54,oAuthProtectedResourceMetadata as $94}from"better-auth/plugins";async function t54($){let Z=$.connect(),G;try{G=await Promise.race([Z,tb$(pb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),tb$(pb$)]),G.release(),!0}catch{return G.release(!0),!1}}function tb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function r54(){if(!V81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return V81}async function o54($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${M_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function a54($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function Y94($={}){let Z=$.database??H6(),G=!1;Z9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new F81,J,W,K,w,U,F=null;if($.disableNats)J=H81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Hp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:f0}=await H0.read();if(f0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=R_$();let g=O1().natsCredsPath,H0;if(g)try{H0=n54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,H0?{creds:H0}:void 0);let f0=Wg0()?new sx0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let e0=new It0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=H81({getConnection:()=>F.getConnection()}),W=new N81({getConnection:()=>F.getConnection()}),K=new D81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=Yb$({getConnection:()=>F.getConnection()}),U=Ub$({getConnection:()=>F.getConnection()});let u0=Fb$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,z6)=>{u0.publishControlFrame(e1,z6).catch((J4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",J4)})},stop:()=>T1.stop()},iI$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Pi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(gg)await gg();ex0(X),Rt0(Y);let N={storage:new Dx(Z.db),sseHub:Z9},B=new jm0(N),D=new Gm(Z.db),E=new j81(D);E.start(),W.start((g)=>{x90(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),gg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Ai1(),Y.teardown(),ex0(null),Rt0(null)};let L=new V1;if(L.use("*",rb0({enabled:(g)=>gb(g,"debug")==="1"})),L.use("*",Ez0),L.use("/*",Hb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",Ab$());L.use("*",async(g,H0)=>{if(await H0(),dg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await t54(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let f0=H0.postgres.status==="up",e0=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:H0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await Pz0.collect(),f0=s54.serialize(H0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!Z94.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let f0=await yg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:f0,max:e0}=u4$();return g.json({pending:f0,active:H0,max:e0})}),L.route("/api/config",nC$),L.route("/api/_reports",Y_$),L.route("/report",sC$($.clientDir)),L.route("/api/auth/custom",HR$),L.route("/api/auth/desktop",BR$),L.all("/api/auth/admin/*",LR$),L.all("/api/auth/*",async(g)=>{return await O8.handler(g.req.raw)});let z=$s1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",wC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",wC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Ci),L.route("/",Ys1()),L.use("/oauth-proxy/:connectionId/*",wC),L.all("/oauth-proxy/:connectionId/*",rb$);let j=async(g)=>{let f0=await G94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",wC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await X94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=mI$({ttlMs:120000}),M=await ca1({db:Z.db,auth:O8,encryption:{key:O1().encryptionKey},observability:{tracer:uU,meter:E8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});XN.set(M);let S=new Aw(O1().encryptionKey);z21({db:Z.db,baseUrl:P3()});let R=J60(Z.db),V=new tl(Z.db),i=Lb$({db:Z.db});zt0({storage:R,studioContextFactory:i}),fm0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9},prepareLinkWorkFn:UM$,workPublisher:U}),Sm0({dispatchRunFn:KM$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9}});let f=new Dx(Z.db),v=new Xm(Z.db);I4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await ob$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let f0=await f.completeRunIfNotCompleted(g,H0);if(rL0(Z9,H0,g,f0),f0)await qm0(v,g,H0);return f0},markRunRequiresAction:async(g,H0)=>{let f0=await f.requiresActionIfInProgress(g,H0);return rL0(Z9,H0,g,f0),f0},markRunFailed:async(g,H0,f0,e0)=>{let u0=await f.markRunFailed(g,H0,f0,e0);if(rL0(Z9,H0,g,u0),u0)await qm0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await f.messageParts().replaceMessageParts(g,jN(g,H0),[])},persistTitle:(g,H0,f0)=>f.update(g,H0,{title:f0}),onTitleUpdated:async({runId:g,orgId:H0,title:f0})=>{let e0=await f.get(g,H0).catch(()=>null);Z9.emit(H0,b3(g,e0?.status??"in_progress",{title:f0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await f.