decocms 4.82.17 → 4.82.18

package/dist/server/server.js

@@ -321,7 +321,7 @@ You are the Agent Manager. You create, configure, and maintain agents (Virtual M
       - Empty selected_tools or selected connections that no longer exist.
    d. Suggest a concrete action per flagged agent: rewrite instructions (workflow 4), narrow scope, merge with another, or delete.
    e. Confirm with the user before any destructive change. Apply with COLLECTION_VIRTUAL_MCP_UPDATE or COLLECTION_VIRTUAL_MCP_DELETE.
-</workflows>`,ig1;var ng1=O(()=>{R8();ig1={id:"studio-agent-manager",title:"Agent Manager",icon:"icon://Bot?color=chart-5",description:"Create, configure, and manage agents",selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:mg1,resolveRuntime:async({orgId:$,ctx:Z})=>{if(!(await Z.storage.virtualMcps.list($)).some((Y)=>!p_0(Y.id)))return{instructions:vV8,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]};return{instructions:mg1,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]}},getId:rZ.AGENT_MANAGER}});var yV8=`<role>
+</workflows>`,ig1;var ng1=O(()=>{R8();ig1={id:"studio-agent-manager",title:"Agent Manager",icon:"icon://Bot?color=violet",description:"Create, configure, and manage agents",selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:mg1,resolveRuntime:async({orgId:$,ctx:Z})=>{if(!(await Z.storage.virtualMcps.list($)).some((Y)=>!p_0(Y.id)))return{instructions:vV8,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]};return{instructions:mg1,selectedTools:["COLLECTION_VIRTUAL_MCP_CREATE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_UPDATE","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_PLUGIN_CONFIG_GET","VIRTUAL_MCP_PLUGIN_CONFIG_UPDATE","VIRTUAL_MCP_PINNED_VIEWS_UPDATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"]}},getId:rZ.AGENT_MANAGER}});var yV8=`<role>
 You are the API Key Manager. You create and manage the current user's API keys for this organization, with least-privilege permissions and safe secret handling.
 </role>
 
@@ -379,7 +379,7 @@ You are the API Key Manager. You create and manage the current user's API keys f
    b. Propose a replacement with the same or narrower permissions and a suitable expiration; confirm and create it.
    c. Tell the user to deploy and validate the replacement. Do not revoke the old key in the same step.
    d. Only after the user confirms the replacement is working, follow the revocation workflow for the old key.
-</workflows>`,pg1;var tg1=O(()=>{R8();pg1={id:"studio-api-key-manager",title:"API Key Manager",icon:"icon://Key01?color=destructive",description:"Create, scope, audit, rotate, and revoke API keys safely",selectedTools:["API_KEY_CREATE","API_KEY_LIST","API_KEY_UPDATE","API_KEY_DELETE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:yV8,getId:rZ.API_KEY_MANAGER}});var gV8=`<role>
+</workflows>`,pg1;var tg1=O(()=>{R8();pg1={id:"studio-api-key-manager",title:"API Key Manager",icon:"icon://Key01?color=red",description:"Create, scope, audit, rotate, and revoke API keys safely",selectedTools:["API_KEY_CREATE","API_KEY_LIST","API_KEY_UPDATE","API_KEY_DELETE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:yV8,getId:rZ.API_KEY_MANAGER}});var gV8=`<role>
 You are the Automation Manager. You create, configure, and manage automations \u2014 background agents that run on triggers (cron schedules or events).
 </role>
 
@@ -437,7 +437,7 @@ You are the Automation Manager. You create, configure, and manage automations \u
       - Tighten <constraints> when the current messages are too open-ended.
    e. Save with AUTOMATION_UPDATE using the smallest change set.
    f. Re-read with AUTOMATION_GET to verify the stored result.
-</workflows>`,rg1;var og1=O(()=>{R8();rg1={id:"studio-automation-manager",title:"Automation Manager",icon:"icon://Zap?color=chart-4",description:"Create, configure, and run automations with triggers",selectedTools:["AUTOMATION_CREATE","AUTOMATION_GET","AUTOMATION_LIST","AUTOMATION_UPDATE","AUTOMATION_DELETE","AUTOMATION_TRIGGER_ADD","AUTOMATION_TRIGGER_REMOVE","AUTOMATION_RUN","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:gV8,getId:rZ.AUTOMATION_MANAGER}});async function ag1($,Z){let G=$.objectStorage;if(!G)return!1;try{return(await G.list({prefix:Z,maxKeys:1})).objects.length>0}catch{return!1}}var hV8=`<role>
+</workflows>`,rg1;var og1=O(()=>{R8();rg1={id:"studio-automation-manager",title:"Automation Manager",icon:"icon://Zap?color=amber",description:"Create, configure, and run automations with triggers",selectedTools:["AUTOMATION_CREATE","AUTOMATION_GET","AUTOMATION_LIST","AUTOMATION_UPDATE","AUTOMATION_DELETE","AUTOMATION_TRIGGER_ADD","AUTOMATION_TRIGGER_REMOVE","AUTOMATION_RUN","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET"],selectedConnections:null,selectedPrompts:[],instructions:gV8,getId:rZ.AUTOMATION_MANAGER}});async function ag1($,Z){let G=$.objectStorage;if(!G)return!1;try{return(await G.list({prefix:Z,maxKeys:1})).objects.length>0}catch{return!1}}var hV8=`<role>
 You are the Brand Manager. The organization does not have a brand context yet \u2014 your first job is to help the user create one.
 </role>
 
@@ -504,7 +504,7 @@ You are the Brand Manager. You manage the organization's brand contexts (company
    b. Write the HTML \u2014 inline CSS, brand assets from <active_brand> by URL, no external scripts. The preview panel renders it as you stream.
    c. Reply with one short line offering iteration ("Want different copy, layout, or sections?"). Do not restate the URL, do not describe what you wrote, do not list sections \u2014 the user can see the page.
    d. Only ask before writing when the user's brief includes something that can't be defaulted (unusual structure, multi-page bundle). Even then, sketch the default in one line and ask "build this or adjust?" \u2014 never open with a discovery questionnaire.
-</workflows>`,eg1;var $h1=O(()=>{R8();eg1={id:"studio-brand-manager",title:"Brand Manager",icon:"icon://Brand?color=chart-5",description:"Create, configure, and manage brand contexts (company profiles) for the organization.",selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_GET","BRAND_CONTEXT_LIST","BRAND_CONTEXT_TEST","BRAND_CONTEXT_UPDATE","BRAND_CONTEXT_DELETE","BRAND_CONTEXT_EXTRACT"],selectedConnections:["self"],selectedPrompts:["brand-manager-set-up","brand-manager-complete-profile","brand-manager-create-landing-page"],instructions:sg1,resolveRuntime:async({orgId:$,ctx:Z})=>{let G=await Z.storage.brandContext.list($),X=G.find((Q)=>Q.isDefault)??G[0];if(!X)return{instructions:hV8,selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_EXTRACT"]};let Y=`
+</workflows>`,eg1;var $h1=O(()=>{R8();eg1={id:"studio-brand-manager",title:"Brand Manager",icon:"icon://Brand?color=orange",description:"Create, configure, and manage brand contexts (company profiles) for the organization.",selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_GET","BRAND_CONTEXT_LIST","BRAND_CONTEXT_TEST","BRAND_CONTEXT_UPDATE","BRAND_CONTEXT_DELETE","BRAND_CONTEXT_EXTRACT"],selectedConnections:["self"],selectedPrompts:["brand-manager-set-up","brand-manager-complete-profile","brand-manager-create-landing-page"],instructions:sg1,resolveRuntime:async({orgId:$,ctx:Z})=>{let G=await Z.storage.brandContext.list($),X=G.find((Q)=>Q.isDefault)??G[0];if(!X)return{instructions:hV8,selectedTools:["BRAND_CONTEXT_CREATE","BRAND_CONTEXT_EXTRACT"]};let Y=`
 
 <active_brand>
 ${JSON.stringify({id:X.id,name:X.name,domain:X.domain,overview:X.overview,logo:X.logo,colors:X.colors,fonts:X.fonts},null,2)}
@@ -545,7 +545,7 @@ You are the Connection Manager. You create, configure, test, and manage MCP conn
    a. List all connections with COLLECTION_CONNECTIONS_LIST.
    b. Test each connection's health with CONNECTION_TEST.
    c. Report which connections are healthy, erroring, or inactive.
-</workflows>`,Zh1;var Gh1=O(()=>{R8();Zh1={id:"studio-connection-manager",title:"Connection Manager",icon:"icon://Link01?color=chart-3",description:"Create, configure, test, and manage connections",selectedTools:["COLLECTION_CONNECTIONS_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_UPDATE","COLLECTION_CONNECTIONS_DELETE","CONNECTION_TEST"],selectedConnections:null,selectedPrompts:[],instructions:cV8,getId:rZ.CONNECTION_MANAGER}});var uV8=`<role>
+</workflows>`,Zh1;var Gh1=O(()=>{R8();Zh1={id:"studio-connection-manager",title:"Connection Manager",icon:"icon://Link01?color=cyan",description:"Create, configure, test, and manage connections",selectedTools:["COLLECTION_CONNECTIONS_CREATE","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_UPDATE","COLLECTION_CONNECTIONS_DELETE","CONNECTION_TEST"],selectedConnections:null,selectedPrompts:[],instructions:cV8,getId:rZ.CONNECTION_MANAGER}});var uV8=`<role>
 You are the Store Manager. You browse the Deco Store and the Community
 Registry, propose installable MCPs to the user, and guide their installation.
 </role>
@@ -585,7 +585,7 @@ Registry, propose installable MCPs to the user, and guide their installation.
 3. Reviewing the catalog:
    a. List both registries' contents (or filter by category).
    b. Report categories, popular entries, and any new additions.
-</workflows>`,Xh1;var Yh1=O(()=>{R8();Xh1={id:"studio-store-manager",title:"Store Manager",icon:"icon://Store01?color=success",description:"Browse the Deco Store and Community Registry, recommend MCPs, and guide installations.",selectedTools:null,selectedConnections:["registry","community-registry"],selectedPrompts:["store-manager-browse-store"],instructions:uV8,checklist:[{label:"Browse the Deco Store",activeForm:"Browsing the Deco Store",action:{kind:"open-agent-thread",promptName:"store-manager-browse-store"},isCompleted:async({orgId:$,ctx:Z})=>{let G=[G4.SELF($),G4.REGISTRY($),G4.COMMUNITY_REGISTRY($),G4.DEV_ASSETS($)],{totalCount:X}=await Z.storage.connections.list($,{where:{operator:"not",conditions:[{field:["id"],operator:"in",value:G}]},limit:1});return X>0}}],getId:rZ.STORE_MANAGER}});var dV8=`<role>
+</workflows>`,Xh1;var Yh1=O(()=>{R8();Xh1={id:"studio-store-manager",title:"Store Manager",icon:"icon://Store01?color=emerald",description:"Browse the Deco Store and Community Registry, recommend MCPs, and guide installations.",selectedTools:null,selectedConnections:["registry","community-registry"],selectedPrompts:["store-manager-browse-store"],instructions:uV8,checklist:[{label:"Browse the Deco Store",activeForm:"Browsing the Deco Store",action:{kind:"open-agent-thread",promptName:"store-manager-browse-store"},isCompleted:async({orgId:$,ctx:Z})=>{let G=[G4.SELF($),G4.REGISTRY($),G4.COMMUNITY_REGISTRY($),G4.DEV_ASSETS($)],{totalCount:X}=await Z.storage.connections.list($,{where:{operator:"not",conditions:[{field:["id"],operator:"in",value:G}]},limit:1});return X>0}}],getId:rZ.STORE_MANAGER}});var dV8=`<role>
 You are the Task Manager. You organize and maintain this organization's task board so the team can see what needs attention, what is underway, and what is complete.
 </role>
 
@@ -638,7 +638,7 @@ You are the Task Manager. You organize and maintain this organization's task boa
    a. Resolve the exact item with TASK_BOARD_ITEM_LIST unless its id is already known.
    b. Show the task title and explain that deleting the card is irreversible. Get explicit confirmation immediately before the tool call.
    c. Call TASK_BOARD_ITEM_DELETE only after confirmation, then briefly confirm removal.
-</workflows>`,Qh1;var Jh1=O(()=>{R8();Qh1={id:"studio-task-manager",title:"Task Manager",icon:"icon://Flag01?color=chart-1",description:"Create, prioritize, assign, and track work on the task board",selectedTools:["TASK_BOARD_ITEM_CREATE","TASK_BOARD_ITEM_LIST","TASK_BOARD_ITEM_UPDATE","TASK_BOARD_ITEM_DELETE","TASK_BOARD_ITEM_PRS_GET"],selectedConnections:null,selectedPrompts:[],instructions:dV8,getId:rZ.TASK_MANAGER}});var lV8=`<role>
+</workflows>`,Qh1;var Jh1=O(()=>{R8();Qh1={id:"studio-task-manager",title:"Task Manager",icon:"icon://Flag01?color=indigo",description:"Create, prioritize, assign, and track work on the task board",selectedTools:["TASK_BOARD_ITEM_CREATE","TASK_BOARD_ITEM_LIST","TASK_BOARD_ITEM_UPDATE","TASK_BOARD_ITEM_DELETE","TASK_BOARD_ITEM_PRS_GET"],selectedConnections:null,selectedPrompts:[],instructions:dV8,getId:rZ.TASK_MANAGER}});var lV8=`<role>
 You are the Usage Manager. You analyze how this workspace is actually used \u2014 which agents and connections get traffic, who uses them, what it costs \u2014 and help clean up what's idle.
 </role>
 
@@ -689,7 +689,7 @@ You are the Usage Manager. You analyze how this workspace is actually used \u201
    b. MONITORING_LOGS_LIST with isError true (plus connectionId/toolName/virtualMcpId filters) \u2192 failing calls.
    c. MONITORING_LOG_GET on specific log ids for full input/output when the error message isn't enough.
    d. Report the failing tool/connection, error pattern, and suggest the fix or owner.
-</workflows>`,Wh1;var Kh1=O(()=>{R8();Wh1={id:"studio-usage-manager",title:"Usage Manager",icon:"icon://BarChart10?color=chart-2",description:"Analyze usage, costs, and clean up idle agents and connections",selectedTools:["MONITORING_STATS","MONITORING_LOGS_LIST","MONITORING_LOG_GET","MONITORING_THREAD_USAGE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_LAST_USED_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_DELETE","ORGANIZATION_MEMBER_LIST"],selectedConnections:null,selectedPrompts:[],instructions:lV8,getId:rZ.USAGE_MANAGER}});function fx0($){return wD.find((Z)=>$.startsWith(`${Z.id}_`))??null}async function mV8($,Z){if("resolveRuntime"in $)return $.resolveRuntime(Z);return{instructions:$.instructions,selectedTools:$.selectedTools}}async function r$0({virtualMcp:$,agentId:Z=$.id,organizationId:G,ctx:X}){let Y=fx0(Z);if(!Y)return $;let Q=await mV8(Y,{orgId:G,ctx:X}),J=Q.selectedTools?[...Q.selectedTools]:null;return{...$,metadata:{...$.metadata??{},instructions:Q.instructions},connections:$.connections.map((W)=>({...W,selected_tools:J}))}}async function o$0($,Z){if(!("checklist"in $))return[];return Promise.all($.checklist.map(async(G)=>({label:G.label,activeForm:G.activeForm,action:G.action,completed:await G.isCompleted(Z),alwaysSuggest:G.alwaysSuggest})))}async function wh1($,Z,G){let X={self:G4.SELF($),registry:G4.REGISTRY($),"community-registry":G4.COMMUNITY_REGISTRY($)};await Promise.all(wD.map(async(Y)=>{let Q=Y.getId($),J=await G.findById(Q,$),K=(Y.selectedConnections??["self"]).map((w)=>X[w]);if(J){await G.update(Q,Z,{metadata:{...J.metadata??{},instructions:Y.instructions},connections:K.map((w)=>{let U=J.connections.find((F)=>F.connection_id===w);return{connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:U?.selected_resources??null,selected_prompts:U?.selected_prompts??null}})});return}await G.create($,Z,{title:Y.title,description:Y.description,icon:Y.icon,status:"active",pinned:!1,metadata:{instructions:Y.instructions},connections:K.map((w)=>({connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:null,selected_prompts:Y.selectedPrompts?[...Y.selectedPrompts]:null}))},{id:Q})}))}var wD;var Jf=O(()=>{R8();ng1();tg1();og1();$h1();Gh1();Yh1();Jh1();Kh1();wD=[eg1,ig1,rg1,Zh1,pg1,Xh1,Qh1,Wh1]});import{DBOS as a$0}from"@dbos-inc/dbos-sdk";async function iV8($){let Z=H6(),G=new Qf(Z.db);await wh1($.orgId,$.createdBy,G)}async function nV8($){let Z=H6(),G=new Qf(Z.db);for(let X of wD){let Y=X.getId($.orgId),Q=await G.findById(Y,$.orgId);if(!Q)continue;let J=X.selectedPrompts?[...X.selectedPrompts]:null;if(Q.connections.every((K)=>{let w=K.selected_prompts;if(J===null)return w===null;if(w===null)return!1;if(w.length!==J.length)return!1;return w.every((U,F)=>U===J[F])}))continue;await G.update(Y,$.createdBy,{connections:Q.connections.map((K)=>({connection_id:K.connection_id,selected_tools:K.selected_tools,selected_resources:K.selected_resources,selected_prompts:J}))})}}async function pV8($){await a$0.runStep(()=>iV8($),{name:"installStudioPack"}),await a$0.runStep(()=>nV8($),{name:"backfillSelectedPrompts"})}async function xx0($){await a$0.startWorkflow(tV8,{workflowID:`install-studio-pack:${rV8}:${$.orgId}`})($)}async function Uh1(){let Z=await H6().db.selectFrom("member").select(["organizationId","userId"]).orderBy("createdAt","asc").execute(),G=new Map;for(let X of Z)if(!G.has(X.organizationId))G.set(X.organizationId,X.userId);await Promise.all(Array.from(G).map(async([X,Y])=>{try{await xx0({orgId:X,createdBy:Y})}catch(Q){console.error("[studio-pack-backfill] enqueue failed",{orgId:X},Q)}}))}var tV8,rV8="v5";var s$0=O(()=>{HQ();bx0();Jf();tV8=a$0.registerWorkflow(pV8,{name:"installStudioPackWorkflow"})});import{jwtVerify as oV8,SignJWT as Fh1}from"jose";import{randomBytes as aV8}from"crypto";function Hh1(){if(qd)return qd;let $=O1(),Z=$.meshJwtSecret??$.betterAuthSecret;if(Z)qd=new TextEncoder().encode(Z);else console.warn("MESH_JWT_SECRET not set - generating random secret (not persistent)"),qd=new Uint8Array(aV8(32));return qd}async function Nh1($,Z="5m"){let G=Hh1();return await new Fh1($).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Z).sign(G)}async function vx0($){try{let Z=Hh1(),{payload:G}=await oV8($,Z);return G}catch{return}}async function XH($,Z,G=3600){let X=O1(),Y=X.meshJwtSecret??X.betterAuthSecret;if(!Y)throw Error("A deterministic JWT secret is required to mint gateway JWTs \u2014 set MESH_JWT_SECRET or BETTER_AUTH_SECRET");let Q=new TextEncoder().encode(Y);return await new Fh1({iss:"mesh",sub:$,...Z&&{email:Z}}).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Math.floor(Date.now()/1000)+G).sign(Q)}var qd=null;var UD=O(()=>{F8()});class Md{constructor(){this._messageQueue=[]}static createLinkedPair(){let $=new Md,Z=new Md;return $._otherTransport=Z,Z._otherTransport=$,[$,Z]}async start(){while(this._messageQueue.length>0){let $=this._messageQueue.shift();this.onmessage?.($.message,$.extra)}}async close(){let $=this._otherTransport;this._otherTransport=void 0,await $?.close(),this.onclose?.()}async send($,Z){if(!this._otherTransport)throw Error("Not connected");if(this._otherTransport.onmessage)this._otherTransport.onmessage($,{authInfo:Z?.authInfo});else this._otherTransport._messageQueue.push({message:$,extra:{authInfo:Z?.authInfo}})}}import{SpanStatusCode as Bh1}from"@opentelemetry/api";function $0($){return{...$,execute:async(Z,G)=>{return await G.timings.measure(`tool.${$.name}`,async()=>G.tracer.startActiveSpan(`tool.${$.name}`,{attributes:{"tool.name":$.name,"organization.id":G.organization?.id??"system","user.id":G.auth.user?.id??G.auth.apiKey?.userId??"anonymous"}},async(X)=>{try{G.toolName=$.name,G.access.setToolName?.($.name);let Y=await $.handler(Z,G);return X.setStatus({code:Bh1.OK}),Y}catch(Y){throw X.setStatus({code:Bh1.ERROR,message:Y.message}),X.recordException(Y),Y}finally{X.end()}}))}}}var Y1=()=>{};function O0($){if(!$.organization)throw Error("This operation requires organization scope");return $.organization}function y1($){return $.auth.user?.id??$.auth.apiKey?.userId}function sV8($){return!!($.auth.user||$.auth.apiKey)}function M0($){if(!sV8($))throw Error("Authentication required")}import{z as J6}from"zod";var e$0,Oh1,Dh1,Eh1,Lh1,zh1,jh1,Ph1,Ah1,Th1;var Wf=O(()=>{e$0=J6.record(J6.string(),J6.array(J6.string())),Oh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),userId:J6.string().describe("ID of the user who owns this API key"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Example: { "self": ["API_KEY_CREATE"], "conn_abc123": ["SEND_MESSAGE"] }'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Dh1=J6.object({name:J6.string().min(1).max(64).describe("Human-readable name for the API key"),permissions:e$0.describe(`Permissions to grant (REQUIRED \u2014 there is no implicit default). Format: { resource: [actions] }. Resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names (e.g., ["ORGANIZATION_GET"]) or ["*"] for all. Example: { "self": ["ORGANIZATION_GET", "COLLECTION_CONNECTIONS_LIST"] }. The key is authorized solely by this allowlist; the creator's role does not widen it.`),expiresIn:J6.number().positive().optional().describe("Expiration time in seconds. If not provided, key never expires."),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("Additional metadata to store with the API key")}),Eh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),key:J6.string().describe("The actual API key value. STORE THIS SECURELY - it will not be shown again!"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Lh1=J6.object({}),zh1=J6.object({items:J6.array(Oh1).describe("List of API keys (without key values)")}),jh1=J6.object({keyId:J6.string().describe("ID of the API key to update"),name:J6.string().min(1).max(64).optional().describe("New name for the API key"),permissions:e$0.optional().describe('New permissions. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names or "*" for all. Example: { "self": ["API_KEY_CREATE"] }. Replaces existing permissions.'),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("New metadata. Replaces existing metadata.")}),Ph1=J6.object({item:Oh1.describe("The updated API key (without key value)")}),Ah1=J6.object({keyId:J6.string().describe("ID of the API key to delete")}),Th1=J6.object({success:J6.boolean().describe("Whether the deletion was successful"),keyId:J6.string().describe("ID of the deleted API key")})});var yx0;var Ih1=O(()=>{q4();Y1();Wf();yx0=$0({name:"API_KEY_CREATE",description:"Create an API key with scoped permissions. The key value is returned only once \u2014 store it immediately.",annotations:{title:"Create API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Dh1,outputSchema:Eh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.create({name:$.name,permissions:$.permissions,expiresIn:$.expiresIn,metadata:{...$.metadata,organization:Z.organization}}),X=G.expiresAt?G.expiresAt instanceof Date?G.expiresAt.toISOString():G.expiresAt:null,Y=G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"api_key_created",...Z.organization?.id?{groups:{organization:Z.organization.id}}:{},properties:{key_id:G.id,key_name:G.name??$.name,organization_id:Z.organization?.id,has_expiry:!!X}});return{id:G.id,name:G.name??$.name,key:G.key,permissions:G.permissions??{},expiresAt:X,createdAt:Y}}})});var gx0;var Rh1=O(()=>{q4();Y1();Wf();gx0=$0({name:"API_KEY_DELETE",description:"Delete and instantly revoke an API key. Cannot be undone.",annotations:{title:"Delete API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ah1,outputSchema:Th1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to delete API key");let Y=(await Z.boundAuth.apiKey.list())?.find((K)=>K.id===$.keyId);if(!Y)throw Error("API key not found");let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot delete API key from another organization");if(await Z.boundAuth.apiKey.delete($.keyId),W)i1.capture({distinctId:G,event:"api_key_deleted",groups:{organization:W},properties:{key_id:$.keyId,organization_id:W}});return{success:!0,keyId:$.keyId}}})});var hx0;var qh1=O(()=>{Y1();Wf();hx0=$0({name:"API_KEY_LIST",description:"List API keys for the current user in the current organization. Returns metadata only \u2014 key values are never shown after creation.",annotations:{title:"List API Keys",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Lh1,outputSchema:zh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.list(),X=Z.organization?.id;return{items:(G??[]).filter((Q)=>{return Q.metadata?.organization?.id===X}).map((Q)=>({id:Q.id,name:Q.name??"Unnamed Key",userId:Q.userId,permissions:Q.permissions??{},expiresAt:Q.expiresAt?Q.expiresAt instanceof Date?Q.expiresAt.toISOString():Q.expiresAt:null,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});var cx0;var Mh1=O(()=>{Y1();Wf();cx0=$0({name:"API_KEY_UPDATE",description:"Update an API key's name, permissions, or metadata. The key value cannot be changed or retrieved.",annotations:{title:"Update API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:jh1,outputSchema:Ph1,handler:async($,Z)=>{if(M0(Z),await Z.access.check(),!y1(Z))throw Error("User ID required to update API key");let Y=(await Z.boundAuth.apiKey.list())?.find((w)=>w.id===$.keyId);if(!Y)throw Error(`API key not found: ${$.keyId}`);let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot update API key from another organization");let K=await Z.boundAuth.apiKey.update({keyId:$.keyId,name:$.name,permissions:$.permissions,metadata:{...