npm - decocms - Versions diffs - 4.9.0 → 4.9.2 - Mend

decocms 4.9.0 → 4.9.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (217) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2596,5 +2596,5 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var q11,mV,B04,zk$,R11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",E04,c$,h$,a8,Lk$=24,iV,PJ;var qk$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(q11||(q11={}));(function($){var Z=function(g,l){this.hi=g|0,this.lo=l|0},G=function(g){var l,h=new Float64Array(16);if(g)for(l=0;l<g.length;l++)h[l]=g[l];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,l){return g<<l|g>>>32-l}function E(g,l){var h=g[l+3]&255;return h=h<<8|g[l+2]&255,h=h<<8|g[l+1]&255,h<<8|g[l+0]&255}function D(g,l){var h=g[l]<<24|g[l+1]<<16|g[l+2]<<8|g[l+3],r=g[l+4]<<24|g[l+5]<<16|g[l+6]<<8|g[l+7];return new Z(h,r)}function L(g,l,h){var r;for(r=0;r<4;r++)g[l+r]=h&255,h>>>=8}function z(g,l,h){g[l]=h.hi>>24&255,g[l+1]=h.hi>>16&255,g[l+2]=h.hi>>8&255,g[l+3]=h.hi&255,g[l+4]=h.lo>>24&255,g[l+5]=h.lo>>16&255,g[l+6]=h.lo>>8&255,g[l+7]=h.lo&255}function j(g,l,h,r,Y0){var W0,_0=0;for(W0=0;W0<Y0;W0++)_0|=g[l+W0]^h[r+W0];return(1&_0-1>>>8)-1}function P(g,l,h,r){return j(g,l,h,r,16)}function A(g,l,h,r){return j(g,l,h,r,32)}function M(g,l,h,r,Y0){var W0=new Uint32Array(16),_0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),M0,j0,g0;for(M0=0;M0<4;M0++)_0[5*M0]=E(r,4*M0),_0[1+M0]=E(h,4*M0),_0[6+M0]=E(l,4*M0),_0[11+M0]=E(h,16+4*M0);for(M0=0;M0<16;M0++)l0[M0]=_0[M0];for(M0=0;M0<20;M0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=_0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)W0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)_0[g0]=W0[g0]}if(Y0){for(M0=0;M0<16;M0++)_0[M0]=_0[M0]+l0[M0]|0;for(M0=0;M0<4;M0++)_0[5*M0]=_0[5*M0]-E(r,4*M0)|0,_0[6+M0]=_0[6+M0]-E(l,4*M0)|0;for(M0=0;M0<4;M0++)L(g,4*M0,_0[5*M0]),L(g,16+4*M0,_0[6+M0])}else for(M0=0;M0<16;M0++)L(g,4*M0,_0[M0]+l0[M0]|0)}function S(g,l,h,r){return M(g,l,h,r,!1),0}function q(g,l,h,r){return M(g,l,h,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function p(g,l,h,r,Y0,W0,_0){var l0=new Uint8Array(16),P0=new Uint8Array(64),M0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=W0[j0];while(Y0>=64){S(P0,l0,_0,V);for(j0=0;j0<64;j0++)g[l+j0]=(h?h[r+j0]:0)^P0[j0];M0=1;for(j0=8;j0<16;j0++)M0=M0+(l0[j0]&255)|0,l0[j0]=M0&255,M0>>>=8;if(Y0-=64,l+=64,h)r+=64}if(Y0>0){S(P0,l0,_0,V);for(j0=0;j0<Y0;j0++)g[l+j0]=(h?h[r+j0]:0)^P0[j0]}return 0}function f(g,l,h,r,Y0){return p(g,l,null,0,h,r,Y0)}function v(g,l,h,r,Y0){var W0=new Uint8Array(32);return q(W0,r,Y0,V),f(g,l,h,r.subarray(16),W0)}function Z0(g,l,h,r,Y0,W0,_0){var l0=new Uint8Array(32);return q(l0,W0,_0,V),p(g,l,h,r,Y0,W0.subarray(16),l0)}function a(g,l){var h,r=0;for(h=0;h<17;h++)r=r+(g[h]+l[h]|0)|0,g[h]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,l,h,r,Y0,W0){var _0,l0,P0,M0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=W0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[r+P0];$1[P0]=1,r+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];M0=0;for(P0=0;P0<16;P0++)M0=M0+o0[P0]|0,o0[P0]=M0&255,M0>>>=8;M0=M0+o0[16]|0,o0[16]=M0&3,M0=5*(M0>>>2)|0;for(P0=0;P0<16;P0++)M0=M0+o0[P0]|0,o0[P0]=M0&255,M0>>>=8;M0=M0+o0[16]|0,o0[16]=M0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),_0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=_0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=W0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[l+P0]=o0[P0];return 0}function K0(g,l,h,r,Y0,W0){var _0=new Uint8Array(16);return O0(_0,0,h,r,Y0,W0),P(g,l,_0,0)}function J0(g,l,h,r,Y0){var W0;if(h<32)return-1;Z0(g,0,l,0,h,r,Y0),O0(g,16,g,32,h-32,g);for(W0=0;W0<16;W0++)g[W0]=0;return 0}function s(g,l,h,r,Y0){var W0,_0=new Uint8Array(32);if(h<32)return-1;if(v(_0,0,32,r,Y0),K0(l,16,l,32,h-32,_0)!==0)return-1;Z0(g,0,l,0,h,r,Y0);for(W0=0;W0<32;W0++)g[W0]=0;return 0}function A0(g,l){var h;for(h=0;h<16;h++)g[h]=l[h]|0}function U0(g){var l,h;for(h=0;h<16;h++)g[h]+=65536,l=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=l-1+37*(l-1)*(h===15?1:0),g[h]-=l*65536}function f0(g,l,h){var r,Y0=~(h-1);for(var W0=0;W0<16;W0++)r=Y0&(g[W0]^l[W0]),g[W0]^=r,l[W0]^=r}function m0(g,l){var h,r,Y0,W0=G(),_0=G();for(h=0;h<16;h++)_0[h]=l[h];U0(_0),U0(_0),U0(_0);for(r=0;r<2;r++){W0[0]=_0[0]-65517;for(h=1;h<15;h++)W0[h]=_0[h]-65535-(W0[h-1]>>16&1),W0[h-1]&=65535;W0[15]=_0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,f0(_0,W0,1-Y0)}for(h=0;h<16;h++)g[2*h]=_0[h]&255,g[2*h+1]=_0[h]>>8}function x0(g,l){var h=new Uint8Array(32),r=new Uint8Array(32);return m0(h,g),m0(r,l),A(h,0,r,0)}function n0(g){var l=new Uint8Array(32);return m0(l,g),l[0]&1}function N0(g,l){var h;for(h=0;h<16;h++)g[h]=l[2*h]+(l[2*h+1]<<8);g[15]&=32767}function b0(g,l,h){var r;for(r=0;r<16;r++)g[r]=l[r]+h[r]|0}function I0(g,l,h){var r;for(r=0;r<16;r++)g[r]=l[r]-h[r]|0}function F0(g,l,h){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*h[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)g[r]=W0[r];U0(g),U0(g)}function Q0(g,l){F0(g,l,l)}function G0(g,l){var h=G(),r;for(r=0;r<16;r++)h[r]=l[r];for(r=253;r>=0;r--)if(Q0(h,h),r!==2&&r!==4)F0(h,h,l);for(r=0;r<16;r++)g[r]=h[r]}function k0(g,l){var h=G(),r;for(r=0;r<16;r++)h[r]=l[r];for(r=250;r>=0;r--)if(Q0(h,h),r!==1)F0(h,h,l);for(r=0;r<16;r++)g[r]=h[r]}function i(g,l,h){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,_0,l0=G(),P0=G(),M0=G(),j0=G(),g0=G(),o0=G();for(_0=0;_0<31;_0++)r[_0]=l[_0];r[31]=l[31]&127|64,r[0]&=248,N0(Y0,h);for(_0=0;_0<16;_0++)P0[_0]=Y0[_0],j0[_0]=l0[_0]=M0[_0]=0;l0[0]=j0[0]=1;for(_0=254;_0>=0;--_0)W0=r[_0>>>3]>>>(_0&7)&1,f0(l0,P0,W0),f0(M0,j0,W0),b0(g0,l0,M0),I0(l0,l0,M0),b0(M0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,M0,l0),F0(M0,P0,g0),b0(g0,l0,M0),I0(l0,l0,M0),Q0(P0,l0),I0(M0,j0,o0),F0(l0,M0,K),b0(l0,l0,j0),F0(M0,M0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,W0),f0(M0,j0,W0);for(_0=0;_0<16;_0++)Y0[_0+16]=l0[_0],Y0[_0+32]=M0[_0],Y0[_0+48]=P0[_0],Y0[_0+64]=j0[_0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return G0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,l){return i(g,l,Q)}function t0(g,l){return X(l,32),$0(g,l)}function R0(g,l,h){var r=new Uint8Array(32);return i(r,h,l),q(g,Y,r,V)}var d=J0,m=s;function S0(g,l,h,r,Y0,W0){var _0=new Uint8Array(32);return R0(_0,Y0,W0),d(g,l,h,r,_0)}function v0(g,l,h,r,Y0,W0){var _0=new Uint8Array(32);return R0(_0,Y0,W0),m(g,l,h,r,_0)}function N1(){var g=0,l=0,h=0,r=0,Y0=65535,W0,_0,l0;for(l0=0;l0<arguments.length;l0++)W0=arguments[l0].lo,_0=arguments[l0].hi,g+=W0&Y0,l+=W0>>>16,h+=_0&Y0,r+=_0>>>16;return l+=g>>>16,h+=l>>>16,r+=h>>>16,new Z(h&Y0|r<<16,g&Y0|l<<16)}function i0(g,l){return new Z(g.hi>>>l,g.lo>>>l|g.hi<<32-l)}function L1(){var g=0,l=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,l^=arguments[h].hi;return new Z(l,g)}function R$(g,l){var h,r,Y0=32-l;if(l<32)h=g.hi>>>l|g.lo<<Y0,r=g.lo>>>l|g.hi<<Y0;else if(l<64)h=g.lo>>>l|g.hi<<Y0,r=g.hi>>>l|g.lo<<Y0;return new Z(h,r)}function N6(g,l,h){var r=g.hi&l.hi^~g.hi&h.hi,Y0=g.lo&l.lo^~g.lo&h.lo;return new Z(r,Y0)}function P4(g,l,h){var r=g.hi&l.hi^g.hi&h.hi^l.hi&h.hi,Y0=g.lo&l.lo^g.lo&h.lo^l.lo&h.lo;return new Z(r,Y0)}function g5(g){return L1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return L1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return L1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return L1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function D9(g,l,h){var r=[],Y0=[],W0=[],_0=[],l0,P0,M0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=D(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)_0[P0]=D(l,8*P0+j0);for(P0=0;P0<80;P0++){for(M0=0;M0<8;M0++)Y0[M0]=W0[M0];l0=N1(W0[7],e(W0[4]),N6(W0[4],W0[5],W0[6]),o$[P0],_0[P0%16]),Y0[7]=N1(l0,g5(W0[0]),P4(W0[0],W0[1],W0[2])),Y0[3]=N1(Y0[3],l0);for(M0=0;M0<8;M0++)W0[(M0+1)%8]=Y0[M0];if(P0%16===15)for(M0=0;M0<16;M0++)_0[M0]=N1(_0[M0],_0[(M0+9)%16],J1(_0[(M0+1)%16]),r$(_0[(M0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=N1(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,r[P0]);return h}var xG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function A8(g,l,h){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,_0=h;for(W0=0;W0<64;W0++)r[W0]=xG[W0];D9(r,l,h),h%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<h;W0++)Y0[W0]=l[_0-h+W0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(_0/536870912|0,_0<<3)),D9(r,Y0,h);for(W0=0;W0<64;W0++)g[W0]=r[W0];return 0}function R6(g,l){var h=G(),r=G(),Y0=G(),W0=G(),_0=G(),l0=G(),P0=G(),M0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,l[1],l[0]),F0(h,h,j0),b0(r,g[0],g[1]),b0(j0,l[0],l[1]),F0(r,r,j0),F0(Y0,g[3],l[3]),F0(Y0,Y0,U),F0(W0,g[2],l[2]),b0(W0,W0,W0),I0(_0,r,h),I0(l0,W0,Y0),b0(P0,W0,Y0),b0(M0,r,h),F0(g[0],_0,l0),F0(g[1],M0,P0),F0(g[2],P0,l0),F0(g[3],_0,M0)}function e4(g,l,h){var r;for(r=0;r<4;r++)f0(g[r],l[r],h)}function P5(g,l){var h=G(),r=G(),Y0=G();G0(Y0,l[2]),F0(h,l[0],Y0),F0(r,l[1],Y0),m0(g,r),g[31]^=n0(h)<<7}function $9(g,l,h){var r,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)r=h[Y0/8|0]>>(Y0&7)&1,e4(g,l,r),R6(l,g),R6(g,g),e4(g,l,r)}function L9(g,l){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,l)}function _1(g,l,h){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!h)X(l,32);A8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,L9(Y0,r),P5(g,Y0);for(W0=0;W0<32;W0++)l[W0+32]=g[W0];return 0}var T8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function I8(g,l){var h,r,Y0,W0;for(r=63;r>=32;--r){h=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=h-16*l[r]*T8[Y0-(r-32)],h=Math.floor((l[Y0]+128)/256),l[Y0]-=h*256;l[Y0]+=h,l[r]=0}h=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=h-(l[31]>>4)*T8[Y0],h=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=h*T8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,g[r]=l[r]&255}function s8(g){var l=new Float64Array(64),h;for(h=0;h<64;h++)l[h]=g[h];for(h=0;h<64;h++)g[h]=0;I8(g,l)}function _$(g,l,h,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),_0=new Uint8Array(64),l0,P0,M0=new Float64Array(64),j0=[G(),G(),G(),G()];A8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=l[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];A8(_0,g.subarray(32),h+32),s8(_0),L9(j0,_0),P5(g,j0);for(l0=32;l0<64;l0++)g[l0]=r[l0];A8(W0,g,h+64),s8(W0);for(l0=0;l0<64;l0++)M0[l0]=0;for(l0=0;l0<32;l0++)M0[l0]=_0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)M0[l0+P0]+=W0[l0]*Y0[P0];return I8(g.subarray(32),M0),g0}function w8(g,l){var h=G(),r=G(),Y0=G(),W0=G(),_0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],l),Q0(Y0,g[1]),F0(W0,Y0,w),I0(Y0,Y0,g[2]),b0(W0,g[2],W0),Q0(_0,W0),Q0(l0,_0),F0(P0,l0,_0),F0(h,P0,Y0),F0(h,h,W0),k0(h,h),F0(h,h,Y0),F0(h,h,W0),F0(h,h,W0),F0(g[0],h,W0),Q0(r,g[0]),F0(r,r,W0),x0(r,Y0))F0(g[0],g[0],N);if(Q0(r,g[0]),F0(r,r,W0),x0(r,Y0))return-1;if(n0(g[0])===l[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function D7(g,l,h,r){var Y0,W0=new Uint8Array(32),_0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,r))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=r[Y0];if(A8(_0,g,h),s8(_0),$9(l0,P0,_0),L9(P0,l.subarray(32)),R6(l0,P0),P5(W0,l0),h-=64,A(l,0,W0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0+64];return h}var q$=32,u6=24,r6=32,i8=16,$5=32,C=32,u=32,c=32,I=32,t=u6,y0=r6,d0=i8,Y1=64,w1=32,f1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:p,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:K0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:i,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:S0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:A8,crypto_sign:_$,crypto_sign_keypair:_1,crypto_sign_open:D7,crypto_secretbox_KEYBYTES:q$,crypto_secretbox_NONCEBYTES:u6,crypto_secretbox_ZEROBYTES:r6,crypto_secretbox_BOXZEROBYTES:i8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Y1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:f1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:T8,pack25519:m0,unpack25519:N0,M:F0,A:b0,S:Q0,Z:I0,pow2523:k0,add:R6,set25519:A0,modL:I8,scalarmult:$9,scalarbase:L9};function h1(g,l){if(g.length!==q$)throw Error("bad key size");if(l.length!==u6)throw Error("bad nonce size")}function D$(g,l){if(g.length!==u)throw Error("bad public key size");if(l.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var l=0;l<g.length;l++)g[l]=0}$.randomBytes=function(g){var l=new Uint8Array(g);return X(l,g),l},$.secretbox=function(g,l,h){G$(g,l,h),h1(h,l);var r=new Uint8Array(r6+g.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<g.length;W0++)r[W0+r6]=g[W0];return J0(Y0,r,r.length,l,h),Y0.subarray(i8)},$.secretbox.open=function(g,l,h){G$(g,l,h),h1(h,l);var r=new Uint8Array(i8+g.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<g.length;W0++)r[W0+i8]=g[W0];if(r.length<32)return null;if(s(Y0,r,r.length,l,h)!==0)return null;return Y0.subarray(r6)},$.secretbox.keyLength=q$,$.secretbox.nonceLength=u6,$.secretbox.overheadLength=i8,$.scalarMult=function(g,l){if(G$(g,l),g.length!==C)throw Error("bad n size");if(l.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return i(h,g,l),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var l=new Uint8Array($5);return $0(l,g),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,l,h,r){var Y0=$.box.before(h,r);return $.secretbox(g,l,Y0)},$.box.before=function(g,l){G$(g,l),D$(g,l);var h=new Uint8Array(I);return R0(h,g,l),h},$.box.after=$.secretbox,$.box.open=function(g,l,h,r){var Y0=$.box.before(h,r);return $.secretbox.open(g,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),l=new Uint8Array(c);return t0(g,l),{publicKey:g,secretKey:l}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var l=new Uint8Array(u);return $0(l,g),{publicKey:l,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,l){if(G$(g,l),l.length!==f1)throw Error("bad secret key size");var h=new Uint8Array(Y1+g.length);return _$(h,g,g.length,l),h},$.sign.open=function(g,l){if(G$(g,l),l.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),r=D7(h,g,g.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=h[W0];return Y0},$.sign.detached=function(g,l){var h=$.sign(g,l),r=new Uint8Array(Y1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=h[Y0];return r},$.sign.detached.verify=function(g,l,h){if(G$(g,l,h),l.length!==Y1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var r=new Uint8Array(Y1+g.length),Y0=new Uint8Array(Y1+g.length),W0;for(W0=0;W0<Y1;W0++)r[W0]=l[W0];for(W0=0;W0<g.length;W0++)r[W0+Y1]=g[W0];return D7(Y0,r,r.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),l=new Uint8Array(f1);return _1(g,l),{publicKey:g,secretKey:l}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==f1)throw Error("bad secret key size");var l=new Uint8Array(w1);for(var h=0;h<l.length;h++)l[h]=g[32+h];return{publicKey:l,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var l=new Uint8Array(w1),h=new Uint8Array(f1);for(var r=0;r<32;r++)h[r]=g[r];return _1(l,h,!0),{publicKey:l,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=f1,$.sign.seedLength=C1,$.sign.signatureLength=Y1,$.hash=function(g){G$(g);var l=new Uint8Array(X8);return A8(l,g,g.length),l},$.hash.hashLength=X8,$.verify=function(g,l){if(G$(g,l),g.length===0||l.length===0)return!1;if(g.length!==l.length)return!1;return j(g,0,l,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var l=65536;$.setPRNG(function(h,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)g.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)h[Y0]=W0[Y0];x$(W0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,r){var Y0,W0=g.randomBytes(r);for(Y0=0;Y0<r;Y0++)h[Y0]=W0[Y0];x$(W0)})}()})(typeof oy<"u"&&z0Z?z0Z:globalThis.nacl=globalThis.nacl||{});mV=typeof oy<"u"&&z0Z?z0Z:globalThis.nacl,B04={fromSeed:mV.sign.keyPair.fromSeed,sign:mV.sign.detached,verify:mV.sign.detached.verify,randomBytes:mV.randomBytes,scalarBaseMultiply:mV.scalarMult.base,seal:mV.box,open:mV.box.open};E04=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(a8||(a8={}));iV=[120,107,118,49];O04(B04);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(PJ||(PJ={}))});function C11($){try{$?.clear?.()}catch{}}async function Mk$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=Ik$($),W=S11(J.sub),K=V11(new TextEncoder().encode(Z)),w=jk$();try{let U=await Tk$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:PJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(Rk$(U,w))}finally{C11(w),C11(K),C11(W)}}var kk$=O(()=>{qk$()});function M04($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function Sk$(){let $=new y1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=z1();if(!Y.natsTunnelPublicEnabled)return Z.json(b11(),503);if(!Y.natsPublicUrl)return Z.json(b11(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(b11(),503)}let Q=jJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await Mk$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:Ok$(Q),userId:X,allowedConnectionTypes:M04(Y.natsPublicUrl)})}return Z.json(Ek$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var b11=()=>({error:"link session unavailable"});var Vk$=O(()=>{l6();M8();Dk$();kk$()});async function V04($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function C04($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new HN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function b04($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},k04),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Nn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function _04($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<Ck$){await G4(bk$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<Ck$){await G4(bk$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var k04=90000,S04=15000,_k$=()=>{let $=new y1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{V0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=u1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=E0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=mw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ly({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let D=await WJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&pw(e9(U),X,J,H),E=!!B&&B.sandboxHandle===w;if(!F)return hQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),hQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},S04);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await V04(F,w)){await C04({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await b04({stream:D,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await _04({stream:D,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},Ck$=60000,bk$=500;var fk$=O(()=>{l6();lV();zY();CZ();SE0();Bn();Hv();X90();RQ()});function x04($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function v04($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(f04)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var f04=1e4,y04=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xk$=()=>{let $=new y1;return $.use("*",y04),$.get("/",async(Z)=>{let G=z1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await v04(X,Y);return Z.json({apps:x04(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var vk$=O(()=>{l6();M8()});import{z as x1}from"zod";function KK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function p04($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function t04($,Z,G){try{return JSON.parse($)}catch{throw new hk$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function r04($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:t04(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function o04($){let Z=$.map((G)=>{let X=G.function.parameters?KY(G.function.parameters):KY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function a04($){if(!