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:f0,usage:e0})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:f0,reason:e0,kind:u0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),YW$({studioContextFactory:i,systemDatabaseUrl:vx1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),Db$(),j21();let Z0=async(g,H0,f0)=>{let e0=await R.findById(g,H0);if(!e0)throw Error("Automation not found");return At0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},o=new Dg(R,({automation:g,trigger:H0,contextMessages:f0,idempotencyKey:e0})=>Up({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:f0},{idempotencyKey:e0})),B0=[$3(),kC(),qK()];for(let g of B0)sL0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(Oz0(g.req.path))return H0();let f0={measure:async(u0,T1)=>{wQ(g,u0);try{return await T1()}finally{WY(g,u0)}}},e0=await XN.create(g.req.raw,{timings:f0});e0.automationRunner=Z0,g.set("studioContext",e0);try{await H0()}finally{let u0=e0.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),D8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",UC),L.use("/api/:org/v1/*",UC),L.use("/api/:org/files/*",UC),L.use("*",async(g,H0)=>{let f0=g.req.path;if(f0.startsWith("/api/org-sso/")||f0.startsWith("/api/auth/")||f0.startsWith("/api/tools/management")||f0.startsWith("/oauth-proxy/")||f0.startsWith(`${N01}/`))return H0();let e0=g.get("studioContext");if(!e0?.organization?.id||!e0?.auth?.user?.id)return H0();if(!(await e0.storage.orgSsoConfig.getByOrgId(e0.organization.id))?.enforced)return H0();if(!await e0.storage.orgSsoSessions.isValid(e0.auth.user.id,e0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new V1;J0.use("*",tQ({mountPath:"/api/org-sso"})),J0.route("/",kE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:ab0,grouped:oO()})}),L.use("/mcp/*",async(g,H0)=>{wQ(g,"mcp");try{return await H0()}finally{WY(g,"mcp")}});let G0=async(g,H0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let e0=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${e0.origin}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",G0),L.use("/mcp/gateway/:virtualMcpId?",G0),L.use("/mcp/virtual-mcp/:virtualMcpId?",G0),L.use("/mcp/self",G0),f3()){let{mountDevRoutes:g}=(hb$(),Yz0(gb$));g(L,G0)}let a=new V1;a.use("*",tQ({mountPath:"/mcp"})),a.route("/",KB0()),L.route("/mcp",a);let A0=new V1;A0.use("*",tQ({mountPath:"/mcp/self"})),A0.route("/",yL0()),L.route("/mcp/self",A0);let w0=new V1;w0.use("*",tQ({mountPath:"/mcp"})),w0.route("/",FB0()),L.route("/mcp",w0),L.use("/api/:org/models/*",async(g,H0)=>{wQ(g,"llm_models");try{return await H0()}finally{WY(g,"llm_models")}});let v0=H11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",v0),F!=null)V81=Jb$({getConnection:()=>F?.getConnection()??null});L.route("/api",SC$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(H0),e0=null;if(f0){let T1=(f0[1]??"").trim();e0=await RE0(T1,O8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let u0=w?await w(e0):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",UC),L.route("/api",K_$);let d0=new V1;d0.use("*",tQ({mountPath:"/api"})),d0.route("/",gL0()),L.route("/api",d0),L.route("/api",uC$);let i0=new V1;i0.use("*",tQ({mountPath:"/api"})),i0.route("/",hL0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",i0);let n0=new ol(Z.db),U0=new V1;U0.use("*",tQ({mountPath:"/api"})),U0.route("/",YL0()),L.route("/api",U0),L.route("/api/deco-sites",_M$()),L.route("/api/deco-apps",xC$());let C0=new V1;C0.use("*",tQ({mountPath:"/api/deco-sites"})),C0.route("/",JL0()),L.route("/api/deco-sites",C0);let T0=new V1;T0.use("*",tQ({mountPath:"/api/vm-events"})),T0.route("/",bC$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:N0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (nb$(),ib$)),X0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=N0(X0),n=Q0(X0);L.use("/org/:orgRef/registry/publish-request",wC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",wC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(N01,zR$());let e=FC$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:Z9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:f3(),mcpAuth:G0,oauthProxyHandler:rb$,watchHandler:ab$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(zM$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([Z9.stop(),gg?Promise.resolve(gg()).finally(()=>{gg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await mY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await gx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await yg.registerQueue(lY,{partitionQueue:!0,concurrency:Dt0,minPollingIntervalMs:Et0}),await yg.registerQueue(eQ,{partitionQueue:!0,concurrency:bm0}),await yg.registerQueue(RK,{partitionQueue:!0,concurrency:km0}),await yg.registerQueue(cU,{partitionQueue:!0,concurrency:XW$}),await D11(R),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>yg.deleteQueue(g))),await Lt0(Z.pool),Uh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),P21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var ob$,pb$=5000,V81=null,gg=null,rb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await XN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await ex(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await _i(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let R=N.searchParams.get("redirect_uri");if(R){let V=O1().baseUrl??B.origin;try{let i=new URL(R),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",R)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(k_1(J.connection_url))try{let V=await o54(Y,J.organization_id),i=a54(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let o=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=o||null,P=B0||null}}catch{}let R=await $.req.formData();if(R.has("resource"))R.set("resource",J.connection_url);let V=R.get("client_id"),i=R.