$.metadata,organization:Z.organization}});if(!K)throw Error(`Failed to update API key: ${$.keyId}`);return{item:{id:K.id,name:K.name??$.name??"Unnamed Key",userId:K.userId,permissions:K.permissions??{},expiresAt:K.expiresAt?K.expiresAt instanceof Date?K.expiresAt.toISOString():K.expiresAt:null,createdAt:K.createdAt instanceof Date?K.createdAt.toISOString():K.createdAt}}}})});var kh1=O(()=>{Ih1();Rh1();qh1();Mh1();Wf()});function YH($){let Z=$.trim();if(!Z)return{ok:!1,error:"Enter a website URL."};let G=$C8.test(Z),X=ZC8.test(Z),Y=GC8.test(Z);if(G&&!X&&!Y)return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let Q=X?Z:`https://${Z}`,J;try{J=new URL(Q)}catch{return{ok:!1,error:"Enter a valid website URL."}}if(J.protocol!=="http:"&&J.protocol!=="https:")return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let W=J.hostname.split(".");if(W.length<2||W.some((K)=>!K||!XC8.test(K)))return{ok:!1,error:"Enter a valid website URL."};return J.protocol="https:",{ok:!0,value:J.origin}}var $C8,ZC8,GC8,XC8;var kd=O(()=>{$C8=/^[a-zA-Z][a-zA-Z\d+.-]*:/,ZC8=/^[a-zA-Z][a-zA-Z\d+.-]*:\/\//,GC8=/^[^\s/:?#]+\.[^\s/:?#]+:\d+(?:[/?#]|$)/,XC8=/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i});import{z as qG}from"zod";function FD($){if($.baseUrl)return $.baseUrl.replace(/\/+$/,"");return(($.settings??O1()).commerceDiscoveryInternalApiUrl??YC8).replace(/\/+$/,"")}function Vh1($={}){return`${FD($)}/api/v2/mcp`}function HD($){let Z=$.apiKey??($.settings??O1()).commerceDiscoveryInternalApiKey;if(!Z)throw Error("COMMERCE_DISCOVERY_INTERNAL_API_KEY is required to set up Commerce Discovery.");return Z}function $80($){return new URL($).hostname}function JC8($){return $==="ownership_unverified"||$==="already_claimed_by_other_org"}function WC8($,Z={}){switch($){case"ownership_unverified":{let G=Z.email?`O e-mail ${Z.email}`:"Este e-mail",X=Z.domain?` ${Z.domain}`:" este site";return`${G} n\xE3o tem permiss\xE3o para reivindicar${X}. Use um e-mail do dom\xEDnio do site ou pe\xE7a ao suporte para autorizar seu dom\xEDnio.`}case"already_claimed_by_other_org":return"Este site j\xE1 pertence a outra organiza\xE7\xE3o. Fale com o suporte para transferir o acesso.";case"unknown":return"N\xE3o foi poss\xEDvel configurar o Commerce Discovery. Tente novamente ou fale com o suporte.";default:return $}}async function KC8($){let Z=await $.text().catch(()=>"");if(!Z)return"unknown";try{let G=JSON.parse(Z);return JC8(G.error)?G.error:"unknown"}catch{return"unknown"}}async function ux0($){let Z=`Commerce Discovery auth failed with status ${$.status}.`,G=await $.text().catch(()=>"");if(!G)return Z;try{let X=JSON.parse(G),Y=typeof X.error==="string"?X.error:typeof X.message==="string"?X.message:null;return Y?`Commerce Discovery auth failed: ${Y}.`:Z}catch{return Z}}async function _h1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/upgrade`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.orgName?{name:$.orgName}:{},...$.email?{email:$.email}:{},...$.reportUrl?{report_url:$.reportUrl}:{}})});if(!W.ok){let w=await KC8(W);throw new Ch1(w,{email:$.email,domain:Q})}let K=QC8.safeParse(await W.json());if(!K.success)throw Error("Commerce Discovery auth response did not include a token.");return{authorizationToken:K.data.token}}async function bh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/bindings`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,provider:$.provider,resource_id:$.resourceId})});if(W.status===409)return{ok:!1,reason:"resource_already_bound",detail:"Este recurso j\xE1 est\xE1 vinculado a outra loja. Se ele \xE9 seu, fale com o suporte para revis\xE3o manual."};if(W.status===422){let w=Sh1.safeParse(await W.json());return{ok:!1,reason:w.success?w.data.reason??"verification_failed":"verification_failed",detail:(w.success?w.data.detail:void 0)??"N\xE3o foi poss\xEDvel verificar o acesso a este recurso."}}if(!W.ok)throw Error(await ux0(W));let K=Sh1.safeParse(await W.json());if(!K.success||!K.data.binding)throw Error("Commerce Discovery bind response did not include a binding.");return{ok:!0,resourceId:K.data.binding.resource_id,evidence:K.data.binding.evidence}}async function fh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/run`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.githubRepo?{github_repo:$.githubRepo}:{}})});if(W.status===409)return{triggered:!1,reason:"not_upgraded"};if(!W.ok)throw Error(await ux0(W));return{triggered:!0}}async function xh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/connections/status?org_id=${encodeURIComponent($.orgId)}`,W=await Y(J,{method:"GET",headers:{Authorization:`Bearer ${X}`}});if(W.status===404||W.status===409)return{};if(!W.ok)throw Error(await ux0(W));let K=wC8.safeParse(await W.json());return K.success?K.data.providers:{}}var YC8,QC8,Sh1,Ch1,wC8;var Kf=O(()=>{R8();F8();YC8=new URL(x_0).origin,QC8=qG.object({token:qG.string().min(1)}),Sh1=qG.object({binding:qG.object({resource_id:qG.string(),evidence:qG.string()}).optional(),reason:qG.string().optional(),detail:qG.string().optional()});Ch1=class Ch1 extends Error{code;constructor($,Z={}){super(WC8($,Z));this.name="CommerceDiscoveryClaimError",this.code=$}};wC8=qG.object({providers:qG.record(qG.string(),qG.object({connected:qG.boolean(),via:qG.enum(["oauth","sa"]).nullable(),resource:qG.string().nullable()}))})});import{z as wY}from"zod";var UC8,FC8,dx0;var vh1=O(()=>{kd();Y1();Kf();UC8=wY.object({siteUrl:wY.string().min(1).describe("Website URL of the store being bound."),provider:wY.enum(["ga4","gsc"]).describe("Which Google source to bind: ga4 (Analytics) or gsc (Search Console)."),resourceId:wY.string().min(1).describe("The resource id the client typed: GA4 numeric property id, or GSC site (sc-domain:example.com or https://example.com/).")}),FC8=wY.discriminatedUnion("ok",[wY.object({ok:wY.literal(!0),resourceId:wY.string(),evidence:wY.string()}),wY.object({ok:wY.literal(!1),reason:wY.string(),detail:wY.string()})]),dx0=$0({name:"COMMERCE_DISCOVERY_BIND",description:"Bind a GA4 property or GSC site to the org's store via the shared service account (consent-free lane). The client grants deco-reader@\u2026 access to the resource and provides its id; Commerce Discovery verifies the resource belongs to this domain before persisting. Returns ok:false with an actionable pt-BR detail when verification fails or the resource is already bound elsewhere.",annotations:{title:"Bind Commerce Discovery Data Source",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:UC8,outputSchema:FC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return bh1({siteUrl:X.value,orgId:G.id,provider:$.provider,resourceId:$.resourceId.trim()})}})});import{z as qw}from"zod";var HC8,NC8,lx0;var yh1=O(()=>{kd();Y1();Kf();HC8=qw.object({siteUrl:qw.string().min(1).describe("Website URL of the store to inspect.")}),NC8=qw.object({providers:qw.record(qw.string(),qw.object({connected:qw.boolean(),via:qw.enum(["oauth","sa"]).nullable(),resource:qw.string().nullable()}))}),lx0=$0({name:"COMMERCE_DISCOVERY_CONNECTION_STATUS",description:"Read per-provider connection status (ga4/gsc/vtex) for the org's store \u2014 { connected, via: oauth|sa, resource }. The single source of truth for whether a data source is connected, unifying the OAuth (Studio vault) and shared-SA binding lanes. Read-only.",annotations:{title:"Commerce Discovery Connection Status",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:HC8,outputSchema:NC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return{providers:await xh1({siteUrl:X.value,orgId:G.id})}}})});import{z as Sd}from"zod";var BC8,OC8,mx0;var gh1=O(()=>{R8();kd();Y1();Kf();BC8=Sd.object({siteUrl:Sd.string().min(1).describe("Website URL to run the diagnostic for.")}),OC8=Sd.object({triggered:Sd.boolean(),reason:Sd.string().optional()}),mx0=$0({name:"COMMERCE_DISCOVERY_RUN",description:"Trigger the Commerce Discovery diagnostic run for the current organization's store. Call once the data sources (GA4/GSC/VTEX) are connected \u2014 this run resolves credentials and produces the enriched report.",annotations:{title:"Run Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:BC8,outputSchema:OC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);let Y=G4.COMMERCE_DISCOVERY(G.id),J=(await Z.storage.connections.findById(Y,G.id))?.configuration_state,W=J&&typeof J==="object"&&typeof J.github_repo==="string"&&J.github_repo.length>0?J.github_repo:void 0;return fh1({siteUrl:X.value,orgId:G.id,githubRepo:W})}})});var QH=O(()=>{l10()});import{z as wW}from"zod";async function zC8($,Z,G,X){let Y=await $.storage.connections.findById(Z,G);if(Y)return Y;throw X}async function jC8($,Z,G,X){let Y=await $.storage.virtualMcps.findById(Z,G);if(Y)return Y;throw X}var ix0,DC8=3600000,EC8,LC8,nx0;var hh1=O(()=>{R8();kd();Y1();KW();QH();Kf();ix0=v_0,EC8=wW.object({siteUrl:wW.string().min(1).describe("Website URL to configure.")}),LC8=wW.object({connection:aZ,virtualMcp:sZ,reportApp:wW.object({connectionId:wW.string(),virtualMcpId:wW.string(),toolName:wW.literal(ix0)}),created:wW.object({connection:wW.boolean(),virtualMcp:wW.boolean()})});nx0=$0({name:"COMMERCE_DISCOVERY_SETUP",description:"Create or return the Commerce Discovery connection and virtual MCP for the current organization.",annotations:{title:"Set Up Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:EC8,outputSchema:LC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check("COLLECTION_CONNECTIONS_CREATE");let X=y1(Z);if(!X)throw Error("User ID required to set up Commerce Discovery");let Y=YH($.siteUrl);if(!Y.ok)throw Error(Y.error);let Q=G4.COMMERCE_DISCOVERY(G.id),J=m_0(G.id),W=new URLSearchParams({virtualmcpid:J,main:`app:${Q}:${ix0}`}),K={email:Z.auth.user?.email,reportUrl:`${Z.baseUrl}/${encodeURIComponent(G.slug??G.id)}/${crypto.randomUUID()}?${W.toString()}`},w=await Z.storage.connections.findById(Q,G.id),U={connection:!1,virtualMcp:!1},F=await _h1({siteUrl:Y.value,orgId:G.id,orgName:G.name,...K}),H=Vh1();if(w)console.log("[commerce-discovery] syncing connection to claimed site",{orgId:G.id,siteUrl:Y.value,connectionId:Q}),w=await Z.storage.connections.update(w.id,{connection_url:H,connection_token:F.authorizationToken,metadata:{...w.metadata??{},siteUrl:Y.value}});else{console.log("[commerce-discovery] creating connection",{orgId:G.id,siteUrl:Y.value,connectionId:Q});try{let E=i_0(G.id,F.authorizationToken,H);w=await Z.storage.connections.create({...E,metadata:{...E.metadata??{},siteUrl:Y.value},organization_id:G.id,created_by:X}),U.connection=!0}catch(E){w=await zC8(Z,Q,G.id,E)}}let N=await Z.storage.virtualMcps.findById(J,G.id);if(!N){console.log("[commerce-discovery] creating virtual MCP",{orgId:G.id,siteUrl:Y.value,connectionId:w.id,virtualMcpId:J});try{N=await Z.storage.virtualMcps.create(G.id,X,n_0(G.id,w.id),{id:J}),U.virtualMcp=!0}catch(E){N=await jC8(Z,J,G.id,E)}}if(!N.pinned)N=await Z.storage.virtualMcps.update(N.id,X,{pinned:!0});let B=await Z.db.selectFrom("organization").select(["createdAt"]).where("id","=",G.id).executeTakeFirst();if((B?Date.now()-new Date(B.createdAt).getTime():Number.POSITIVE_INFINITY)<DC8){if((await Z.storage.organizationSettings.get(G.id))?.reports_only==null)await Z.storage.organizationSettings.upsert(G.id,{reports_only:!0})}return{connection:w,virtualMcp:N,reportApp:{connectionId:w.id,virtualMcpId:N.id,toolName:ix0},created:U}}})});var ch1=O(()=>{vh1();yh1();gh1();hh1()});var px0=_((uh1)=>{Object.defineProperty(uh1,"__esModule",{value:!0});uh1.kvPrefix=uh1.KvWatchInclude=void 0;uh1.KvWatchInclude={LastValue:"",AllHistory:"history",UpdatesOnly:"updates"};uh1.kvPrefix="KV_"});var eh1=_((ah1)=>{Object.defineProperty(ah1,"__esModule",{value:!0});ah1.KvStatusImpl=ah1.Bucket=ah1.Kvm=ah1.kvOperationHdr=void 0;ah1.Base64KeyCodec=TC8;ah1.NoopKvCodecs=tx0;ah1.defaultBucketOpts=mh1;ah1.validateKey=ih1;ah1.validateSearchKey=nh1;ah1.hasWildcards=ph1;ah1.validateBucket=Z80;var C5=rX(),r4=Do(),V5=px0();function TC8(){let $=(Z,G)=>{let X=[];for(let Y of Z.split("."))switch(Y){case">":case"*":X.push(Y);break;default:X.push(G(Y));break}return X.join(".")};return{encode(Z){return $(Z,btoa)},decode(Z){return $(Z,atob)}}}function tx0(){return{key:{encode($){return $},decode($){return $}},value:{encode($){return typeof $==="string"?new TextEncoder().encode($):$},decode($){return $}}}}function mh1(){return{replicas:1,history:1,timeout:2000,max_bytes:-1,maxValueSize:-1,codec:tx0(),storage:r4.StorageType.File}}ah1.kvOperationHdr="KV-Operation";var lh1="$KV",IC8=/^[-/=.\w]+$/,RC8=/^[-/=.>*\w]+$/,qC8=/^[-\w]+$/;function ih1($){if($.startsWith(".")||$.endsWith(".")||!IC8.test($))throw Error(`invalid key: ${$}`)}function nh1($){if($.startsWith(".")||$.endsWith(".")||$.includes("..")||!RC8.test($))throw Error(`invalid key: ${$}`)}function ph1($){if($.startsWith(".")||$.endsWith("."))throw Error(`invalid key: ${$}`);let Z=$.split("."),G=!1;for(let X=0;X<Z.length;X++)switch(Z[X]){case"*":G=!0;break;case">":if(X!==Z.length-1)throw Error(`invalid key: ${$}`);G=!0;break;default:}return G}function Z80($){if(!qC8.test($))throw Error(`invalid bucket name: ${$}`)}class th1{js;constructor($){this.js=(0,r4.toJetStreamClient)($)}create($,Z={}){return this.#$($,Z)}open($,Z={}){return Z.bindOnly=!0,this.#$($,Z)}#$($,Z={}){let{ok:G,min:X}=this.js.nc.features.get(C5.Feature.JS_KV);if(!G)return Promise.reject(Error(`kv is only supported on servers ${X} or better`));if(Z.bindOnly)return wf.bind(this.js,$,Z);return wf.create(this.js,$,Z)}list(){let $=(G)=>{let Y=G.streams.filter((J)=>{return J.config.name.startsWith(V5.kvPrefix)});Y.forEach((J)=>{J.config.sealed=J.config.sealed||!1,J.config.deny_delete=J.config.deny_delete||!1,J.config.deny_purge=J.config.deny_purge||!1,J.config.allow_rollup_hdrs=J.config.allow_rollup_hdrs||!1});let Q="";if(Y.length)Q=this.js.nc.info?.cluster??"";return Y.map((J)=>{return new G80(J,Q)})},Z=`${this.js.prefix}.STREAM.LIST`;return new r4.ListerImpl(Z,$,this.js)}}ah1.Kvm=th1;class wf{js;jsm;stream;bucket;direct;codec;prefix;editPrefix;useJsPrefix;_prefixLen;constructor($,Z,G){Z80($),this.js=Z,this.jsm=G,this.bucket=$,this.prefix=lh1,this.editPrefix="",this.useJsPrefix=!1,this._prefixLen=0}static async create($,Z,G={}){Z80(Z);let X=await $.jetstreamManager(),Y=new wf(Z,$,X);return await Y.init(G),Y}static async bind($,Z,G={}){let X=$.getOptions()?.checkAPI||G.bindOnly===!1,Y=await $.jetstreamManager(X),Q={config:{allow_direct:G.allow_direct}};Z80(Z);let J=new wf(Z,$,Y);return Q.config.name=G.streamName??J.bucketName(),Object.assign(J,Q),J.stream=Q.config.name,J.codec=G.codec||tx0(),J.direct=Q.config.allow_direct??!1,J.initializePrefixes(Q),J}async init($={}){let Z=Object.assign(mh1(),$);this.codec=Z.codec;let G={};if(this.stream=G.name=$.streamName??this.bucketName(),G.retention=r4.RetentionPolicy.Limits,G.max_msgs_per_subject=Z.history,Z.max_bytes)G.max_bytes=Z.max_bytes;if(G.max_msg_size=Z.maxValueSize,G.storage=Z.storage,$.placement)G.placement=$.placement;if($.republish)G.republish=$.republish;if($.description)G.description=$.description;if($.markerTTL)G.allow_msg_ttl=!0,G.subject_delete_marker_ttl=(0,C5.nanos)(Z.markerTTL);if($.mirror){let w=Object.assign({},$.mirror);if(!w.name.startsWith(V5.kvPrefix))w.name=`${V5.kvPrefix}${w.name}`;G.mirror=w,G.mirror_direct=!0}else if($.sources){let w=$.sources.map((U)=>{let F=Object.assign({},U),H=F.name.startsWith(V5.kvPrefix)?F.name.substring(V5.kvPrefix.length):F.name;if(!F.name.startsWith(V5.kvPrefix))F.name=`${V5.kvPrefix}${F.name}`;if(!U.external&&H!==this.bucket)F.subject_transforms=[{src:`$KV.${H}.>`,dest:`$KV.${this.bucket}.>`}];return F});G.sources=w,G.subjects=[this.subjectForBucket()]}else G.subjects=[this.subjectForBucket()];if($.metadata)G.metadata=$.metadata;if(typeof $.compression==="boolean")G.compression=$.compression?r4.StoreCompression.S2:r4.StoreCompression.None;let X=this.js.nc,Y=X.getServerVersion(),Q=Y?(0,C5.compare)(Y,(0,C5.parseSemVer)("2.7.2"))>=0:!1;G.discard=Q?r4.DiscardPolicy.New:r4.DiscardPolicy.Old;let{ok:J,min:W}=X.features.get(C5.Feature.JS_ALLOW_DIRECT);if(!J&&$.allow_direct===!0){let w=Y?`${Y.major}.${Y.minor}.${Y.micro}`:"unknown";return Promise.reject(Error(`allow_direct is not available on server version ${w} - requires ${W}`))}if($.allow_direct=typeof $.allow_direct==="boolean"?$.allow_direct:J,G.allow_direct=$.allow_direct,this.direct=G.allow_direct,G.num_replicas=Z.replicas,Z.ttl)G.max_age=(0,C5.nanos)(Z.ttl);G.allow_rollup_hdrs=!0;let K;try{if(K=await this.jsm.streams.info(G.name),!K.config.allow_direct&&this.direct===!0)this.direct=!1}catch(w){if(w.message==="stream not found")K=await this.jsm.streams.add(G);else throw w}this.initializePrefixes(K)}initializePrefixes($){this._prefixLen=0,this.prefix=`$KV.${this.bucket}`,this.useJsPrefix=this.js.apiPrefix!=="$JS.API";let{mirror:Z}=$.config;if(Z){let G=Z.name;if(G.startsWith(V5.kvPrefix))G=G.substring(V5.kvPrefix.length);if(Z.external&&Z.external.api!==""){let X=Z.name.substring(V5.kvPrefix.length);this.useJsPrefix=!1,this.prefix=`$KV.${X}`,this.editPrefix=`${Z.external.api}.$KV.${G}`}else this.editPrefix=this.prefix}}bucketName(){return this.stream??`${V5.kvPrefix}${this.bucket}`}subjectForBucket(){return`${this.prefix}.${this.bucket}.>`}subjectForKey($,Z=!1){let G=[];if(Z){if(this.useJsPrefix)G.push(this.js.apiPrefix);if(this.editPrefix!=="")G.push(this.editPrefix);else G.push(this.prefix)}else if(this.prefix)G.push(this.prefix);return G.push($),G.join(".")}fullKeyName($){if(this.prefix!=="")return`${this.prefix}.${$}`;return`${lh1}.${this.bucket}.${$}`}get prefixLen(){if(this._prefixLen===0)this._prefixLen=this.prefix.length+1;return this._prefixLen}encodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.encode(G));break}return Z.join(".")}decodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.decode(G));break}return Z.join(".")}validateKey=ih1;validateSearchKey=nh1;hasWildcards=ph1;close(){return Promise.resolve()}dataLen($,Z){let G=Z?Z.get(r4.JsHeaders.MessageSizeHdr)||"":"";if(G!=="")return parseInt(G,10);return $.length}smToEntry($){return new rh1(this.bucket,this.prefixLen,$,this.codec)}jmToWatchEntry($,Z){return new oh1(this.bucket,this.prefixLen,$,Z,this.codec)}async create($,Z,G){let X;try{let Q={previousSeq:0},J=await this._put($,Z,Q,G);return Promise.resolve(J)}catch(Q){if(X=Q,Q instanceof r4.JetStreamApiError){let J=Q;if(J.code!==r4.JetStreamApiCodes.StreamWrongLastSequence&&J.code!==r4.JetStreamApiCodes.StreamWrongLastSequenceUnknown)return Promise.reject(Q)}}let Y=0;try{let Q=await this.get($);if(Q?.operation==="DEL"||Q?.operation==="PURGE")return Y=Q!==null?Q.revision:0,this._put($,Z,{previousSeq:Y},G);else return Promise.reject(X)}catch(Q){return Promise.reject(Q)}}update($,Z,G,X){if(G<=0)throw Error("version must be greater than 0");return this.put($,Z,{previousSeq:G,timeout:X})}async _put($,Z,G={},X){let Y=this.encodeKey($);this.validateKey(Y),Z=this.codec.value.encode(Z);let Q={timeout:G?.timeout};if(G.previousSeq!==void 0){let J=(0,C5.headers)();Q.headers=J,J.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`)}if(X)(Q.headers||(0,C5.headers)()).set(r4.PubHeaders.MessageTTL,X);try{return(await this.js.publish(this.subjectForKey(Y,!0),Z,Q)).seq}catch(J){return Promise.reject(J)}}put($,Z,G={}){return this._put($,Z,G)}async get($,Z){let G=this.encodeKey($);this.validateKey(G);let X={last_by_subj:this.subjectForKey(G)};if(Z&&Z.revision>0)X={seq:Z.revision};let Y=null;try{if(this.direct)Y=await this.jsm.direct.getMessage(this.bucketName(),X);else Y=await this.jsm.streams.getMessage(this.bucketName(),X);if(Y===null)return null;let Q=this.smToEntry(Y);if(Q.rawKey!==G)return null;return Q}catch(Q){throw Q}}purge($,Z){return this._deleteOrPurge($,"PURGE",Z)}delete($,Z){return this._deleteOrPurge($,"DEL",Z)}async purgeDeletes($=1800000){let Z=[],G=await this.history({key:">"});await(async()=>{for await(let J of G)if(J.operation==="DEL"||J.operation==="PURGE")Z.push(J)})().then(),G.stop();let X=Date.now()-$,Y=Z.map((J)=>{let W=this.subjectForKey(J.key);if(J.created.getTime()>=X)return this.jsm.streams.purge(this.stream,{filter:W,keep:1});else return this.jsm.streams.purge(this.stream,{filter:W,keep:0})}),Q=await Promise.all(Y);return Q.unshift({success:!0,purged:0}),Q.reduce((J,W)=>{return J.purged+=W.purged,J})}async _deleteOrPurge($,Z,G){if(!this.hasWildcards($))return this._doDeleteOrPurge($,Z,G);let X=await this.keys($),Y=[];for await(let Q of X)if(Y.push(this._doDeleteOrPurge(Q,Z)),Y.length===100)await Promise.all(Y),Y.length=0;if(Y.length>0)await Promise.all(Y)}async _doDeleteOrPurge($,Z,G){let X=this.encodeKey($);this.validateKey(X);let Y=(0,C5.headers)();if(Y.set(ah1.kvOperationHdr,Z),Z==="PURGE"){let Q=G;if(Y.set(r4.JsHeaders.RollupHdr,r4.JsHeaders.RollupValueSubject),typeof Q?.ttl==="string"&&Q.ttl!=="")Y.set(r4.PubHeaders.MessageTTL,`${Q.ttl}`)}if(G?.previousSeq)Y.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`);await this.js.publish(this.subjectForKey(X,!0),C5.Empty,{headers:Y})}_buildCC($,Z,G={}){let Y=(!Array.isArray($)?[$]:$).map((W)=>{let K=this.encodeKey(W);return this.validateSearchKey(W),this.fullKeyName(K)}),Q=r4.DeliverPolicy.LastPerSubject;if(Z===V5.KvWatchInclude.AllHistory)Q=r4.DeliverPolicy.All;if(Z===V5.KvWatchInclude.UpdatesOnly)Q=r4.DeliverPolicy.New;let J=void 0;if(Y.length===1)J=Y[0],Y=void 0;return Object.assign({deliver_policy:Q,ack_policy:r4.AckPolicy.None,filter_subjects:Y,filter_subject:J,flow_control:!0,idle_heartbeat:(0,C5.nanos)(5000)},G)}remove($){return this.purge($)}async history($={}){let Z=$.key??">",G={};G.headers_only=$.headers_only||!1;let X=new C5.QueuedIteratorImpl,Y=()=>{X.stop()},Q=this._buildCC(Z,V5.KvWatchInclude.AllHistory,G),J=await this.js.consumers.getPushConsumer(this.stream,Q);if(X._data=J,(await J.info(!0)).num_pending===0)return X.push(Y),X;let K=await J.consume({callback:(w)=>{let U=this.jmToWatchEntry(w,!1);if(X.push(U),X.received++,w.info.pending===0)X.push(Y)}});return K.closed().then(()=>{X.push(Y)}),(async()=>{for await(let w of K.status())switch(w.type){case"heartbeat":X.push(()=>{X.stop()});break}})().then(),X.iterClosed.then(()=>{K.stop()}),X}canSetWatcherName(){let $=this.js.nc,{ok:Z}=$.features.get(C5.Feature.JS_NEW_CONSUMER_CREATE_API);return Z}async watch($={}){let Z=$.key??">",G=new C5.QueuedIteratorImpl,X={};X.headers_only=$.headers_only||!1;let Y=V5.KvWatchInclude.LastValue;if($.include===V5.KvWatchInclude.AllHistory)Y=V5.KvWatchInclude.AllHistory;else if($.include===V5.KvWatchInclude.UpdatesOnly)Y=V5.KvWatchInclude.UpdatesOnly;let Q=$.ignoreDeletes===!0,J=this._buildCC(Z,Y,X);if(J.name=`KV_WATCHER_${C5.nuid.next()}`,$.resumeFromRevision&&$.resumeFromRevision>0)J.deliver_policy=r4.DeliverPolicy.StartSequence,J.opt_start_seq=$.resumeFromRevision;let W=await this.js.consumers.getPushConsumer(this.stream,J),w=(await W.info(!0)).num_pending,U=Y===V5.KvWatchInclude.UpdatesOnly||w===0;G._data=W;let F=0,H=await W.consume({callback:(N)=>{if(!U)F++,U=F>=w;let B=this.jmToWatchEntry(N,U);if(Q&&B.operation==="DEL")return;G.push(B),G.received++}});return G.iterClosed.then(()=>{H.stop()}),H.closed().then(()=>{G.push(()=>{G.stop()})}),G}async keys($=">"){let Z=new C5.QueuedIteratorImpl,G=this._buildCC($,V5.KvWatchInclude.LastValue,{headers_only:!0}),X=await this.js.consumers.getPushConsumer(this.stream,G);if((await X.info()).num_pending===0)return Z.stop(),Z;Z._data=X;let Q=await X.consume({callback:(J)=>{let W=J.headers?.get(ah1.kvOperationHdr);if(W!=="DEL"&&W!=="PURGE"){let K=this.decodeKey(J.subject.substring(this.prefixLen));Z.push(K)}if(J.info.pending===0)Q.stop()}});return(async()=>{for await(let J of Q.status())switch(J.type){case"heartbeat":Z.push(()=>{Z.stop()});break}})().then(),Q.closed().then(()=>{Z.push(()=>{Z.stop()})}),Z.iterClosed.then(()=>{Q.stop()}),Z}purgeBucket($){return this.jsm.streams.purge(this.bucketName(),$)}destroy(){return this.jsm.streams.delete(this.bucketName())}async status(){let Z=this.js.nc.info?.cluster??"",G=this.bucketName(),X=await this.jsm.streams.info(G);return new G80(X,Z)}}ah1.Bucket=wf;class G80{si;cluster;constructor($,Z=""){this.si=$,this.cluster=Z}get bucket(){return this.si.config.name.startsWith(V5.kvPrefix)?this.si.config.name.substring(V5.kvPrefix.length):this.si.config.name}get values(){return this.si.state.messages}get history(){return this.si.config.max_msgs_per_subject}get ttl(){return(0,C5.millis)(this.si.config.max_age)}get markerTTL(){if(typeof this.si.config.subject_delete_marker_ttl==="number")return(0,C5.millis)(this.si.config.subject_delete_marker_ttl);return 0}get bucket_location(){return this.cluster}get backingStore(){return this.si.config.storage}get storage(){return this.si.config.storage}get replicas(){return this.si.config.num_replicas}get description(){return this.si.config.description??""