$)return;return{openai:{response_format:$}}}function s04(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function yk$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function gk$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var g04=256,h04,c04,u04,d04,l04,m04,i04,n04,hk$,ck$,uk$;var dk$=O(()=>{x6();l6();lV();h04=x1.object({type:x1.literal("function"),function:x1.object({name:x1.string(),description:x1.string().optional(),parameters:x1.record(x1.string(),x1.unknown()).optional()})}),c04=x1.object({id:x1.string(),type:x1.literal("function"),function:x1.object({name:x1.string(),arguments:x1.string()})}),u04=x1.discriminatedUnion("role",[x1.object({role:x1.literal("system"),content:x1.string(),name:x1.string().optional()}),x1.object({role:x1.literal("user"),content:x1.union([x1.string(),x1.array(x1.union([x1.object({type:x1.literal("text"),text:x1.string()}),x1.object({type:x1.literal("image_url"),image_url:x1.object({url:x1.string(),detail:x1.string().optional()})})]))]),name:x1.string().optional()}),x1.object({role:x1.literal("assistant"),content:x1.string().nullable().optional(),name:x1.string().optional(),tool_calls:x1.array(c04).optional()}),x1.object({role:x1.literal("tool"),content:x1.string(),tool_call_id:x1.string()})]),d04=x1.object({type:x1.literal("text")}),l04=x1.object({type:x1.literal("json_object")}),m04=x1.object({type:x1.literal("json_schema"),json_schema:x1.object({name:x1.string(),description:x1.string().optional(),schema:x1.record(x1.string(),x1.unknown()),strict:x1.boolean().optional()})}),i04=x1.union([d04,l04,m04]),n04=x1.object({model:x1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:x1.array(u04),stream:x1.boolean().optional().default(!1),temperature:x1.number().min(0).max(2).optional(),max_tokens:x1.number().positive().optional(),top_p:x1.number().min(0).max(1).optional(),frequency_penalty:x1.number().min(-2).max(2).optional(),presence_penalty:x1.number().min(-2).max(2).optional(),stop:x1.union([x1.string(),x1.array(x1.string())]).optional(),tools:x1.array(h04).optional(),tool_choice:x1.union([x1.literal("auto"),x1.literal("none"),x1.literal("required"),x1.object({type:x1.literal("function"),function:x1.object({name:x1.string()})})]).optional(),response_format:i04.optional(),user:x1.string().optional()});hk$=class hk$ extends Error{constructor($){super($);this.name="MessageConversionError"}};ck$=new y1;ck$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(KK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(KK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(KK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=n04.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(KK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=p04(Q.model);if(!J)return $.json(KK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(KK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(KK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=r04(Q.messages),H=Q.tools?o04(Q.tools):void 0,N=a04(Q.response_format),B=s04(),E=Math.floor(Date.now()/1000);if(Q.stream)return hQ($,async(D)=>{let L=yk$(U,F,H,Q,N,$.req.raw.signal);try{let z=TQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=g04)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:gk$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=yk$(U,F,H,Q,N,$.req.raw.signal),L=await QN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:gk$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(KK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(KK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(KK(Y.message,"server_error"),500)}});uk$=ck$});var mk$;var lk$=O(()=>{mk$={name:"decocms",version:"4.9.0",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.141.0","@openai/codex-darwin-arm64":"npm:@openai/codex@0.141.0-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.141.0-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.141.0-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.141.0-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.141.0-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.141.0-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function Z14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??$14}}var ik$,$14="https://ph.studio.decocms.com",nk$;var pk$=O(()=>{l6();$_0();kN();iG();M8();us0();lk$();ik$=new y1;ik$.get("/",($)=>{let Z={version:mk$.version,theme:aC1(),...VO().logo&&{logo:VO().logo},...kQ()&&{internalUrl:Oe()},...z1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!z1().firecrawlApiKey,auth:LA$(),posthog:Z14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!kQ()&&z1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});nk$=ik$});function tk$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var rk$,G14,X14,ok$;var ak$=O(()=>{l6();T3();Lv();X_();rk$=new y1,G14=["range","if-none-match","if-modified-since"],X14=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];rk$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Sy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await jn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&A3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return tk$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of G14){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of X14){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),tk$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});ok$=rk$});var It=b((pV)=>{var Y14=pV&&pV.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),Q14=pV&&pV.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))Y14(Z,$,G)};Object.defineProperty(pV,"__esModule",{value:!0});Q14(uX(),pV)});var $S$=b((sk$)=>{Object.defineProperty(sk$,"__esModule",{value:!0});sk$.version=void 0;sk$.version="3.4.0"});var XS$=b((wK)=>{var J14=wK&&wK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(wK,"__esModule",{value:!0});wK.NodeTransport=wK.VERSION=void 0;wK.nodeResolveHost=H14;var m4=It(),W14=u0("net"),_11=u0("tls"),K14=u0("path"),ZS$=u0("fs"),w14=J14(u0("dns")),U14=$S$();wK.VERSION=U14.version;var F14="nats.js";class GS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=F14,this.version=wK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,W14.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,K14.resolve)($),!(0,ZS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,ZS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,_11.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,_11.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof _11.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}wK.NodeTransport=GS$;function H14($){let Z=(0,m4.deferred)();return w14.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var KS$=b((WS$)=>{Object.defineProperty(WS$,"__esModule",{value:!0});WS$.connect=N14;var YS$=XS$(),QS$=It(),JS$=It();function N14($={}){if((0,JS$.hasWsProtocol)($))return Promise.reject(JS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,QS$.setTransportFactory)({factory:()=>{return new YS$.NodeTransport},dnsResolveFn:YS$.nodeResolveHost}),QS$.NatsConnectionImpl.connect($)}});var wS$=b((RU)=>{var O14=RU&&RU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),E14=RU&&RU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))O14(Z,$,G)};Object.defineProperty(RU,"__esModule",{value:!0});RU.connect=void 0;var D14=KS$();Object.defineProperty(RU,"connect",{enumerable:!0,get:function(){return D14.connect}});E14(It(),RU)});function NS$($){let Z=$?.connectFn??P14,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:j14,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let E=vX(z14,L14,B-1,2,0.5);await G4(E)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?US$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=HS$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function P14($){return FS$.connect($)}var US$,FS$,HS$,L14=100,z14=3000,j14=3000;var BS$=O(()=>{CZ();US$=k(Ig(),1),FS$=k(wS$(),1),HS$=k(PB(),1)});function ay($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function f11($,Z){return`${$}.${Z}`}class x11{cache;constructor($){this.cache=ay({ttlMs:$?.ttlMs??A14,maxSize:$?.maxSize??T14})}async get($,Z){return this.cache.get(f11($,Z))??null}async set($,Z,G){this.cache.set(f11($,Z),G)}async invalidate($,Z){this.cache.delete(f11($,Z))}teardown(){this.cache.clear()}}var A14=600000,T14=5000;var OS$=()=>{};function dD0($,Z){return`${$}:${Z}`}function v11($){let Z=ay({ttlMs:$?.ttlMs??I14,maxSize:$?.maxSize??R14}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(ES$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(dD0(K,w))},set(K,w,U){Z.set(dD0(K,w),U)},invalidate(K,w){Z.delete(dD0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(ES$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(dD0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var ES$="studio.ai-provider-keys.invalidate",I14=30000,R14=5000;var DS$=()=>{};class y11{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var LS$=($)=>{let Z;return()=>Z??=$()},g11,h11;var zS$=O(()=>{T5();g11=LS$(()=>g8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),h11=LS$(()=>g8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function b14(){return{name:cw,subjects:[`${Nl0}.>`],storage:AJ.StorageType.File,max_age:k14,max_bytes:V14,max_msgs_per_subject:C14,discard:AJ.DiscardPolicy.Old,retention:AJ.RetentionPolicy.Limits,duplicate_window:S14,num_replicas:1}}class AS${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function jS$($){let Z=PS$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function v14($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,M14().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class c11{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await AJ.jetstreamManager($),G=b14();try{await Z.streams.info(cw),await Z.streams.update(cw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(cw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=v14(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=n8$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Ol0(w,{runId:Z}),H=performance.now()-U;if(g11().record(H),h11().add(1,{"org.id":X??"unknown"}),x14?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?jS$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((E)=>setImmediate(E))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),f14)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Ol0(Z,{runId:$,dedup:G});if(g11().record(performance.now()-Y),h11().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:jS$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=i8$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?AJ.DeliverPolicy.New:AJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=WN($),W;try{W=await(await X.consumers.get(cw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(E){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",E?.message??E),null}let U=V50({messages:async function*(){try{for await(let E of W)yield{subject:E.subject,data:E.data,headers:E.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(M50()).pipeThrough(k50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(E){for(;;){let{done:D,value:L}=await U.read();if(D){B(),E.close();return}let z=L;if(z.kind==="done"){if(Q){B(),E.close();return}continue}E.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(cw,{filter:WN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var AJ,PS$,q14=($)=>{let Z;return()=>Z??=$()},M14,k14=86400000000000,S14=120000000000,V14=4294967296,C14=500000,_14,f14,x14;var TS$=O(()=>{Dl0();C50();El0();T5();zS$();AJ=k(PB(),1),PS$=k(Ig(),1),M14=q14(()=>g8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));_14=process.env.STREAM_ENCODE_TRACE==="1",f14=process.env.DECOPILOT_STREAM_TRACE==="1";x14=_14?new AS$:null});import{z as G8}from"zod";var IS$,RS$,UK,u11,qS$,MS$,kS$,SS$,y14,VS$,CS$,bS$,_S$,fS$,g14,xS$,V1Z,h14,c14=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},vS$=($)=>{return new TextEncoder().encode(JSON.stringify($))},yS$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?h14[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${c14(Y.error)}`);return Y.data};var gS$=O(()=>{IS$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),RS$=G8.array(G8.tuple([G8.string(),G8.string()])),UK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),u11=G8.string().min(1),qS$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:UK,method:G8.string().min(1),url:G8.string().min(1),headers:RS$,replySubject:u11,bodySubject:u11.optional(),abortSubject:u11,deadlineUnixMs:G8.number().int().nonnegative().optional()}),MS$=G8.object({type:G8.literal("request.chunk"),requestId:UK,seq:G8.number().int().nonnegative(),data:IS$}),kS$=G8.object({type:G8.literal("request.end"),requestId:UK,seq:G8.number().int().nonnegative()}),SS$=G8.object({type:G8.literal("request.error"),requestId:UK,code:G8.string().min(1),message:G8.string()}),y14=G8.union([MS$,kS$,SS$]),VS$=G8.object({type:G8.literal("response.ack"),requestId:UK}),CS$=G8.object({type:G8.literal("response.start"),requestId:UK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:RS$}),bS$=G8.object({type:G8.literal("response.chunk"),requestId:UK,seq:G8.number().int().nonnegative(),data:IS$}),_S$=G8.object({type:G8.literal("response.end"),requestId:UK,seq:G8.number().int().nonnegative()}),fS$=G8.object({type:G8.literal("response.error"),requestId:UK,code:G8.string().min(1),message:G8.string()}),g14=G8.union([VS$,CS$,bS$,_S$,fS$]),xS$=G8.object({type:G8.literal("abort"),requestId:UK,reason:G8.string().optional()}),V1Z=G8.union([qS$,y14,g14,xS$]),h14={"request.start":qS$,"request.chunk":MS$,"request.end":kS$,"request.error":SS$,"response.ack":VS$,"response.start":CS$,"response.chunk":bS$,"response.end":_S$,"response.error":fS$,abort:xS$}});var u14=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},d14=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},l14=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},m14=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},hS$=($)=>{return u14(btoa(l14($)))},cS$=($)=>{return m14(atob(d14($)))},i14;var uS$=O(()=>{i14=class i14{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*Z$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class w$4{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var n14=30000,p14=1000,t14=65536,uQ,r14=($)=>{return"connection"in $},o14=($)=>{let Z=r14($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??n14,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??p14,maxChunkBytes:Z.maxChunkBytes??t14,diagnostics:Z.diagnostics}},dS$=($)=>{return Array.from($.entries())},a14=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},s14=($,Z,G)=>{if(a14(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return dS$(G.headers);return dS$(G.headers)},lS$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},e14=()=>{return crypto.randomUUID().replaceAll("-","")},$$4=($)=>{try{$?.unsubscribe()}catch{}},G$4=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},X$4=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},QB=($,Z,G)=>{$.publish(Z,vS$(G))},Y$4=($)=>{return $.type.startsWith("response.")},d11=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},Q$4=($)=>{if($==="idle")return new uQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new uQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},mS$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(Q$4(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=yS$(W.value.data);if(!Y$4(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},J$4=async($)=>{let Z=!1;while(!0){let G=await mS$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new uQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new uQ(G.value.code,G.value.message);throw new uQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},W$4=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){QB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of Z$4(J,$.maxChunkBytes)){if(X)return;QB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:hS$(W)}),G++}}}catch(Q){if(X)return;QB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},K$4=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await mS$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new uQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(cS$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new uQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){QB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},JB=($)=>{let Z=o14($);return G$4(Z.maxChunkBytes),async(G,X)=>{let Y=Nk$(G),Q=new Request(G,X),J=e14(),W=Bk$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,E=!1,D=(P=new uQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,$$4(F),Q.body&&!E)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new uQ("tunnel_aborted",d11(Q.signal));QB(Z.connection,W.abort,{type:"abort",requestId:J,reason:d11(Q.signal)}),K.abort(P),D(P)};if(Q.signal.aborted)throw new uQ("tunnel_aborted",d11(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new uQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);QB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),D(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:s14(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};QB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!E)QB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(E)return;E=!0,(Q.body?W$4({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await J$4({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(X$4(Q.method,P.status))return D(),new Response(null,{status:P.status,statusText:P.statusText,headers:lS$(P.headers)});return new Response(K$4({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:D}),{status:P.status,statusText:P.statusText,headers:lS$(P.headers)})}catch(P){throw D(P instanceof Error?P:Error(String(P))),P}}};var iS$=O(()=>{gS$();uS$();gD0();uQ=class uQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var lD0=O(()=>{iS$()});function nS$($){let Z=$.createFetch??U$4,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return l11;let Q=jJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return l11;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return l11}}}var l11,U$4=($,Z)=>JB({connection:$,firstFrameTimeoutMs:Z});var pS$=O(()=>{lD0();At();l11={online:!1,capabilities:[]}});async function*F$4($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function tS$($){let Z=$.createFetch??((G)=>JB({connection:G,idleTimeoutMs:H$4}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=jJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*F$4(U)}}var H$4=45000;var rS$=O(()=>{lD0();At()});import{z as TJ}from"zod";function oS$($){return JSON.stringify($)}var Q$Z;var aS$=O(()=>{Q$Z=TJ.discriminatedUnion("type",[TJ.object({type:TJ.literal("cancel"),runId:TJ.string()}),TJ.object({type:TJ.literal("cancel_req"),reqId:TJ.string()}),TJ.object({type:TJ.literal("keep_alive")}),TJ.object({type:TJ.literal("shutdown")})])});function sS$($){let Z=$.createFetch??