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of R.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let R=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...R?.slug?{organization_slug:R.slug}:{},...R?.name?{organization_name:R.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[R,V]of A.headers.entries())if(!S.includes(R.toLowerCase()))M.set(R,V);if(X==="token"&&A.ok){let R=await A.text();try{let V=JSON.parse(R);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await $v(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new b5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(R,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},ab$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return rQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!Z9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{Z9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),Z9.remove(X,J),U()})})})},s54,Z94,G94=()=>$94(O8),X94=()=>e54(O8);var Sp0=O(()=>{l5();F8();A21();OG();xb();R8();Y6();X$0();Nb1();ob0();CQ();Vi();Q01();HQ();B5();q4();H01();OR$();jR$();E01();EM$();N11();QJ();t40();B11();jM$();O11();HC$();VC$();fC$();j11();vC$();wB0();bi();dC$();HB0();i$1();pC$();eC$();Q_$();w_$();m$1();l$1();Ir();Dd();q_$();UY();I60();sl();Mt0();M_$();S_$();x_$();Qb$();Wb$();Hb$();Pm0();Nb$();jg0();bg0();sw();Rg0();Eb$();s$0();P81();iX();E11();Rv();Rm0();Lm0();s$0();K11();my0();iy0();zb$();hb();Tb$();zC();Q01();Zy();v90();ob$=k(dB(),1);s54=new p54,Z94=new Set([lY,eQ,RK,cU])});var Zf$={};X6(Zf$,{resolveClientDir:()=>F94,resolveAssetPathWithTraversalCheck:()=>$f$,isPathWithinDirectory:()=>eb$,createAssetHandler:()=>H94});import{resolve as Br,dirname as Q94,join as J94,extname as W94,basename as K94,sep as sb$}from"path";function w94($,Z){if($===Z||K94($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${sb$}assets${sb$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function eb$($,Z){let G=Br(Z),X=Br($);return X===G||X.startsWith(G+"/")}function $f$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Br(Z,G);if(!eb$(X,Z))return null;return X}function F94($,Z="../client"){let G=new URL($),X=Q94(G.pathname);return Br(X,Z)}function H94($={}){let{env:Z="production",clientDir:G=U94,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=$f$({requestPath:W,clientDir:G});if(!K)return null;let w=J94(K,"index.html"),U=Br(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(W94(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:w94(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var U94="./dist/client";var Gf$=()=>{};var Xf$={};X6(Xf$,{tryUpgradePreviewWs:()=>z94,tryHandlePreviewHttp:()=>L94,previewWebSocketHandler:()=>j94,parsePreviewBaseDomain:()=>E94,isPreviewWsData:()=>eL0,extractHandleFromHost:()=>C81});function O94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function D94(){return new Response(B94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function E94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function C81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function L94($,Z){let G=C81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Dr(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(PV)&&O94($))return D94();return Y.headers.delete(PV),Y}function Dr($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function eL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function z94($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=C81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Dr(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Dr(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Dr(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return Dr(426,"upgrade failed");return}function Or($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var N94=256,B94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',j94;var Yf$=O(()=>{Ip0();j94={open($){let Z=$.data;if(!eL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Or($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Or($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Or($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!eL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=N94){Or($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!eL0(Z))return;Or($,Z,1000,"")}}});var Kf$={};X6(Kf$,{printBanner:()=>A94,bannerLines:()=>Wf$,BANNER_LINES:()=>Qf$,BANNER_GRADIENT:()=>Jf$});function P94($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Wf$($){let Z=Qf$.map((G,X)=>{let[Y,Q,J]=P94(Jf$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function A94($){console.log("");for(let Z of Wf$($))console.log(Z);console.log("")}var Qf$,Jf$;var wf$=O(()=>{Qf$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Jf$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Ff$={};X6(Ff$,{bootstrapDevLinkSession:()=>C94});import{existsSync as T94}from"fs";import{chmod as I94,mkdir as R94,rename as