}get maxBucketSize(){return this.si.config.max_bytes}get maxValueSize(){return this.si.config.max_msg_size}get max_bytes(){return this.si.config.max_bytes}get placement(){return this.si.config.placement||{cluster:"",tags:[]}}get placementCluster(){return this.si.config.placement?.cluster??""}get republish(){return this.si.config.republish??{src:"",dest:""}}get streamInfo(){return this.si}get size(){return this.si.state.bytes}get metadata(){return this.si.config.metadata??{}}get compression(){if(this.si.config.compression)return this.si.config.compression!==r4.StoreCompression.None;return!1}}ah1.KvStatusImpl=G80;class rh1{bucket;sm;prefixLen;codec;constructor($,Z,G,X){this.bucket=$,this.prefixLen=Z,this.sm=G,this.codec=X}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get delta(){return 0}get created(){return this.sm.time}get revision(){return this.sm.seq}get operation(){if(this.sm.header?.has("Nats-Marker-Reason")){if(this.sm.header?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.header?.get(ah1.kvOperationHdr)||"PUT"}get length(){let $=this.sm.header.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}class oh1{bucket;sm;prefixLen;update;codec;constructor($,Z,G,X,Y){this.bucket=$,this.prefixLen=Z,this.sm=G,this.update=X,this.codec=Y}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get created(){return new Date((0,C5.millis)(this.sm.info.timestampNanos))}get revision(){return this.sm.seq}get operation(){if(this.sm.headers?.has("Nats-Marker-Reason")){if(this.sm.headers?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.headers?.get(ah1.kvOperationHdr)||"PUT"}get delta(){return this.sm.info.pending}get length(){let $=this.sm.headers?.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}get isUpdate(){return this.update}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}});var rx0=_((g3)=>{Object.defineProperty(g3,"__esModule",{value:!0});g3.validateKey=g3.validateBucket=g3.NoopKvCodecs=g3.Kvm=g3.defaultBucketOpts=g3.Bucket=g3.Base64KeyCodec=g3.KvWatchInclude=g3.kvPrefix=void 0;var $c1=px0();Object.defineProperty(g3,"kvPrefix",{enumerable:!0,get:function(){return $c1.kvPrefix}});Object.defineProperty(g3,"KvWatchInclude",{enumerable:!0,get:function(){return $c1.KvWatchInclude}});var ND=eh1();Object.defineProperty(g3,"Base64KeyCodec",{enumerable:!0,get:function(){return ND.Base64KeyCodec}});Object.defineProperty(g3,"Bucket",{enumerable:!0,get:function(){return ND.Bucket}});Object.defineProperty(g3,"defaultBucketOpts",{enumerable:!0,get:function(){return ND.defaultBucketOpts}});Object.defineProperty(g3,"Kvm",{enumerable:!0,get:function(){return ND.Kvm}});Object.defineProperty(g3,"NoopKvCodecs",{enumerable:!0,get:function(){return ND.NoopKvCodecs}});Object.defineProperty(g3,"validateBucket",{enumerable:!0,get:function(){return ND.validateBucket}});Object.defineProperty(g3,"validateKey",{enumerable:!0,get:function(){return ND.validateKey}})});var ox0=_((JH)=>{Object.defineProperty(JH,"__esModule",{value:!0});JH.NoopKvCodecs=JH.Kvm=JH.defaultBucketOpts=JH.Bucket=JH.Base64KeyCodec=JH.KvWatchInclude=void 0;var yC8=rx0();Object.defineProperty(JH,"KvWatchInclude",{enumerable:!0,get:function(){return yC8.KvWatchInclude}});var Cd=rx0();Object.defineProperty(JH,"Base64KeyCodec",{enumerable:!0,get:function(){return Cd.Base64KeyCodec}});Object.defineProperty(JH,"Bucket",{enumerable:!0,get:function(){return Cd.Bucket}});Object.defineProperty(JH,"defaultBucketOpts",{enumerable:!0,get:function(){return Cd.defaultBucketOpts}});Object.defineProperty(JH,"Kvm",{enumerable:!0,get:function(){return Cd.Kvm}});Object.defineProperty(JH,"NoopKvCodecs",{enumerable:!0,get:function(){return Cd.NoopKvCodecs}})});function X80(){let $=new TextEncoder,Z=new TextDecoder;return{encode:(G)=>$.encode(JSON.stringify(G)),decode:(G)=>JSON.parse(Z.decode(G))}}class sx0{options;kv=null;codec=X80();constructor($){this.options=$}async init(){let $=this.options.getJetStream();if(!$)return;this.kv=await new Gc1.Kvm($).create(hC8,{storage:Zc1.StorageType.Memory})}async get($,Z){if(!this.kv)return null;try{let G=await this.kv.get(`${$}.${Z}`);if(!G?.value?.length)return null;if(G.operation==="DEL"||G.operation==="PURGE")return null;return this.codec.decode(G.value)}catch{return null}}async set($,Z,G){if(!this.kv)return;try{await this.kv.put(`${$}.${Z}`,this.codec.encode(G))}catch{}}async invalidate($){if(!this.kv)return;await Promise.all(["tools","resources","prompts"].map(async(G)=>{try{await this.kv.delete(`${G}.${$}`)}catch{}}))}teardown(){this.kv=null}}function cC8($,Z,G){if(G<=0)return!0;if($===void 0)return!0;return Z-$>=G}function Y80($){return $ instanceof S1&&$.code===v1.MethodNotFound}function uC8($){return $ instanceof S1&&$.code===-32000&&/connection closed/i.test($.message)}async function KH($,Z,G,X,Y,Q=0){if(!X)try{return await G()}catch(w){if(Y80(w))return[];return _d.add(1,{type:$,outcome:"error",stage:"no_cache"}),null}let J=`${$}:${Z}`,W=await X.get($,Z);if(W===null)try{let w=await G();return X.set($,Z,w).catch(()=>{}),ax0.set(J,Date.now()),_d.add(1,{type:$,outcome:"miss",stage:"miss"}),w}catch(w){if(Y80(w))return X.set($,Z,[]).catch(()=>{}),[];return _d.add(1,{type:$,outcome:"error",stage:"miss"}),null}if(_d.add(1,{type:$,outcome:"hit",stage:"hit"}),cC8(ax0.get(J),Date.now(),Q)&&!Q80.has(J)){Q80.add(J),ax0.set(J,Date.now());let w=G().then((U)=>X.set($,Z,U)).catch((U)=>{if(Y80(U)||uC8(U)){if(Y80(U))X.set($,Z,[]).catch(()=>{});return}_d.add(1,{type:$,outcome:"error",stage:"revalidation"})}).finally(()=>Q80.delete(J));Y?.(w)}return W}function ex0($){Xc1=$}function t5(){return Xc1}var Zc1,Gc1,_d,hC8="DECOCMS_MCP_LISTS",Q80,ax0,WH=30000,Xc1=null;var UY=O(()=>{E5();B5();Zc1=k(dB(),1),Gc1=k(ox0(),1),_d=E8.createCounter("mcp_list_cache.fetches",{description:"MCP list cache fetch outcomes (hit, miss, error)",unit:"{fetches}"});Q80=new Set;E8.createObservableGauge("mcp_list_cache.pending_revalidations",{description:"In-flight background MCP list revalidations on this pod",unit:"{revalidations}"}).addCallback(($)=>$.observe(Q80.size));ax0=new Map});var bd=($,Z)=>{if(Z===null||Z===void 0)return;let G=$.replace(/\[(\w+)\]/g,".$1").split(".").filter(Boolean),X=Z;for(let Y of G){if(X===null||X===void 0||typeof X!=="object")return;X=X[Y]}return X};function J80($){let Z=$.split("::");if(Z.length!==2||!Z[0]||!Z[1])throw Error(`Invalid scope format: ${$}. Expected format: "KEY::SCOPE"`);return Z}function dC8($){try{return J80($)}catch{return null}}function lC8($){if(typeof $==="object"&&$!==null&&"value"in $){let Z=$.value;if(typeof Z==="string")return Z}return null}function $v0($,Z){let G={};if(!$||!Z)return G;for(let X of Z){if(X==="*"){G["*"]=["*"];continue}let Y=dC8(X);if(!Y)continue;let[Q,J]=Y,W=bd(Q,$),K=lC8(W);if(K){if(!G[K])G[K]=[];G[K].push(J)}}return G}function Yc1($,Z){let G=$v0($,Z);return new Set(Object.keys(G).filter((X)=>X!=="*"))}var Zv0=()=>{};async function Qc1($){if(!$.refreshToken)return{success:!1,permanent:!1,error:"No refresh token available"};if(!$.tokenEndpoint)return{success:!1,permanent:!1,error:"No token endpoint available"};if(!$.clientId)return{success:!1,permanent:!1,error:"No client ID available"};try{let Z=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId});if($.clientSecret)Z.set("client_secret",$.clientSecret);if($.scope)Z.set("scope",$.scope);let G=await fetch($.tokenEndpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:Z.toString()});if(!G.ok){let Y=await G.text(),Q,J;try{let K=JSON.parse(Y);Q=K.error,J=K.error_description}catch{}let W=G.status===400&&!!Q&&mC8.has(Q);return(W?console.error:console.warn)("[TokenRefresh] refresh failed",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,status:G.status,errorCode:Q,errorDescription:J,permanent:W}),{success:!1,permanent:W,status:G.status,errorCode:Q,error:J||Q||`Token refresh failed: ${G.status}`}}let X=await G.json();return{success:!0,accessToken:X.access_token,refreshToken:X.refresh_token||$.refreshToken,expiresIn:X.expires_in,scope:X.scope}}catch(Z){return console.warn("[TokenRefresh] network/parse error",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,message:Z instanceof Error?Z.message:String(Z)}),{success:!1,permanent:!1,error:Z instanceof Error?Z.message:"Token refresh failed"}}}var mC8;var Jc1=O(()=>{mC8=new Set(["invalid_grant","bad_refresh_token"])});import{createHash as iC8,randomBytes as nC8,timingSafeEqual as Dm4}from"crypto";function tC8($){return $.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function Xv0($){return iC8("sha256").update($).digest("hex")}function wc1($){let Z=Gv0.length+1,G=Z+Kc1;if(!$.startsWith(`${Gv0}_`)||$.length<=G+1||$[G]!=="_")return null;let X=$.slice(Z,G),Y=$.slice(G+1);if(!Wc1.test(X)||!Wc1.test(Y))return null;return X}function Uc1(){let $=tC8(nC8(pC8)),Z=$.slice(0,Kc1),G=`${Gv0}_${Z}_${$}`;return{plaintext:G,prefix:Z,hash:Xv0(G)}}var Gv0="stv",pC8=32,Kc1=12,Wc1;var Fc1=O(()=>{Wc1=/^[A-Za-z0-9_-]+$/});function Hc1($){return{id:$.id,organizationId:$.organization_id,subjectConnectionId:$.subject_connection_id,tokenHash:$.token_hash,tokenPrefix:$.token_prefix,name:$.name,revokedAt:$.revoked_at,lastUsedAt:$.last_used_at,createdAt:$.created_at,updatedAt:$.updated_at}}class Yv0{db;constructor($){this.db=$}async createOrRotateWorkloadToken($){let Z=$.name??"default";return await this.db.transaction().execute(async(X)=>{if(!await X.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Subject connection not found in organization");let Q=Uc1(),J=new Date().toISOString();await X.updateTable("connection_workload_tokens").set({revoked_at:J,updated_at:J}).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",Z).where("revoked_at","is",null).execute();let W=await X.insertInto("connection_workload_tokens").values({id:q6("cwt"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,token_hash:Q.hash,token_prefix:Q.prefix,name:Z,revoked_at:null,last_used_at:null,created_at:J,updated_at:J}).returningAll().executeTakeFirstOrThrow();return{plaintextToken:Q.plaintext,record:Hc1(W)}})}async findActiveWorkloadToken($){let Z=await this.db.selectFrom("connection_workload_tokens").selectAll().where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",$.name??"default").where("revoked_at","is",null).executeTakeFirst();return Z?Hc1(Z):null}async revokeWorkloadToken($){let Z=new Date().toISOString();await this.db.updateTable("connection_workload_tokens").set({revoked_at:Z,updated_at:Z}).where("id","=",$.tokenId).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("revoked_at","is",null).execute()}async authenticateWorkloadToken($){let Z=wc1($);if(!Z)return null;let G=Xv0($),X=await this.db.selectFrom("connection_workload_tokens").select(["id","organization_id","subject_connection_id","token_prefix"]).where("token_prefix","=",Z).where("token_hash","=",G).where("revoked_at","is",null).executeTakeFirst();if(!X)return null;let Y=new Date().toISOString();return await this.db.updateTable("connection_workload_tokens").set({last_used_at:Y,updated_at:Y}).where("id","=",X.id).execute(),{tokenId:X.id,tokenPrefix:X.token_prefix,organizationId:X.organization_id,subjectConnectionId:X.subject_connection_id}}async replaceGrantsForSubject($){await this.db.transaction().execute(async(Z)=>{if(!await Z.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Referenced connection not found in organization");let X=[...new Set($.grants.map((J)=>J.targetConnectionId))];if(X.length>0){if((await Z.selectFrom("connections").select("id").where("organization_id","=",$.organizationId).where("id","in",X).execute()).length!==X.length)throw Error("Referenced connection not found in organization")}if(await Z.deleteFrom("connection_credential_grants").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).execute(),$.grants.length===0)return;let Y=new Date().toISOString(),Q=$.grants.map((J)=>({id:q6("ccg"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,target_connection_id:J.targetConnectionId,scope:J.scope,created_by:$.createdBy,created_at:Y,updated_at:Y}));await Z.insertInto("connection_credential_grants").values(Q).execute()})}async hasGrant($){return!!await this.db.selectFrom("connection_credential_grants").select("id").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("target_connection_id","=",$.targetConnectionId).where("scope","=",$.scope).executeTakeFirst()}}var W80="credential:access-token:read",K80="credential:configuration:read";var w80=O(()=>{RG();Fc1()});function BD($){let Z=String($??"");if(Z&&!Z.includes("T"))return Z.replace(" ","T")+"Z";return Z}function q$($){return $.replace(/\0/g,"").replace(/\\/g,"\\\\").replace(/'/g,"''")}function l8($){let Z=Number($??0);return Number.isFinite(Z)?Z:0}function oC8($){if(!rC8.has($))throw Error(`Invalid groupByColumn: ${$}`);return $}function Qv0($){if(!aC8.test($))throw Error(`Invalid JSONPath: ${$}`);if($.startsWith("$."))return $;if($.startsWith("."))return`$${$}`;return`$.${$}`}function wv0($){return $.replace(/^\$\./,"").split(".").map((G)=>`'${q$(G)}'`).join(", ")}function $_8($){let Z=sC8.exec($);if(!Z||!Z[1]||!Z[2])throw Error(`Invalid interval: ${$}`);let G=parseInt(Z[1],10),X=Z[2],Y=eC8[X];if(G<1||G>Y)throw Error(`Invalid interval amount: ${G}${X} (max ${Y}${X})`);return{amount:G,unit:X}}function wH($,Z,G="timestamp"){let{amount:X,unit:Y}=$_8($),J={m:"MINUTE",h:"HOUR",d:"DAY"}[Y];if(Z==="duckdb")return`time_bucket(INTERVAL '${X} ${J}', CAST(${G} AS TIMESTAMP))`;return`toStartOfInterval(${G}, INTERVAL ${X} ${J})`}function fd($,Z,G){if(G==="duckdb")return`json_extract_string(${$}, '${Z}')`;let X=wv0(Z);return`JSONExtractString(${$}, ${X})`}function Z_8($,Z,G){if(G==="duckdb")return`CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`JSONExtractFloat(${$}, ${X})`}function Nc1($,Z,G){if(G==="duckdb")return`TRY_CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`toFloat64OrZero(JSONExtractString(${$}, ${X}))`}function Jv0($){if($===null||$===void 0)return{};if(typeof $==="object")return $;let Z=String($);try{return JSON.parse(Z)}catch{return{_decocms_truncated:Z}}}function Wv0($){return{id:String($.id??""),organizationId:String($.organization_id??""),connectionId:String($.connection_id??""),toolName:String($.tool_name??""),input:Jv0($.input),output:Jv0($.output),isError:$.is_error===1||$.is_error===!0||$.is_error==="1"||typeof $.is_error==="bigint"&&$.is_error===1n,errorMessage:$.error_message!=null?String($.error_message):null,durationMs:Number($.duration_ms??0),timestamp:(()=>{if($.timestamp instanceof Date)return $.timestamp.toISOString();let Z=String($.timestamp??""),G=new Date(Z.includes("T")?Z:Z.replace(" ","T")+"Z");return Number.isNaN(G.getTime())?Z:G.toISOString()})(),userId:$.user_id!=null?String($.user_id):null,requestId:String($.request_id??""),userAgent:$.user_agent!=null?String($.user_agent):null,virtualMcpId:$.virtual_mcp_id!=null?String($.virtual_mcp_id):null,properties:$.properties?Jv0($.properties):null}}function Ec1($,Z){let G=[];if($.properties)for(let[X,Y]of Object.entries($.properties)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') = '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') = '${J}'`)}if($.propertyKeys)for(let X of $.propertyKeys){let Y=q$(X);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Y}') IS NOT NULL AND json_extract_string(properties, '$.${Y}') != ''`);else G.push(`JSONExtractString(properties, '${Y}') IS NOT NULL AND JSONExtractString(properties, '${Y}') != ''`)}if($.propertyPatterns)for(let[X,Y]of Object.entries($.propertyPatterns)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') ILIKE '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') ILIKE '${J}'`)}if($.propertyInValues)for(let[X,Y]of Object.entries($.propertyInValues)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`list_contains(string_split(json_extract_string(properties, '$.${Q}'), ','), '${J}')`);else G.push(`has(splitByChar(',', JSONExtractString(properties, '${Q}')), '${J}')`)}return G}function Oc1($,Z){let G=[];if(c3(G,Z?.startDate,$),!Z)return G;if(Z.connectionIds?.length){let X=Z.connectionIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`connection_id IN (${X})`)}if(Z.toolNames?.length){let X=Z.toolNames.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`tool_name IN (${X})`)}if(Z.virtualMcpIds?.length){let X=Z.virtualMcpIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`virtual_mcp_id IN (${X})`)}if(Z.endDate)G.push(h3(Z.endDate,$));if(Z.propertyFilters)G.push(...Ec1(Z.propertyFilters,$));return G}function Dc1($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) >= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} >= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} >= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function h3($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) <= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} <= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} <= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function c3($,Z,G,X="timestamp"){if(Z)$.push(Dc1(Z,G,X));else if(G==="clickhouse")$.push(Dc1(new Date(Date.now()-G_8),G,X))}class Uv0{engine;sourceFactory;metricEngine;metricSourceFactory;dialect;metricsFromLogs;constructor($,Z,G,X,Y="clickhouse",Q=!1){this.engine=$;this.sourceFactory=Z;this.metricEngine=G;this.metricSourceFactory=X;this.dialect=Y;this.metricsFromLogs=Q}async query($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if($.connectionId)G.push(`connection_id = '${q$($.connectionId)}'`);if($.excludeConnectionIds?.length){let H=$.excludeConnectionIds.map((N)=>`'${q$(N)}'`).join(",");G.push(`connection_id NOT IN (${H})`)}if($.virtualMcpId)G.push(`virtual_mcp_id = '${q$($.virtualMcpId)}'`);if($.toolName)G.push(`tool_name = '${q$($.toolName)}'`);if($.isError!==void 0)G.push(`is_error = ${$.isError?1:0}`);if(c3(G,$.startDate,this.dialect),$.endDate)G.push(h3($.endDate,this.dialect));if($.propertyFilters)G.push(...Ec1($.propertyFilters,this.dialect));let X=1000,Y=Math.min(Math.max(1,Math.floor($.limit??50)),X),Q=Math.max(0,Math.floor($.offset??0)),J=G.join(" AND ");if(this.dialect==="duckdb"){let H=`SELECT ${Bc1}, count(*) OVER () AS _total FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,N=await this.engine.query(H);if(N.length===0)return{logs:[],total:0};let B=Number(N[0]._total??0);return{logs:N.map(Wv0),total:B}}let W=`SELECT count(*) AS total FROM ${Z} WHERE ${J}`,K=`SELECT ${Bc1} FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,[w,U]=await Promise.all([this.engine.query(W),this.engine.query(K)]),F=Number(w[0]?.total??0);return{logs:U.map(Wv0),total:F}}async getById($,Z){if(!$||!Z)return null;let X=`SELECT * FROM ${this.sourceFactory($)} WHERE organization_id = '${q$($)}' AND id = '${q$(Z)}' LIMIT 1`,Y=await this.engine.query(X);if(Y.length===0)return null;return Wv0(Y[0])}async getStats($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if(c3(G,$.startDate,this.dialect),$.endDate)G.push(h3($.endDate,this.dialect));let X=`SELECT count(*) AS total_calls, coalesce(sum(CASE WHEN is_error = 1 THEN 1.0 ELSE 0.0 END) / NULLIF(count(*), 0), 0) AS error_rate, coalesce(avg(duration_ms), 0) AS avg_duration_ms FROM ${Z} WHERE ${G.join(" AND ")}`,Q=(await this.engine.query(X))[0]??{};return{totalCalls:Number(Q.total_calls??0),errorRate:Number(Q.error_rate??0),avgDurationMs:Number(Q.avg_duration_ms??0)}}async queryLlmUsageStats($){let Z={totalCalls:0,totalErrors:0,avgDurationMs:0,p50DurationMs:0,p95DurationMs:0,totalInputTokens:0,totalOutputTokens:0,totalTokens:0,totalCostUsd:0,topTools:[],timeseries:[]};if(!$.organizationId||!$.connectionId)return Z;let G=this.dialect,X=G==="clickhouse",Y=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),Q=wH($.interval,G,"timestamp"),J=(L)=>`coalesce(${Nc1("properties",`$.${L}`,G)}, 0)`,W=X?"count()":"count(*)",K=X?"countIf(is_error = 1)":"count(*) FILTER (WHERE is_error = 1)",w=(L)=>X?`quantile(${L})(duration_ms)`:`quantile_cont(duration_ms, ${L})`,U=[`organization_id = '${q$($.organizationId)}'`,`connection_id = '${q$($.connectionId)}'`];if(c3(U,$.startDate,G),$.endDate)U.push(h3($.endDate,G));if($.userIds?.length){let L=$.userIds.slice(0,100).map((z)=>`'${q$(z)}'`).join(",");U.push(`user_id IN (${L})`)}let F=U.join(" AND "),H=Math.min(Math.max(1,Math.floor($.topN??5)),20),N=`${W} AS calls,
+</workflows>`,Wh1;var Kh1=O(()=>{R8();Wh1={id:"studio-usage-manager",title:"Usage Manager",icon:"icon://BarChart10?color=blue",description:"Analyze usage, costs, and clean up idle agents and connections",selectedTools:["MONITORING_STATS","MONITORING_LOGS_LIST","MONITORING_LOG_GET","MONITORING_THREAD_USAGE","COLLECTION_VIRTUAL_MCP_LIST","COLLECTION_VIRTUAL_MCP_GET","COLLECTION_VIRTUAL_MCP_DELETE","VIRTUAL_MCP_LAST_USED_LIST","COLLECTION_CONNECTIONS_LIST","COLLECTION_CONNECTIONS_GET","COLLECTION_CONNECTIONS_DELETE","ORGANIZATION_MEMBER_LIST"],selectedConnections:null,selectedPrompts:[],instructions:lV8,getId:rZ.USAGE_MANAGER}});function fx0($){return wD.find((Z)=>$.startsWith(`${Z.id}_`))??null}async function mV8($,Z){if("resolveRuntime"in $)return $.resolveRuntime(Z);return{instructions:$.instructions,selectedTools:$.selectedTools}}async function r$0({virtualMcp:$,agentId:Z=$.id,organizationId:G,ctx:X}){let Y=fx0(Z);if(!Y)return $;let Q=await mV8(Y,{orgId:G,ctx:X}),J=Q.selectedTools?[...Q.selectedTools]:null;return{...$,metadata:{...$.metadata??{},instructions:Q.instructions},connections:$.connections.map((W)=>({...W,selected_tools:J}))}}async function o$0($,Z){if(!("checklist"in $))return[];return Promise.all($.checklist.map(async(G)=>({label:G.label,activeForm:G.activeForm,action:G.action,completed:await G.isCompleted(Z),alwaysSuggest:G.alwaysSuggest})))}async function wh1($,Z,G){let X={self:G4.SELF($),registry:G4.REGISTRY($),"community-registry":G4.COMMUNITY_REGISTRY($)};await Promise.all(wD.map(async(Y)=>{let Q=Y.getId($),J=await G.findById(Q,$),K=(Y.selectedConnections??["self"]).map((w)=>X[w]);if(J){await G.update(Q,Z,{metadata:{...J.metadata??{},instructions:Y.instructions},connections:K.map((w)=>{let U=J.connections.find((F)=>F.connection_id===w);return{connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:U?.selected_resources??null,selected_prompts:U?.selected_prompts??null}})});return}await G.create($,Z,{title:Y.title,description:Y.description,icon:Y.icon,status:"active",pinned:!1,metadata:{instructions:Y.instructions},connections:K.map((w)=>({connection_id:w,selected_tools:Y.selectedTools?[...Y.selectedTools]:null,selected_resources:null,selected_prompts:Y.selectedPrompts?[...Y.selectedPrompts]:null}))},{id:Q})}))}var wD;var Jf=O(()=>{R8();ng1();tg1();og1();$h1();Gh1();Yh1();Jh1();Kh1();wD=[eg1,ig1,rg1,Zh1,pg1,Xh1,Qh1,Wh1]});import{DBOS as a$0}from"@dbos-inc/dbos-sdk";async function iV8($){let Z=H6(),G=new Qf(Z.db);await wh1($.orgId,$.createdBy,G)}async function nV8($){let Z=H6(),G=new Qf(Z.db);for(let X of wD){let Y=X.getId($.orgId),Q=await G.findById(Y,$.orgId);if(!Q)continue;let J=X.selectedPrompts?[...X.selectedPrompts]:null;if(Q.connections.every((K)=>{let w=K.selected_prompts;if(J===null)return w===null;if(w===null)return!1;if(w.length!==J.length)return!1;return w.every((U,F)=>U===J[F])}))continue;await G.update(Y,$.createdBy,{connections:Q.connections.map((K)=>({connection_id:K.connection_id,selected_tools:K.selected_tools,selected_resources:K.selected_resources,selected_prompts:J}))})}}async function pV8($){await a$0.runStep(()=>iV8($),{name:"installStudioPack"}),await a$0.runStep(()=>nV8($),{name:"backfillSelectedPrompts"})}async function xx0($){await a$0.startWorkflow(tV8,{workflowID:`install-studio-pack:${rV8}:${$.orgId}`})($)}async function Uh1(){let Z=await H6().db.selectFrom("member").select(["organizationId","userId"]).orderBy("createdAt","asc").execute(),G=new Map;for(let X of Z)if(!G.has(X.organizationId))G.set(X.organizationId,X.userId);await Promise.all(Array.from(G).map(async([X,Y])=>{try{await xx0({orgId:X,createdBy:Y})}catch(Q){console.error("[studio-pack-backfill] enqueue failed",{orgId:X},Q)}}))}var tV8,rV8="v5";var s$0=O(()=>{HQ();bx0();Jf();tV8=a$0.registerWorkflow(pV8,{name:"installStudioPackWorkflow"})});import{jwtVerify as oV8,SignJWT as Fh1}from"jose";import{randomBytes as aV8}from"crypto";function Hh1(){if(qd)return qd;let $=O1(),Z=$.meshJwtSecret??