((G)=>JB({connection:G,idleTimeoutMs:N$4}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=jJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function eS$($){let Z=$.createFetch??JB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=jJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:oS$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var N$4=45000;var $V$=O(()=>{lD0();aS$();At()});function mD0($,Z,G,X){if(!X)return!1;return $.emit(Z,P3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var ZV$=O(()=>{$6()});class m11{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as B$4,rm as iD0}from"fs/promises";import{join as nD0}from"path";async function pD0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-O$4),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await tV($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await GV$($,Y,Z);else if(!Y.startsWith(".")){let Q=nD0($,Y),J=await tV(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await GV$(Q,K,Z)}if((await tV(Q)).length===0)await iD0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function GV$($,Z,G){let X=0,Y=nD0($,Z),Q=await tV(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=nD0(Y,W),w=await tV(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=nD0(K,F);await iD0(N,{recursive:!0,force:!0}),X++}}if((await tV(K)).length===0)await iD0(K,{recursive:!0,force:!0})}if((await tV(Y)).length===0)await iD0(Y,{recursive:!0,force:!0});return X}async function tV($){try{return(await B$4($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var O$4=30;var i11=()=>{};import{DBOS as n11,SchedulerMode as E$4}from"@dbos-inc/dbos-sdk";async function L$4(){let $=[lQ(),oV(),OK()],Z=0;for(let G of $)try{Z+=await pD0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function z$4($,Z){await n11.runStep(()=>L$4(),{name:"monitoringRetention"})}function YV$(){if(XV$)return;XV$=!0;let $=n11.registerWorkflow(z$4,{name:"monitoringRetentionWorkflow"});n11.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:D$4,mode:E$4.ExactlyOncePerIntervalWhenActive})}var D$4="23 4 * * *",XV$=!1;var QV$=O(()=>{yX();i11()});function JV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await mH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Ic0($.db,Z,X.role);return Y.boundAuth=Tc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new EE(G,void 0,Y.boundAuth,X.role,"self"),F40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var WV$=O(()=>{DE();tm()});function j$4(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function A$4(){for(let $ of P$4)$()}function KV$($){let Z=[...p11.logs,$];p11={...p11,logs:Z.length>500?Z.slice(-500):Z},A$4()}function t11(){return T$4}var p11,P$4,T$4=!1;var r11=O(()=>{p11=j$4(),P$4=new Set});import{EventEmitter as I$4}from"events";var o11;var wV$=O(()=>{r11();o11=new I$4;o11.on("request",($)=>{KV$($)})});function UV$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=sy(H.params.name),B=H.params.arguments||{},E=Object.keys(B).map((L)=>sy(L)),D=E.length>0?E.slice(0,3).join(",")+(E.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${D})${s4.reset}`}else if(H.method)Q=`${s4.dim}${sy(H.method)}${s4.reset}`}}catch{}}let W=sy(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${sy(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=q$4(X),w=J?"\u25C0":"\u2190";if(!t11())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=R$4(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!t11())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);o11.emit("request",{method:X,path:sy(Y),status:F,duration:U,timestamp:new Date})}}}var s4,R$4=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},q$4=($)=>{return s4[$]||s4.reset},sy=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var FV$=O(()=>{r11();wV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as OV$}from"crypto";import{mkdir as M$4,readdir as k$4,rm as HV$,stat as EV$}from"fs/promises";import{join as s11,relative as S$4}from"path";import{z as P$}from"zod";function LV$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return s11(V$4,Z)}function zV$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function a11($,Z){let G=LV$($),X=zV$(Z);return s11(G,X)}function C$4($,Z,G,X){let Y=z1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return OV$("sha256",Y).update(Q).digest("hex")}function BV$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=C$4(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${zV$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function jV$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${OV$("md5","etag").update(X).digest("hex")}"`}async function PV$($,Z,G,X,Y){try{let Q=await k$4($,{withFileTypes:!0});for(let J of Q){let W=s11($,J.name),w=S$4(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await PV$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await EV$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:jV$(W,U.mtime,U.size)})}catch{}}}}catch{}}function AV$($,Z){let X=E0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=LV$(X);await M$4(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await PV$(U,U,J,K,F),F.objects.sort((D,L)=>D.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((D)=>D.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,E=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:E,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=a11(X,Q.key),W=await EV$(J);return{contentType:te0(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:jV$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??NV$;return{url:BV$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??NV$;return{url:BV$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=a11(X,Q.key);try{return await HV$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=a11(X,K);try{await HV$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function e11($,Z,G){let X=AV$(Z,G),Y=new Xw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:B5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new MY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),uW(Y,Q,$,"mcp:dev-assets")}async function TV$($,Z,G,X){let Q=AV$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var V$4="./data/assets",NV$=3600,DV$,IV$;var RV$=O(()=>{M8();In();l6();Gu();Av();BG();YD0();DV$=new y1;DV$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return e11($.req.raw,Z,X)});IV$=DV$});var qV$={};e8(qV$,{mountDevRoutes:()=>b$4});function b$4($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return e11(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await TV$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",IV$);let G=new y1;G.use("*",gQ({mountPath:"/api/dev-assets"})),G.route("/",XD0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var MV$=O(()=>{l6();ue0();YD0();RV$()});var kV$=O(()=>{pc0();tc0();sE()});var tD0=O(()=>{kV$()});var VV$={};e8(VV$,{streamAgent:()=>SV$,createDecopilotClient:()=>f$4});async function _$4($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (x6(),wl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function SV$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (x6(),wl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let E=JSON.parse(N);if(E?.error)B=E.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await _$4(F.body);return Q({stream:H})}function f$4($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return SV$(Y,X,W,Q,J)}}}import{z as xX}from"zod";function CV$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=x$4.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:xX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:xX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var x$4,G8Z,v$4=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},Z$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},rD0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},y$4=($,Z,G)=>{let X=rD0($,Z,G);return new Proxy(qx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},g$4=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => VV$);return J(X,Z.token,$,Y,Q)}}},$$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>$$1(G,Z));if(typeof $==="object"){if(v$4($))return g$4($,Z);if(Z$1($))return y$4($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=$$1(Y,Z);return G}return $},bV$=($)=>{return $$1($.state,$)};var ey=O(()=>{tD0();x$4=new Map;G8Z=xX.object({id:xX.string(),title:xX.string(),capabilities:xX.object({vision:xX.boolean().optional(),text:xX.boolean().optional(),tools:xX.boolean().optional(),reasoning:xX.boolean().optional()}).passthrough().optional(),provider:xX.string().optional().nullable(),limits:xX.object({contextWindow:xX.number().optional(),maxOutputTokens:xX.number().optional()}).passthrough().optional()})});var h$4,_V$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},c$4=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=_V$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},fV$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=_V$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??h$4;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},xV$=($,Z,G)=>{let X=new Headers($.headers);return c$4(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var vV$=O(()=>{h$4=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function yV$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function u$4($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function gV$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function hV$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function cV$($){return{handleProtectedResourceMetadata:(w)=>{let U=FK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=FK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=FK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),E=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let D=FK(new URL(`${U.origin}/oauth/callback`)),L=D.toString(),j=gV$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:E??void 0,oauthCallbackUri:L});D.searchParams.set("state",j);let P=$.authorizationUrl(D.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=FK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?hV$(H):null;if(N){let E=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let D=FK(new URL(B.redirectUri));if(D.searchParams.set("error",N),D.searchParams.set("error_description",E),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}return Response.json({error:N,error_description:E},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let E=B.oauthCallbackUri??FK(new URL(`${U.origin}/oauth/callback`)).toString(),D={code:F,redirect_uri:E},L=await $.exchangeCode(D),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=gV$(z),P=FK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(E){console.error("OAuth callback error:",E);let D=FK(new URL(B.redirectUri));if(D.searchParams.set("error","server_error"),D.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:E}=F;if(B==="refresh_token"){if(typeof E!=="string"||!E)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(E)}catch(P){if(P instanceof G$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let D=hV$(H);if(!D||!D.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(D.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(D.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==D.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:D.accessToken,token_type:D.tokenType};if(D.refreshToken)L.refresh_token=D.refreshToken;if(D.expiresIn!==void 0)L.expires_in=D.expiresIn;if(D.scope)L.scope=D.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let E of U.redirect_uris)if(!u$4(E))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${E}`},{status:400});let F=yV$(32),H=U.token_endpoint_auth_method!=="none"?yV$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${FK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var G$1,FK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var X$1=O(()=>{G$1=class G$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as d$4}from"async_hooks";var uV$,Rt;var Y$1=O(()=>{uV$=new d$4,Rt={getStore:()=>{return uV$.getStore()},run:($,Z,...G)=>uV$.run($,Z,...G)}});var lV$="SELF",aD0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},mV$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},dV$="::",iV$=($)=>{let Z=$.indexOf(dV$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+dV$.length);return[G,X]},l$4=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},nV$=($)=>{if(aD0($))return[];return Object.keys($)},m$4=($,Z)=>{if(aD0($))return $.events;let G=$[Z];if(!G)return[];if(mV$(G))return G.events;return Object.keys(G)},oD0=($,Z,G)=>{if($===lV$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!Z$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},i$4=($,Z,G)=>{let X=Z;if(aD0($)){let Q=[];for(let J of $.events){let W=iV$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=oD0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of nV$($)){let J=oD0(Q,X,G);if(!J)continue;let W=m$4($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},n$4=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},p$4=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},t$4=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},r$4=async($,Z,G,X,Y)=>{let Q=X;if(aD0($)){let U=new Set;for(let H of $.events){let N=iV$(H);if(!N)continue;let[B,E]=N,D=oD0(B,Q,Y);if(!D)continue;U.add(`${D}:${E}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of nV$($)){let F=oD0(U,Q,Y);if(F)J.set(F,U)}let W=n$4(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(mV$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(D){let L={};for(let z of F)L[z.id]={success:!1,error:D instanceof Error?D.message:String(D)};return{results:L}}})());continue}let B=N,E=p$4(F);for(let[D,L]of E){let z=B[D];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return t$4(w)},pV$;var Q$1=O(()=>{ey();pV$={subscriptions:i$4,execute:r$4,parseCron:l$4}});function o$4($,Z){let G=rD0("self",{meshUrl:$,token:Z});return qx.forConnection(G)}function a$4($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function tV$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=o$4($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(a$4(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var J$1=O(()=>{ey();tD0()});import{z as JZ}from"zod";function qU($){return{...$,execute:(Z)=>{let G=qt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var qt=($)=>{let Z=Rt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},rV$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},s$4=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?CV$(JZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[qU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:JZ.object({state:Z??JZ.unknown(),scopes:JZ.array(JZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:JZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:JZ.object({baseUrl:JZ.string(),org:JZ.string(),subjectConnectionId:JZ.string(),token:JZ.string()}).optional()}),outputSchema:JZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=rV$(J);await Y(J.runtimeContext.env,{createAgent:tV$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[qU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:v40,outputSchema:y40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=rV$(J);return pV$.execute($.handlers,J.context.events,W,K,w)}})]:[],qU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:JZ.object({}),outputSchema:JZ.object({stateSchema:JZ.unknown(),scopes:JZ.array(JZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},oV$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(E)=>{if(J(E))return[E];Q();let D=await E(B);if(Array.isArray(D))return D;return[D]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...s$4({...$}));let E;if(typeof $.prompts==="function")Q(),E=await $.prompts(N);else E=await W($.prompts,N);let D;if(typeof $.resources==="function")Q(),D=await $.resources(N);else D=await W($.resources,N);let L={tools:B,prompts:E,resources:D};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let E of B.tools)N.registerTool(E.id,{_meta:E._meta,title:E.title,description:E.description,annotations:E.annotations,inputSchema:E.inputSchema&&"shape"in E.inputSchema?E.inputSchema:JZ.object({}),outputSchema:E.outputSchema&&typeof E.outputSchema==="object"&&"shape"in E.outputSchema?E.outputSchema:void 0},async(D)=>{let L=qt(),z=await E.execute({context:D,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let E of B.prompts)N.registerPrompt(E.name,{title:E.title,description:E.description,argsSchema:E.argsSchema?E.argsSchema:JZ.object({}).shape},async(D)=>{let L=qt();return await E.execute({args:D,runtimeContext:L},L)});for(let E of B.resources)N.resource(E.name,E.uri,{description:E.description,mimeType:E.mimeType},async(D)=>{let L=qt(),z=await E.read({uri:D,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...E}=$.serverInfo??{},D=new Xw({...E,name:E.name??"@deco/mcp-api",version:E.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:B5,...B&&{instructions:B}}),L=await K(N);w(D,L);let z="tools/list",j=D.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:D,...L}};return{fetch:async(N,B)=>{let{server:E}=await U(B),D=new MY;await E.connect(D);let L=()=>{try{D.close?.()}catch{}try{E.close?.()}catch{}};try{let z=await D.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let E=Rt.getStore();if(!E)throw Error("Missing state, did you forget to call State.bind?");let D=E?.env,{tools:L}=await K(D),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=qt();return j({context:B,runtimeContext:P},P)}}};var sD0=O(()=>{sc0();BG();Gu();Av();ey();Q$1();Y$1();J$1();Q$1();J$1()});import{decodeJwt as aV$}from"jose";var e$4=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},sV$=($)=>()=>{return{...$??{}}},$84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=aV$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:sV$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=aV$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=sV$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=bV$(W),e$4({env:Q,server:Z,url:X}),Q},Z84,eV$=($)=>{let Z=oV$($),G=$.cors??Z84,X=$.oauth,Y=X?cV$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return fV$(J,G??{});let w=$84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await Rt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return xV$(U,J,G??