q94,writeFile as M94}from"fs/promises";import{dirname as k94,join as Uf$}from"path";function S94($){return Uf$($,"dev-link")}function V94($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Uf$(S94($),"session.json")}async function C94($,Z){let G=V94($),X=H6().db,Y=gQ()?await Jp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(T94(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await O8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await O8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await R94(k94(G),{recursive:!0});let W=`${G}.tmp`;return await M94(W,JSON.stringify(J,null,2),{mode:384}),await I94(W,384),await q94(W,G),{path:G,userSub:Y.id}}var Hf$=O(()=>{HQ();CQ();pN()});l5();var d81="4";function l81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:d81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();Jz0();B5();function qx$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Rz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function I61(){let $=qx$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Rz0($,"--cpu-prof-dir")??process.cwd(),name:Rz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Rz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}kz0();var Mr;function b61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=SB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Mr=setInterval(()=>void Z().catch(()=>{}),$),Mr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Mr)clearInterval(Mr)}}import*as Sx$ from"bun:jsc";var{startSamplingProfiler:Vx$,samplingProfilerStackTraces:Cx$}=Sx$;function f61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Vx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=Cx$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function x61(){I61();let $=[b61(),_61(),f61()];return()=>{for(let Z of $)Z()}}import{existsSync as h94}from"fs";var lX=O1();A61();var{DBOS:Er,DBOSClient:_94}=await import("@dbos-inc/dbos-sdk");function Ef$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var b94=[lY,eQ,RK,cU],f94=lX.dispatchRole==="worker"?b94:lX.dispatchRole==="api"?[]:void 0;Er.setConfig(l81({systemDatabaseUrl:Ef$(lX.databaseUrl,lX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:lX.podName,listenQueues:f94}));var{createApp:x94}=await Promise.resolve().then(() => (Sp0(),kp0)),{isServerPath:v94}=await Promise.resolve().then(() => (Ir(),Q61)),{createAssetHandler:y94,resolveClientDir:Lf$}=await Promise.resolve().then(() => (Gf$(),Zf$)),g94=lX.port,Nf$=Lf$(import.meta.url,"../client"),zf$=h94(Nf$)?Nf$:Lf$(import.meta.url,"../dist/client"),c94=y94({clientDir:zf$,isServerPath:v94}),u94={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function d94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(u94))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:l94,tryHandlePreviewHttp:m94,tryUpgradePreviewWs:i94,previewWebSocketHandler:_81,isPreviewWsData:b81}=await Promise.resolve().then(() => (Yf$(),Xf$)),{getOrInitSharedRunner:n94}=await Promise.resolve().then(() => (sn(),w3$)),jf$=l94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Bf$={baseDomain:jf$??"",getRunner:n94},$z0=await x94({clientDir:zf$}),f81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Of$=process.env.DBOS_CONDUCTOR_URL?.trim();await Er.launch({...f81?{conductorKey:f81}:{},...f81&&Of$?{conductorURL:Of$}:{}});console.log(`[dbos] application version: ${Er.applicationVersion}`);var x81=5,v81=0;await sQ(async()=>{v81++;try{return await $z0.initDbos()}catch($){let Z=v81>=x81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${v81}/${x81} failed, ${Z}`,$),$}},{maxAttempts:x81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!lX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (wf$(),Kf$));console.log("");for(let Z of $())console.log(Z)}var p94=Bun.serve({idleTimeout:0,port:g94,hostname:"0.0.0.0",fetch:async($,Z)=>{if(jf$){let X=await i94($,Z,Bf$);if(X===void 0)return;if(X)return X;let Y=await m94($,Bf$);if(Y)return Y}let G=await c94($);if(G)return d94(G);return $z0.fetch($,{server:Z})},websocket:{open($){if(b81($.data))_81.open($)},message($,Z){if(b81($.data))_81.message($,Z)},close($){if(b81($.data))_81.close($)}},development:!1}),t94=x61();if(lX.localMode)Promise.resolve().then(() => (pN(),dN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Hf$(),Ff$)),Y=lX.baseUrl??`http://localhost:${lX.port}`,Q=await X(lX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (pN(),dN0));Z()}catch{}});var Df$=!1;async function r94($){let Z;try{Z=await _94.create({systemDatabaseUrl:Ef$(lX.databaseUrl,lX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:eQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:eQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function Zz0($){if(Df$)return;Df$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{t94(),$z0.markShuttingDown();let Q=i81(lX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await D8(Q),await p94.stop(!0);let J=Er.executorID;await Er.shutdown(),await r94(J),await $z0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Zz0("SIGTERM"));process.on("SIGINT",()=>Zz0("SIGINT"));process.on("SIGHUP",()=>Zz0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Zz0("uncaughtException")});