$.betterAuthSecret;if(Z)qd=new TextEncoder().encode(Z);else console.warn("MESH_JWT_SECRET not set - generating random secret (not persistent)"),qd=new Uint8Array(aV8(32));return qd}async function Nh1($,Z="5m"){let G=Hh1();return await new Fh1($).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Z).sign(G)}async function vx0($){try{let Z=Hh1(),{payload:G}=await oV8($,Z);return G}catch{return}}async function XH($,Z,G=3600){let X=O1(),Y=X.meshJwtSecret??X.betterAuthSecret;if(!Y)throw Error("A deterministic JWT secret is required to mint gateway JWTs \u2014 set MESH_JWT_SECRET or BETTER_AUTH_SECRET");let Q=new TextEncoder().encode(Y);return await new Fh1({iss:"mesh",sub:$,...Z&&{email:Z}}).setProtectedHeader({alg:"HS256",typ:"JWT"}).setIssuedAt().setExpirationTime(Math.floor(Date.now()/1000)+G).sign(Q)}var qd=null;var UD=O(()=>{F8()});class Md{constructor(){this._messageQueue=[]}static createLinkedPair(){let $=new Md,Z=new Md;return $._otherTransport=Z,Z._otherTransport=$,[$,Z]}async start(){while(this._messageQueue.length>0){let $=this._messageQueue.shift();this.onmessage?.($.message,$.extra)}}async close(){let $=this._otherTransport;this._otherTransport=void 0,await $?.close(),this.onclose?.()}async send($,Z){if(!this._otherTransport)throw Error("Not connected");if(this._otherTransport.onmessage)this._otherTransport.onmessage($,{authInfo:Z?.authInfo});else this._otherTransport._messageQueue.push({message:$,extra:{authInfo:Z?.authInfo}})}}import{SpanStatusCode as Bh1}from"@opentelemetry/api";function $0($){return{...$,execute:async(Z,G)=>{return await G.timings.measure(`tool.${$.name}`,async()=>G.tracer.startActiveSpan(`tool.${$.name}`,{attributes:{"tool.name":$.name,"organization.id":G.organization?.id??"system","user.id":G.auth.user?.id??G.auth.apiKey?.userId??"anonymous"}},async(X)=>{try{G.toolName=$.name,G.access.setToolName?.($.name);let Y=await $.handler(Z,G);return X.setStatus({code:Bh1.OK}),Y}catch(Y){throw X.setStatus({code:Bh1.ERROR,message:Y.message}),X.recordException(Y),Y}finally{X.end()}}))}}}var Y1=()=>{};function O0($){if(!$.organization)throw Error("This operation requires organization scope");return $.organization}function y1($){return $.auth.user?.id??$.auth.apiKey?.userId}function sV8($){return!!($.auth.user||$.auth.apiKey)}function M0($){if(!sV8($))throw Error("Authentication required")}import{z as J6}from"zod";var e$0,Oh1,Dh1,Eh1,Lh1,zh1,jh1,Ph1,Ah1,Th1;var Wf=O(()=>{e$0=J6.record(J6.string(),J6.array(J6.string())),Oh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),userId:J6.string().describe("ID of the user who owns this API key"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Example: { "self": ["API_KEY_CREATE"], "conn_abc123": ["SEND_MESSAGE"] }'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Dh1=J6.object({name:J6.string().min(1).max(64).describe("Human-readable name for the API key"),permissions:e$0.describe(`Permissions to grant (REQUIRED \u2014 there is no implicit default). Format: { resource: [actions] }. Resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names (e.g., ["ORGANIZATION_GET"]) or ["*"] for all. Example: { "self": ["ORGANIZATION_GET", "COLLECTION_CONNECTIONS_LIST"] }. The key is authorized solely by this allowlist; the creator's role does not widen it.`),expiresIn:J6.number().positive().optional().describe("Expiration time in seconds. If not provided, key never expires."),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("Additional metadata to store with the API key")}),Eh1=J6.object({id:J6.string().describe("Unique identifier for the API key"),name:J6.string().describe("Human-readable name for the API key"),key:J6.string().describe("The actual API key value. STORE THIS SECURELY - it will not be shown again!"),permissions:e$0.describe('Permissions granted to this API key. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools'),expiresAt:J6.string().datetime().nullable().optional().describe("Expiration date of the API key (ISO 8601)"),createdAt:J6.string().datetime().describe("When the API key was created (ISO 8601)")}),Lh1=J6.object({}),zh1=J6.object({items:J6.array(Oh1).describe("List of API keys (without key values)")}),jh1=J6.object({keyId:J6.string().describe("ID of the API key to update"),name:J6.string().min(1).max(64).optional().describe("New name for the API key"),permissions:e$0.optional().describe('New permissions. Format: { resource: [actions] } where resource is "self" for management tools or "conn_<UUID>" for connection-specific tools. Actions are tool names or "*" for all. Example: { "self": ["API_KEY_CREATE"] }. Replaces existing permissions.'),metadata:J6.record(J6.string(),J6.unknown()).optional().describe("New metadata. Replaces existing metadata.")}),Ph1=J6.object({item:Oh1.describe("The updated API key (without key value)")}),Ah1=J6.object({keyId:J6.string().describe("ID of the API key to delete")}),Th1=J6.object({success:J6.boolean().describe("Whether the deletion was successful"),keyId:J6.string().describe("ID of the deleted API key")})});var yx0;var Ih1=O(()=>{q4();Y1();Wf();yx0=$0({name:"API_KEY_CREATE",description:"Create an API key with scoped permissions. The key value is returned only once \u2014 store it immediately.",annotations:{title:"Create API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!1,openWorldHint:!1},inputSchema:Dh1,outputSchema:Eh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.create({name:$.name,permissions:$.permissions,expiresIn:$.expiresIn,metadata:{...$.metadata,organization:Z.organization}}),X=G.expiresAt?G.expiresAt instanceof Date?G.expiresAt.toISOString():G.expiresAt:null,Y=G.createdAt instanceof Date?G.createdAt.toISOString():G.createdAt,Q=y1(Z);if(Q)i1.capture({distinctId:Q,event:"api_key_created",...Z.organization?.id?{groups:{organization:Z.organization.id}}:{},properties:{key_id:G.id,key_name:G.name??$.name,organization_id:Z.organization?.id,has_expiry:!!X}});return{id:G.id,name:G.name??$.name,key:G.key,permissions:G.permissions??{},expiresAt:X,createdAt:Y}}})});var gx0;var Rh1=O(()=>{q4();Y1();Wf();gx0=$0({name:"API_KEY_DELETE",description:"Delete and instantly revoke an API key. Cannot be undone.",annotations:{title:"Delete API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:Ah1,outputSchema:Th1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=y1(Z);if(!G)throw Error("User ID required to delete API key");let Y=(await Z.boundAuth.apiKey.list())?.find((K)=>K.id===$.keyId);if(!Y)throw Error("API key not found");let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot delete API key from another organization");if(await Z.boundAuth.apiKey.delete($.keyId),W)i1.capture({distinctId:G,event:"api_key_deleted",groups:{organization:W},properties:{key_id:$.keyId,organization_id:W}});return{success:!0,keyId:$.keyId}}})});var hx0;var qh1=O(()=>{Y1();Wf();hx0=$0({name:"API_KEY_LIST",description:"List API keys for the current user in the current organization. Returns metadata only \u2014 key values are never shown after creation.",annotations:{title:"List API Keys",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Lh1,outputSchema:zh1,handler:async($,Z)=>{M0(Z),await Z.access.check();let G=await Z.boundAuth.apiKey.list(),X=Z.organization?.id;return{items:(G??[]).filter((Q)=>{return Q.metadata?.organization?.id===X}).map((Q)=>({id:Q.id,name:Q.name??"Unnamed Key",userId:Q.userId,permissions:Q.permissions??{},expiresAt:Q.expiresAt?Q.expiresAt instanceof Date?Q.expiresAt.toISOString():Q.expiresAt:null,createdAt:Q.createdAt instanceof Date?Q.createdAt.toISOString():Q.createdAt}))}}})});var cx0;var Mh1=O(()=>{Y1();Wf();cx0=$0({name:"API_KEY_UPDATE",description:"Update an API key's name, permissions, or metadata. The key value cannot be changed or retrieved.",annotations:{title:"Update API Key",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!1},inputSchema:jh1,outputSchema:Ph1,handler:async($,Z)=>{if(M0(Z),await Z.access.check(),!y1(Z))throw Error("User ID required to update API key");let Y=(await Z.boundAuth.apiKey.list())?.find((w)=>w.id===$.keyId);if(!Y)throw Error(`API key not found: ${$.keyId}`);let J=Y.metadata?.organization?.id,W=Z.organization?.id;if(J!==W)throw Error("Cannot update API key from another organization");let K=await Z.boundAuth.apiKey.update({keyId:$.keyId,name:$.name,permissions:$.permissions,metadata:{...$.metadata,organization:Z.organization}});if(!K)throw Error(`Failed to update API key: ${$.keyId}`);return{item:{id:K.id,name:K.name??$.name??"Unnamed Key",userId:K.userId,permissions:K.permissions??{},expiresAt:K.expiresAt?K.expiresAt instanceof Date?K.expiresAt.toISOString():K.expiresAt:null,createdAt:K.createdAt instanceof Date?K.createdAt.toISOString():K.createdAt}}}})});var kh1=O(()=>{Ih1();Rh1();qh1();Mh1();Wf()});function YH($){let Z=$.trim();if(!Z)return{ok:!1,error:"Enter a website URL."};let G=$C8.test(Z),X=ZC8.test(Z),Y=GC8.test(Z);if(G&&!X&&!Y)return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let Q=X?Z:`https://${Z}`,J;try{J=new URL(Q)}catch{return{ok:!1,error:"Enter a valid website URL."}}if(J.protocol!=="http:"&&J.protocol!=="https:")return{ok:!1,error:"Use an HTTP or HTTPS website URL."};let W=J.hostname.split(".");if(W.length<2||W.some((K)=>!K||!XC8.test(K)))return{ok:!1,error:"Enter a valid website URL."};return J.protocol="https:",{ok:!0,value:J.origin}}var $C8,ZC8,GC8,XC8;var kd=O(()=>{$C8=/^[a-zA-Z][a-zA-Z\d+.-]*:/,ZC8=/^[a-zA-Z][a-zA-Z\d+.-]*:\/\//,GC8=/^[^\s/:?#]+\.[^\s/:?#]+:\d+(?:[/?#]|$)/,XC8=/^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i});import{z as qG}from"zod";function FD($){if($.baseUrl)return $.baseUrl.replace(/\/+$/,"");return(($.settings??O1()).commerceDiscoveryInternalApiUrl??YC8).replace(/\/+$/,"")}function Vh1($={}){return`${FD($)}/api/v2/mcp`}function HD($){let Z=$.apiKey??($.settings??O1()).commerceDiscoveryInternalApiKey;if(!Z)throw Error("COMMERCE_DISCOVERY_INTERNAL_API_KEY is required to set up Commerce Discovery.");return Z}function $80($){return new URL($).hostname}function JC8($){return $==="ownership_unverified"||$==="already_claimed_by_other_org"}function WC8($,Z={}){switch($){case"ownership_unverified":{let G=Z.email?`O e-mail ${Z.email}`:"Este e-mail",X=Z.domain?` ${Z.domain}`:" este site";return`${G} n\xE3o tem permiss\xE3o para reivindicar${X}. Use um e-mail do dom\xEDnio do site ou pe\xE7a ao suporte para autorizar seu dom\xEDnio.`}case"already_claimed_by_other_org":return"Este site j\xE1 pertence a outra organiza\xE7\xE3o. Fale com o suporte para transferir o acesso.";case"unknown":return"N\xE3o foi poss\xEDvel configurar o Commerce Discovery. Tente novamente ou fale com o suporte.";default:return $}}async function KC8($){let Z=await $.text().catch(()=>"");if(!Z)return"unknown";try{let G=JSON.parse(Z);return JC8(G.error)?G.error:"unknown"}catch{return"unknown"}}async function ux0($){let Z=`Commerce Discovery auth failed with status ${$.status}.`,G=await $.text().catch(()=>"");if(!G)return Z;try{let X=JSON.parse(G),Y=typeof X.error==="string"?X.error:typeof X.message==="string"?X.message:null;return Y?`Commerce Discovery auth failed: ${Y}.`:Z}catch{return Z}}async function _h1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/upgrade`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.orgName?{name:$.orgName}:{},...$.email?{email:$.email}:{},...$.reportUrl?{report_url:$.reportUrl}:{}})});if(!W.ok){let w=await KC8(W);throw new Ch1(w,{email:$.email,domain:Q})}let K=QC8.safeParse(await W.json());if(!K.success)throw Error("Commerce Discovery auth response did not include a token.");return{authorizationToken:K.data.token}}async function bh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/bindings`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,provider:$.provider,resource_id:$.resourceId})});if(W.status===409)return{ok:!1,reason:"resource_already_bound",detail:"Este recurso j\xE1 est\xE1 vinculado a outra loja. Se ele \xE9 seu, fale com o suporte para revis\xE3o manual."};if(W.status===422){let w=Sh1.safeParse(await W.json());return{ok:!1,reason:w.success?w.data.reason??"verification_failed":"verification_failed",detail:(w.success?w.data.detail:void 0)??"N\xE3o foi poss\xEDvel verificar o acesso a este recurso."}}if(!W.ok)throw Error(await ux0(W));let K=Sh1.safeParse(await W.json());if(!K.success||!K.data.binding)throw Error("Commerce Discovery bind response did not include a binding.");return{ok:!0,resourceId:K.data.binding.resource_id,evidence:K.data.binding.evidence}}async function fh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/run`,W=await Y(J,{method:"POST",headers:{Authorization:`Bearer ${X}`,"Content-Type":"application/json"},body:JSON.stringify({org_id:$.orgId,...$.githubRepo?{github_repo:$.githubRepo}:{}})});if(W.status===409)return{triggered:!1,reason:"not_upgraded"};if(!W.ok)throw Error(await ux0(W));return{triggered:!0}}async function xh1($,Z={}){let G=FD(Z),X=HD(Z),Y=Z.fetchImpl??fetch,Q=$80($.siteUrl),J=`${G}/api/v2/internal/diagnostics/${encodeURIComponent(Q)}/connections/status?org_id=${encodeURIComponent($.orgId)}`,W=await Y(J,{method:"GET",headers:{Authorization:`Bearer ${X}`}});if(W.status===404||W.status===409)return{};if(!W.ok)throw Error(await ux0(W));let K=wC8.safeParse(await W.json());return K.success?K.data.providers:{}}var YC8,QC8,Sh1,Ch1,wC8;var Kf=O(()=>{R8();F8();YC8=new URL(x_0).origin,QC8=qG.object({token:qG.string().min(1)}),Sh1=qG.object({binding:qG.object({resource_id:qG.string(),evidence:qG.string()}).optional(),reason:qG.string().optional(),detail:qG.string().optional()});Ch1=class Ch1 extends Error{code;constructor($,Z={}){super(WC8($,Z));this.name="CommerceDiscoveryClaimError",this.code=$}};wC8=qG.object({providers:qG.record(qG.string(),qG.object({connected:qG.boolean(),via:qG.enum(["oauth","sa"]).nullable(),resource:qG.string().nullable()}))})});import{z as wY}from"zod";var UC8,FC8,dx0;var vh1=O(()=>{kd();Y1();Kf();UC8=wY.object({siteUrl:wY.string().min(1).describe("Website URL of the store being bound."),provider:wY.enum(["ga4","gsc"]).describe("Which Google source to bind: ga4 (Analytics) or gsc (Search Console)."),resourceId:wY.string().min(1).describe("The resource id the client typed: GA4 numeric property id, or GSC site (sc-domain:example.com or https://example.com/).")}),FC8=wY.discriminatedUnion("ok",[wY.object({ok:wY.literal(!0),resourceId:wY.string(),evidence:wY.string()}),wY.object({ok:wY.literal(!1),reason:wY.string(),detail:wY.string()})]),dx0=$0({name:"COMMERCE_DISCOVERY_BIND",description:"Bind a GA4 property or GSC site to the org's store via the shared service account (consent-free lane). The client grants deco-reader@\u2026 access to the resource and provides its id; Commerce Discovery verifies the resource belongs to this domain before persisting. Returns ok:false with an actionable pt-BR detail when verification fails or the resource is already bound elsewhere.",annotations:{title:"Bind Commerce Discovery Data Source",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:UC8,outputSchema:FC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return bh1({siteUrl:X.value,orgId:G.id,provider:$.provider,resourceId:$.resourceId.trim()})}})});import{z as qw}from"zod";var HC8,NC8,lx0;var yh1=O(()=>{kd();Y1();Kf();HC8=qw.object({siteUrl:qw.string().min(1).describe("Website URL of the store to inspect.")}),NC8=qw.object({providers:qw.record(qw.string(),qw.object({connected:qw.boolean(),via:qw.enum(["oauth","sa"]).nullable(),resource:qw.string().nullable()}))}),lx0=$0({name:"COMMERCE_DISCOVERY_CONNECTION_STATUS",description:"Read per-provider connection status (ga4/gsc/vtex) for the org's store \u2014 { connected, via: oauth|sa, resource }. The single source of truth for whether a data source is connected, unifying the OAuth (Studio vault) and shared-SA binding lanes. Read-only.",annotations:{title:"Commerce Discovery Connection Status",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:HC8,outputSchema:NC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);return{providers:await xh1({siteUrl:X.value,orgId:G.id})}}})});import{z as Sd}from"zod";var BC8,OC8,mx0;var gh1=O(()=>{R8();kd();Y1();Kf();BC8=Sd.object({siteUrl:Sd.string().min(1).describe("Website URL to run the diagnostic for.")}),OC8=Sd.object({triggered:Sd.boolean(),reason:Sd.string().optional()}),mx0=$0({name:"COMMERCE_DISCOVERY_RUN",description:"Trigger the Commerce Discovery diagnostic run for the current organization's store. Call once the data sources (GA4/GSC/VTEX) are connected \u2014 this run resolves credentials and produces the enriched report.",annotations:{title:"Run Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},inputSchema:BC8,outputSchema:OC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check();let X=YH($.siteUrl);if(!X.ok)throw Error(X.error);let Y=G4.COMMERCE_DISCOVERY(G.id),J=(await Z.storage.connections.findById(Y,G.id))?.configuration_state,W=J&&typeof J==="object"&&typeof J.github_repo==="string"&&J.github_repo.length>0?J.github_repo:void 0;return fh1({siteUrl:X.value,orgId:G.id,githubRepo:W})}})});var QH=O(()=>{l10()});import{z as wW}from"zod";async function zC8($,Z,G,X){let Y=await $.storage.connections.findById(Z,G);if(Y)return Y;throw X}async function jC8($,Z,G,X){let Y=await $.storage.virtualMcps.findById(Z,G);if(Y)return Y;throw X}var ix0,DC8=3600000,EC8,LC8,nx0;var hh1=O(()=>{R8();kd();Y1();KW();QH();Kf();ix0=v_0,EC8=wW.object({siteUrl:wW.string().min(1).describe("Website URL to configure.")}),LC8=wW.object({connection:aZ,virtualMcp:sZ,reportApp:wW.object({connectionId:wW.string(),virtualMcpId:wW.string(),toolName:wW.literal(ix0)}),created:wW.object({connection:wW.boolean(),virtualMcp:wW.boolean()})});nx0=$0({name:"COMMERCE_DISCOVERY_SETUP",description:"Create or return the Commerce Discovery connection and virtual MCP for the current organization.",annotations:{title:"Set Up Commerce Discovery",readOnlyHint:!1,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:EC8,outputSchema:LC8,handler:async($,Z)=>{M0(Z);let G=O0(Z);await Z.access.check("COLLECTION_CONNECTIONS_CREATE");let X=y1(Z);if(!X)throw Error("User ID required to set up Commerce Discovery");let Y=YH($.siteUrl);if(!Y.ok)throw Error(Y.error);let Q=G4.COMMERCE_DISCOVERY(G.id),J=m_0(G.id),W=new URLSearchParams({virtualmcpid:J,main:`app:${Q}:${ix0}`}),K={email:Z.auth.user?.email,reportUrl:`${Z.baseUrl}/${encodeURIComponent(G.slug??G.id)}/${crypto.randomUUID()}?${W.toString()}`},w=await Z.storage.connections.findById(Q,G.id),U={connection:!1,virtualMcp:!1},F=await _h1({siteUrl:Y.value,orgId:G.id,orgName:G.name,...K}),H=Vh1();if(w)console.log("[commerce-discovery] syncing connection to claimed site",{orgId:G.id,siteUrl:Y.value,connectionId:Q}),w=await Z.storage.connections.update(w.id,{connection_url:H,connection_token:F.authorizationToken,metadata:{...w.metadata??{},siteUrl:Y.value}});else{console.log("[commerce-discovery] creating connection",{orgId:G.id,siteUrl:Y.value,connectionId:Q});try{let E=i_0(G.id,F.authorizationToken,H);w=await Z.storage.connections.create({...E,metadata:{...E.metadata??{},siteUrl:Y.value},organization_id:G.id,created_by:X}),U.connection=!0}catch(E){w=await zC8(Z,Q,G.id,E)}}let N=await Z.storage.virtualMcps.findById(J,G.id);if(!N){console.log("[commerce-discovery] creating virtual MCP",{orgId:G.id,siteUrl:Y.value,connectionId:w.id,virtualMcpId:J});try{N=await Z.storage.virtualMcps.create(G.id,X,n_0(G.id,w.id),{id:J}),U.virtualMcp=!0}catch(E){N=await jC8(Z,J,G.id,E)}}if(!N.pinned)N=await Z.storage.virtualMcps.update(N.id,X,{pinned:!0});let B=await Z.db.selectFrom("organization").select(["createdAt"]).where("id","=",G.id).executeTakeFirst();if((B?Date.now()-new Date(B.createdAt).getTime():Number.POSITIVE_INFINITY)<DC8){if((await Z.storage.organizationSettings.get(G.id))?.reports_only==null)await Z.storage.organizationSettings.upsert(G.id,{reports_only:!0})}return{connection:w,virtualMcp:N,reportApp:{connectionId:w.id,virtualMcpId:N.id,toolName:ix0},created:U}}})});var ch1=O(()=>{vh1();yh1();gh1();hh1()});var px0=_((uh1)=>{Object.defineProperty(uh1,"__esModule",{value:!0});uh1.kvPrefix=uh1.KvWatchInclude=void 0;uh1.KvWatchInclude={LastValue:"",AllHistory:"history",UpdatesOnly:"updates"};uh1.kvPrefix="KV_"});var eh1=_((ah1)=>{Object.defineProperty(ah1,"__esModule",{value:!0});ah1.KvStatusImpl=ah1.Bucket=ah1.Kvm=ah1.kvOperationHdr=void 0;ah1.Base64KeyCodec=TC8;ah1.NoopKvCodecs=tx0;ah1.defaultBucketOpts=mh1;ah1.validateKey=ih1;ah1.validateSearchKey=nh1;ah1.hasWildcards=ph1;ah1.validateBucket=Z80;var C5=rX(),r4=Do(),V5=px0();function TC8(){let $=(Z,G)=>{let X=[];for(let Y of Z.split("."))switch(Y){case">":case"*":X.push(Y);break;default:X.push(G(Y));break}return X.join(".")};return{encode(Z){return $(Z,btoa)},decode(Z){return $(Z,atob)}}}function tx0(){return{key:{encode($){return $},decode($){return $}},value:{encode($){return typeof $==="string"?new TextEncoder().encode($):$},decode($){return $}}}}function mh1(){return{replicas:1,history:1,timeout:2000,max_bytes:-1,maxValueSize:-1,codec:tx0(),storage:r4.StorageType.File}}ah1.kvOperationHdr="KV-Operation";var lh1="$KV",IC8=/^[-/=.\w]+$/,RC8=/^[-/=.>*\w]+$/,qC8=/^[-\w]+$/;function ih1($){if($.startsWith(".")||$.endsWith(".")||!IC8.test($))throw Error(`invalid key: ${$}`)}function nh1($){if($.startsWith(".")||$.endsWith(".")||$.includes("..")||!RC8.test($))throw Error(`invalid key: ${$}`)}function ph1($){if($.startsWith(".")||$.endsWith("."))throw Error(`invalid key: ${$}`);let Z=$.split("."),G=!1;for(let X=0;X<Z.length;X++)switch(Z[X]){case"*":G=!0;break;case">":if(X!==Z.length-1)throw Error(`invalid key: ${$}`);G=!0;break;default:}return G}function Z80($){if(!qC8.test($))throw Error(`invalid bucket name: ${$}`)}class th1{js;constructor($){this.js=(0,r4.toJetStreamClient)($)}create($,Z={}){return this.#$($,Z)}open($,Z={}){return Z.bindOnly=!0,this.#$($,Z)}#$($,Z={}){let{ok:G,min:X}=this.js.nc.features.get(C5.Feature.JS_KV);if(!G)return Promise.reject(Error(`kv is only supported on servers ${X} or better`));if(Z.bindOnly)return wf.bind(this.js,$,Z);return wf.create(this.js,$,Z)}list(){let $=(G)=>{let Y=G.streams.filter((J)=>{return J.config.name.startsWith(V5.kvPrefix)});Y.forEach((J)=>{J.config.sealed=J.config.sealed||!1,J.config.deny_delete=J.config.deny_delete||!1,J.config.deny_purge=J.config.deny_purge||!1,J.config.allow_rollup_hdrs=J.config.allow_rollup_hdrs||!1});let Q="";if(Y.length)Q=this.js.nc.info?.cluster??"";return Y.map((J)=>{return new G80(J,Q)})},Z=`${this.js.prefix}.STREAM.LIST`;return new r4.ListerImpl(Z,$,this.js)}}ah1.Kvm=th1;class wf{js;jsm;stream;bucket;direct;codec;prefix;editPrefix;useJsPrefix;_prefixLen;constructor($,Z,G){Z80($),this.js=Z,this.jsm=G,this.bucket=$,this.prefix=lh1,this.editPrefix="",this.useJsPrefix=!1,this._prefixLen=0}static async create($,Z,G={}){Z80(Z);let X=await $.jetstreamManager(),Y=new wf(Z,$,X);return await Y.init(G),Y}static async bind($,Z,G={}){let X=$.getOptions()?.checkAPI||G.bindOnly===!1,Y=await $.jetstreamManager(X),Q={config:{allow_direct:G.allow_direct}};Z80(Z);let J=new wf(Z,$,Y);return Q.config.name=G.streamName??J.bucketName(),Object.assign(J,Q),J.stream=Q.config.name,J.codec=G.codec||tx0(),J.direct=Q.config.allow_direct??!1,J.initializePrefixes(Q),J}async init($={}){let Z=Object.assign(mh1(),$);this.codec=Z.codec;let G={};if(this.stream=G.name=$.streamName??this.bucketName(),G.retention=r4.RetentionPolicy.Limits,G.max_msgs_per_subject=Z.history,Z.max_bytes)G.max_bytes=Z.max_bytes;if(G.max_msg_size=Z.maxValueSize,G.storage=Z.storage,$.placement)G.placement=$.placement;if($.republish)G.republish=$.republish;if($.description)G.description=$.description;if($.markerTTL)G.allow_msg_ttl=!0,G.subject_delete_marker_ttl=(0,C5.nanos)(Z.markerTTL);if($.mirror){let w=Object.assign({},$.mirror);if(!w.name.startsWith(V5.kvPrefix))w.name=`${V5.kvPrefix}${w.name}`;G.mirror=w,G.mirror_direct=!0}else if($.sources){let w=$.sources.map((U)=>{let F=Object.assign({},U),H=F.name.startsWith(V5.kvPrefix)?F.name.substring(V5.kvPrefix.length):F.name;if(!F.name.startsWith(V5.kvPrefix))F.name=`${V5.kvPrefix}${F.name}`;if(!U.external&&H!==this.bucket)F.subject_transforms=[{src:`$KV.${H}.>`,dest:`$KV.${this.bucket}.