{});return U}}};var $C$=O(()=>{ey();vV$();X$1();X$1();Y$1();sD0();sD0();ey();tD0();Z84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as W$1}from"zod";function Y84($,Z){let G=qU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:Ny,outputSchema:By,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=ZC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return ZC$.set(w,F),F}}),X=qU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:$K,outputSchema:SV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=qU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:$K,outputSchema:W$1.object({versions:W$1.array(SV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=qU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:UE0,outputSchema:FE0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=qU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:W$1.object({}),outputSchema:Oy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function GC$($){let Z=$.db,G=new Mf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=Y84(G,Q.id),W=eV$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,E)=>{F.searchParams.set(E,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var G84=3600000,X84=500,ZC$;var XC$=O(()=>{$C$();sD0();av0();e5();ZC$=ay({ttlMs:G84,maxSize:X84,updateRecencyOnGet:!0})});import{sql as Q84}from"kysely";import{randomUUID as YC$}from"crypto";import{z as J84}from"zod";async function K84($){let Z=new Date().toISOString(),G=YC$(),X=H4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:YC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await Q84`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function w84($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function U84($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",VV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):JC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?QC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:QC$,rateLimitWindow:W84,rateLimitMax:JC$}}async function F84($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function H84($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function WC$($){let{db:Z,db:G}=$,X=new kf(G),Y=new Sf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await w84(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await U84(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await F84(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Pz$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:J84.treeifyError(U.error)},400);let F=await H84(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await K84({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var QC$=!0,W84="hour",JC$=100;var KC$=O(()=>{v4();$6();Ey();sv0();ev0();e5()});var wC$={};e8(wC$,{createPublishRequestHandler:()=>WC$,createPublicMCPHandler:()=>GC$});var UC$=O(()=>{XC$();KC$()});var Dn0={};e8(Dn0,{watchHandler:()=>OC$,getProxyDispatch:()=>E84,createApp:()=>R84});import{readFileSync as N84}from"fs";import{PrometheusSerializer as B84}from"@opentelemetry/exporter-prometheus";import{DBOS as $g}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as j84,oAuthProtectedResourceMetadata as P84}from"better-auth/plugins";async function O84($){let Z=$.connect(),G;try{G=await Promise.race([Z,HC$(FC$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),HC$(FC$)]),G.release(),!0}catch{return G.release(!0),!1}}function HC$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function E84(){if(!K$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return K$1}async function D84($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${GC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function L84($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function R84($={}){let Z=$.database??h6(),G=!1;YZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new x11,J,W,K,w,U,F=null;if($.disableNats)J=v11(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Rn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let m=d.getReader();try{while(!0){let{done:S0}=await m.read();if(S0)break}}catch{}finally{m.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=NS$();let d=z1().natsCredsPath,m;if(d)try{m=N84(d,"utf8")}catch(L1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,L1)}F.init(z1().natsUrls,m?{creds:m}:void 0);let S0=Qy0()?new of0({getJetStream:()=>F.getJetStream()}):null;S0?.init().catch(()=>{}),X=S0;let v0=new Up0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=v11({getConnection:()=>F.getConnection()}),W=new y11({getConnection:()=>F.getConnection()}),K=new c11({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=nS$({getConnection:()=>F.getConnection()}),U=sS$({getConnection:()=>F.getConnection()});let N1=eS$({getConnection:()=>F.getConnection()}),i0=W;W={start:(L1)=>i0.start(L1),broadcast:(L1)=>i0.broadcast(L1),publishControlFrame:(L1,R$)=>{N1.publishControlFrame(L1,R$).catch((N6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",N6)})},stop:()=>i0.stop()},sP$(F),F.onReady(()=>{S0?.init().catch((L1)=>{console.error("[McpListCache] Deferred init failed:",L1)}),v0.init().catch((L1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",L1)}),J.start(),nl1(()=>F.getConnection()),K.init().catch((L1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",L1)})})}if(Zg)await Zg();af0(X),Fp0(Y);let N={storage:new xf(Z.db),sseHub:YZ},B=new kl0(N),E=new Pl(Z.db),D=new m11(E);D.start(),W.start((d)=>{l50(d),B.execute({type:"CANCEL",taskId:d}).catch((m)=>{console.error("[Decopilot] CancelBroadcast execute failed:",m)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Zg=async()=>{await B.stopAll(),B.dispose(),D.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),pl1(),Y.teardown(),af0(null),Fp0(null)};let L=new y1;if(L.use("*",tb0({enabled:(d)=>J_(d,"debug")==="1"})),L.use("*",EL0),L.use("/*",uC1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,m)=>{if(await m(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!z1().noTui)L.use("*",UV$());L.use("*",async(d,m)=>{if(await m(),Qg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(e7.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(e7.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(e7.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let m={};if(m.postgres={status:await O84(Z.pool)?"up":"down"},F)m.nats=F.isConnected()?{status:"up"}:{status:"down"};else m.nats={status:"down"};let S0=m.postgres.status==="up",v0=S0?200:503;return d.json({status:S0?"ready":"not_ready",services:m},v0)}),L.get(e7.METRICS,async(d)=>{try{let m=await jL0.collect(),S0=z84.serialize(m.resourceMetrics);return d.text(S0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(m){return console.error("Failed to collect metrics:",m),d.text("# Error collecting metrics",500)}}),L.get(`${e7.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let m=d.req.param("queueName");if(!A84.has(m))return d.json({error:`Unknown queue: ${m}`},404);let S0=await $g.listQueuedWorkflows({queueName:m,status:"ENQUEUED"});return d.json({queue_length:S0.length})}),L.route("/api/config",nk$),L.route("/api/auth/custom",zA$),L.all("/api/auth/*",async(d)=>{return await e6.handler(d.req.raw)});let z=To1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",_V),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",_V),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",rm),L.route("/",Mo1()),L.use("/oauth-proxy/:connectionId/*",_V),L.all("/oauth-proxy/:connectionId/*",NC$);let j=async(d)=>{let S0=await T84()(d.req.raw),v0=await S0.json();return Response.json(v0,S0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",_V),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let S0=await I84()(d.req.raw),v0=await S0.json();return Response.json(v0,S0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=tP$({ttlMs:120000}),M=await wo1({db:Z.db,auth:e6,encryption:{key:z1().encryptionKey},observability:{tracer:kU,meter:g8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,m)=>W.publishControlFrame(d,m)});mH.set(M);let S=new cO(z1().encryptionKey);rI1({db:Z.db,baseUrl:hJ()});let q=T80(Z.db),V=new Nl(Z.db),p=JV$({db:Z.db});Qp0({storage:q,meshContextFactory:p}),yl0({meshContextFactory:p,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:YZ},prepareLinkWorkFn:UR$,workPublisher:U}),bl0({dispatchRunFn:KR$,meshContextFactory:p,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:YZ}});let f=new xf(Z.db);X6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await BC$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let m=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return m?{orgId:m.organization_id,createdBy:m.created_by,version:m.message_storage_version??1,status:m.status,runFenceToken:m.run_fence_token,title:m.title??null}:null},completeRunIfNotCompleted:async(d,m)=>{let S0=await f.completeRunIfNotCompleted(d,m);return mD0(YZ,m,d,S0),S0},markRunRequiresAction:async(d,m)=>{let S0=await f.requiresActionIfInProgress(d,m);return mD0(YZ,m,d,S0),S0},markRunFailed:async(d,m,S0,v0)=>{let N1=await f.markRunFailed(d,m,S0,v0);return mD0(YZ,m,d,N1),N1},persistTitle:(d,m,S0)=>f.update(d,m,{title:S0}),onTitleUpdated:async({runId:d,orgId:m,title:S0})=>{let v0=await f.get(d,m).catch(()=>null);YZ.emit(m,P3(d,v0?.status??"in_progress",{title:S0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:m})=>{await f.bumpProgress(d,m)},recordCompleted:async({runId:d,orgId:m,distinctId:S0,usage:v0})=>{r1.capture({distinctId:S0,event:"chat_message_completed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:m,distinctId:S0,reason:v0,kind:N1})=>{r1.capture({distinctId:S0,event:"chat_message_failed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),hQ$({meshContextFactory:p,systemDatabaseUrl:Ff1(z1().databaseUrl,z1().databasePgSsl),streamBuffer:K}),YV$(),oI1();let v=async(d,m,S0)=>{let v0=await q.findById(d,m);if(!v0)throw Error("Automation not found");return Kp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new Cy(q,({automation:d,trigger:m,contextMessages:S0,idempotencyKey:v0})=>Tn({automationId:d.id,organizationId:d.organization_id,triggerId:m.id,contextMessages:S0},{idempotencyKey:v0})),a=[lQ(),oV(),OK()];for(let d of a)pD0(d).then(()=>{}).catch((m)=>console.error("[monitoring] Retention cleanup failed:",m));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,m)=>{if(BL0(d.req.path))return m();let S0={measure:async(N1,i0)=>{$Q(d,N1);try{return await i0()}finally{eX(d,N1)}}},v0=await mH.create(d.req.raw,{timings:S0});v0.automationRunner=v,d.set("meshContext",v0);try{await m()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),new Promise((L1)=>setTimeout(L1,30000))]).catch((L1)=>console.error("[mesh] revalidation cleanup error:",L1))}}),L.use("/api/:org/decopilot/*",fV),L.use("/api/:org/v1/*",fV),L.use("/api/:org/files/*",fV),L.use("*",async(d,m)=>{let S0=d.req.path;if(S0.startsWith("/api/org-sso/")||S0.startsWith("/api/auth/")||S0.startsWith("/api/tools/management")||S0.startsWith("/oauth-proxy/"))return m();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return m();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return m();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return m()});let O0=new y1;O0.use("*",gQ({mountPath:"/api/org-sso"})),O0.route("/",IE0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:ob0,grouped:SO()})}),L.use("/mcp/*",async(d,m)=>{$Q(d,"mcp");try{return await m()}finally{eX(d,"mcp")}});let K0=async(d,m)=>{let S0=d.var.meshContext;if(!S0.auth.user?.id&&!S0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await m()};if(L.use("/mcp/:connectionId?",K0),L.use("/mcp/gateway/:virtualMcpId?",K0),L.use("/mcp/virtual-mcp/:virtualMcpId?",K0),L.use("/mcp/self",K0),A3()){let{mountDevRoutes:d}=(MV$(),YL0(qV$));d(L,K0)}let J0=new y1;J0.use("*",gQ({mountPath:"/mcp"})),J0.route("/",FN0()),L.route("/mcp",J0);let s=new y1;s.use("*",gQ({mountPath:"/mcp/self"})),s.route("/",_D0()),L.route("/mcp/self",s);let A0=new y1;A0.use("*",gQ({mountPath:"/mcp"})),A0.route("/",BN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,m)=>{$Q(d,"llm_models");try{return await m()}finally{eX(d,"llm_models")}});let U0=he0({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)K$1=tS$({getConnection:()=>F?.getConnection()??null});L.route("/api",Sk$()),L.get("/api/links/me",async(d)=>{try{let m=d.req.header("authorization")??"",S0=/^Bearer\s+(.+)$/i.exec(m),v0=null;if(S0){let i0=(S0[1]??"").trim();v0=await Hk$(i0,e6.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(m){return console.error("[links/me] presence probe failed; reporting offline:",m instanceof Error?m.message:String(m)),d.json(null)}}),L.use("/api/:org/files/*",fV),L.route("/api",ok$);let f0=new y1;f0.use("*",gQ({mountPath:"/api"})),f0.route("/",fD0()),L.route("/api",f0),L.route("/api",uk$);let m0=new y1;m0.use("*",gQ({mountPath:"/api"})),m0.route("/",xD0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Ol(Z.db),n0=new y1;n0.use("*",gQ({mountPath:"/api"})),n0.route("/",$D0()),L.route("/api",n0),L.route("/api/deco-sites",bR$()),L.route("/api/deco-apps",xk$());let N0=new y1;N0.use("*",gQ({mountPath:"/api/deco-sites"})),N0.route("/",GD0()),L.route("/api/deco-sites",N0);let b0=new y1;b0.use("*",gQ({mountPath:"/api/vm-events"})),b0.route("/",_k$()),L.route("/api/vm-events",b0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (UC$(),wC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},G0=I0(Q0),k0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",_V),L.post("/org/:orgRef/registry/publish-request",G0),L.use("/org/:orgSlug/registry/*",_V),L.all("/org/:orgSlug/registry/*",k0),L.post("/api/:org/registry/publish-request",G0),L.all("/api/:org/registry/*",k0);let i=Uk$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:YZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:A3(),mcpAuth:K0,oauthProxyHandler:NC$,watchHandler:OC$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",i),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(zR$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([YZ.stop(),Zg?Promise.resolve(Zg()).finally(()=>{Zg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await xY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await Nf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await $g.registerQueue(fY,{partitionQueue:!0,concurrency:Gp0,minPollingIntervalMs:Xp0}),await $g.registerQueue(dQ,{partitionQueue:!0,concurrency:vl0}),await $g.registerQueue(BK,{partitionQueue:!0,concurrency:Cl0}),await $g.registerQueue(MU,{partitionQueue:!0,concurrency:gQ$}),await le0(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>$g.deleteQueue(d))),await Yp0(Z.pool),vy1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),aI1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var BC$,FC$=5000,K$1=null,Zg=null,NC$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await mH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await zx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await om(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=z1().baseUrl??B.origin;try{let p=new URL(q),f=new URL(V);if(!(p.origin===f.origin||p.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(XC1(J.connection_url))try{let V=await D84(Y,J.organization_id),p=L84(V);for(let[f,v]of p)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let E={Accept:$.req.header("Accept")||"application/json"},D=$.req.header("Content-Type");if(D)E["Content-Type"]=D;let L=$.req.header("Authorization");if(L)E.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&D?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),p=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof p==="string"&&p)P=p;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&D?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),p={};try{p=V?JSON.parse(V):{}}catch{z=V}let f=typeof p==="object"&&p!==null&&!Array.isArray(p);if(z===void 0&&!f)z=V;if(z===void 0){let v=p,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),E["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:E,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let p=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await jx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:p,clientId:j,clientSecret:P,tokenEndpoint:f};await new S5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},OC$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return hQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!YZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{YZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),YZ.remove(X,J),U()})})})},z84,A84,T84=()=>P84(e6),I84=()=>j84(e6);var Ln0=O(()=>{M8();sI1();iG();X_();$6();l6();D10();dC1();rb0();xw();tm();fs0();I3();T5();v4();us0();is0();DR$();ce0();p3();H40();ue0();jR$();de0();Fk$();Vk$();fk$();pe0();vk$();HN0();am();dk$();ON0();O11();pk$();ak$();B11();N11();yt();G$0();BS$();GY();u80();Dl();Np0();OS$();DS$();TS$();pS$();rS$();$V$();Sl0();ZV$();Ly0();Ty0();QV$();N$0();i11();yX();me0();ci();ql0();N$0();xe0();dv0();lv0();WV$();W_();FV$();lV();fs0();zv();m50();BC$=k(PB(),1);z84=new B84,A84=new Set([fY,dQ,BK,MU])});var zC$={};e8(zC$,{resolveClientDir:()=>b84,resolveAssetPathWithTraversalCheck:()=>LC$,isPathWithinDirectory:()=>DC$,createAssetHandler:()=>_84});import{resolve as Mt,dirname as q84,join as M84,extname as k84,basename as S84,sep as EC$}from"path";function V84($,Z){if($===Z||S84($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${EC$}assets${EC$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function DC$($,Z){let G=Mt(Z),X=Mt($);return X===G||X.startsWith(G+"/")}function LC$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Mt(Z,G);if(!DC$(X,Z))return null;return X}function b84($,Z="../client"){let G=new URL($),X=q84(G.pathname);return Mt(X,Z)}function _84($={}){let{env:Z="production",clientDir:G=C84,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=LC$({requestPath:W,clientDir:G});if(!K)return null;let w=M84(K,"index.html"),U=Mt(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(k84(K))?[w,U]:[];for(let B of[K,...N])try{let E=Bun.file(B);if(await E.exists())return new Response(E,{headers:V84(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var C84="./dist/client";var jC$=()=>{};var PC$={};e8(PC$,{tryUpgradePreviewWs:()=>c84,tryHandlePreviewHttp:()=>h84,previewWebSocketHandler:()=>u84,parsePreviewBaseDomain:()=>g84,isPreviewWsData:()=>eD0,extractHandleFromHost:()=>w$1});function v84($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function y84(){return new Response(x84,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function g84($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function w$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function h84($,Z){let G=w$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return St(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(pS)&&v84($))return y84();return Y.headers.delete(pS),Y}function St($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function eD0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function c84($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=w$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return St(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return St(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return St(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return St(426,"upgrade failed");return}function kt($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var f84=256,x84='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',u84;var AC$=O(()=>{Nn0();u84={open($){let Z=$.data;if(!eD0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),kt($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{kt($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{kt($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!eD0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=f84){kt($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!eD0(Z))return;kt($,Z,1000,"")}}});var qC$={};e8(qC$,{printBanner:()=>l84,bannerLines:()=>RC$,BANNER_LINES:()=>TC$,BANNER_GRADIENT:()=>IC$});function d84($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function RC$($){let Z=TC$.map((G,X)=>{let[Y,Q,J]=d84(IC$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function l84($){console.log("");for(let Z of RC$($))console.log(Z);console.log("")}var TC$,IC$;var MC$=O(()=>{TC$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],IC$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var SC$={};e8(SC$,{bootstrapDevLinkSession:()=>s84});import{existsSync as m84}from"fs";import{chmod as i84,mkdir as n84,rename as p84,writeFile as t84}from"fs/promises";import{dirname as r84,join as kC$}from"path";function o84($){return kC$($,"dev-link")}function a84($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return kC$(o84($),"session.json")}async function s84($,Z){let G=a84($),X=h6().db,Y=kQ()?await zn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(m84(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await e6.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await e6.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await n84(r84(G),{recursive:!0});let W=`${G}.tmp`;return await t84(W,JSON.stringify(J,null,2),{mode:384}),await i84(W,384),await p84(W,G),{path:G,userSub:Y.id}}var VC$=O(()=>{I3();xw();kN()});CZ();var L$1="4";function z$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:L$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}M8();T5();function lb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function IL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function $81(){let $=lb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:IL0($,"--cpu-prof-dir")??process.cwd(),name:IL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(IL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}ML0();var ct;function w81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=KB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),ct=setInterval(()=>void Z().catch(()=>{}),$),ct.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(ct)clearInterval(ct)}}import*as nb$ from"bun:jsc";var{startSamplingProfiler:pb$,samplingProfilerStackTraces:tb$}=nb$;function U81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{pb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=tb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function F81(){$81();let $=[w81(),K81(),U81()];return()=>{for(let Z of $)Z()}}import{existsSync as J64}from"fs";var _Y=z1();s$1();var{DBOS:Vt,DBOSClient:e84}=await import("@dbos-inc/dbos-sdk");function xC$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var $64=[fY,dQ,BK,MU],Z64=_Y.dispatchRole==="worker"?$64:_Y.dispatchRole==="api"?[]:void 0;Vt.setConfig(z$1({systemDatabaseUrl:xC$(_Y.databaseUrl,_Y.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:_Y.podName,listenQueues:Z64}));var{createApp:G64}=await Promise.resolve().then(() => (Ln0(),Dn0)),{isServerPath:X64}=await Promise.resolve().then(() => (yt(),x$1)),{createAssetHandler:Y64,resolveClientDir:vC$}=await Promise.resolve().then(() => (jC$(),zC$)),Q64=_Y.port,CC$=vC$(import.meta.url,"../client"),W64=J64(CC$)?CC$:vC$(import.meta.url,"../dist/client"),K64=Y64({clientDir:W64,isServerPath:X64}),w64={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function U64($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(w64))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:F64,tryHandlePreviewHttp:H64,tryUpgradePreviewWs:N64,previewWebSocketHandler:U$1,isPreviewWsData:F$1}=await Promise.resolve().then(() => (AC$(),PC$)),{getOrInitSharedRunner:B64}=await Promise.resolve().then(() => (Bn(),gY$)),yC$=F64(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),bC$={baseDomain:yC$??"",getRunner:B64},$L0=await G64(),H$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),_C$=process.env.DBOS_CONDUCTOR_URL?.trim();await Vt.launch({...H$1?{conductorKey:H$1}:{},...H$1&&_C$?{conductorURL:_C$}:{}});console.log(`[dbos] application version: ${Vt.applicationVersion}`);await $L0.initDbos();if(!_Y.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (MC$(),qC$));console.log("");for(let Z of $())console.log(Z)}var O64=Bun.serve({idleTimeout:0,port:Q64,hostname:"0.0.0.0",fetch:async($,Z)=>{if(yC$){let X=await N64($,Z,bC$);if(X===void 0)return;if(X)return X;let Y=await H64($,bC$);if(Y)return Y}let G=await K64($);if(G)return U64(G);return $L0.fetch($,{server:Z})},websocket:{open($){if(F$1($.data))U$1.open($)},message($,Z){if(F$1($.data))U$1.message($,Z)},close($){if(F$1($.data))U$1.close($)}},development:!1}),E64=F81();if(_Y.localMode)Promise.resolve().then(() => (kN(),iH0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (VC$(),SC$)),Y=_Y.baseUrl??`http://localhost:${_Y.port}`,Q=await X(_Y.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (kN(),iH0));Z()}catch{}});var fC$=!1;async function D64($){let Z;try{Z=await e84.create({systemDatabaseUrl:xC$(_Y.databaseUrl,_Y.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:dQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:dQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function ZL0($){if(fC$)return;fC$=!0,console.log(`
+`;return new TextEncoder().encode(X)}var q11,mV,B04,zk$,R11="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",E04,c$,h$,a8,Lk$=24,iV,PJ;var qk$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(q11||(q11={}));(function($){var Z=function(g,l){this.hi=g|0,this.lo=l|0},G=function(g){var l,h=new Float64Array(16);if(g)for(l=0;l<g.length;l++)h[l]=g[l];return h},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),w=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),U=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(g,l){return g<<l|g>>>32-l}function E(g,l){var h=g[l+3]&255;return h=h<<8|g[l+2]&255,h=h<<8|g[l+1]&255,h<<8|g[l+0]&255}function D(g,l){var h=g[l]<<24|g[l+1]<<16|g[l+2]<<8|g[l+3],r=g[l+4]<<24|g[l+5]<<16|g[l+6]<<8|g[l+7];return new Z(h,r)}function L(g,l,h){var r;for(r=0;r<4;r++)g[l+r]=h&255,h>>>=8}function z(g,l,h){g[l]=h.hi>>24&255,g[l+1]=h.hi>>16&255,g[l+2]=h.hi>>8&255,g[l+3]=h.hi&255,g[l+4]=h.lo>>24&255,g[l+5]=h.lo>>16&255,g[l+6]=h.lo>>8&255,g[l+7]=h.lo&255}function j(g,l,h,r,Y0){var W0,_0=0;for(W0=0;W0<Y0;W0++)_0|=g[l+W0]^h[r+W0];return(1&_0-1>>>8)-1}function P(g,l,h,r){return j(g,l,h,r,16)}function A(g,l,h,r){return j(g,l,h,r,32)}function M(g,l,h,r,Y0){var W0=new Uint32Array(16),_0=new Uint32Array(16),l0=new Uint32Array(16),P0=new Uint32Array(4),M0,j0,g0;for(M0=0;M0<4;M0++)_0[5*M0]=E(r,4*M0),_0[1+M0]=E(h,4*M0),_0[6+M0]=E(l,4*M0),_0[11+M0]=E(h,16+4*M0);for(M0=0;M0<16;M0++)l0[M0]=_0[M0];for(M0=0;M0<20;M0++){for(j0=0;j0<4;j0++){for(g0=0;g0<4;g0++)P0[g0]=_0[(5*j0+4*g0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(g0=0;g0<4;g0++)W0[4*j0+(j0+g0)%4]=P0[g0]}for(g0=0;g0<16;g0++)_0[g0]=W0[g0]}if(Y0){for(M0=0;M0<16;M0++)_0[M0]=_0[M0]+l0[M0]|0;for(M0=0;M0<4;M0++)_0[5*M0]=_0[5*M0]-E(r,4*M0)|0,_0[6+M0]=_0[6+M0]-E(l,4*M0)|0;for(M0=0;M0<4;M0++)L(g,4*M0,_0[5*M0]),L(g,16+4*M0,_0[6+M0])}else for(M0=0;M0<16;M0++)L(g,4*M0,_0[M0]+l0[M0]|0)}function S(g,l,h,r){return M(g,l,h,r,!1),0}function q(g,l,h,r){return M(g,l,h,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function p(g,l,h,r,Y0,W0,_0){var l0=new Uint8Array(16),P0=new Uint8Array(64),M0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)l0[j0]=0;for(j0=0;j0<8;j0++)l0[j0]=W0[j0];while(Y0>=64){S(P0,l0,_0,V);for(j0=0;j0<64;j0++)g[l+j0]=(h?h[r+j0]:0)^P0[j0];M0=1;for(j0=8;j0<16;j0++)M0=M0+(l0[j0]&255)|0,l0[j0]=M0&255,M0>>>=8;if(Y0-=64,l+=64,h)r+=64}if(Y0>0){S(P0,l0,_0,V);for(j0=0;j0<Y0;j0++)g[l+j0]=(h?h[r+j0]:0)^P0[j0]}return 0}function f(g,l,h,r,Y0){return p(g,l,null,0,h,r,Y0)}function v(g,l,h,r,Y0){var W0=new Uint8Array(32);return q(W0,r,Y0,V),f(g,l,h,r.subarray(16),W0)}function Z0(g,l,h,r,Y0,W0,_0){var l0=new Uint8Array(32);return q(l0,W0,_0,V),p(g,l,h,r,Y0,W0.subarray(16),l0)}function a(g,l){var h,r=0;for(h=0;h<17;h++)r=r+(g[h]+l[h]|0)|0,g[h]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function O0(g,l,h,r,Y0,W0){var _0,l0,P0,M0,j0=new Uint32Array(17),g0=new Uint32Array(17),o0=new Uint32Array(17),$1=new Uint32Array(17),W1=new Uint32Array(17);for(P0=0;P0<17;P0++)g0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)g0[P0]=W0[P0];g0[3]&=15,g0[4]&=252,g0[7]&=15,g0[8]&=252,g0[11]&=15,g0[12]&=252,g0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)$1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)$1[P0]=h[r+P0];$1[P0]=1,r+=P0,Y0-=P0,a(o0,$1);for(l0=0;l0<17;l0++){j0[l0]=0;for(P0=0;P0<17;P0++)j0[l0]=j0[l0]+o0[P0]*(P0<=l0?g0[l0-P0]:320*g0[l0+17-P0]|0)|0|0}for(l0=0;l0<17;l0++)o0[l0]=j0[l0];M0=0;for(P0=0;P0<16;P0++)M0=M0+o0[P0]|0,o0[P0]=M0&255,M0>>>=8;M0=M0+o0[16]|0,o0[16]=M0&3,M0=5*(M0>>>2)|0;for(P0=0;P0<16;P0++)M0=M0+o0[P0]|0,o0[P0]=M0&255,M0>>>=8;M0=M0+o0[16]|0,o0[16]=M0}for(P0=0;P0<17;P0++)W1[P0]=o0[P0];a(o0,B0),_0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=_0&(W1[P0]^o0[P0]);for(P0=0;P0<16;P0++)$1[P0]=W0[P0+16];$1[16]=0,a(o0,$1);for(P0=0;P0<16;P0++)g[l+P0]=o0[P0];return 0}function K0(g,l,h,r,Y0,W0){var _0=new Uint8Array(16);return O0(_0,0,h,r,Y0,W0),P(g,l,_0,0)}function J0(g,l,h,r,Y0){var W0;if(h<32)return-1;Z0(g,0,l,0,h,r,Y0),O0(g,16,g,32,h-32,g);for(W0=0;W0<16;W0++)g[W0]=0;return 0}function s(g,l,h,r,Y0){var W0,_0=new Uint8Array(32);if(h<32)return-1;if(v(_0,0,32,r,Y0),K0(l,16,l,32,h-32,_0)!==0)return-1;Z0(g,0,l,0,h,r,Y0);for(W0=0;W0<32;W0++)g[W0]=0;return 0}function A0(g,l){var h;for(h=0;h<16;h++)g[h]=l[h]|0}function U0(g){var l,h;for(h=0;h<16;h++)g[h]+=65536,l=Math.floor(g[h]/65536),g[(h+1)*(h<15?1:0)]+=l-1+37*(l-1)*(h===15?1:0),g[h]-=l*65536}function f0(g,l,h){var r,Y0=~(h-1);for(var W0=0;W0<16;W0++)r=Y0&(g[W0]^l[W0]),g[W0]^=r,l[W0]^=r}function m0(g,l){var h,r,Y0,W0=G(),_0=G();for(h=0;h<16;h++)_0[h]=l[h];U0(_0),U0(_0),U0(_0);for(r=0;r<2;r++){W0[0]=_0[0]-65517;for(h=1;h<15;h++)W0[h]=_0[h]-65535-(W0[h-1]>>16&1),W0[h-1]&=65535;W0[15]=_0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,f0(_0,W0,1-Y0)}for(h=0;h<16;h++)g[2*h]=_0[h]&255,g[2*h+1]=_0[h]>>8}function x0(g,l){var h=new Uint8Array(32),r=new Uint8Array(32);return m0(h,g),m0(r,l),A(h,0,r,0)}function n0(g){var l=new Uint8Array(32);return m0(l,g),l[0]&1}function N0(g,l){var h;for(h=0;h<16;h++)g[h]=l[2*h]+(l[2*h+1]<<8);g[15]&=32767}function b0(g,l,h){var r;for(r=0;r<16;r++)g[r]=l[r]+h[r]|0}function I0(g,l,h){var r;for(r=0;r<16;r++)g[r]=l[r]-h[r]|0}function F0(g,l,h){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*h[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)g[r]=W0[r];U0(g),U0(g)}function Q0(g,l){F0(g,l,l)}function G0(g,l){var h=G(),r;for(r=0;r<16;r++)h[r]=l[r];for(r=253;r>=0;r--)if(Q0(h,h),r!==2&&r!==4)F0(h,h,l);for(r=0;r<16;r++)g[r]=h[r]}function k0(g,l){var h=G(),r;for(r=0;r<16;r++)h[r]=l[r];for(r=250;r>=0;r--)if(Q0(h,h),r!==1)F0(h,h,l);for(r=0;r<16;r++)g[r]=h[r]}function i(g,l,h){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,_0,l0=G(),P0=G(),M0=G(),j0=G(),g0=G(),o0=G();for(_0=0;_0<31;_0++)r[_0]=l[_0];r[31]=l[31]&127|64,r[0]&=248,N0(Y0,h);for(_0=0;_0<16;_0++)P0[_0]=Y0[_0],j0[_0]=l0[_0]=M0[_0]=0;l0[0]=j0[0]=1;for(_0=254;_0>=0;--_0)W0=r[_0>>>3]>>>(_0&7)&1,f0(l0,P0,W0),f0(M0,j0,W0),b0(g0,l0,M0),I0(l0,l0,M0),b0(M0,P0,j0),I0(P0,P0,j0),Q0(j0,g0),Q0(o0,l0),F0(l0,M0,l0),F0(M0,P0,g0),b0(g0,l0,M0),I0(l0,l0,M0),Q0(P0,l0),I0(M0,j0,o0),F0(l0,M0,K),b0(l0,l0,j0),F0(M0,M0,l0),F0(l0,j0,o0),F0(j0,P0,Y0),Q0(P0,g0),f0(l0,P0,W0),f0(M0,j0,W0);for(_0=0;_0<16;_0++)Y0[_0+16]=l0[_0],Y0[_0+32]=M0[_0],Y0[_0+48]=P0[_0],Y0[_0+64]=j0[_0];var $1=Y0.subarray(32),W1=Y0.subarray(16);return G0($1,$1),F0(W1,W1,$1),m0(g,W1),0}function $0(g,l){return i(g,l,Q)}function t0(g,l){return X(l,32),$0(g,l)}function R0(g,l,h){var r=new Uint8Array(32);return i(r,h,l),q(g,Y,r,V)}var d=J0,m=s;function S0(g,l,h,r,Y0,W0){var _0=new Uint8Array(32);return R0(_0,Y0,W0),d(g,l,h,r,_0)}function v0(g,l,h,r,Y0,W0){var _0=new Uint8Array(32);return R0(_0,Y0,W0),m(g,l,h,r,_0)}function N1(){var g=0,l=0,h=0,r=0,Y0=65535,W0,_0,l0;for(l0=0;l0<arguments.length;l0++)W0=arguments[l0].lo,_0=arguments[l0].hi,g+=W0&Y0,l+=W0>>>16,h+=_0&Y0,r+=_0>>>16;return l+=g>>>16,h+=l>>>16,r+=h>>>16,new Z(h&Y0|r<<16,g&Y0|l<<16)}function i0(g,l){return new Z(g.hi>>>l,g.lo>>>l|g.hi<<32-l)}function L1(){var g=0,l=0,h;for(h=0;h<arguments.length;h++)g^=arguments[h].lo,l^=arguments[h].hi;return new Z(l,g)}function R$(g,l){var h,r,Y0=32-l;if(l<32)h=g.hi>>>l|g.lo<<Y0,r=g.lo>>>l|g.hi<<Y0;else if(l<64)h=g.lo>>>l|g.hi<<Y0,r=g.hi>>>l|g.lo<<Y0;return new Z(h,r)}function N6(g,l,h){var r=g.hi&l.hi^~g.hi&h.hi,Y0=g.lo&l.lo^~g.lo&h.lo;return new Z(r,Y0)}function P4(g,l,h){var r=g.hi&l.hi^g.hi&h.hi^l.hi&h.hi,Y0=g.lo&l.lo^g.lo&h.lo^l.lo&h.lo;return new Z(r,Y0)}function g5(g){return L1(R$(g,28),R$(g,34),R$(g,39))}function e(g){return L1(R$(g,14),R$(g,18),R$(g,41))}function J1(g){return L1(R$(g,1),R$(g,8),i0(g,7))}function r$(g){return L1(R$(g,19),R$(g,61),i0(g,6))}var o$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function D9(g,l,h){var r=[],Y0=[],W0=[],_0=[],l0,P0,M0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=D(g,8*P0);var j0=0;while(h>=128){for(P0=0;P0<16;P0++)_0[P0]=D(l,8*P0+j0);for(P0=0;P0<80;P0++){for(M0=0;M0<8;M0++)Y0[M0]=W0[M0];l0=N1(W0[7],e(W0[4]),N6(W0[4],W0[5],W0[6]),o$[P0],_0[P0%16]),Y0[7]=N1(l0,g5(W0[0]),P4(W0[0],W0[1],W0[2])),Y0[3]=N1(Y0[3],l0);for(M0=0;M0<8;M0++)W0[(M0+1)%8]=Y0[M0];if(P0%16===15)for(M0=0;M0<16;M0++)_0[M0]=N1(_0[M0],_0[(M0+9)%16],J1(_0[(M0+1)%16]),r$(_0[(M0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=N1(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,h-=128}for(P0=0;P0<8;P0++)z(g,8*P0,r[P0]);return h}var xG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function A8(g,l,h){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,_0=h;for(W0=0;W0<64;W0++)r[W0]=xG[W0];D9(r,l,h),h%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<h;W0++)Y0[W0]=l[_0-h+W0];Y0[h]=128,h=256-128*(h<112?1:0),Y0[h-9]=0,z(Y0,h-8,new Z(_0/536870912|0,_0<<3)),D9(r,Y0,h);for(W0=0;W0<64;W0++)g[W0]=r[W0];return 0}function R6(g,l){var h=G(),r=G(),Y0=G(),W0=G(),_0=G(),l0=G(),P0=G(),M0=G(),j0=G();I0(h,g[1],g[0]),I0(j0,l[1],l[0]),F0(h,h,j0),b0(r,g[0],g[1]),b0(j0,l[0],l[1]),F0(r,r,j0),F0(Y0,g[3],l[3]),F0(Y0,Y0,U),F0(W0,g[2],l[2]),b0(W0,W0,W0),I0(_0,r,h),I0(l0,W0,Y0),b0(P0,W0,Y0),b0(M0,r,h),F0(g[0],_0,l0),F0(g[1],M0,P0),F0(g[2],P0,l0),F0(g[3],_0,M0)}function e4(g,l,h){var r;for(r=0;r<4;r++)f0(g[r],l[r],h)}function P5(g,l){var h=G(),r=G(),Y0=G();G0(Y0,l[2]),F0(h,l[0],Y0),F0(r,l[1],Y0),m0(g,r),g[31]^=n0(h)<<7}function $9(g,l,h){var r,Y0;A0(g[0],J),A0(g[1],W),A0(g[2],W),A0(g[3],J);for(Y0=255;Y0>=0;--Y0)r=h[Y0/8|0]>>(Y0&7)&1,e4(g,l,r),R6(l,g),R6(g,g),e4(g,l,r)}function L9(g,l){var h=[G(),G(),G(),G()];A0(h[0],F),A0(h[1],H),A0(h[2],W),F0(h[3],F,H),$9(g,h,l)}function _1(g,l,h){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!h)X(l,32);A8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,L9(Y0,r),P5(g,Y0);for(W0=0;W0<32;W0++)l[W0+32]=g[W0];return 0}var T8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function I8(g,l){var h,r,Y0,W0;for(r=63;r>=32;--r){h=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=h-16*l[r]*T8[Y0-(r-32)],h=Math.floor((l[Y0]+128)/256),l[Y0]-=h*256;l[Y0]+=h,l[r]=0}h=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=h-(l[31]>>4)*T8[Y0],h=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=h*T8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,g[r]=l[r]&255}function s8(g){var l=new Float64Array(64),h;for(h=0;h<64;h++)l[h]=g[h];for(h=0;h<64;h++)g[h]=0;I8(g,l)}function _$(g,l,h,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),_0=new Uint8Array(64),l0,P0,M0=new Float64Array(64),j0=[G(),G(),G(),G()];A8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var g0=h+64;for(l0=0;l0<h;l0++)g[64+l0]=l[l0];for(l0=0;l0<32;l0++)g[32+l0]=Y0[32+l0];A8(_0,g.subarray(32),h+32),s8(_0),L9(j0,_0),P5(g,j0);for(l0=32;l0<64;l0++)g[l0]=r[l0];A8(W0,g,h+64),s8(W0);for(l0=0;l0<64;l0++)M0[l0]=0;for(l0=0;l0<32;l0++)M0[l0]=_0[l0];for(l0=0;l0<32;l0++)for(P0=0;P0<32;P0++)M0[l0+P0]+=W0[l0]*Y0[P0];return I8(g.subarray(32),M0),g0}function w8(g,l){var h=G(),r=G(),Y0=G(),W0=G(),_0=G(),l0=G(),P0=G();if(A0(g[2],W),N0(g[1],l),Q0(Y0,g[1]),F0(W0,Y0,w),I0(Y0,Y0,g[2]),b0(W0,g[2],W0),Q0(_0,W0),Q0(l0,_0),F0(P0,l0,_0),F0(h,P0,Y0),F0(h,h,W0),k0(h,h),F0(h,h,Y0),F0(h,h,W0),F0(h,h,W0),F0(g[0],h,W0),Q0(r,g[0]),F0(r,r,W0),x0(r,Y0))F0(g[0],g[0],N);if(Q0(r,g[0]),F0(r,r,W0),x0(r,Y0))return-1;if(n0(g[0])===l[31]>>7)I0(g[0],J,g[0]);return F0(g[3],g[0],g[1]),0}function D7(g,l,h,r){var Y0,W0=new Uint8Array(32),_0=new Uint8Array(64),l0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(h<64)return-1;if(w8(P0,r))return-1;for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)g[Y0+32]=r[Y0];if(A8(_0,g,h),s8(_0),$9(l0,P0,_0),L9(P0,l.subarray(32)),R6(l0,P0),P5(W0,l0),h-=64,A(l,0,W0,0)){for(Y0=0;Y0<h;Y0++)g[Y0]=0;return-1}for(Y0=0;Y0<h;Y0++)g[Y0]=l[Y0+64];return h}var q$=32,u6=24,r6=32,i8=16,$5=32,C=32,u=32,c=32,I=32,t=u6,y0=r6,d0=i8,Y1=64,w1=32,f1=64,C1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:q,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:p,crypto_stream_salsa20:f,crypto_onetimeauth:O0,crypto_onetimeauth_verify:K0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:J0,crypto_secretbox_open:s,crypto_scalarmult:i,crypto_scalarmult_base:$0,crypto_box_beforenm:R0,crypto_box_afternm:d,crypto_box:S0,crypto_box_open:v0,crypto_box_keypair:t0,crypto_hash:A8,crypto_sign:_$,crypto_sign_keypair:_1,crypto_sign_open:D7,crypto_secretbox_KEYBYTES:q$,crypto_secretbox_NONCEBYTES:u6,crypto_secretbox_ZEROBYTES:r6,crypto_secretbox_BOXZEROBYTES:i8,crypto_scalarmult_BYTES:$5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:u,crypto_box_SECRETKEYBYTES:c,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:y0,crypto_box_BOXZEROBYTES:d0,crypto_sign_BYTES:Y1,crypto_sign_PUBLICKEYBYTES:w1,crypto_sign_SECRETKEYBYTES:f1,crypto_sign_SEEDBYTES:C1,crypto_hash_BYTES:X8,gf:G,D:w,L:T8,pack25519:m0,unpack25519:N0,M:F0,A:b0,S:Q0,Z:I0,pow2523:k0,add:R6,set25519:A0,modL:I8,scalarmult:$9,scalarbase:L9};function h1(g,l){if(g.length!==q$)throw Error("bad key size");if(l.length!==u6)throw Error("bad nonce size")}function D$(g,l){if(g.length!==u)throw Error("bad public key size");if(l.length!==c)throw Error("bad secret key size")}function G$(){for(var g=0;g<arguments.length;g++)if(!(arguments[g]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function x$(g){for(var l=0;l<g.length;l++)g[l]=0}$.randomBytes=function(g){var l=new Uint8Array(g);return X(l,g),l},$.secretbox=function(g,l,h){G$(g,l,h),h1(h,l);var r=new Uint8Array(r6+g.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<g.length;W0++)r[W0+r6]=g[W0];return J0(Y0,r,r.length,l,h),Y0.subarray(i8)},$.secretbox.open=function(g,l,h){G$(g,l,h),h1(h,l);var r=new Uint8Array(i8+g.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<g.length;W0++)r[W0+i8]=g[W0];if(r.length<32)return null;if(s(Y0,r,r.length,l,h)!==0)return null;return Y0.subarray(r6)},$.secretbox.keyLength=q$,$.secretbox.nonceLength=u6,$.secretbox.overheadLength=i8,$.scalarMult=function(g,l){if(G$(g,l),g.length!==C)throw Error("bad n size");if(l.length!==$5)throw Error("bad p size");var h=new Uint8Array($5);return i(h,g,l),h},$.scalarMult.base=function(g){if(G$(g),g.length!==C)throw Error("bad n size");var l=new Uint8Array($5);return $0(l,g),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=$5,$.box=function(g,l,h,r){var Y0=$.box.before(h,r);return $.secretbox(g,l,Y0)},$.box.before=function(g,l){G$(g,l),D$(g,l);var h=new Uint8Array(I);return R0(h,g,l),h},$.box.after=$.secretbox,$.box.open=function(g,l,h,r){var Y0=$.box.before(h,r);return $.secretbox.open(g,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var g=new Uint8Array(u),l=new Uint8Array(c);return t0(g,l),{publicKey:g,secretKey:l}},$.box.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==c)throw Error("bad secret key size");var l=new Uint8Array(u);return $0(l,g),{publicKey:l,secretKey:new Uint8Array(g)}},$.box.publicKeyLength=u,$.box.secretKeyLength=c,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(g,l){if(G$(g,l),l.length!