>`}];return F});G.sources=w,G.subjects=[this.subjectForBucket()]}else G.subjects=[this.subjectForBucket()];if($.metadata)G.metadata=$.metadata;if(typeof $.compression==="boolean")G.compression=$.compression?r4.StoreCompression.S2:r4.StoreCompression.None;let X=this.js.nc,Y=X.getServerVersion(),Q=Y?(0,C5.compare)(Y,(0,C5.parseSemVer)("2.7.2"))>=0:!1;G.discard=Q?r4.DiscardPolicy.New:r4.DiscardPolicy.Old;let{ok:J,min:W}=X.features.get(C5.Feature.JS_ALLOW_DIRECT);if(!J&&$.allow_direct===!0){let w=Y?`${Y.major}.${Y.minor}.${Y.micro}`:"unknown";return Promise.reject(Error(`allow_direct is not available on server version ${w} - requires ${W}`))}if($.allow_direct=typeof $.allow_direct==="boolean"?$.allow_direct:J,G.allow_direct=$.allow_direct,this.direct=G.allow_direct,G.num_replicas=Z.replicas,Z.ttl)G.max_age=(0,C5.nanos)(Z.ttl);G.allow_rollup_hdrs=!0;let K;try{if(K=await this.jsm.streams.info(G.name),!K.config.allow_direct&&this.direct===!0)this.direct=!1}catch(w){if(w.message==="stream not found")K=await this.jsm.streams.add(G);else throw w}this.initializePrefixes(K)}initializePrefixes($){this._prefixLen=0,this.prefix=`$KV.${this.bucket}`,this.useJsPrefix=this.js.apiPrefix!=="$JS.API";let{mirror:Z}=$.config;if(Z){let G=Z.name;if(G.startsWith(V5.kvPrefix))G=G.substring(V5.kvPrefix.length);if(Z.external&&Z.external.api!==""){let X=Z.name.substring(V5.kvPrefix.length);this.useJsPrefix=!1,this.prefix=`$KV.${X}`,this.editPrefix=`${Z.external.api}.$KV.${G}`}else this.editPrefix=this.prefix}}bucketName(){return this.stream??`${V5.kvPrefix}${this.bucket}`}subjectForBucket(){return`${this.prefix}.${this.bucket}.>`}subjectForKey($,Z=!1){let G=[];if(Z){if(this.useJsPrefix)G.push(this.js.apiPrefix);if(this.editPrefix!=="")G.push(this.editPrefix);else G.push(this.prefix)}else if(this.prefix)G.push(this.prefix);return G.push($),G.join(".")}fullKeyName($){if(this.prefix!=="")return`${this.prefix}.${$}`;return`${lh1}.${this.bucket}.${$}`}get prefixLen(){if(this._prefixLen===0)this._prefixLen=this.prefix.length+1;return this._prefixLen}encodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.encode(G));break}return Z.join(".")}decodeKey($){let Z=[];for(let G of $.split("."))switch(G){case">":case"*":Z.push(G);break;default:Z.push(this.codec.key.decode(G));break}return Z.join(".")}validateKey=ih1;validateSearchKey=nh1;hasWildcards=ph1;close(){return Promise.resolve()}dataLen($,Z){let G=Z?Z.get(r4.JsHeaders.MessageSizeHdr)||"":"";if(G!=="")return parseInt(G,10);return $.length}smToEntry($){return new rh1(this.bucket,this.prefixLen,$,this.codec)}jmToWatchEntry($,Z){return new oh1(this.bucket,this.prefixLen,$,Z,this.codec)}async create($,Z,G){let X;try{let Q={previousSeq:0},J=await this._put($,Z,Q,G);return Promise.resolve(J)}catch(Q){if(X=Q,Q instanceof r4.JetStreamApiError){let J=Q;if(J.code!==r4.JetStreamApiCodes.StreamWrongLastSequence&&J.code!==r4.JetStreamApiCodes.StreamWrongLastSequenceUnknown)return Promise.reject(Q)}}let Y=0;try{let Q=await this.get($);if(Q?.operation==="DEL"||Q?.operation==="PURGE")return Y=Q!==null?Q.revision:0,this._put($,Z,{previousSeq:Y},G);else return Promise.reject(X)}catch(Q){return Promise.reject(Q)}}update($,Z,G,X){if(G<=0)throw Error("version must be greater than 0");return this.put($,Z,{previousSeq:G,timeout:X})}async _put($,Z,G={},X){let Y=this.encodeKey($);this.validateKey(Y),Z=this.codec.value.encode(Z);let Q={timeout:G?.timeout};if(G.previousSeq!==void 0){let J=(0,C5.headers)();Q.headers=J,J.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`)}if(X)(Q.headers||(0,C5.headers)()).set(r4.PubHeaders.MessageTTL,X);try{return(await this.js.publish(this.subjectForKey(Y,!0),Z,Q)).seq}catch(J){return Promise.reject(J)}}put($,Z,G={}){return this._put($,Z,G)}async get($,Z){let G=this.encodeKey($);this.validateKey(G);let X={last_by_subj:this.subjectForKey(G)};if(Z&&Z.revision>0)X={seq:Z.revision};let Y=null;try{if(this.direct)Y=await this.jsm.direct.getMessage(this.bucketName(),X);else Y=await this.jsm.streams.getMessage(this.bucketName(),X);if(Y===null)return null;let Q=this.smToEntry(Y);if(Q.rawKey!==G)return null;return Q}catch(Q){throw Q}}purge($,Z){return this._deleteOrPurge($,"PURGE",Z)}delete($,Z){return this._deleteOrPurge($,"DEL",Z)}async purgeDeletes($=1800000){let Z=[],G=await this.history({key:">"});await(async()=>{for await(let J of G)if(J.operation==="DEL"||J.operation==="PURGE")Z.push(J)})().then(),G.stop();let X=Date.now()-$,Y=Z.map((J)=>{let W=this.subjectForKey(J.key);if(J.created.getTime()>=X)return this.jsm.streams.purge(this.stream,{filter:W,keep:1});else return this.jsm.streams.purge(this.stream,{filter:W,keep:0})}),Q=await Promise.all(Y);return Q.unshift({success:!0,purged:0}),Q.reduce((J,W)=>{return J.purged+=W.purged,J})}async _deleteOrPurge($,Z,G){if(!this.hasWildcards($))return this._doDeleteOrPurge($,Z,G);let X=await this.keys($),Y=[];for await(let Q of X)if(Y.push(this._doDeleteOrPurge(Q,Z)),Y.length===100)await Promise.all(Y),Y.length=0;if(Y.length>0)await Promise.all(Y)}async _doDeleteOrPurge($,Z,G){let X=this.encodeKey($);this.validateKey(X);let Y=(0,C5.headers)();if(Y.set(ah1.kvOperationHdr,Z),Z==="PURGE"){let Q=G;if(Y.set(r4.JsHeaders.RollupHdr,r4.JsHeaders.RollupValueSubject),typeof Q?.ttl==="string"&&Q.ttl!=="")Y.set(r4.PubHeaders.MessageTTL,`${Q.ttl}`)}if(G?.previousSeq)Y.set(r4.PubHeaders.ExpectedLastSubjectSequenceHdr,`${G.previousSeq}`);await this.js.publish(this.subjectForKey(X,!0),C5.Empty,{headers:Y})}_buildCC($,Z,G={}){let Y=(!Array.isArray($)?[$]:$).map((W)=>{let K=this.encodeKey(W);return this.validateSearchKey(W),this.fullKeyName(K)}),Q=r4.DeliverPolicy.LastPerSubject;if(Z===V5.KvWatchInclude.AllHistory)Q=r4.DeliverPolicy.All;if(Z===V5.KvWatchInclude.UpdatesOnly)Q=r4.DeliverPolicy.New;let J=void 0;if(Y.length===1)J=Y[0],Y=void 0;return Object.assign({deliver_policy:Q,ack_policy:r4.AckPolicy.None,filter_subjects:Y,filter_subject:J,flow_control:!0,idle_heartbeat:(0,C5.nanos)(5000)},G)}remove($){return this.purge($)}async history($={}){let Z=$.key??">",G={};G.headers_only=$.headers_only||!1;let X=new C5.QueuedIteratorImpl,Y=()=>{X.stop()},Q=this._buildCC(Z,V5.KvWatchInclude.AllHistory,G),J=await this.js.consumers.getPushConsumer(this.stream,Q);if(X._data=J,(await J.info(!0)).num_pending===0)return X.push(Y),X;let K=await J.consume({callback:(w)=>{let U=this.jmToWatchEntry(w,!1);if(X.push(U),X.received++,w.info.pending===0)X.push(Y)}});return K.closed().then(()=>{X.push(Y)}),(async()=>{for await(let w of K.status())switch(w.type){case"heartbeat":X.push(()=>{X.stop()});break}})().then(),X.iterClosed.then(()=>{K.stop()}),X}canSetWatcherName(){let $=this.js.nc,{ok:Z}=$.features.get(C5.Feature.JS_NEW_CONSUMER_CREATE_API);return Z}async watch($={}){let Z=$.key??">",G=new C5.QueuedIteratorImpl,X={};X.headers_only=$.headers_only||!1;let Y=V5.KvWatchInclude.LastValue;if($.include===V5.KvWatchInclude.AllHistory)Y=V5.KvWatchInclude.AllHistory;else if($.include===V5.KvWatchInclude.UpdatesOnly)Y=V5.KvWatchInclude.UpdatesOnly;let Q=$.ignoreDeletes===!0,J=this._buildCC(Z,Y,X);if(J.name=`KV_WATCHER_${C5.nuid.next()}`,$.resumeFromRevision&&$.resumeFromRevision>0)J.deliver_policy=r4.DeliverPolicy.StartSequence,J.opt_start_seq=$.resumeFromRevision;let W=await this.js.consumers.getPushConsumer(this.stream,J),w=(await W.info(!0)).num_pending,U=Y===V5.KvWatchInclude.UpdatesOnly||w===0;G._data=W;let F=0,H=await W.consume({callback:(N)=>{if(!U)F++,U=F>=w;let B=this.jmToWatchEntry(N,U);if(Q&&B.operation==="DEL")return;G.push(B),G.received++}});return G.iterClosed.then(()=>{H.stop()}),H.closed().then(()=>{G.push(()=>{G.stop()})}),G}async keys($=">"){let Z=new C5.QueuedIteratorImpl,G=this._buildCC($,V5.KvWatchInclude.LastValue,{headers_only:!0}),X=await this.js.consumers.getPushConsumer(this.stream,G);if((await X.info()).num_pending===0)return Z.stop(),Z;Z._data=X;let Q=await X.consume({callback:(J)=>{let W=J.headers?.get(ah1.kvOperationHdr);if(W!=="DEL"&&W!=="PURGE"){let K=this.decodeKey(J.subject.substring(this.prefixLen));Z.push(K)}if(J.info.pending===0)Q.stop()}});return(async()=>{for await(let J of Q.status())switch(J.type){case"heartbeat":Z.push(()=>{Z.stop()});break}})().then(),Q.closed().then(()=>{Z.push(()=>{Z.stop()})}),Z.iterClosed.then(()=>{Q.stop()}),Z}purgeBucket($){return this.jsm.streams.purge(this.bucketName(),$)}destroy(){return this.jsm.streams.delete(this.bucketName())}async status(){let Z=this.js.nc.info?.cluster??"",G=this.bucketName(),X=await this.jsm.streams.info(G);return new G80(X,Z)}}ah1.Bucket=wf;class G80{si;cluster;constructor($,Z=""){this.si=$,this.cluster=Z}get bucket(){return this.si.config.name.startsWith(V5.kvPrefix)?this.si.config.name.substring(V5.kvPrefix.length):this.si.config.name}get values(){return this.si.state.messages}get history(){return this.si.config.max_msgs_per_subject}get ttl(){return(0,C5.millis)(this.si.config.max_age)}get markerTTL(){if(typeof this.si.config.subject_delete_marker_ttl==="number")return(0,C5.millis)(this.si.config.subject_delete_marker_ttl);return 0}get bucket_location(){return this.cluster}get backingStore(){return this.si.config.storage}get storage(){return this.si.config.storage}get replicas(){return this.si.config.num_replicas}get description(){return this.si.config.description??""}get maxBucketSize(){return this.si.config.max_bytes}get maxValueSize(){return this.si.config.max_msg_size}get max_bytes(){return this.si.config.max_bytes}get placement(){return this.si.config.placement||{cluster:"",tags:[]}}get placementCluster(){return this.si.config.placement?.cluster??""}get republish(){return this.si.config.republish??{src:"",dest:""}}get streamInfo(){return this.si}get size(){return this.si.state.bytes}get metadata(){return this.si.config.metadata??{}}get compression(){if(this.si.config.compression)return this.si.config.compression!==r4.StoreCompression.None;return!1}}ah1.KvStatusImpl=G80;class rh1{bucket;sm;prefixLen;codec;constructor($,Z,G,X){this.bucket=$,this.prefixLen=Z,this.sm=G,this.codec=X}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get delta(){return 0}get created(){return this.sm.time}get revision(){return this.sm.seq}get operation(){if(this.sm.header?.has("Nats-Marker-Reason")){if(this.sm.header?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.header?.get(ah1.kvOperationHdr)||"PUT"}get length(){let $=this.sm.header.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}class oh1{bucket;sm;prefixLen;update;codec;constructor($,Z,G,X,Y){this.bucket=$,this.prefixLen=Z,this.sm=G,this.update=X,this.codec=Y}get rawKey(){return this.sm.subject.substring(this.prefixLen)}get key(){return this.codec.key.decode(this.rawKey)}get value(){return this.codec.value.decode(this.sm.data)}get created(){return new Date((0,C5.millis)(this.sm.info.timestampNanos))}get revision(){return this.sm.seq}get operation(){if(this.sm.headers?.has("Nats-Marker-Reason")){if(this.sm.headers?.get("Nats-Marker-Reason")==="MaxAge")return"PURGE"}return this.sm.headers?.get(ah1.kvOperationHdr)||"PUT"}get delta(){return this.sm.info.pending}get length(){let $=this.sm.headers?.get(r4.JsHeaders.MessageSizeHdr)||"";if($!=="")return parseInt($,10);return this.sm.data.length}get isUpdate(){return this.update}json($){return JSON.parse(C5.TD.decode(this.value),$)}string(){return C5.TD.decode(this.value)}}});var rx0=_((g3)=>{Object.defineProperty(g3,"__esModule",{value:!0});g3.validateKey=g3.validateBucket=g3.NoopKvCodecs=g3.Kvm=g3.defaultBucketOpts=g3.Bucket=g3.Base64KeyCodec=g3.KvWatchInclude=g3.kvPrefix=void 0;var $c1=px0();Object.defineProperty(g3,"kvPrefix",{enumerable:!0,get:function(){return $c1.kvPrefix}});Object.defineProperty(g3,"KvWatchInclude",{enumerable:!0,get:function(){return $c1.KvWatchInclude}});var ND=eh1();Object.defineProperty(g3,"Base64KeyCodec",{enumerable:!0,get:function(){return ND.Base64KeyCodec}});Object.defineProperty(g3,"Bucket",{enumerable:!0,get:function(){return ND.Bucket}});Object.defineProperty(g3,"defaultBucketOpts",{enumerable:!0,get:function(){return ND.defaultBucketOpts}});Object.defineProperty(g3,"Kvm",{enumerable:!0,get:function(){return ND.Kvm}});Object.defineProperty(g3,"NoopKvCodecs",{enumerable:!0,get:function(){return ND.NoopKvCodecs}});Object.defineProperty(g3,"validateBucket",{enumerable:!0,get:function(){return ND.validateBucket}});Object.defineProperty(g3,"validateKey",{enumerable:!0,get:function(){return ND.validateKey}})});var ox0=_((JH)=>{Object.defineProperty(JH,"__esModule",{value:!0});JH.NoopKvCodecs=JH.Kvm=JH.defaultBucketOpts=JH.Bucket=JH.Base64KeyCodec=JH.KvWatchInclude=void 0;var yC8=rx0();Object.defineProperty(JH,"KvWatchInclude",{enumerable:!0,get:function(){return yC8.KvWatchInclude}});var Cd=rx0();Object.defineProperty(JH,"Base64KeyCodec",{enumerable:!0,get:function(){return Cd.Base64KeyCodec}});Object.defineProperty(JH,"Bucket",{enumerable:!0,get:function(){return Cd.Bucket}});Object.defineProperty(JH,"defaultBucketOpts",{enumerable:!0,get:function(){return Cd.defaultBucketOpts}});Object.defineProperty(JH,"Kvm",{enumerable:!0,get:function(){return Cd.Kvm}});Object.defineProperty(JH,"NoopKvCodecs",{enumerable:!0,get:function(){return Cd.NoopKvCodecs}})});function X80(){let $=new TextEncoder,Z=new TextDecoder;return{encode:(G)=>$.encode(JSON.stringify(G)),decode:(G)=>JSON.parse(Z.decode(G))}}class sx0{options;kv=null;codec=X80();constructor($){this.options=$}async init(){let $=this.options.getJetStream();if(!$)return;this.kv=await new Gc1.Kvm($).create(hC8,{storage:Zc1.StorageType.Memory})}async get($,Z){if(!this.kv)return null;try{let G=await this.kv.get(`${$}.${Z}`);if(!G?.value?.length)return null;if(G.operation==="DEL"||G.operation==="PURGE")return null;return this.codec.decode(G.value)}catch{return null}}async set($,Z,G){if(!this.kv)return;try{await this.kv.put(`${$}.${Z}`,this.codec.encode(G))}catch{}}async invalidate($){if(!this.kv)return;await Promise.all(["tools","resources","prompts"].map(async(G)=>{try{await this.kv.delete(`${G}.${$}`)}catch{}}))}teardown(){this.kv=null}}function cC8($,Z,G){if(G<=0)return!0;if($===void 0)return!0;return Z-$>=G}function Y80($){return $ instanceof S1&&$.code===v1.MethodNotFound}function uC8($){return $ instanceof S1&&$.code===-32000&&/connection closed/i.test($.message)}async function KH($,Z,G,X,Y,Q=0){if(!X)try{return await G()}catch(w){if(Y80(w))return[];return _d.add(1,{type:$,outcome:"error",stage:"no_cache"}),null}let J=`${$}:${Z}`,W=await X.get($,Z);if(W===null)try{let w=await G();return X.set($,Z,w).catch(()=>{}),ax0.set(J,Date.now()),_d.add(1,{type:$,outcome:"miss",stage:"miss"}),w}catch(w){if(Y80(w))return X.set($,Z,[]).catch(()=>{}),[];return _d.add(1,{type:$,outcome:"error",stage:"miss"}),null}if(_d.add(1,{type:$,outcome:"hit",stage:"hit"}),cC8(ax0.get(J),Date.now(),Q)&&!Q80.has(J)){Q80.add(J),ax0.set(J,Date.now());let w=G().then((U)=>X.set($,Z,U)).catch((U)=>{if(Y80(U)||uC8(U)){if(Y80(U))X.set($,Z,[]).catch(()=>{});return}_d.add(1,{type:$,outcome:"error",stage:"revalidation"})}).finally(()=>Q80.delete(J));Y?.(w)}return W}function ex0($){Xc1=$}function t5(){return Xc1}var Zc1,Gc1,_d,hC8="DECOCMS_MCP_LISTS",Q80,ax0,WH=30000,Xc1=null;var UY=O(()=>{E5();B5();Zc1=k(dB(),1),Gc1=k(ox0(),1),_d=E8.createCounter("mcp_list_cache.fetches",{description:"MCP list cache fetch outcomes (hit, miss, error)",unit:"{fetches}"});Q80=new Set;E8.createObservableGauge("mcp_list_cache.pending_revalidations",{description:"In-flight background MCP list revalidations on this pod",unit:"{revalidations}"}).addCallback(($)=>$.observe(Q80.size));ax0=new Map});var bd=($,Z)=>{if(Z===null||Z===void 0)return;let G=$.replace(/\[(\w+)\]/g,".$1").split(".").filter(Boolean),X=Z;for(let Y of G){if(X===null||X===void 0||typeof X!=="object")return;X=X[Y]}return X};function J80($){let Z=$.split("::");if(Z.length!==2||!Z[0]||!Z[1])throw Error(`Invalid scope format: ${$}. Expected format: "KEY::SCOPE"`);return Z}function dC8($){try{return J80($)}catch{return null}}function lC8($){if(typeof $==="object"&&$!==null&&"value"in $){let Z=$.value;if(typeof Z==="string")return Z}return null}function $v0($,Z){let G={};if(!$||!Z)return G;for(let X of Z){if(X==="*"){G["*"]=["*"];continue}let Y=dC8(X);if(!Y)continue;let[Q,J]=Y,W=bd(Q,$),K=lC8(W);if(K){if(!G[K])G[K]=[];G[K].push(J)}}return G}function Yc1($,Z){let G=$v0($,Z);return new Set(Object.keys(G).filter((X)=>X!=="*"))}var Zv0=()=>{};async function Qc1($){if(!$.refreshToken)return{success:!1,permanent:!1,error:"No refresh token available"};if(!$.tokenEndpoint)return{success:!1,permanent:!1,error:"No token endpoint available"};if(!$.clientId)return{success:!1,permanent:!1,error:"No client ID available"};try{let Z=new URLSearchParams({grant_type:"refresh_token",refresh_token:$.refreshToken,client_id:$.clientId});if($.clientSecret)Z.set("client_secret",$.clientSecret);if($.scope)Z.set("scope",$.scope);let G=await fetch($.tokenEndpoint,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded",Accept:"application/json"},body:Z.toString()});if(!G.ok){let Y=await G.text(),Q,J;try{let K=JSON.parse(Y);Q=K.error,J=K.error_description}catch{}let W=G.status===400&&!!Q&&mC8.has(Q);return(W?console.error:console.warn)("[TokenRefresh] refresh failed",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,status:G.status,errorCode:Q,errorDescription:J,permanent:W}),{success:!1,permanent:W,status:G.status,errorCode:Q,error:J||Q||`Token refresh failed: ${G.status}`}}let X=await G.json();return{success:!0,accessToken:X.access_token,refreshToken:X.refresh_token||$.refreshToken,expiresIn:X.expires_in,scope:X.scope}}catch(Z){return console.warn("[TokenRefresh] network/parse error",{connectionId:$.connectionId,tokenEndpoint:$.tokenEndpoint,message:Z instanceof Error?Z.message:String(Z)}),{success:!1,permanent:!1,error:Z instanceof Error?Z.message:"Token refresh failed"}}}var mC8;var Jc1=O(()=>{mC8=new Set(["invalid_grant","bad_refresh_token"])});import{createHash as iC8,randomBytes as nC8,timingSafeEqual as Dm4}from"crypto";function tC8($){return $.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function Xv0($){return iC8("sha256").update($).digest("hex")}function wc1($){let Z=Gv0.length+1,G=Z+Kc1;if(!$.startsWith(`${Gv0}_`)||$.length<=G+1||$[G]!=="_")return null;let X=$.slice(Z,G),Y=$.slice(G+1);if(!Wc1.test(X)||!Wc1.test(Y))return null;return X}function Uc1(){let $=tC8(nC8(pC8)),Z=$.slice(0,Kc1),G=`${Gv0}_${Z}_${$}`;return{plaintext:G,prefix:Z,hash:Xv0(G)}}var Gv0="stv",pC8=32,Kc1=12,Wc1;var Fc1=O(()=>{Wc1=/^[A-Za-z0-9_-]+$/});function Hc1($){return{id:$.id,organizationId:$.organization_id,subjectConnectionId:$.subject_connection_id,tokenHash:$.token_hash,tokenPrefix:$.token_prefix,name:$.name,revokedAt:$.revoked_at,lastUsedAt:$.last_used_at,createdAt:$.created_at,updatedAt:$.updated_at}}class Yv0{db;constructor($){this.db=$}async createOrRotateWorkloadToken($){let Z=$.name??"default";return await this.db.transaction().execute(async(X)=>{if(!await X.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Subject connection not found in organization");let Q=Uc1(),J=new Date().toISOString();await X.updateTable("connection_workload_tokens").set({revoked_at:J,updated_at:J}).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",Z).where("revoked_at","is",null).execute();let W=await X.insertInto("connection_workload_tokens").values({id:q6("cwt"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,token_hash:Q.hash,token_prefix:Q.prefix,name:Z,revoked_at:null,last_used_at:null,created_at:J,updated_at:J}).returningAll().executeTakeFirstOrThrow();return{plaintextToken:Q.plaintext,record:Hc1(W)}})}async findActiveWorkloadToken($){let Z=await this.db.selectFrom("connection_workload_tokens").selectAll().where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("name","=",$.name??"default").where("revoked_at","is",null).executeTakeFirst();return Z?Hc1(Z):null}async revokeWorkloadToken($){let Z=new Date().toISOString();await this.db.updateTable("connection_workload_tokens").set({revoked_at:Z,updated_at:Z}).where("id","=",$.tokenId).where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("revoked_at","is",null).execute()}async authenticateWorkloadToken($){let Z=wc1($);if(!Z)return null;let G=Xv0($),X=await this.db.selectFrom("connection_workload_tokens").select(["id","organization_id","subject_connection_id","token_prefix"]).where("token_prefix","=",Z).where("token_hash","=",G).where("revoked_at","is",null).executeTakeFirst();if(!X)return null;let Y=new Date().toISOString();return await this.db.updateTable("connection_workload_tokens").set({last_used_at:Y,updated_at:Y}).where("id","=",X.id).execute(),{tokenId:X.id,tokenPrefix:X.token_prefix,organizationId:X.organization_id,subjectConnectionId:X.subject_connection_id}}async replaceGrantsForSubject($){await this.db.transaction().execute(async(Z)=>{if(!await Z.selectFrom("connections").select("id").where("id","=",$.subjectConnectionId).where("organization_id","=",$.organizationId).executeTakeFirst())throw Error("Referenced connection not found in organization");let X=[...new Set($.grants.map((J)=>J.targetConnectionId))];if(X.length>0){if((await Z.selectFrom("connections").select("id").where("organization_id","=",$.organizationId).where("id","in",X).execute()).length!==X.length)throw Error("Referenced connection not found in organization")}if(await Z.deleteFrom("connection_credential_grants").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).execute(),$.grants.length===0)return;let Y=new Date().toISOString(),Q=$.grants.map((J)=>({id:q6("ccg"),organization_id:$.organizationId,subject_connection_id:$.subjectConnectionId,target_connection_id:J.targetConnectionId,scope:J.scope,created_by:$.createdBy,created_at:Y,updated_at:Y}));await Z.insertInto("connection_credential_grants").values(Q).execute()})}async hasGrant($){return!!await this.db.selectFrom("connection_credential_grants").select("id").where("organization_id","=",$.organizationId).where("subject_connection_id","=",$.subjectConnectionId).where("target_connection_id","=",$.targetConnectionId).where("scope","=",$.scope).executeTakeFirst()}}var W80="credential:access-token:read",K80="credential:configuration:read";var w80=O(()=>{RG();Fc1()});function BD($){let Z=String($??"");if(Z&&!Z.includes("T"))return Z.replace(" ","T")+"Z";return Z}function q$($){return $.replace(/\0/g,"").replace(/\\/g,"\\\\").replace(/'/g,"''")}function l8($){let Z=Number($??0);return Number.isFinite(Z)?Z:0}function oC8($){if(!rC8.has($))throw Error(`Invalid groupByColumn: ${$}`);return $}function Qv0($){if(!aC8.test($))throw Error(`Invalid JSONPath: ${$}`);if($.startsWith("$."))return $;if($.startsWith("."))return`$${$}`;return`$.${$}`}function wv0($){return $.replace(/^\$\./,"").split(".").map((G)=>`'${q$(G)}'`).join(", ")}function $_8($){let Z=sC8.exec($);if(!Z||!Z[1]||!Z[2])throw Error(`Invalid interval: ${$}`);let G=parseInt(Z[1],10),X=Z[2],Y=eC8[X];if(G<1||G>Y)throw Error(`Invalid interval amount: ${G}${X} (max ${Y}${X})`);return{amount:G,unit:X}}function wH($,Z,G="timestamp"){let{amount:X,unit:Y}=$_8($),J={m:"MINUTE",h:"HOUR",d:"DAY"}[Y];if(Z==="duckdb")return`time_bucket(INTERVAL '${X} ${J}', CAST(${G} AS TIMESTAMP))`;return`toStartOfInterval(${G}, INTERVAL ${X} ${J})`}function fd($,Z,G){if(G==="duckdb")return`json_extract_string(${$}, '${Z}')`;let X=wv0(Z);return`JSONExtractString(${$}, ${X})`}function Z_8($,Z,G){if(G==="duckdb")return`CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`JSONExtractFloat(${$}, ${X})`}function Nc1($,Z,G){if(G==="duckdb")return`TRY_CAST(json_extract_string(${$}, '${Z}') AS DOUBLE)`;let X=wv0(Z);return`toFloat64OrZero(JSONExtractString(${$}, ${X}))`}function Jv0($){if($===null||$===void 0)return{};if(typeof $==="object")return $;let Z=String($);try{return JSON.parse(Z)}catch{return{_decocms_truncated:Z}}}function Wv0($){return{id:String($.id??""),organizationId:String($.organization_id??""),connectionId:String($.connection_id??""),toolName:String($.tool_name??""),input:Jv0($.input),output:Jv0($.output),isError:$.is_error===1||$.is_error===!0||$.is_error==="1"||typeof $.is_error==="bigint"&&$.is_error===1n,errorMessage:$.error_message!=null?String($.error_message):null,durationMs:Number($.duration_ms??0),timestamp:(()=>{if($.timestamp instanceof Date)return $.timestamp.toISOString();let Z=String($.timestamp??""),G=new Date(Z.includes("T")?Z:Z.replace(" ","T")+"Z");return Number.isNaN(G.getTime())?Z:G.toISOString()})(),userId:$.user_id!=null?String($.user_id):null,requestId:String($.request_id??""),userAgent:$.user_agent!