==f1)throw Error("bad secret key size");var h=new Uint8Array(Y1+g.length);return _$(h,g,g.length,l),h},$.sign.open=function(g,l){if(G$(g,l),l.length!==w1)throw Error("bad public key size");var h=new Uint8Array(g.length),r=D7(h,g,g.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=h[W0];return Y0},$.sign.detached=function(g,l){var h=$.sign(g,l),r=new Uint8Array(Y1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=h[Y0];return r},$.sign.detached.verify=function(g,l,h){if(G$(g,l,h),l.length!==Y1)throw Error("bad signature size");if(h.length!==w1)throw Error("bad public key size");var r=new Uint8Array(Y1+g.length),Y0=new Uint8Array(Y1+g.length),W0;for(W0=0;W0<Y1;W0++)r[W0]=l[W0];for(W0=0;W0<g.length;W0++)r[W0+Y1]=g[W0];return D7(Y0,r,r.length,h)>=0},$.sign.keyPair=function(){var g=new Uint8Array(w1),l=new Uint8Array(f1);return _1(g,l),{publicKey:g,secretKey:l}},$.sign.keyPair.fromSecretKey=function(g){if(G$(g),g.length!==f1)throw Error("bad secret key size");var l=new Uint8Array(w1);for(var h=0;h<l.length;h++)l[h]=g[32+h];return{publicKey:l,secretKey:new Uint8Array(g)}},$.sign.keyPair.fromSeed=function(g){if(G$(g),g.length!==C1)throw Error("bad seed size");var l=new Uint8Array(w1),h=new Uint8Array(f1);for(var r=0;r<32;r++)h[r]=g[r];return _1(l,h,!0),{publicKey:l,secretKey:h}},$.sign.publicKeyLength=w1,$.sign.secretKeyLength=f1,$.sign.seedLength=C1,$.sign.signatureLength=Y1,$.hash=function(g){G$(g);var l=new Uint8Array(X8);return A8(l,g,g.length),l},$.hash.hashLength=X8,$.verify=function(g,l){if(G$(g,l),g.length===0||l.length===0)return!1;if(g.length!==l.length)return!1;return j(g,0,l,0,g.length)===0?!0:!1},$.setPRNG=function(g){X=g},function(){var g=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(g&&g.getRandomValues){var l=65536;$.setPRNG(function(h,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)g.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)h[Y0]=W0[Y0];x$(W0)})}else if(g=u0("crypto"),g&&g.randomBytes)$.setPRNG(function(h,r){var Y0,W0=g.randomBytes(r);for(Y0=0;Y0<r;Y0++)h[Y0]=W0[Y0];x$(W0)})}()})(typeof oy<"u"&&z0Z?z0Z:globalThis.nacl=globalThis.nacl||{});mV=typeof oy<"u"&&z0Z?z0Z:globalThis.nacl,B04={fromSeed:mV.sign.keyPair.fromSeed,sign:mV.sign.detached,verify:mV.sign.detached.verify,randomBytes:mV.randomBytes,scalarBaseMultiply:mV.scalarMult.base,seal:mV.box,open:mV.box.open};E04=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);c$=class c$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(h$||(h$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})(a8||(a8={}));iV=[120,107,118,49];O04(B04);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(PJ||(PJ={}))});function C11($){try{$?.clear?.()}catch{}}async function Mk$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=Ik$($),W=S11(J.sub),K=V11(new TextEncoder().encode(Z)),w=jk$();try{let U=await Tk$(Y,w,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:PJ.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(Rk$(U,w))}finally{C11(w),C11(K),C11(W)}}var kk$=O(()=>{qk$()});function M04($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function Sk$(){let $=new y1;return $.post("/links/session",async(Z)=>{let X=Z.get("meshContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=z1();if(!Y.natsTunnelPublicEnabled)return Z.json(b11(),503);if(!Y.natsPublicUrl)return Z.json(b11(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(b11(),503)}let Q=jJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await Mk$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:Ok$(Q),userId:X,allowedConnectionTypes:M04(Y.natsPublicUrl)})}return Z.json(Ek$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var b11=()=>({error:"link session unavailable"});var Vk$=O(()=>{l6();M8();Dk$();kk$()});async function V04($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function C04($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new HN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function b04($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,w=(H)=>{if(J)return;J=!0,clearTimeout(U),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},U=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),w(!1)},k04),F=()=>w(!1);Y.addEventListener("abort",F,{once:!0}),K=Nn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")w(!0);else if(H.kind==="failed")w(!1)})})}async function _04($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(w){if(Y.aborted)return;if(Date.now()-Q<Ck$){await G4(bk$,{signal:Y}).catch(()=>{});continue}let U=w instanceof Error?w.message:String(w);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${U}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<Ck$){await G4(bk$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:w}=await W.read();if(w)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var k04=90000,S04=15000,_k$=()=>{let $=new y1;return $.get("/",async(Z)=>{let G=Z.var.meshContext;try{V0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=u1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=E0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=mw({orgId:Y.id,virtualMcpId:Q,branch:J}),w=Ly({userId:X,projectRef:K},J),U=W.metadata??null,F,H=null,N=null;try{let D=await WJ(G,{userId:X,branch:J,virtualMcpMetadata:U});F=D.provider,H=D.kind}catch(D){N=D instanceof Error?D:Error(String(D)),F=null}let B=H&&pw(e9(U),X,J,H),E=!!B&&B.sandboxHandle===w;if(!F)return hQ(Z,async(D)=>{await D.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this mesh."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),hQ(Z,async(D)=>{let L=new AbortController,z=setInterval(()=>{D.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},S04);D.onAbort(()=>{L.abort(),clearInterval(z)});try{if(E&&H){if(await V04(F,w)){await C04({ctx:G,runner:F,claimName:w,userId:X,projectRef:K,sandboxProviderKind:H}),await D.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await b04({stream:D,claimName:w,runner:F,signal:L.signal})||L.signal.aborted)return;await _04({stream:D,runner:F,claimName:w,signal:L.signal})}finally{clearInterval(z)}})}),$},Ck$=60000,bk$=500;var fk$=O(()=>{l6();lV();zY();CZ();SE0();Bn();Hv();X90();RQ()});function x04($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function v04($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(f04)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var f04=1e4,y04=async($,Z)=>{if(!$.get("meshContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},xk$=()=>{let $=new y1;return $.use("*",y04),$.get("/",async(Z)=>{let G=z1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await v04(X,Y);return Z.json({apps:x04(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var vk$=O(()=>{l6();M8()});import{z as x1}from"zod";function KK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function p04($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function t04($,Z,G){try{return JSON.parse($)}catch{throw new hk$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function r04($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:t04(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function o04($){let Z=$.map((G)=>{let X=G.function.parameters?KY(G.function.parameters):KY({type:"object",properties:{}});return[G.function.name,$8({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function a04($){if(!$)return;return{openai:{response_format:$}}}function s04(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function yk$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function gk$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var g04=256,h04,c04,u04,d04,l04,m04,i04,n04,hk$,ck$,uk$;var dk$=O(()=>{x6();l6();lV();h04=x1.object({type:x1.literal("function"),function:x1.object({name:x1.string(),description:x1.string().optional(),parameters:x1.record(x1.string(),x1.unknown()).optional()})}),c04=x1.object({id:x1.string(),type:x1.literal("function"),function:x1.object({name:x1.string(),arguments:x1.string()})}),u04=x1.discriminatedUnion("role",[x1.object({role:x1.literal("system"),content:x1.string(),name:x1.string().optional()}),x1.object({role:x1.literal("user"),content:x1.union([x1.string(),x1.array(x1.union([x1.object({type:x1.literal("text"),text:x1.string()}),x1.object({type:x1.literal("image_url"),image_url:x1.object({url:x1.string(),detail:x1.string().optional()})})]))]),name:x1.string().optional()}),x1.object({role:x1.literal("assistant"),content:x1.string().nullable().optional(),name:x1.string().optional(),tool_calls:x1.array(c04).optional()}),x1.object({role:x1.literal("tool"),content:x1.string(),tool_call_id:x1.string()})]),d04=x1.object({type:x1.literal("text")}),l04=x1.object({type:x1.literal("json_object")}),m04=x1.object({type:x1.literal("json_schema"),json_schema:x1.object({name:x1.string(),description:x1.string().optional(),schema:x1.record(x1.string(),x1.unknown()),strict:x1.boolean().optional()})}),i04=x1.union([d04,l04,m04]),n04=x1.object({model:x1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:x1.array(u04),stream:x1.boolean().optional().default(!1),temperature:x1.number().min(0).max(2).optional(),max_tokens:x1.number().positive().optional(),top_p:x1.number().min(0).max(1).optional(),frequency_penalty:x1.number().min(-2).max(2).optional(),presence_penalty:x1.number().min(-2).max(2).optional(),stop:x1.union([x1.string(),x1.array(x1.string())]).optional(),tools:x1.array(h04).optional(),tool_choice:x1.union([x1.literal("auto"),x1.literal("none"),x1.literal("required"),x1.object({type:x1.literal("function"),function:x1.object({name:x1.string()})})]).optional(),response_format:i04.optional(),user:x1.string().optional()});hk$=class hk$ extends Error{constructor($){super($);this.name="MessageConversionError"}};ck$=new y1;ck$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("meshContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(KK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(KK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(KK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=n04.safeParse(X);if(!Y.success){let D=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(KK(`Invalid request: ${D.message}`,"invalid_request_error",D.path.length>0?D.path.join("."):null),400)}let Q=Y.data,J=p04(Q.model);if(!J)return $.json(KK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let D=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(D.length===0)return $.json(KK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=D[0].id}let w;try{w=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(KK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let U=w.aiSdk.languageModel(K),F=r04(Q.messages),H=Q.tools?o04(Q.tools):void 0,N=a04(Q.response_format),B=s04(),E=Math.floor(Date.now()/1000);if(Q.stream)return hQ($,async(D)=>{let L=yk$(U,F,H,Q,N,$.req.raw.signal);try{let z=TQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=g04)await M()}else if(S.type==="tool-call"){await M();let q=P++;await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:q,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await D.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:E,model:Q.model,choices:[{index:0,delta:{},finish_reason:gk$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await D.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await D.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let D=yk$(U,F,H,Q,N,$.req.raw.signal),L=await QN(D),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:E,model:Q.model,choices:[{index:0,message:z,finish_reason:gk$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(KK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(KK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(KK(Y.message,"server_error"),500)}});uk$=ck$});var mk$;var lk$=O(()=>{mk$={name:"decocms",version:"4.9.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.141.0","@openai/codex-darwin-arm64":"npm:@openai/codex@0.141.0-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.141.0-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.141.0-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.141.0-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.141.0-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.141.0-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function Z14(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??$14}}var ik$,$14="https://ph.studio.decocms.com",nk$;var pk$=O(()=>{l6();$_0();kN();iG();M8();us0();lk$();ik$=new y1;ik$.get("/",($)=>{let Z={version:mk$.version,theme:aC1(),...VO().logo&&{logo:VO().logo},...kQ()&&{internalUrl:Oe()},...z1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!z1().firecrawlApiKey,auth:LA$(),posthog:Z14(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!kQ()&&z1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});nk$=ik$});function tk$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var rk$,G14,X14,ok$;var ak$=O(()=>{l6();T3();Lv();X_();rk$=new y1,G14=["range","if-none-match","if-modified-since"],X14=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];rk$.get("/:org/files/*",async($)=>{let Z=$.get("meshContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Sy($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new z$(401,{message:"Authentication required"})}if(!G)throw new z$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new z$(400,{message:"Missing file key"});let Y=await jn(X,Z);if(!Y)throw new z$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&A3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new z$(500,{message:"Invalid data URL from storage"});let[,w,U]=K,F=Buffer.from(U,"base64"),H=new Headers({"Content-Type":w,"Cache-Control":"private, max-age=86400"});return tk$(H,w),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of G14){let w=$.req.header(K);if(w)Q.set(K,w)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new z$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new z$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of X14){let w=J.headers.get(K);if(w)W.set(K,w)}return W.set("Cache-Control","private, max-age=86400"),tk$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});ok$=rk$});var It=b((pV)=>{var Y14=pV&&pV.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),Q14=pV&&pV.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))Y14(Z,$,G)};Object.defineProperty(pV,"__esModule",{value:!0});Q14(uX(),pV)});var $S$=b((sk$)=>{Object.defineProperty(sk$,"__esModule",{value:!0});sk$.version=void 0;sk$.version="3.4.0"});var XS$=b((wK)=>{var J14=wK&&wK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(wK,"__esModule",{value:!0});wK.NodeTransport=wK.VERSION=void 0;wK.nodeResolveHost=H14;var m4=It(),W14=u0("net"),_11=u0("tls"),K14=u0("path"),ZS$=u0("fs"),w14=J14(u0("dns")),U14=$S$();wK.VERSION=U14.version;var F14="nats.js";class GS${socket;version;lang;yields=[];signal=(0,m4.deferred)();closedNotification=(0,m4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=F14,this.version=wK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,m4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw m4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new m4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new m4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,m4.deferred)(),G,X=(0,W14.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,m4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=m4.DataBuffer.concat(...this.yields),Y=(0,m4.extractProtocolMessage)(X);if(Y!=="")try{let Q=m4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,m4.deferred)();try{if($=(0,K14.resolve)($),!(0,ZS$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,ZS$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,m4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,m4.deferred)();try{let Y=(0,_11.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new m4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,m4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,m4.deferred)();try{let X=(0,_11.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new m4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,m4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,m4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof _11.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,m4.render)($)}`);let Z=(0,m4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,m4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}wK.NodeTransport=GS$;function H14($){let Z=(0,m4.deferred)();return w14.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var KS$=b((WS$)=>{Object.defineProperty(WS$,"__esModule",{value:!0});WS$.connect=N14;var YS$=XS$(),QS$=It(),JS$=It();function N14($={}){if((0,JS$.hasWsProtocol)($))return Promise.reject(JS$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,QS$.setTransportFactory)({factory:()=>{return new YS$.NodeTransport},dnsResolveFn:YS$.nodeResolveHost}),QS$.NatsConnectionImpl.connect($)}});var wS$=b((RU)=>{var O14=RU&&RU.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),E14=RU&&RU.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))O14(Z,$,G)};Object.defineProperty(RU,"__esModule",{value:!0});RU.connect=void 0;var D14=KS$();Object.defineProperty(RU,"connect",{enumerable:!0,get:function(){return D14.connect}});E14(It(),RU)});function NS$($){let Z=$?.connectFn??P14,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function w(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function U(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,w()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:j14,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,U(G),w();return}catch{B++;let E=vX(z14,L14,B-1,2,0.5);await G4(E)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?US$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=HS$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function P14($){return FS$.connect($)}var US$,FS$,HS$,L14=100,z14=3000,j14=3000;var BS$=O(()=>{CZ();US$=k(Ig(),1),FS$=k(wS$(),1),HS$=k(PB(),1)});function ay($){let Z=$?.ttlMs??60000,G=$?.maxSize??1e4,X=$?.updateRecencyOnGet??!1,Y=new Map;function Q(){if(Y.size<=G)return;let J=Date.now();for(let[W,K]of Y)if(K.expiresAt<=J)Y.delete(W);while(Y.size>G){let W=Y.keys().next().value;if(W===void 0)break;Y.delete(W)}}return{get(J){let W=Y.get(J);if(!W)return;if(W.expiresAt<=Date.now()){Y.delete(J);return}if(X)Y.delete(J),Y.set(J,W);return W.value},set(J,W){Y.delete(J),Y.set(J,{value:W,expiresAt:Date.now()+Z}),Q()},delete(J){Y.delete(J)},clear(){Y.clear()},size(){return Y.size}}}function f11($,Z){return`${$}.${Z}`}class x11{cache;constructor($){this.cache=ay({ttlMs:$?.ttlMs??A14,maxSize:$?.maxSize??T14})}async get($,Z){return this.cache.get(f11($,Z))??null}async set($,Z,G){this.cache.set(f11($,Z),G)}async invalidate($,Z){this.cache.delete(f11($,Z))}teardown(){this.cache.clear()}}var A14=600000,T14=5000;var OS$=()=>{};function dD0($,Z){return`${$}:${Z}`}function v11($){let Z=ay({ttlMs:$?.ttlMs??I14,maxSize:$?.maxSize??R14}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,w){let U=G?.();if(!U)return;try{U.publish(ES$,Y.encode(JSON.stringify({organizationId:K,keyId:w,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,w){return Z.get(dD0(K,w))},set(K,w,U){Z.set(dD0(K,w),U)},invalidate(K,w){Z.delete(dD0(K,w)),W(K,w)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(ES$),(async()=>{for await(let w of J)try{let U=JSON.parse(Q.decode(w.data));if(U.originId===X)continue;Z.delete(dD0(U.organizationId,U.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var ES$="studio.ai-provider-keys.invalidate",I14=30000,R14=5000;var DS$=()=>{};class y11{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var LS$=($)=>{let Z;return()=>Z??=$()},g11,h11;var zS$=O(()=>{T5();g11=LS$(()=>g8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),h11=LS$(()=>g8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function b14(){return{name:cw,subjects:[`${Nl0}.>`],storage:AJ.StorageType.File,max_age:k14,max_bytes:V14,max_msgs_per_subject:C14,discard:AJ.DiscardPolicy.Old,retention:AJ.RetentionPolicy.Limits,duplicate_window:S14,num_replicas:1}}class AS${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function jS$($){let Z=PS$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function v14($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,M14().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class c11{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await AJ.jetstreamManager($),G=b14();try{await Z.streams.info(cw),await Z.streams.update(cw,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(cw),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=v14(Z,X),J=!1,W=()=>{if(J)return;J=!0;let w=n8$(Z);Y.publish(w.subject,w.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(w)=>{let U=performance.now(),F=Ol0(w,{runId:Z}),H=performance.now()-U;if(g11().record(H),h11().add(1,{"org.id":X??"unknown"}),x14?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?jS$(N.headers):void 0)};return(async()=>{let w=$.getReader(),U=0,F=0,H;try{while(!0){let{done:N,value:B}=await w.read();if(N)break;if(K(B),F++,++U>=64)U=0,await new Promise((E)=>setImmediate(E))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(w.releaseLock(),W(),f14)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=Ol0(Z,{runId:$,dedup:G});if(g11().record(performance.now()-Y),h11().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:jS$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=i8$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?AJ.DeliverPolicy.New:AJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=WN($),W;try{W=await(await X.consumers.get(cw,{filter_subjects:J,deliver_policy:Y})).consume()}catch(E){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",E?.message??E),null}let U=V50({messages:async function*(){try{for await(let E of W)yield{subject:E.subject,data:E.data,headers:E.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(M50()).pipeThrough(k50()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{U.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),U.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(E){for(;;){let{done:D,value:L}=await U.read();if(D){B(),E.close();return}let z=L;if(z.kind==="done"){if(Q){B(),E.close();return}continue}E.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(cw,{filter:WN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var AJ,PS$,q14=($)=>{let Z;return()=>Z??=$()},M14,k14=86400000000000,S14=120000000000,V14=4294967296,C14=500000,_14,f14,x14;var TS$=O(()=>{Dl0();C50();El0();T5();zS$();AJ=k(PB(),1),PS$=k(Ig(),1),M14=q14(()=>g8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));_14=process.env.STREAM_ENCODE_TRACE==="1",f14=process.env.DECOPILOT_STREAM_TRACE==="1";x14=_14?new AS$:null});import{z as G8}from"zod";var IS$,RS$,UK,u11,qS$,MS$,kS$,SS$,y14,VS$,CS$,bS$,_S$,fS$,g14,xS$,V1Z,h14,c14=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},vS$=($)=>{return new TextEncoder().encode(JSON.stringify($))},yS$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?h14[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${c14(Y.error)}`);return Y.data};var gS$=O(()=>{IS$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),RS$=G8.array(G8.tuple([G8.string(),G8.string()])),UK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),u11=G8.string().min(1),qS$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:UK,method:G8.string().min(1),url:G8.string().min(1),headers:RS$,replySubject:u11,bodySubject:u11.optional(),abortSubject:u11,deadlineUnixMs:G8.number().int().nonnegative().optional()}),MS$=G8.object({type:G8.literal("request.chunk"),requestId:UK,seq:G8.number().int().nonnegative(),data:IS$}),kS$=G8.object({type:G8.literal("request.end"),requestId:UK,seq:G8.number().int().nonnegative()}),SS$=G8.object({type:G8.literal("request.error"),requestId:UK,code:G8.string().min(1),message:G8.string()}),y14=G8.union([MS$,kS$,SS$]),VS$=G8.object({type:G8.literal("response.ack"),requestId:UK}),CS$=G8.object({type:G8.literal("response.start"),requestId:UK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:RS$}),bS$=G8.object({type:G8.literal("response.chunk"),requestId:UK,seq:G8.number().int().nonnegative(),data:IS$}),_S$=G8.object({type:G8.literal("response.end"),requestId:UK,seq:G8.number().int().nonnegative()}),fS$=G8.object({type:G8.literal("response.error"),requestId:UK,code:G8.string().min(1),message:G8.string()}),g14=G8.union([VS$,CS$,bS$,_S$,fS$]),xS$=G8.object({type:G8.literal("abort"),requestId:UK,reason:G8.string().optional()}),V1Z=G8.union([qS$,y14,g14,xS$]),h14={"request.start":qS$,"request.chunk":MS$,"request.end":kS$,"request.error":SS$,"response.ack":VS$,"response.start":CS$,"response.chunk":bS$,"response.end":_S$,"response.error":fS$,abort:xS$}});var u14=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},d14=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},l14=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},m14=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},hS$=($)=>{return u14(btoa(l14($)))},cS$=($)=>{return m14(atob(d14($)))},i14;var uS$=O(()=>{i14=class i14{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*Z$4($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class w$4{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var n14=30000,p14=1000,t14=65536,uQ,r14=($)=>{return"connection"in $},o14=($)=>{let Z=r14($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??n14,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??p14,maxChunkBytes:Z.maxChunkBytes??t14,diagnostics:Z.diagnostics}},dS$=($)=>{return Array.from($.entries())},a14=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},s14=($,Z,G)=>{if(a14(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return dS$(G.headers);return dS$(G.headers)},lS$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},e14=()=>{return crypto.randomUUID().replaceAll("-","")},$$4=($)=>{try{$?.unsubscribe()}catch{}},G$4=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},X$4=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},QB=($,Z,G)=>{$.publish(Z,vS$(G))},Y$4=($)=>{return $.type.startsWith("response.")},d11=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},Q$4=($)=>{if($==="idle")return new uQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new uQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},mS$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((w,U)=>{if(X.aborted){U(X.reason);return}let F=()=>U(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((w,U)=>{Q=setTimeout(()=>{U(Q$4(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=yS$(W.value.data);if(!Y$4(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},J$4=async($)=>{let Z=!1;while(!0){let G=await mS$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new uQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new uQ(G.value.code,G.value.message);throw new uQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},W$4=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){QB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of Z$4(J,$.maxChunkBytes)){if(X)return;QB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:hS$(W)}),G++}}}catch(Q){if(X)return;QB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},K$4=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await mS$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new uQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(cS$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new uQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){QB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},JB=($)=>{let Z=o14($);return G$4(Z.maxChunkBytes),async(G,X)=>{let Y=Nk$(G),Q=new Request(G,X),J=e14(),W=Bk$(Y.hostname,J),K=new AbortController,w=new AbortController,U=!1,F,H,N,B,E=!1,D=(P=new uQ("tunnel_closed","tunnel request closed"))=>{if(U)return;if(U=!0,$$4(F),Q.body&&!E)Q.body.cancel(P).catch(()=>{});if(w.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new uQ("tunnel_aborted",d11(Q.signal));QB(Z.connection,W.abort,{type:"abort",requestId:J,reason:d11(Q.signal)}),K.abort(P),D(P)};if(Q.signal.aborted)throw new uQ("tunnel_aborted",d11(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new uQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);QB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),D(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:s14(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};QB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!E)QB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(E)return;E=!0,(Q.body?W$4({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:w.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await J$4({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(X$4(Q.method,P.status))return D(),new Response(null,{status:P.status,statusText:P.statusText,headers:lS$(P.headers)});return new Response(K$4({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:D}),{status:P.status,statusText:P.statusText,headers:lS$(P.headers)})}catch(P){throw D(P instanceof Error?P:Error(String(P))),P}}};var iS$=O(()=>{gS$();uS$();gD0();uQ=class uQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var lD0=O(()=>{iS$()});function nS$($){let Z=$.createFetch??U$4,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return l11;let Q=jJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return l11;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return l11}}}var l11,U$4=($,Z)=>JB({connection:$,firstFrameTimeoutMs:Z});var pS$=O(()=>{lD0();At();l11={online:!1,capabilities:[]}});async function*F$4($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function tS$($){let Z=$.createFetch??((G)=>JB({connection:G,idleTimeoutMs:H$4}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=jJ(X),K=Z(J),w={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)w.body=Y.body;let U=await K(`tunnel://${W}${Y.path}`,w);yield*F$4(U)}}var H$4=45000;var rS$=O(()=>{lD0();At()});import{z as TJ}from"zod";function oS$($){return JSON.stringify($)}var Q$Z;var aS$=O(()=>{Q$Z=TJ.discriminatedUnion("type",[TJ.object({type:TJ.literal("cancel"),runId:TJ.string()}),TJ.object({type:TJ.literal("cancel_req"),reqId:TJ.string()}),TJ.object({type:TJ.literal("keep_alive")}),TJ.object({type:TJ.literal("shutdown")})])});function sS$($){let Z=$.createFetch??((G)=>JB({connection:G,idleTimeoutMs:N$4}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=jJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function eS$($){let Z=$.createFetch??JB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=jJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:oS$(X),signal:Y?.signal});if(!K.ok){let w=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${w?`: ${w}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var N$4=45000;var $V$=O(()=>{lD0();aS$();At()});function mD0($,Z,G,X){if(!X)return!1;return $.emit(Z,P3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var ZV$=O(()=>{$6()});class m11{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as B$4,rm as iD0}from"fs/promises";import{join as nD0}from"path";async function pD0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-O$4),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await tV($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await GV$($,Y,Z);else if(!Y.startsWith(".")){let Q=nD0($,Y),J=await tV(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await GV$(Q,K,Z)}if((await tV(Q)).length===0)await iD0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function GV$($,Z,G){let X=0,Y=nD0($,Z),Q=await tV(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=nD0(Y,W),w=await tV(K);for(let F of w){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=nD0(K,F);await iD0(N,{recursive:!0,force:!0}),X++}}if((await tV(K)).length===0)await iD0(K,{recursive:!0,force:!0})}if((await tV(Y)).length===0)await iD0(Y,{recursive:!0,force:!0});return X}async function tV($){try{return(await B$4($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var O$4=30;var i11=()=>{};import{DBOS as n11,SchedulerMode as E$4}from"@dbos-inc/dbos-sdk";async function L$4(){let $=[lQ(),oV(),OK()],Z=0;for(let G of $)try{Z+=await pD0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function z$4($,Z){await n11.runStep(()=>L$4(),{name:"monitoringRetention"})}function YV$(){if(XV$)return;XV$=!0;let $=n11.registerWorkflow(z$4,{name:"monitoringRetentionWorkflow"});n11.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:D$4,mode:E$4.ExactlyOncePerIntervalWhenActive})}var D$4="23 4 * * *",XV$=!1;var QV$=O(()=>{yX();i11()});function JV$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await mH.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Ic0($.db,Z,X.role);return Y.boundAuth=Tc0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new EE(G,void 0,Y.boundAuth,X.role,"self"),F40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var WV$=O(()=>{DE();tm()});function j$4(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function A$4(){for(let $ of P$4)$()}function KV$($){let Z=[...p11.logs,$];p11={...p11,logs:Z.length>500?Z.slice(-500):Z},A$4()}function t11(){return T$4}var p11,P$4,T$4=!1;var r11=O(()=>{p11=j$4(),P$4=new Set});import{EventEmitter as I$4}from"events";var o11;var wV$=O(()=>{r11();o11=new I$4;o11.on("request",($)=>{KV$($)})});function UV$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=sy(H.params.name),B=H.params.arguments||{},E=Object.keys(B).map((L)=>sy(L)),D=E.length>0?E.slice(0,3).join(",")+(E.length>3?"\u2026":""):"";Q=`${s4.tool}${N}${s4.dim}(${D})${s4.reset}`}else if(H.method)Q=`${s4.dim}${sy(H.method)}${s4.reset}`}}catch{}}let W=sy(Y);if(Y.startsWith("/mcp/conn_")){let U=Y.split("/")[2]??"";W=`/mcp/${s4.mcp}${sy(U.slice(0,12))}\u2026${s4.reset}`}else if(Y==="/mcp")W=`${s4.mcp}/mcp${s4.reset}`;else if(Y==="/mcp/registry")W=`${s4.mcp}/mcp/registry${s4.reset}`;let K=q$4(X),w=J?"\u25C0":"\u2190";if(!t11())console.log(`${s4.dim}${w}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let U=Date.now()-G,F=$.res.status,H=R$4(F),N=U<1000?`${U}ms`:`${(U/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!t11())console.log(`${s4.dim}${B}${s4.reset} ${K}${X}${s4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${s4.reset} ${s4.duration}${N}${s4.reset}`);o11.emit("request",{method:X,path:sy(Y),status:F,duration:U,timestamp:new Date})}}}var s4,R$4=($)=>{if($>=500)return s4.serverError;if($>=400)return s4.clientError;if($>=300)return s4.redirect;return s4.ok},q$4=($)=>{return s4[$]||s4.reset},sy=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var FV$=O(()=>{r11();wV$();s4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as OV$}from"crypto";import{mkdir as M$4,readdir as k$4,rm as HV$,stat as EV$}from"fs/promises";import{join as s11,relative as S$4}from"path";import{z as P$}from"zod";function LV$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return s11(V$4,Z)}function zV$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function a11($,Z){let G=LV$($),X=zV$(Z);return s11(G,X)}function C$4($,Z,G,X){let Y=z1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return OV$("sha256",Y).update(Q).digest("hex")}function BV$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=C$4(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${zV$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function jV$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${OV$("md5","etag").update(X).digest("hex")}"`}async function PV$($,Z,G,X,Y){try{let Q=await k$4($,{withFileTypes:!0});for(let J of Q){let W=s11($,J.name),w=S$4(Z,W).replace(/\\/g,"/");if(G&&!w.startsWith(G))continue;if(J.isDirectory())if(X){let U=w+"/";if(!G||U.startsWith(G)){if(!(G?w.slice(G.length):w).includes("/"))Y.commonPrefixes.add(U)}}else await PV$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let U=w.slice(G.length);if(U.includes(X)){let F=U.indexOf(X),H=G+U.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let U=await EV$(W);Y.objects.push({key:w,size:U.size,lastModified:U.mtime.toISOString(),etag:jV$(W,U.mtime,U.size)})}catch{}}}}catch{}}function AV$($,Z){let X=E0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:P$.object({prefix:P$.string().optional(),maxKeys:P$.number().optional().default(1000),continuationToken:P$.string().optional(),delimiter:P$.string().optional()}),outputSchema:P$.object({objects:P$.array(P$.object({key:P$.string(),size:P$.number(),lastModified:P$.string(),etag:P$.string()})),nextContinuationToken:P$.string().optional(),isTruncated:P$.boolean(),commonPrefixes:P$.array(P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,w=Q.continuationToken,U=LV$(X);await M$4(U,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await PV$(U,U,J,K,F),F.objects.sort((D,L)=>D.key.localeCompare(L.key));let H=0;if(w){if(H=F.objects.findIndex((D)=>D.key>w),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,E=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:E,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({contentType:P$.string().optional(),contentLength:P$.number(),lastModified:P$.string(),etag:P$.string(),metadata:P$.record(P$.string(),P$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=a11(X,Q.key),W=await EV$(J);return{contentType:te0(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:jV$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??NV$;return{url:BV$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:P$.object({key:P$.string(),expiresIn:P$.number().optional(),contentType:P$.string().optional()}),outputSchema:P$.object({url:P$.string(),expiresIn:P$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??NV$;return{url:BV$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:P$.object({key:P$.string()}),outputSchema:P$.object({success:P$.boolean(),key:P$.string()}),handler:async(Y)=>{let Q=Y,J=a11(X,Q.key);try{return await HV$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:P$.object({keys:P$.array(P$.string()).max(1000)}),outputSchema:P$.object({deleted:P$.array(P$.string()),errors:P$.array(P$.object({key:P$.string(),message:P$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let w=a11(X,K);try{await HV$(w),J.push(K)}catch(U){W.push({key:K,message:U instanceof Error?U.