=null?String($.user_agent):null,virtualMcpId:$.virtual_mcp_id!=null?String($.virtual_mcp_id):null,properties:$.properties?Jv0($.properties):null}}function Ec1($,Z){let G=[];if($.properties)for(let[X,Y]of Object.entries($.properties)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') = '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') = '${J}'`)}if($.propertyKeys)for(let X of $.propertyKeys){let Y=q$(X);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Y}') IS NOT NULL AND json_extract_string(properties, '$.${Y}') != ''`);else G.push(`JSONExtractString(properties, '${Y}') IS NOT NULL AND JSONExtractString(properties, '${Y}') != ''`)}if($.propertyPatterns)for(let[X,Y]of Object.entries($.propertyPatterns)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`json_extract_string(properties, '$.${Q}') ILIKE '${J}'`);else G.push(`JSONExtractString(properties, '${Q}') ILIKE '${J}'`)}if($.propertyInValues)for(let[X,Y]of Object.entries($.propertyInValues)){let Q=q$(X),J=q$(Y);if(Z==="duckdb")G.push(`list_contains(string_split(json_extract_string(properties, '$.${Q}'), ','), '${J}')`);else G.push(`has(splitByChar(',', JSONExtractString(properties, '${Q}')), '${J}')`)}return G}function Oc1($,Z){let G=[];if(c3(G,Z?.startDate,$),!Z)return G;if(Z.connectionIds?.length){let X=Z.connectionIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`connection_id IN (${X})`)}if(Z.toolNames?.length){let X=Z.toolNames.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`tool_name IN (${X})`)}if(Z.virtualMcpIds?.length){let X=Z.virtualMcpIds.map((Y)=>`'${q$(Y)}'`).join(",");G.push(`virtual_mcp_id IN (${X})`)}if(Z.endDate)G.push(h3(Z.endDate,$));if(Z.propertyFilters)G.push(...Ec1(Z.propertyFilters,$));return G}function Dc1($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) >= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} >= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} >= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function h3($,Z,G="timestamp"){if(Z==="duckdb")return`CAST(${G} AS TIMESTAMP) <= TIMESTAMP '${$.toISOString()}'`;if(G==="bucket")return`${G} <= parseDateTimeBestEffort('${$.toISOString()}')`;return`${G} <= parseDateTime64BestEffort('${$.toISOString()}', 9)`}function c3($,Z,G,X="timestamp"){if(Z)$.push(Dc1(Z,G,X));else if(G==="clickhouse")$.push(Dc1(new Date(Date.now()-G_8),G,X))}class Uv0{engine;sourceFactory;metricEngine;metricSourceFactory;dialect;metricsFromLogs;constructor($,Z,G,X,Y="clickhouse",Q=!1){this.engine=$;this.sourceFactory=Z;this.metricEngine=G;this.metricSourceFactory=X;this.dialect=Y;this.metricsFromLogs=Q}async query($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if($.connectionId)G.push(`connection_id = '${q$($.connectionId)}'`);if($.excludeConnectionIds?.length){let H=$.excludeConnectionIds.map((N)=>`'${q$(N)}'`).join(",");G.push(`connection_id NOT IN (${H})`)}if($.virtualMcpId)G.push(`virtual_mcp_id = '${q$($.virtualMcpId)}'`);if($.toolName)G.push(`tool_name = '${q$($.toolName)}'`);if($.isError!==void 0)G.push(`is_error = ${$.isError?1:0}`);if(c3(G,$.startDate,this.dialect),$.endDate)G.push(h3($.endDate,this.dialect));if($.propertyFilters)G.push(...Ec1($.propertyFilters,this.dialect));let X=1000,Y=Math.min(Math.max(1,Math.floor($.limit??50)),X),Q=Math.max(0,Math.floor($.offset??0)),J=G.join(" AND ");if(this.dialect==="duckdb"){let H=`SELECT ${Bc1}, count(*) OVER () AS _total FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,N=await this.engine.query(H);if(N.length===0)return{logs:[],total:0};let B=Number(N[0]._total??0);return{logs:N.map(Wv0),total:B}}let W=`SELECT count(*) AS total FROM ${Z} WHERE ${J}`,K=`SELECT ${Bc1} FROM ${Z} WHERE ${J} ORDER BY timestamp DESC LIMIT ${Y} OFFSET ${Q}`,[w,U]=await Promise.all([this.engine.query(W),this.engine.query(K)]),F=Number(w[0]?.total??0);return{logs:U.map(Wv0),total:F}}async getById($,Z){if(!$||!Z)return null;let X=`SELECT * FROM ${this.sourceFactory($)} WHERE organization_id = '${q$($)}' AND id = '${q$(Z)}' LIMIT 1`,Y=await this.engine.query(X);if(Y.length===0)return null;return Wv0(Y[0])}async getStats($){if(!$.organizationId)throw Error("organizationId is required");let Z=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),G=[`organization_id = '${q$($.organizationId)}'`];if(c3(G,$.startDate,this.dialect),$.endDate)G.push(h3($.endDate,this.dialect));let X=`SELECT count(*) AS total_calls, coalesce(sum(CASE WHEN is_error = 1 THEN 1.0 ELSE 0.0 END) / NULLIF(count(*), 0), 0) AS error_rate, coalesce(avg(duration_ms), 0) AS avg_duration_ms FROM ${Z} WHERE ${G.join(" AND ")}`,Q=(await this.engine.query(X))[0]??{};return{totalCalls:Number(Q.total_calls??0),errorRate:Number(Q.error_rate??0),avgDurationMs:Number(Q.avg_duration_ms??0)}}async queryLlmUsageStats($){let Z={totalCalls:0,totalErrors:0,avgDurationMs:0,p50DurationMs:0,p95DurationMs:0,totalInputTokens:0,totalOutputTokens:0,totalTokens:0,totalCostUsd:0,topTools:[],timeseries:[]};if(!$.organizationId||!$.connectionId)return Z;let G=this.dialect,X=G==="clickhouse",Y=this.sourceFactory($.organizationId,{startDate:$.startDate,endDate:$.endDate}),Q=wH($.interval,G,"timestamp"),J=(L)=>`coalesce(${Nc1("properties",`$.${L}`,G)}, 0)`,W=X?"count()":"count(*)",K=X?"countIf(is_error = 1)":"count(*) FILTER (WHERE is_error = 1)",w=(L)=>X?`quantile(${L})(duration_ms)`:`quantile_cont(duration_ms, ${L})`,U=[`organization_id = '${q$($.organizationId)}'`,`connection_id = '${q$($.connectionId)}'`];if(c3(U,$.startDate,G),$.endDate)U.push(h3($.endDate,G));if($.userIds?.length){let L=$.userIds.slice(0,100).map((z)=>`'${q$(z)}'`).join(",");U.push(`user_id IN (${L})`)}let F=U.join(" AND "),H=Math.min(Math.max(1,Math.floor($.topN??5)),20),N=`${W} AS calls,
   ${K} AS errors,
   avg(duration_ms) AS avg,
   sum(${J("input_tokens")}) AS in_tok,
@@ -2722,7 +2722,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var G81,jC,F64,jC$,Z81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",N64,d$,u$,Z6,zC$=24,PC,_J;var MC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(G81||(G81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof xg<"u"&&OZZ?OZZ:globalThis.nacl=globalThis.nacl||{});jC=typeof xg<"u"&&OZZ?OZZ:globalThis.nacl,F64={fromSeed:jC.sign.keyPair.fromSeed,sign:jC.sign.detached,verify:jC.sign.detached.verify,randomBytes:jC.randomBytes,scalarBaseMultiply:jC.scalarMult.base,seal:jC.box,open:jC.box.open};N64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));PC=[120,107,118,49];H64(F64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function W81($){try{$?.clear?.()}catch{}}async function kC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=RC$($),W=Q81(J.sub),K=J81(new TextEncoder().encode(Z)),w=PC$();try{let U=await IC$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(qC$(U,w))}finally{W81(w),W81(K),W81(W)}}var SC$=O(()=>{MC$()});function I64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function VC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(K81(),503);if(!Y.natsPublicUrl)return Z.json(K81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(K81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await kC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:DC$(Q),userId:X,allowedConnectionTypes:I64(Y.natsPublicUrl)})}return Z.json(EC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var K81=()=>({error:"link session unavailable"});var CC$=O(()=>{Y6();F8();LC$();SC$()});async function M64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function k64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function S64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},R64),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=an(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function V64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<_C$){await D8(bC$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<_C$){await D8(bC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var R64=90000,q64=15000,fC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Xg({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return tQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),tQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},q64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await M64(F,w)){await k64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await S64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await V64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},_C$=60000,bC$=500;var xC$=O(()=>{Y6();zC();kY();l5();bE0();sn();AV();p90();qX()});function _64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function b64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(C64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var C64=1e4,f64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},vC$=()=>{let $=new V1;return $.use("*",f64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await b64(X,Y);return Z.json({apps:_64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var yC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function PK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function m64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function i64($,Z,G){try{return JSON.parse($)}catch{throw new cC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function n64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:i64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function p64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function t64($){if(!$)return;return{openai:{response_format:$}}}function r64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function gC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function hC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var x64=256,v64,y64,g64,h64,c64,u64,d64,l64,cC$,uC$,dC$;var lC$=O(()=>{L6();Y6();zC();v64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),y64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),g64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(y64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),h64=h1.object({type:h1.literal("text")}),c64=h1.object({type:h1.literal("json_object")}),u64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),d64=h1.union([h64,c64,u64]),l64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(g64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(v64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:d64.optional(),user:h1.string().optional()});cC$=class cC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};uC$=new V1;uC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(PK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(PK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(PK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=l64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(PK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=m64(Q.model);if(!J)return $.json(PK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(PK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(PK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=n64(Q.messages),H=Q.tools?p64(Q.tools):void 0,N=t64(Q.response_format),B=r64(),D=Math.floor(Date.now()/1000);if(Q.stream)return tQ($,async(E)=>{let L=gC$(U,F,H,Q,N,$.req.raw.signal);try{let z=bQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=x64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:hC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=gC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:hC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(PK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(PK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(PK(Y.message,"server_error"),500)}});dC$=uC$});var iC$;var mC$=O(()=>{iC$={name:"decocms",version:"4.82.17",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function s64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??a64}}var nC$,a64="https://ph.studio.decocms.com",pC$;var tC$=O(()=>{Y6();Zf0();pN();OG();F8();H01();mC$();nC$=new V1;nC$.get("/",($)=>{let Z={version:iC$.version,theme:Ab1(),...aO().logo&&{logo:aO().logo},...yQ()&&{internalUrl:G00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:HR$(),posthog:s64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!yQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});pC$=nC$});function nL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function oC$($){return(nL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function aC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(nL0($))}&sz=${Z}`}function rC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function sC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?rC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):rC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as e64}from"path";function gU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function $44($){let Z=nL0($),G=oC$(Z),X=aC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=sC$({brand:G,domain:Z});return[`<title>${gU(J)}</title>`,`<meta name="description" content="${gU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${gU(J)}" />`,`<meta property="og:description" content="${gU(W)}" />`,`<meta property="og:url" content="${gU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${gU(J)}" />`,`<meta name="twitter:description" content="${gU(W)}" />`,`<link rel="canonical" href="${gU(Q)}" />`,`<link rel="icon" href="${gU(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var G81,jC,F64,jC$,Z81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",N64,d$,u$,Z6,zC$=24,PC,_J;var MC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(G81||(G81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),w1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)w1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(w1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function w0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];w0(b0),w0(b0),w0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function U0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];w0(h),w0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,U0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),w1=Y0.subarray(16);return X0(Z1,Z1),N0(w1,w1,Z1),d0(h,w1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function e0(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function z6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function J4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function d5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function a$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var s$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function A9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=e0(W0[7],s(W0[4]),z6(W0[4],W0[5],W0[6]),s$[P0],b0[P0%16]),Y0[7]=e0(m0,d5(W0[0]),J4(W0[0],W0[1],W0[2])),Y0[3]=e0(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=e0(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),a$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=e0(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var lG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function k8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=lG[W0];A9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),A9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function _6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,U),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function Z5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function q5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function J9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,Z5(h,l,r),_6(l,h),_6(h,h),Z5(h,l,r)}function T9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),J9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);k8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,T9(Y0,r),q5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var S8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function V8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*S8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*S8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*S8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function G6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;V8(h,l)}function f$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];k8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];k8(b0,h.subarray(32),c+32),G6(b0),T9(j0,b0),q5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];k8(W0,h,c+64),G6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return V8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),U0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,w),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function P7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(k8(b0,h,c),G6(b0),J9(m0,P0,b0),T9(P0,l.subarray(32)),_6(m0,P0),q5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,n6=24,e6=32,r8=16,G5=32,C=32,d=32,u=32,I=32,t=n6,x0=e6,l0=r8,W1=64,F1=32,g1=64,b1=32,Y8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:k8,crypto_sign:f$,crypto_sign_keypair:x1,crypto_sign_open:P7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:n6,crypto_secretbox_ZEROBYTES:e6,crypto_secretbox_BOXZEROBYTES:r8,crypto_scalarmult_BYTES:G5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:Y8,gf:G,D:w,L:S8,pack25519:d0,unpack25519:U0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:_6,set25519:A0,modL:V8,scalarmult:J9,scalarbase:T9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==n6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function y$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(e6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+e6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(r8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(r8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+r8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(e6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=n6,$.secretbox.overheadLength=r8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==G5)throw Error("bad p size");var c=new Uint8Array(G5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(G5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=G5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return f$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=P7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return P7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(Y8);return k8(l,h,h.length),l},$.hash.hashLength=Y8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];y$(W0)})}()})(typeof xg<"u"&&OZZ?OZZ:globalThis.nacl=globalThis.nacl||{});jC=typeof xg<"u"&&OZZ?OZZ:globalThis.nacl,F64={fromSeed:jC.sign.keyPair.fromSeed,sign:jC.sign.detached,verify:jC.sign.detached.verify,randomBytes:jC.randomBytes,scalarBaseMultiply:jC.scalarMult.base,seal:jC.box,open:jC.box.open};N64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);d$=class d$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(u$||(u$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(Z6||(Z6={}));PC=[120,107,118,49];H64(F64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function W81($){try{$?.clear?.()}catch{}}async function kC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=RC$($),W=Q81(J.sub),K=J81(new TextEncoder().encode(Z)),w=PC$();try{let U=await IC$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(qC$(U,w))}finally{W81(w),W81(K),W81(W)}}var SC$=O(()=>{MC$()});function I64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function VC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(K81(),503);if(!Y.natsPublicUrl)return Z.json(K81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(K81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await kC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:DC$(Q),userId:X,allowedConnectionTypes:I64(Y.natsPublicUrl)})}return Z.json(EC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var K81=()=>({error:"link session unavailable"});var CC$=O(()=>{Y6();F8();LC$();SC$()});async function M64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function k64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new SN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function S64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},R64),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=an(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function V64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<_C$){await D8(bC$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<_C$){await D8(bC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var R64=90000,q64=15000,fC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=GU({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Xg({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let E=await bY(G,{userId:X,branch:J,virtualMcpMetadata:U});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&nW(F5(U),X,J,H),D=!!B&&B.sandboxHandle===w;if(!F)return tQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),tQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},q64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await M64(F,w)){await k64({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await S64({stream:E,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await V64({stream:E,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},_C$=60000,bC$=500;var xC$=O(()=>{Y6();zC();kY();l5();bE0();sn();AV();p90();qX()});function _64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function b64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(C64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var C64=1e4,f64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},vC$=()=>{let $=new V1;return $.use("*",f64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await b64(X,Y);return Z.json({apps:_64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var yC$=O(()=>{Y6();F8()});import{z as h1}from"zod";function PK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function m64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function i64($,Z,G){try{return JSON.parse($)}catch{throw new cC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function n64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:i64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function p64($){let Z=$.map((G)=>{let X=G.function.parameters?DY(G.function.parameters):DY({type:"object",properties:{}});return[G.function.name,x$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function t64($){if(!$)return;return{openai:{response_format:$}}}function r64(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function gC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function hC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var x64=256,v64,y64,g64,h64,c64,u64,d64,l64,cC$,uC$,dC$;var lC$=O(()=>{L6();Y6();zC();v64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),y64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),g64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(y64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),h64=h1.object({type:h1.literal("text")}),c64=h1.object({type:h1.literal("json_object")}),u64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),d64=h1.union([h64,c64,u64]),l64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(g64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(v64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:d64.optional(),user:h1.string().optional()});cC$=class cC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};uC$=new V1;uC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(PK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(PK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(PK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=l64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(PK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=m64(Q.model);if(!J)return $.json(PK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(PK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(PK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=n64(Q.messages),H=Q.tools?p64(Q.tools):void 0,N=t64(Q.response_format),B=r64(),D=Math.floor(Date.now()/1000);if(Q.stream)return tQ($,async(E)=>{let L=gC$(U,F,H,Q,N,$.req.raw.signal);try{let z=bQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=x64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:hC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=gC$(U,F,H,Q,N,$.req.raw.signal),L=await EN(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:hC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(PK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(PK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(PK(Y.message,"server_error"),500)}});dC$=uC$});var iC$;var mC$=O(()=>{iC$={name:"decocms",version:"4.82.18",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function s64(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??a64}}var nC$,a64="https://ph.studio.decocms.com",pC$;var tC$=O(()=>{Y6();Zf0();pN();OG();F8();H01();mC$();nC$=new V1;nC$.get("/",($)=>{let Z={version:iC$.version,theme:Ab1(),...aO().logo&&{logo:aO().logo},...yQ()&&{internalUrl:G00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:HR$(),posthog:s64(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!yQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});pC$=nC$});function nL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function oC$($){return(nL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function aC$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(nL0($))}&sz=${Z}`}function rC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function sC$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?rC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):rC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as e64}from"path";function gU($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function $44($){let Z=nL0($),G=oC$(Z),X=aC$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=sC$({brand:G,domain:Z});return[`<title>${gU(J)}</title>`,`<meta name="description" content="${gU(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${gU(J)}" />`,`<meta property="og:description" content="${gU(W)}" />`,`<meta property="og:url" content="${gU(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${gU(J)}" />`,`<meta name="twitter:description" content="${gU(W)}" />`,`<link rel="canonical" href="${gU(Q)}" />`,`<link rel="icon" href="${gU(X)}" sizes="any" />`].join(`
     `)}function Z44($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function eC$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?e64($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=$44(X);return G.html(Z44(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var $_$=O(()=>{Y6();F8()});import{z as Q1}from"zod";var TC,G44,X44,Y44,Q44,Z_$;var G_$=O(()=>{TC=Q1.enum(["good","bad","neutral"]),G44=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:TC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),X44=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(G44)),Y44={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},Q44=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:TC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:TC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:TC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:TC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(X44).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:TC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:TC.optional()})).min(1)})]),Z_$=Q1.object({...Y44,template:Q44})});function X_$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=Z_$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var Y_$=O(()=>{G_$()});function Hr($,Z){return fetch(`${FD({})}${$}`,Z)}async function J44($,Z){let G=await Hr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=X_$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var W44,IC,Q_$;var J_$=O(()=>{Y6();VQ();Kf();Y_$();W44=new Set(["complete","errored","terminated","unknown"]),IC=new V1;IC.use("*",async($,Z)=>{let G=await O8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});IC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await J44(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});IC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await Hr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${HD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});IC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await Hr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${HD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:W44.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});IC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await Hr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});IC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await Hr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});Q_$=IC});function W_$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var K_$,K44,w44,w_$;var U_$=O(()=>{Y6();f3();$y();xb();K_$=new V1,K44=["range","if-none-match","if-modified-since"],w44=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];K_$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Bg($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Wp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&b3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return W_$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of K44){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of w44){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),W_$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});w_$=K_$});var Nr=_((RC)=>{var U44=RC&&RC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),F44=RC&&RC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))U44(Z,$,G)};Object.defineProperty(RC,"__esModule",{value:!0});F44(rX(),RC)});var N_$=_((F_$)=>{Object.defineProperty(F_$,"__esModule",{value:!0});F_$.version=void 0;F_$.version="3.4.0"});var D_$=_((AK)=>{var H44=AK&&AK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(AK,"__esModule",{value:!0});AK.NodeTransport=AK.VERSION=void 0;AK.nodeResolveHost=L44;var n4=Nr(),N44=c0("net"),w81=c0("tls"),B44=c0("path"),B_$=c0("fs"),O44=H44(c0("dns")),D44=N_$();AK.VERSION=D44.version;var E44="nats.js";class O_${socket;version;lang;yields=[];signal=(0,n4.deferred)();closedNotification=(0,n4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=E44,this.version=AK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,n4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw n4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new n4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new n4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,n4.deferred)(),G,X=(0,N44.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,n4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=n4.DataBuffer.concat(...this.yields),Y=(0,n4.extractProtocolMessage)(X);if(Y!=="")try{let Q=n4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,n4.deferred)();try{if($=(0,B44.resolve)($),!(0,B_$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,B_$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,n4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,n4.deferred)();try{let Y=(0,w81.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new n4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,n4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,n4.deferred)();try{let X=(0,w81.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new n4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,n4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,n4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof w81.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,n4.render)($)}`);let Z=(0,n4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,n4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}AK.NodeTransport=O_$;function L44($){let Z=(0,n4.deferred)();return O44.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var P_$=_((j_$)=>{Object.defineProperty(j_$,"__esModule",{value:!0});j_$.connect=z44;var E_$=D_$(),L_$=Nr(),z_$=Nr();function z44($={}){if((0,z_$.hasWsProtocol)($))return Promise.reject(z_$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,L_$.setTransportFactory)({factory:()=>{return new E_$.NodeTransport},dnsResolveFn:E_$.nodeResolveHost}),L_$.NatsConnectionImpl.connect($)}});var A_$=_((hU)=>{var P44=hU&&hU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),A44=hU&&hU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))P44(Z,$,G)};Object.defineProperty(hU,"__esModule",{value:!0});hU.connect=void 0;var T44=P_$();Object.defineProperty(hU,"connect",{enumerable:!0,get:function(){return T44.connect}});A44(Nr(),hU)});function q_$($){let Z=$?.connectFn??M44,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:q44,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let D=mX(R44,I44,B-1,2,0.5);await D8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?T_$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=R_$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function M44($){return I_$.connect($)}var T_$,I_$,R_$,I44=100,R44=3000,q44=3000;var M_$=O(()=>{l5();T_$=k(Wh(),1),I_$=k(A_$(),1),R_$=k(dB(),1)});function U81($,Z){return`${$}.${Z}`}class F81{cache;constructor($){this.cache=ey({ttlMs:$?.ttlMs??k44,maxSize:$?.maxSize??S44})}async get($,Z){return this.cache.get(U81($,Z))??null}async set($,Z,G){this.cache.set(U81($,Z),G)}async invalidate($,Z){this.cache.delete(U81($,Z))}teardown(){this.cache.clear()}}var k44=600000,S44=5000;var k_$=()=>{};function pL0($,Z){return`${$}:${Z}`}function H81($){let Z=ey({ttlMs:$?.ttlMs??V44,maxSize:$?.maxSize??C44}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(S_$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(pL0(K,w))},set(K,w,U){Z.set(pL0(K,w),U)},invalidate(K,w){Z.delete(pL0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(S_$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(pL0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var S_$="studio.ai-provider-keys.invalidate",V44=30000,C44=5000;var V_$=()=>{};class N81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var C_$=($)=>{let Z;return()=>Z??=$()},B81,O81;var __$=O(()=>{B5();B81=C_$(()=>E8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),O81=C_$(()=>E8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function g44(){return{name:aw,subjects:[`${Jm0}.>`],storage:bJ.StorageType.File,max_age:f44,max_bytes:v44,max_msgs_per_subject:y44,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:x44,num_replicas:1}}class x_${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function b_$($){let Z=f_$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function d44($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,b44().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class D81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=g44();try{await Z.streams.info(aw),await Z.streams.update(aw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(aw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=d44(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=B4$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Km0(w,{runId:Z}),H=performance.now()-U;if(B81().record(H),O81().add(1,{"org.id":X??"unknown"}),u44?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?b_$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),c44)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Km0(Z,{runId:$,dedup:G});if(B81().record(performance.now()-Y),O81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:b_$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=N4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=zN($),W;try{W=await(await X.consumers.get(aw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let U=H90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(w90()).pipeThrough(U90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await U.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(aw,{filter:zN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,f_$,_44=($)=>{let Z;return()=>Z??=$()},b44,f44=86400000000000,x44=120000000000,v44=4294967296,y44=500000,h44,c44,u44;var v_$=O(()=>{Um0();N90();wm0();B5();__$();bJ=k(dB(),1),f_$=k(Wh(),1),b44=_44(()=>E8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));h44=process.env.STREAM_ENCODE_TRACE==="1",c44=process.env.DECOPILOT_STREAM_TRACE==="1";u44=h44?new x_$:null});import{z as X8}from"zod";var y_$,g_$,TK,E81,h_$,c_$,u_$,d_$,l44,l_$,m_$,i_$,n_$,p_$,m44,t_$,c7Z,i44,n44=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},r_$=($)=>{return new TextEncoder().encode(JSON.stringify($))},o_$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?i44[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${n44(Y.error)}`);return Y.data};var a_$=O(()=>{y_$=X8.string().regex(/^[A-Za-z0-9_-]*$/u),g_$=X8.array(X8.tuple([X8.string(),X8.string()])),TK=X8.string().regex(/^[A-Za-z0-9_-]+$/u),E81=X8.string().min(1),h_$=X8.object({type:X8.literal("request.start"),protocol:X8.literal("tunnel.v1"),requestId:TK,method:X8.string().min(1),url:X8.string().min(1),headers:g_$,replySubject:E81,bodySubject:E81.optional(),abortSubject:E81,deadlineUnixMs:X8.number().int().nonnegative().optional()}),c_$=X8.object({type:X8.literal("request.chunk"),requestId:TK,seq:X8.number().int().nonnegative(),data:y_$}),u_$=X8.object({type:X8.literal("request.end"),requestId:TK,seq:X8.number().int().nonnegative()}),d_$=X8.object({type:X8.literal("request.error"),requestId:TK,code:X8.string().min(1),message:X8.string()}),l44=X8.union([c_$,u_$,d_$]),l_$=X8.object({type:X8.literal("response.ack"),requestId:TK}),m_$=X8.object({type:X8.literal("response.start"),requestId:TK,status:X8.number().int().min(100).max(599),statusText:X8.string().optional(),headers:g_$}),i_$=X8.object({type:X8.literal("response.chunk"),requestId:TK,seq:X8.number().int().nonnegative(),data:y_$}),n_$=X8.object({type:X8.literal("response.end"),requestId:TK,seq:X8.number().int().nonnegative()}),p_$=X8.object({type:X8.literal("response.error"),requestId:TK,code:X8.string().min(1),message:X8.string()}),m44=X8.union([l_$,m_$,i_$,n_$,p_$]),t_$=X8.object({type:X8.literal("abort"),requestId:TK,reason:X8.string().optional()}),c7Z=X8.union([h_$,l44,m44,t_$]),i44={"request.start":h_$,"request.chunk":c_$,"request.end":u_$,"request.error":d_$,"response.ack":l_$,"response.start":m_$,"response.chunk":i_$,"response.end":n_$,"response.error":p_$,abort:t_$}});var p44=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},t44=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},r44=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},o44=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},s_$=($)=>{return p44(btoa(r44($)))},e_$=($)=>{return o44(atob(t44($)))},a44;var $b$=O(()=>{a44=class a44{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*W54($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class O54{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var s44=30000,e44=1000,$54=65536,oQ,Z54=($)=>{return"connection"in $},G54=($)=>{let Z=Z54($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??s44,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??e44,maxChunkBytes:Z.maxChunkBytes??$54,diagnostics:Z.diagnostics}},Zb$=($)=>{return Array.from($.entries())},X54=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},Y54=($,Z,G)=>{if(X54(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return Zb$(G.headers);return Zb$(G.headers)},Gb$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},Q54=()=>{return crypto.randomUUID().replaceAll("-","")},J54=($)=>{try{$?.unsubscribe()}catch{}},K54=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},w54=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},RB=($,Z,G)=>{$.publish(Z,r_$(G))},U54=($)=>{return $.type.startsWith("response.")},L81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},F54=($)=>{if($==="idle")return new oQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new oQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},Xb$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(F54(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=o_$(W.value.data);if(!U54(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},H54=async($)=>{let Z=!1;while(!0){let G=await Xb$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new oQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new oQ(G.value.code,G.value.message);throw new oQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},N54=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){RB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of W54(J,$.maxChunkBytes)){if(X)return;RB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:s_$(W)}),G++}}}catch(Q){if(X)return;RB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},B54=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await Xb$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new oQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(e_$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new oQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){RB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},qB=($)=>{let Z=G54($);return K54(Z.maxChunkBytes),async(G,X)=>{let Y=BC$(G),Q=new Request(G,X),J=Q54(),W=OC$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,D=!1,E=(P=new oQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,J54(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new oQ("tunnel_aborted",L81(Q.signal));RB(Z.connection,W.abort,{type:"abort",requestId:J,reason:L81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new oQ("tunnel_aborted",L81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new oQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);RB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:Y54(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};RB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)RB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?N54({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await H54({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(w54(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:Gb$(P.headers)});return new Response(B54({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:Gb$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var Yb$=O(()=>{a_$();$b$();dL0();oQ=class oQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var tL0=O(()=>{Yb$()});function Qb$($){let Z=$.createFetch??D54,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return z81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return z81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return z81}}}var z81,D54=($,Z)=>qB({connection:$,firstFrameTimeoutMs:Z});var Jb$=O(()=>{tL0();Ur();z81={online:!1,capabilities:[]}});async function*E54($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function Wb$($){let Z=$.createFetch??((G)=>qB({connection:G,idleTimeoutMs:L54}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*E54(U)}}var L54=45000;var Kb$=O(()=>{tL0();Ur()});import{z as fJ}from"zod";function wb$($){return JSON.stringify($)}var OGZ;var Ub$=O(()=>{OGZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function Fb$($){let Z=$.createFetch??((G)=>qB({connection:G,idleTimeoutMs:z54}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function Hb$($){let Z=$.createFetch??qB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:wb$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var z54=45000;var Nb$=O(()=>{tL0();Ub$();Ur()});function rL0($,Z,G,X){if(!X)return!1;return $.emit(Z,_3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var Bb$=O(()=>{R8()});class j81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as j54,rm as oL0}from"fs/promises";import{join as aL0}from"path";async function sL0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-P54),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await qC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await Ob$($,Y,Z);else if(!Y.startsWith(".")){let Q=aL0($,Y),J=await qC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await Ob$(Q,K,Z)}if((await qC(Q)).length===0)await oL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function Ob$($,Z,G){let X=0,Y=aL0($,Z),Q=await qC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=aL0(Y,W),w=await qC(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=aL0(K,F);await oL0(N,{recursive:!0,force:!0}),X++}}if((await qC(K)).length===0)await oL0(K,{recursive:!0,force:!0})}if((await qC(Y)).length===0)await oL0(Y,{recursive:!0,force:!0});return X}async function qC($){try{return(await j54($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var P54=30;var P81=()=>{};import{DBOS as A81,SchedulerMode as A54}from"@dbos-inc/dbos-sdk";async function I54(){let $=[eQ(),kC(),qK()],Z=0;for(let G of $)try{Z+=await sL0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function R54($,Z){await A81.runStep(()=>I54(),{name:"monitoringRetention"})}function Eb$(){if(Db$)return;Db$=!0;let $=A81.registerWorkflow(R54,{name:"monitoringRetentionWorkflow"});A81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:T54,mode:A54.ExactlyOncePerIntervalWhenActive})}var T54="23 4 * * *",Db$=!1;var Lb$=O(()=>{iX();P81()});function zb$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await XN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Mu0($.db,Z,X.role);return Y.boundAuth=qu0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new gD(G,void 0,Y.boundAuth,X.role,"self"),p40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var jb$=O(()=>{hD();Vi()});function q54(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function k54(){for(let $ of M54)$()}function Pb$($){let Z=[...T81.logs,$];T81={...T81,logs:Z.length>500?Z.slice(-500):Z},k54()}function I81(){return S54}var T81,M54,S54=!1;var R81=O(()=>{T81=q54(),M54=new Set});import{EventEmitter as V54}from"events";var q81;var Ab$=O(()=>{R81();q81=new V54;q81.on("request",($)=>{Pb$($)})});function Tb$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=vg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>vg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${$5.tool}${N}${$5.dim}(${E})${$5.reset}`}else if(H.method)Q=`${$5.dim}${vg(H.method)}${$5.reset}`}}catch{}}let W=vg(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${$5.mcp}${vg(U.slice(0,12))}\u2026${$5.reset}`}else if(Y==="/mcp")W=`${$5.mcp}/mcp${$5.reset}`;else if(Y==="/mcp/registry")W=`${$5.mcp}/mcp/registry${$5.reset}`;let K=_54(X),w=J?"\u25C0":"\u2190";if(!I81())console.log(`${$5.dim}${w}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=C54(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!I81())console.log(`${$5.dim}${B}${$5.reset} ${K}${X}${$5.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${$5.reset} ${$5.duration}${N}${$5.reset}`);q81.emit("request",{method:X,path:vg(Y),status:F,duration:U,timestamp:new Date})}}}var $5,C54=($)=>{if($>=500)return $5.serverError;if($>=400)return $5.clientError;if($>=300)return $5.redirect;return $5.ok},_54=($)=>{return $5[$]||$5.reset},vg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Ib$=O(()=>{R81();Ab$();$5={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as kb$}from"crypto";import{mkdir as b54,readdir as f54,rm as Rb$,stat as Sb$}from"fs/promises";import{join as k81,relative as x54}from"path";import{z as T$}from"zod";function Cb$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return k81(v54,Z)}function _b$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function M81($,Z){let G=Cb$($),X=_b$(Z);return k81(G,X)}function y54($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return kb$("sha256",Y).update(Q).digest("hex")}function Mb$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=y54(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${_b$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function bb$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${kb$("md5","etag").update(X).digest("hex")}"`}async function fb$($,Z,G,X,Y){try{let Q=await f54($,{withFileTypes:!0});for(let J of Q){let W=k81($,J.name),w=x54(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await fb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await Sb$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:bb$(W,U.mtime,U.size)})}catch{}}}}catch{}}function xb$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=Cb$(X);await b54(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await fb$(U,U,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((E)=>E.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=M81(X,Q.key),W=await Sb$(J);return{contentType:P11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:bb$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??qb$;return{url:Mb$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??qb$;return{url:Mb$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=M81(X,Q.key);try{return await Rb$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=M81(X,K);try{await Rb$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function S81($,Z,G){let X=xb$(Z,G),Y=new Ow({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:z5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new yY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),eW(Y,Q,$,"mcp:dev-assets")}async function vb$($,Z,G,X){let Q=xb$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var v54="./data/assets",qb$=3600,Vb$,yb$;var gb$=O(()=>{F8();Fp();Y6();gu();Yy();jG();KL0();Vb$=new V1;Vb$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return S81($.req.raw,Z,X)});yb$=Vb$});var hb$={};X6(hb$,{mountDevRoutes:()=>g54});function g54($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return S81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await vb$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",yb$);let G=new V1;G.use("*",pQ({mountPath:"/api/dev-assets"})),G.route("/",WL0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var cb$=O(()=>{Y6();B11();KL0();gb$()});import{sql as h54}from"kysely";import{randomUUID as ub$}from"crypto";import{z as c54}from"zod";async function d54($){let Z=new Date().toISOString(),G=ub$(),X=G4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:ub$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await h54`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function l54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function m54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",QC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):lb$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?db$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:db$,rateLimitWindow:u54,rateLimitMax:lb$}}async function i54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function n54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function mb$($){let{db:Z,db:G}=$,X=new wx(G),Y=new Ux(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await l54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await m54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await i54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=OA$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:c54.treeifyError(U.error)},400);let F=await n54(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await d54({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var db$=!0,u54="hour",lb$=100;var ib$=O(()=>{q4();R8();Zg();$g0();Zg0();Q9()});var nb$={};X6(nb$,{createPublishRequestHandler:()=>mb$,createPublicMCPHandler:()=>PA$});var pb$=O(()=>{$g();ib$()});var kp0={};X6(kp0,{watchHandler:()=>sb$,getProxyDispatch:()=>o54,createApp:()=>Q94});import{readFileSync as p54}from"fs";import{PrometheusSerializer as t54}from"@opentelemetry/exporter-prometheus";import{DBOS as yg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as $94,oAuthProtectedResourceMetadata as Z94}from"better-auth/plugins";async function r54($){let Z=$.connect(),G;try{G=await Promise.race([Z,rb$(tb$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),rb$(tb$)]),G.release(),!0}catch{return G.release(!0),!1}}function rb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function o54(){if(!V81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return V81}async function a54($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${M_1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function s54($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function Q94($={}){let Z=$.database??H6(),G=!1;Z9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new F81,J,W,K,w,U,F=null;if($.disableNats)J=H81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Hp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:f0}=await H0.read();if(f0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=q_$();let g=O1().natsCredsPath,H0;if(g)try{H0=p54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,H0?{creds:H0}:void 0);let f0=Wg0()?new sx0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let e0=new It0({getJetStream:()=>F.getJetStream()});e0.init().catch(()=>{}),Y=e0,J=H81({getConnection:()=>F.getConnection()}),W=new N81({getConnection:()=>F.getConnection()}),K=new D81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=Qb$({getConnection:()=>F.getConnection()}),U=Fb$({getConnection:()=>F.getConnection()});let u0=Hb$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,z6)=>{u0.publishControlFrame(e1,z6).catch((J4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",J4)})},stop:()=>T1.stop()},nI$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),e0.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Pi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(gg)await gg();ex0(X),Rt0(Y);let N={storage:new Dx(Z.db),sseHub:Z9},B=new jm0(N),D=new Gm(Z.db),E=new j81(D);E.start(),W.start((g)=>{x90(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),gg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),Ai1(),Y.teardown(),ex0(null),Rt0(null)};let L=new V1;if(L.use("*",rb0({enabled:(g)=>gb(g,"debug")==="1"})),L.use("*",Ez0),L.use("/*",Hb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",Tb$());L.use("*",async(g,H0)=>{if(await H0(),dg(g.req.path))return;if(g.res.status>=500){let e0=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,e0)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await r54(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let f0=H0.postgres.status==="up",e0=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:H0},e0)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await Pz0.collect(),f0=e54.serialize(H0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!G94.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let f0=await yg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:f0,max:e0}=d4$();return g.json({pending:f0,active:H0,max:e0})}),L.route("/api/config",pC$),L.route("/api/_reports",Q_$),L.route("/report",eC$($.clientDir)),L.route("/api/auth/custom",NR$),L.route("/api/auth/desktop",OR$),L.all("/api/auth/admin/*",zR$),L.all("/api/auth/*",async(g)=>{return await O8.handler(g.req.raw)});let z=Zs1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",wC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",wC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Ci),L.route("/",Qs1()),L.use("/oauth-proxy/:connectionId/*",wC),L.all("/oauth-proxy/:connectionId/*",ob$);let j=async(g)=>{let f0=await X94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",wC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await Y94()(g.req.raw),e0=await f0.json();return Response.json(e0,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=iI$({ttlMs:120000}),M=await ua1({db:Z.db,auth:O8,encryption:{key:O1().encryptionKey},observability:{tracer:uU,meter:E8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});XN.set(M);let S=new Aw(O1().encryptionKey);z21({db:Z.db,baseUrl:j3()});let R=J60(Z.db),V=new tl(Z.db),i=zb$({db:Z.db});zt0({storage:R,studioContextFactory:i}),fm0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9},prepareLinkWorkFn:FM$,workPublisher:U}),Sm0({dispatchRunFn:wM$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:Z9}});let f=new Dx(Z.db),v=new Xm(Z.db);R4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await ab$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let f0=await f.completeRunIfNotCompleted(g,H0);if(rL0(Z9,H0,g,f0),f0)await qm0(v,g,H0);return f0},markRunRequiresAction:async(g,H0)=>{let f0=await f.requiresActionIfInProgress(g,H0);return rL0(Z9,H0,g,f0),f0},markRunFailed:async(g,H0,f0,e0)=>{let u0=await f.markRunFailed(g,H0,f0,e0);if(rL0(Z9,H0,g,u0),u0)await qm0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await f.messageParts().replaceMessageParts(g,jN(g,H0),[])},persistTitle:(g,H0,f0)=>f.update(g,H0,{title:f0}),onTitleUpdated:async({runId:g,orgId:H0,title:f0})=>{let e0=await f.get(g,H0).catch(()=>null);Z9.emit(H0,_3(g,e0?.status??"in_progress",{title:f0,virtualMcpId:e0?.virtual_mcp_id??void 0,createdBy:e0?.created_by,triggerId:e0?.trigger_id,branch:e0?.branch??null,createdAt:e0?.created_at,updatedAt:e0?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await f.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:f0,usage:e0})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:e0.inputTokens,output_tokens:e0.outputTokens,total_tokens:e0.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:f0,reason:e0,kind:u0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:e0}})},purgeRun:async(g)=>{K.purge(g)}}),QW$({studioContextFactory:i,systemDatabaseUrl:vx1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),Eb$(),j21();let Z0=async(g,H0,f0)=>{let e0=await R.findById(g,H0);if(!e0)throw Error("Automation not found");return At0({automationId:e0.id,organizationId:e0.organization_id,triggerId:null})},o=new Dg(R,({automation:g,trigger:H0,contextMessages:f0,idempotencyKey:e0})=>Up({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:f0},{idempotencyKey:e0})),B0=[eQ(),kC(),qK()];for(let g of B0)sL0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(Oz0(g.req.path))return H0();let f0={measure:async(u0,T1)=>{wQ(g,u0);try{return await T1()}finally{WY(g,u0)}}},e0=await XN.create(g.req.raw,{timings:f0});e0.automationRunner=Z0,g.set("studioContext",e0);try{await H0()}finally{let u0=e0.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),D8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",UC),L.use("/api/:org/v1/*",UC),L.use("/api/:org/files/*",UC),L.use("*",async(g,H0)=>{let f0=g.req.path;if(f0.startsWith("/api/org-sso/")||f0.startsWith("/api/auth/")||f0.startsWith("/api/tools/management")||f0.startsWith("/oauth-proxy/")||f0.startsWith(`${N01}/`))return H0();let e0=g.get("studioContext");if(!e0?.organization?.id||!e0?.auth?.user?.id)return H0();if(!(await e0.storage.orgSsoConfig.getByOrgId(e0.organization.id))?.enforced)return H0();if(!await e0.storage.orgSsoSessions.isValid(e0.auth.user.id,e0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new V1;J0.use("*",pQ({mountPath:"/api/org-sso"})),J0.route("/",kE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:ab0,grouped:oO()})}),L.use("/mcp/*",async(g,H0)=>{wQ(g,"mcp");try{return await H0()}finally{WY(g,"mcp")}});let G0=async(g,H0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let e0=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${e0.origin}${e0.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",G0),L.use("/mcp/gateway/:virtualMcpId?",G0),L.use("/mcp/virtual-mcp/:virtualMcpId?",G0),L.use("/mcp/self",G0),b3()){let{mountDevRoutes:g}=(cb$(),Yz0(hb$));g(L,G0)}let a=new V1;a.use("*",pQ({mountPath:"/mcp"})),a.route("/",KB0()),L.route("/mcp",a);let A0=new V1;A0.use("*",pQ({mountPath:"/mcp/self"})),A0.route("/",yL0()),L.route("/mcp/self",A0);let w0=new V1;w0.use("*",pQ({mountPath:"/mcp"})),w0.route("/",FB0()),L.route("/mcp",w0),L.use("/api/:org/models/*",async(g,H0)=>{wQ(g,"llm_models");try{return await H0()}finally{WY(g,"llm_models")}});let v0=H11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",v0),F!=null)V81=Wb$({getConnection:()=>F?.getConnection()??null});L.route("/api",VC$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(H0),e0=null;if(f0){let T1=(f0[1]??"").trim();e0=await RE0(T1,O8.api)}else e0=g.get("studioContext")?.auth?.user?.id??null;if(!e0)return g.json({error:"unauthorized"},401);let u0=w?await w(e0):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",UC),L.route("/api",w_$);let d0=new V1;d0.use("*",pQ({mountPath:"/api"})),d0.route("/",gL0()),L.route("/api",d0),L.route("/api",dC$);let i0=new V1;i0.use("*",pQ({mountPath:"/api"})),i0.route("/",hL0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",i0);let n0=new ol(Z.db),U0=new V1;U0.use("*",pQ({mountPath:"/api"})),U0.route("/",YL0()),L.route("/api",U0),L.route("/api/deco-sites",bM$()),L.route("/api/deco-apps",vC$());let C0=new V1;C0.use("*",pQ({mountPath:"/api/deco-sites"})),C0.route("/",JL0()),L.route("/api/deco-sites",C0);let T0=new V1;T0.use("*",pQ({mountPath:"/api/vm-events"})),T0.route("/",fC$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:N0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (pb$(),nb$)),X0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=N0(X0),n=Q0(X0);L.use("/org/:orgRef/registry/publish-request",wC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",wC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(N01,jR$());let e=HC$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:Z9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:b3(),mcpAuth:G0,oauthProxyHandler:ob$,watchHandler:sb$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(jM$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([Z9.stop(),gg?Promise.resolve(gg()).finally(()=>{gg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await mY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await gx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await yg.registerQueue(lY,{partitionQueue:!0,concurrency:Dt0,minPollingIntervalMs:Et0}),await yg.registerQueue(sQ,{partitionQueue:!0,concurrency:bm0}),await yg.registerQueue(RK,{partitionQueue:!0,concurrency:km0}),await yg.registerQueue(cU,{partitionQueue:!0,concurrency:YW$}),await D11(R),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>yg.deleteQueue(g))),await Lt0(Z.pool),Uh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),P21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var ab$,tb$=5000,V81=null,gg=null,ob$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await XN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await ex(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await _i(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let R=N.searchParams.get("redirect_uri");if(R){let V=O1().baseUrl??B.origin;try{let i=new URL(R),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",R)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(k_1(J.connection_url))try{let V=await a54(Y,J.organization_id),i=s54(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let o=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=o||null,P=B0||null}}catch{}let R=await $.req.formData();if(R.has("resource"))R.set("resource",J.connection_url);let V=R.get("client_id"),i=R.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of R.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let R=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...R?.slug?{organization_slug:R.slug}:{},...R?.name?{organization_name:R.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[R,V]of A.headers.entries())if(!S.includes(R.toLowerCase()))M.set(R,V);if(X==="token"&&A.ok){let R=await A.text();try{let V=JSON.parse(R);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await $v(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new b5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(R,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},sb$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return tQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!Z9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{Z9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),Z9.remove(X,J),U()})})})},e54,G94,X94=()=>Z94(O8),Y94=()=>$94(O8);var Sp0=O(()=>{l5();F8();A21();OG();xb();R8();Y6();X$0();Nb1();ob0();VQ();Vi();Q01();HQ();B5();q4();H01();DR$();PR$();E01();LM$();N11();QJ();t40();B11();PM$();O11();NC$();CC$();xC$();j11();yC$();wB0();bi();lC$();HB0();i$1();tC$();$_$();J_$();U_$();m$1();l$1();Ir();Dd();M_$();UY();I60();sl();Mt0();k_$();V_$();v_$();Jb$();Kb$();Nb$();Pm0();Bb$();jg0();bg0();sw();Rg0();Lb$();s$0();P81();iX();E11();Rv();Rm0();Lm0();s$0();K11();my0();iy0();jb$();hb();Ib$();zC();Q01();Zy();v90();ab$=k(dB(),1);e54=new t54,G94=new Set([lY,sQ,RK,cU])});var Gf$={};X6(Gf$,{resolveClientDir:()=>H94,resolveAssetPathWithTraversalCheck:()=>Zf$,isPathWithinDirectory:()=>$f$,createAssetHandler:()=>N94});import{resolve as Br,dirname as J94,join as W94,extname as K94,basename as w94,sep as eb$}from"path";function U94($,Z){if($===Z||w94($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${eb$}assets${eb$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function $f$($,Z){let G=Br(Z),X=Br($);return X===G||X.startsWith(G+"/")}function Zf$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Br(Z,G);if(!$f$(X,Z))return null;return X}function H94($,Z="../client"){let G=new URL($),X=J94(G.pathname);return Br(X,Z)}function N94($={}){let{env:Z="production",clientDir:G=F94,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Zf$({requestPath:W,clientDir:G});if(!K)return null;let w=W94(K,"index.html"),U=Br(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(K94(K))?[w,U]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:U94(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var F94="./dist/client";var Xf$=()=>{};var Yf$={};X6(Yf$,{tryUpgradePreviewWs:()=>j94,tryHandlePreviewHttp:()=>z94,previewWebSocketHandler:()=>P94,parsePreviewBaseDomain:()=>L94,isPreviewWsData:()=>eL0,extractHandleFromHost:()=>C81});function D94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function E94(){return new Response(O94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function L94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function C81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function z94($,Z){let G=C81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Dr(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(PV)&&D94($))return E94();return Y.headers.delete(PV),Y}function Dr($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function eL0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function j94($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=C81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Dr(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Dr(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Dr(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return Dr(426,"upgrade failed");return}function Or($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var B94=256,O94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',P94;var Qf$=O(()=>{Ip0();P94={open($){let Z=$.data;if(!eL0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Or($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Or($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Or($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!eL0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=B94){Or($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!eL0(Z))return;Or($,Z,1000,"")}}});var wf$={};X6(wf$,{printBanner:()=>T94,bannerLines:()=>Kf$,BANNER_LINES:()=>Jf$,BANNER_GRADIENT:()=>Wf$});function A94($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Kf$($){let Z=Jf$.map((G,X)=>{let[Y,Q,J]=A94(Wf$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function T94($){console.log("");for(let Z of Kf$($))console.log(Z);console.log("")}var Jf$,Wf$;var Uf$=O(()=>{Jf$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Wf$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Hf$={};X6(Hf$,{bootstrapDevLinkSession:()=>_94});import{existsSync as I94}from"fs";import{chmod as R94,mkdir as q94,rename as M94,writeFile as k94}from"fs/promises";import{dirname as S94,join as Ff$}from"path";function V94($){return Ff$($,"dev-link")}function C94($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Ff$(V94($),"session.json")}async function _94($,Z){let G=C94($),X=H6().db,Y=yQ()?await Jp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(I94(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await O8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await O8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await q94(S94(G),{recursive:!0});let W=`${G}.tmp`;return await k94(W,JSON.stringify(J,null,2),{mode:384}),await R94(W,384),await M94(W,G),{path:G,userSub:Y.id}}var Nf$=O(()=>{HQ();VQ();pN()});l5();var d81="4";function l81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:d81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}F8();Jz0();B5();function Mx$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function Rz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function I61(){let $=Mx$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:Rz0($,"--cpu-prof-dir")??process.cwd(),name:Rz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(Rz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}kz0();var Mr;function b61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=SB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Mr=setInterval(()=>void Z().catch(()=>{}),$),Mr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Mr)clearInterval(Mr)}}import*as Vx$ from"bun:jsc";var{startSamplingProfiler:Cx$,samplingProfilerStackTraces:_x$}=Vx$;function f61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{Cx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=_x$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function x61(){I61();let $=[b61(),_61(),f61()];return()=>{for(let Z of $)Z()}}import{existsSync as c94}from"fs";var lX=O1();A61();var{DBOS:Er,DBOSClient:b94}=await import("@dbos-inc/dbos-sdk");function Lf$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var f94=[lY,sQ,RK,cU],x94=lX.dispatchRole==="worker"?f94:lX.dispatchRole==="api"?[]:void 0;Er.setConfig(l81({systemDatabaseUrl:Lf$(lX.databaseUrl,lX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:lX.podName,listenQueues:x94}));var{createApp:v94}=await Promise.resolve().then(() => (Sp0(),kp0)),{isServerPath:y94}=await Promise.resolve().then(() => (Ir(),Q61)),{createAssetHandler:g94,resolveClientDir:zf$}=await Promise.resolve().then(() => (Xf$(),Gf$)),h94=lX.port,Bf$=zf$(import.meta.url,"../client"),jf$=c94(Bf$)?Bf$:zf$(import.meta.url,"../dist/client"),u94=g94({clientDir:jf$,isServerPath:y94}),d94={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function l94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(d94))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:m94,tryHandlePreviewHttp:i94,tryUpgradePreviewWs:n94,previewWebSocketHandler:_81,isPreviewWsData:b81}=await Promise.resolve().then(() => (Qf$(),Yf$)),{getOrInitSharedRunner:p94}=await Promise.resolve().then(() => (sn(),U3$)),Pf$=m94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),Of$={baseDomain:Pf$??"",getRunner:p94},$z0=await v94({clientDir:jf$}),f81=process.env.DBOS_CONDUCTOR_KEY?.trim(),Df$=process.env.DBOS_CONDUCTOR_URL?.trim();await Er.launch({...f81?{conductorKey:f81}:{},...f81&&Df$?{conductorURL:Df$}:{}});console.log(`[dbos] application version: ${Er.applicationVersion}`);var x81=5,v81=0;await aQ(async()=>{v81++;try{return await $z0.initDbos()}catch($){let Z=v81>=x81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${v81}/${x81} failed, ${Z}`,$),$}},{maxAttempts:x81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!lX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Uf$(),wf$));console.log("");for(let Z of $())console.log(Z)}var t94=Bun.serve({idleTimeout:0,port:h94,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Pf$){let X=await n94($,Z,Of$);if(X===void 0)return;if(X)return X;let Y=await i94($,Of$);if(Y)return Y}let G=await u94($);if(G)return l94(G);return $z0.fetch($,{server:Z})},websocket:{open($){if(b81($.data))_81.open($)},message($,Z){if(b81($.data))_81.message($,Z)},close($){if(b81($.data))_81.close($)}},development:!1}),r94=x61();if(lX.localMode)Promise.resolve().then(() => (pN(),dN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Nf$(),Hf$)),Y=lX.baseUrl??`http://localhost:${lX.port}`,Q=await X(lX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (pN(),dN0));Z()}catch{}});var Ef$=!1;async function o94($){let Z;try{Z=await b94.create({systemDatabaseUrl:Lf$(lX.databaseUrl,lX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:sQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:sQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function Zz0($){if(Ef$)return;Ef$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{r94(),$z0.markShuttingDown();let Q=i81(lX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await D8(Q),await t94.stop(!0);let J=Er.executorID;await Er.shutdown(),await o94(J),await $z0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Zz0("SIGTERM"));process.on("SIGINT",()=>Zz0("SIGINT"));process.on("SIGHUP",()=>Zz0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Zz0("uncaughtException")});