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function e11($,Z,G){let X=AV$(Z,G),Y=new Xw({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:B5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:P$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:P$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(w)=>{try{let U=await J.handler(w);return{content:[{type:"text",text:JSON.stringify(U)}],structuredContent:U}}catch(U){return{content:[{type:"text",text:`Error: ${U.message}`}],isError:!0}}})}let Q=new MY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),uW(Y,Q,$,"mcp:dev-assets")}async function TV$($,Z,G,X){let Q=AV$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var V$4="./data/assets",NV$=3600,DV$,IV$;var RV$=O(()=>{M8();In();l6();Gu();Av();BG();YD0();DV$=new y1;DV$.all("/",async($)=>{let Z=$.get("meshContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return e11($.req.raw,Z,X)});IV$=DV$});var qV$={};e8(qV$,{mountDevRoutes:()=>b$4});function b$4($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return e11(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("meshContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),w=await TV$(W,K,Y,J);if(w.isError)return X.json(w.content,500);return X.json(w.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",IV$);let G=new y1;G.use("*",gQ({mountPath:"/api/dev-assets"})),G.route("/",XD0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var MV$=O(()=>{l6();ue0();YD0();RV$()});var kV$=O(()=>{pc0();tc0();sE()});var tD0=O(()=>{kV$()});var VV$={};e8(VV$,{streamAgent:()=>SV$,createDecopilotClient:()=>f$4});async function _$4($){let{parseJsonEventStream:Z,uiMessageChunkSchema:G}=await Promise.resolve().then(() => (x6(),wl0));return Z({stream:$,schema:G}).pipeThrough(new TransformStream({transform(X,Y){if(!X.success)throw X.error;Y.enqueue(X.value)}}))}async function SV$($,Z,G,X,Y){let{readUIMessageStream:Q}=await Promise.resolve().then(() => (x6(),wl0)),J=G.value??G.id;if(!J)throw Error("Agent binding has no id or value \u2014 cannot resolve agent");let W=X.credentialId??G.credentialId,K=X.thinking??G.thinking,w=K?.id,U={messages:X.messages,...w?{models:{credentialId:W,thinking:K,...X.fast??G.fast?{fast:X.fast??G.fast}:{}}}:{},agent:{id:J},temperature:X.temperature??G.temperature,toolApprovalLevel:X.toolApprovalLevel??G.toolApprovalLevel,mode:X.mode??G.mode??"default",...X.memory?{memory:X.memory}:{},...X.thread_id?{thread_id:X.thread_id}:{}},F=await fetch($,{method:"POST",headers:{"Content-Type":"application/json","x-mesh-token":Z,Authorization:`Bearer ${Z}`},body:JSON.stringify(U),signal:Y?.signal});if(!F.ok){let N=await F.text().catch(()=>""),B=`HTTP ${F.status}`;try{let E=JSON.parse(N);if(E?.error)B=E.error}catch{if(N)B=N}throw Error(B)}if(!F.body)throw Error("Empty response body from decopilot stream");let H=await _$4(F.body);return Q({stream:H})}function f$4($){let{baseUrl:Z,orgSlug:G,token:X}=$,Y=`${Z}/${G}/decopilot/runtime/stream`;return{stream(Q,J){let W={__type:"@deco/agent",id:Q.agent.id,credentialId:Q.credentialId??"",thinking:Q.thinking??{id:"",title:""},fast:Q.fast,toolApprovalLevel:Q.toolApprovalLevel,mode:Q.mode,temperature:Q.temperature};return SV$(Y,X,W,Q,J)}}}import{z as xX}from"zod";function CV$($){let Z=$.properties;if(!Z)return $;for(let G of Object.values(Z)){let X=G.properties;if(!X?.__type?.const)continue;let Y=X.__type.const,Q=x$4.get(Y);if(!Q)continue;let J=Q.map((W)=>({name:String(W.name),...W.inputSchema&&{inputSchema:xX.toJSONSchema(W.inputSchema)},...W.outputSchema&&{outputSchema:xX.toJSONSchema(W.outputSchema)}}));X.__binding={const:J}}return $}var x$4,G8Z,v$4=($)=>{return typeof $==="object"&&$!==null&&$.__type==="@deco/agent"},Z$1=($)=>{return typeof $==="object"&&$!==null&&typeof $.__type==="string"&&$.__type!=="@deco/agent"&&typeof $.value==="string"},rD0=($,Z,G)=>{let X=G?{"x-caller-app":G}:void 0;if(Z.cookie)X??={},X.cookie=Z.cookie;if(Z.token)X??={},X["x-mesh-token"]=Z.token;return{type:"HTTP",url:new URL(`/mcp/${$}`,Z.meshUrl).href,token:Z.token,headers:X}},y$4=($,Z,G)=>{let X=rD0($,Z,G);return new Proxy(qx.forConnection(X),{get(Y,Q){if(Q==="value")return $;if(Q==="__type")return G;return Y[Q]}})},g$4=($,Z)=>{let G=Z.organizationSlug;if(!G)throw Error("organizationSlug is required for agent bindings");let X=`${Z.meshUrl}/api/${G}/decopilot/runtime/stream`;return{STREAM:async(Y,Q)=>{let{streamAgent:J}=await Promise.resolve().then(() => VV$);return J(X,Z.token,$,Y,Q)}}},$$1=($,Z)=>{if($===null||$===void 0)return $;if(Array.isArray($))return $.map((G)=>$$1(G,Z));if(typeof $==="object"){if(v$4($))return g$4($,Z);if(Z$1($))return y$4($.value,Z,$.__type);let G={};for(let[X,Y]of Object.entries($))G[X]=$$1(Y,Z);return G}return $},bV$=($)=>{return $$1($.state,$)};var ey=O(()=>{tD0();x$4=new Map;G8Z=xX.object({id:xX.string(),title:xX.string(),capabilities:xX.object({vision:xX.boolean().optional(),text:xX.boolean().optional(),tools:xX.boolean().optional(),reasoning:xX.boolean().optional()}).passthrough().optional(),provider:xX.string().optional().nullable(),limits:xX.object({contextWindow:xX.number().optional(),maxOutputTokens:xX.number().optional()}).passthrough().optional()})});var h$4,_V$=($,Z,G)=>{if(!Z)return null;if($===void 0||$==="*")return"*";if(typeof $==="string")return $===Z?$:null;if(Array.isArray($))return $.includes(Z)?Z:null;if(typeof $==="function")return $(Z,G)??null;return null},c$4=($,Z,G)=>{let X=Z.headers.get("Origin"),Y=_V$(G.origin,X,Z);if(Y)$.set("Access-Control-Allow-Origin",Y);if(G.credentials)$.set("Access-Control-Allow-Credentials","true");if(G.exposeHeaders?.length)$.set("Access-Control-Expose-Headers",G.exposeHeaders.join(", "))},fV$=($,Z)=>{let G=new Headers,X=$.headers.get("Origin"),Y=_V$(Z.origin,X,$);if(Y)G.set("Access-Control-Allow-Origin",Y);if(Z.credentials)G.set("Access-Control-Allow-Credentials","true");let Q=Z.allowMethods??h$4;G.set("Access-Control-Allow-Methods",Q.join(", "));let J=$.headers.get("Access-Control-Request-Headers");if(Z.allowHeaders?.length)G.set("Access-Control-Allow-Headers",Z.allowHeaders.join(", "));else if(J)G.set("Access-Control-Allow-Headers",J);if(Z.maxAge!==void 0)G.set("Access-Control-Max-Age",Z.maxAge.toString());return new Response(null,{status:204,headers:G})},xV$=($,Z,G)=>{let X=new Headers($.headers);return c$4(X,Z,G),new Response($.body,{status:$.status,statusText:$.statusText,headers:X})};var vV$=O(()=>{h$4=["GET","HEAD","PUT","POST","DELETE","PATCH"]});function yV$($=32){let G=new Uint8Array($);return crypto.getRandomValues(G),Array.from(G,(X)=>"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"[X%62]).join("")}function u$4($){try{let Z=new URL($);return Z.protocol==="https:"||Z.hostname==="localhost"||Z.hostname.endsWith(".localhost")||Z.hostname==="127.0.0.1"||!Z.protocol.startsWith("http")}catch{return!1}}function gV$($){return btoa(JSON.stringify($)).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}function hV$($){try{let Z=$.replace(/-/g,"+").replace(/_/g,"/");return JSON.parse(atob(Z))}catch{return null}}function cV$($){return{handleProtectedResourceMetadata:(w)=>{let U=FK(new URL(w.url)),F=`${U.origin}/mcp`;return Response.json({resource:F,authorization_servers:[U.origin],scopes_supported:["*"],bearer_methods_supported:["header"],resource_signing_alg_values_supported:["RS256","none"]})},handleAuthorizationServerMetadata:(w)=>{let F=FK(new URL(w.url)).origin;return Response.json({issuer:F,authorization_endpoint:`${F}/authorize`,token_endpoint:`${F}/token`,registration_endpoint:`${F}/register`,scopes_supported:["*"],response_types_supported:["code"],response_modes_supported:["query"],grant_types_supported:["authorization_code","refresh_token"],token_endpoint_auth_methods_supported:["none","client_secret_post"],code_challenge_methods_supported:["S256","plain"]})},handleAuthorize:(w)=>{let U=FK(new URL(w.url)),F=U.searchParams.get("redirect_uri"),H=U.searchParams.get("response_type"),N=U.searchParams.get("state"),B=U.searchParams.get("code_challenge"),E=U.searchParams.get("code_challenge_method");if(!F)return Response.json({error:"invalid_request",error_description:"redirect_uri required"},{status:400});if(H!=="code")return Response.json({error:"unsupported_response_type",error_description:"Only 'code' is supported"},{status:400});let D=FK(new URL(`${U.origin}/oauth/callback`)),L=D.toString(),j=gV$({redirectUri:F,clientState:N??void 0,codeChallenge:B??void 0,codeChallengeMethod:E??void 0,oauthCallbackUri:L});D.searchParams.set("state",j);let P=$.authorizationUrl(D.toString());return Response.redirect(P,302)},handleOAuthCallback:async(w)=>{let U=FK(new URL(w.url)),F=U.searchParams.get("code"),H=U.searchParams.get("state"),N=U.searchParams.get("error"),B=H?hV$(H):null;if(N){let E=U.searchParams.get("error_description")??"Authorization failed";if(B?.redirectUri){let D=FK(new URL(B.redirectUri));if(D.searchParams.set("error",N),D.searchParams.set("error_description",E),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}return Response.json({error:N,error_description:E},{status:400})}if(!F||!B)return Response.json({error:"invalid_request",error_description:"Missing code or state"},{status:400});try{let E=B.oauthCallbackUri??FK(new URL(`${U.origin}/oauth/callback`)).toString(),D={code:F,redirect_uri:E},L=await $.exchangeCode(D),z={accessToken:L.access_token,tokenType:L.token_type,refreshToken:L.refresh_token,expiresIn:L.expires_in,scope:L.scope,codeChallenge:B.codeChallenge,codeChallengeMethod:B.codeChallengeMethod},j=gV$(z),P=FK(new URL(B.redirectUri));if(P.searchParams.set("code",j),B.clientState)P.searchParams.set("state",B.clientState);return Response.redirect(P.toString(),302)}catch(E){console.error("OAuth callback error:",E);let D=FK(new URL(B.redirectUri));if(D.searchParams.set("error","server_error"),D.searchParams.set("error_description","Failed to exchange authorization code"),B.clientState)D.searchParams.set("state",B.clientState);return Response.redirect(D.toString(),302)}},handleToken:async(w)=>{try{let U=w.headers.get("content-type")??"",F;if(U.includes("application/x-www-form-urlencoded")){let z=await w.formData();F=Object.fromEntries(z.entries())}else{let z=await w.json();if(typeof z!=="object"||z===null||Array.isArray(z))return Response.json({error:"invalid_request",error_description:"Request body must be a JSON object"},{status:400});F=z}let{code:H,code_verifier:N,grant_type:B,refresh_token:E}=F;if(B==="refresh_token"){if(typeof E!=="string"||!E)return Response.json({error:"invalid_request",error_description:"refresh_token is required and must be a string"},{status:400});if(!$.refreshToken)return Response.json({error:"unsupported_grant_type",error_description:"refresh_token grant not supported"},{status:400});let z;try{z=await $.refreshToken(E)}catch(P){if(P instanceof G$1)return Response.json({error:P.error,...P.errorDescription?{error_description:P.errorDescription}:{}},{status:400});throw P}let j={access_token:z.access_token,token_type:z.token_type};if(z.refresh_token)j.refresh_token=z.refresh_token;if(z.expires_in!==void 0)j.expires_in=z.expires_in;if(z.scope)j.scope=z.scope;return Response.json(j,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}if(B!=="authorization_code")return Response.json({error:"unsupported_grant_type",error_description:"Only authorization_code and refresh_token supported"},{status:400});if(typeof H!=="string"||!H)return Response.json({error:"invalid_request",error_description:"code is required and must be a string"},{status:400});let D=hV$(H);if(!D||!D.accessToken)return Response.json({error:"invalid_grant",error_description:"Invalid or expired code"},{status:400});if(D.codeChallenge){if(typeof N!=="string"||!N)return Response.json({error:"invalid_grant",error_description:"code_verifier required and must be a string"},{status:400});let z;if(D.codeChallengeMethod==="S256"){let P=new TextEncoder().encode(N),A=await crypto.subtle.digest("SHA-256",P);z=btoa(String.fromCharCode(...new Uint8Array(A))).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}else z=N;if(z!==D.codeChallenge)return Response.json({error:"invalid_grant",error_description:"Invalid code_verifier"},{status:400})}let L={access_token:D.accessToken,token_type:D.tokenType};if(D.refreshToken)L.refresh_token=D.refreshToken;if(D.expiresIn!==void 0)L.expires_in=D.expiresIn;if(D.scope)L.scope=D.scope;return Response.json(L,{headers:{"Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Token exchange error:",U),Response.json({error:"server_error",error_description:"Failed to process token request"},{status:500})}},handleClientRegistration:async(w)=>{try{let U=await w.json();if(!U.redirect_uris||U.redirect_uris.length===0)return Response.json({error:"invalid_redirect_uri",error_description:"At least one redirect_uri is required"},{status:400});for(let E of U.redirect_uris)if(!u$4(E))return Response.json({error:"invalid_redirect_uri",error_description:`Invalid redirect URI: ${E}`},{status:400});let F=yV$(32),H=U.token_endpoint_auth_method!=="none"?yV$(32):void 0,N=Math.floor(Date.now()/1000),B={client_id:F,client_secret:H,client_name:U.client_name,redirect_uris:U.redirect_uris,grant_types:U.grant_types??["authorization_code"],response_types:U.response_types??["code"],token_endpoint_auth_method:U.token_endpoint_auth_method??"client_secret_post",scope:U.scope,client_id_issued_at:N,client_secret_expires_at:0};if($.persistence)await $.persistence.saveClient(B);return new Response(JSON.stringify(B),{status:201,headers:{"Content-Type":"application/json","Cache-Control":"no-store",Pragma:"no-cache"}})}catch(U){return console.error("Client registration error:",U),Response.json({error:"invalid_client_metadata",error_description:"Invalid client registration request"},{status:400})}},createUnauthorizedResponse:(w)=>{let H=`Bearer resource_metadata="${`${FK(new URL(w.url)).origin}/.well-known/oauth-protected-resource`}", scope="*"`;return Response.json({jsonrpc:"2.0",error:{code:-32000,message:"Unauthorized: Authentication required"},id:null},{status:401,headers:{"WWW-Authenticate":H,"Access-Control-Expose-Headers":"WWW-Authenticate"}})},hasAuth:(w)=>w.headers.has("Authorization")}}var G$1,FK=($)=>{if(!($.hostname==="localhost"||$.hostname.endsWith(".localhost")||$.hostname==="127.0.0.1"))$.protocol="https:";return $};var X$1=O(()=>{G$1=class G$1 extends Error{error;errorDescription;constructor($="invalid_grant",Z){super(Z??$);this.name="OAuthInvalidGrantError",this.error=$,this.errorDescription=Z}}});import{AsyncLocalStorage as d$4}from"async_hooks";var uV$,Rt;var Y$1=O(()=>{uV$=new d$4,Rt={getStore:()=>{return uV$.getStore()},run:($,Z,...G)=>uV$.run($,Z,...G)}});var lV$="SELF",aD0=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},mV$=($)=>{return typeof $==="object"&&$!==null&&"handler"in $&&"events"in $&&typeof $.handler==="function"&&Array.isArray($.events)},dV$="::",iV$=($)=>{let Z=$.indexOf(dV$);if(Z===-1)return null;let G=$.substring(0,Z),X=$.substring(Z+dV$.length);return[G,X]},l$4=($)=>{if(!$.startsWith("cron/"))return null;let Z=$.substring(5),G=Z.indexOf("/");if(G===-1)return null;let X=Z.substring(0,G),Y=Z.substring(G+1);return[X,Y]},nV$=($)=>{if(aD0($))return[];return Object.keys($)},m$4=($,Z)=>{if(aD0($))return $.events;let G=$[Z];if(!G)return[];if(mV$(G))return G.events;return Object.keys(G)},oD0=($,Z,G)=>{if($===lV$){if(!G)return console.warn("[Event] SELF binding used but no connectionId available"),null;return G}let X=Z[$];if(!Z$1(X))return console.warn(`[Event] Binding "${$}" not found in state`),null;return X.value},i$4=($,Z,G)=>{let X=Z;if(aD0($)){let Q=[];for(let J of $.events){let W=iV$(J);if(!W){console.warn(`[Event] Global handler event "${J}" must be prefixed with BINDING:: (e.g., "SELF::${J}" or "DATABASE::${J}")`);continue}let[K,w]=W,U=oD0(K,X,G);if(!U)continue;Q.push({eventType:w,publisher:U})}return Q}let Y=[];for(let Q of nV$($)){let J=oD0(Q,X,G);if(!J)continue;let W=m$4($,Q);for(let K of W)Y.push({eventType:K,publisher:J})}return Y},n$4=($)=>{let Z=new Map;for(let G of $){let X=G.source,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},p$4=($)=>{let Z=new Map;for(let G of $){let X=G.type,Y=Z.get(X)||[];Y.push(G),Z.set(X,Y)}return Z},t$4=($)=>{let Z={},G={},X=!1,Y=0,Q=[];for(let J of $){if(J.results)Object.assign(G,J.results);if(J.success===!1){if(X=!0,J.error)Q.push(J.error)}if(J.processedCount!==void 0)Y+=J.processedCount}if(Object.keys(G).length>0)Z.results=G;if(Z.success=!X,Q.length>0)Z.error=Q.join("; ");if(Y>0)Z.processedCount=Y;return Z},r$4=async($,Z,G,X,Y)=>{let Q=X;if(aD0($)){let U=new Set;for(let H of $.events){let N=iV$(H);if(!N)continue;let[B,E]=N,D=oD0(B,Q,Y);if(!D)continue;U.add(`${D}:${E}`)}let F=Z.filter((H)=>{let N=`${H.source}:${H.type}`;return U.has(N)});if(F.length===0)return{success:!0};try{return await $.handler({events:F},G)}catch(H){return{success:!1,error:H instanceof Error?H.message:String(H)}}}let J=new Map;for(let U of nV$($)){let F=oD0(U,Q,Y);if(F)J.set(F,U)}let W=n$4(Z),K=[];for(let[U,F]of W){let H=J.get(U);if(!H)continue;let N=$[H];if(!N)continue;if(mV$(N)){K.push((async()=>{try{return await N.handler({events:F},G)}catch(D){let L={};for(let z of F)L[z.id]={success:!1,error:D instanceof Error?D.message:String(D)};return{results:L}}})());continue}let B=N,E=p$4(F);for(let[D,L]of E){let z=B[D];if(!z)continue;K.push((async()=>{try{let j=await z({events:L},G),P={};for(let A of L)P[A.id]=j;return{results:P}}catch(j){let P={};for(let A of L)P[A.id]={success:!1,error:j instanceof Error?j.message:String(j)};return{results:P}}})())}}let w=await Promise.all(K);if(w.length===0)return{success:!0};return t$4(w)},pV$;var Q$1=O(()=>{ey();pV$={subscriptions:i$4,execute:r$4,parseCron:l$4}});function o$4($,Z){let G=rD0("self",{meshUrl:$,token:Z});return qx.forConnection(G)}function a$4($,Z){switch(Z.type){case"cron":return{automation_id:$,type:"cron",cron_expression:Z.cron};case"event":return{automation_id:$,type:"event",connection_id:Z.connectionId,event_type:Z.eventType,params:Z.params};case"webhook":return{automation_id:$,type:"webhook"}}}function tV$($,Z,G){return async(X)=>{if(!$)throw Error("createAgent: missing meshUrl in MESH_REQUEST_CONTEXT");let Y=o$4($,Z),J=(await Y.COLLECTION_VIRTUAL_MCP_LIST({where:{operator:"and",conditions:[{field:["title"],operator:"eq",value:X.name}]},limit:1})).items.find((U)=>U.title===X.name);if(J)return{id:J.id,automations:[],automationIds:[],alreadyExisted:!0};let W=X.tools&&X.tools.length>0?X.tools.map((U)=>({connection_id:U.connectionId,selected_tools:U.tools??null,selected_resources:null,selected_prompts:null})):G?[{connection_id:G,selected_tools:null,selected_resources:null,selected_prompts:null}]:[],{item:K}=await Y.COLLECTION_VIRTUAL_MCP_CREATE({data:{title:X.name,description:X.description,metadata:X.instructions?{instructions:X.instructions}:void 0,connections:W}}),w=[];for(let U of X.automations??[]){let F=await Y.AUTOMATION_CREATE({name:U.name,virtual_mcp_id:K.id,messages:U.messages,models:U.models,tools:U.tools,active:U.active??!0}),H=[];for(let N of U.triggers??[])try{let B=await Y.AUTOMATION_TRIGGER_ADD(a$4(F.id,N));H.push({type:N.type,ok:!0,id:B.id,webhook:B.webhook??void 0})}catch(B){H.push({type:N.type,ok:!1,error:B instanceof Error?B.message:String(B)})}w.push({id:F.id,name:U.name,triggers:H})}return{id:K.id,automations:w,automationIds:w.map((U)=>U.id),alreadyExisted:!1}}}var J$1=O(()=>{ey();tD0()});import{z as JZ}from"zod";function qU($){return{...$,execute:(Z)=>{let G=qt(Z.runtimeContext);return $.execute({...Z,runtimeContext:G},G)}}}var qt=($)=>{let Z=Rt.getStore();if(!Z){if($)return $;throw Error("Missing context, did you forget to call State.bind?")}return Z},rV$=($)=>{let Z=$.runtimeContext.env.MESH_REQUEST_CONTEXT;return{connectionId:Z?.connectionId,meshUrl:Z?.meshUrl,token:Z?.token}},s$4=({events:$,configuration:{state:Z,scopes:G,onChange:X,onInstall:Y}={}}={})=>{let Q=Z?CV$(JZ.toJSONSchema(Z)):{type:"object",properties:{}};return[...X||Y||$?[qU({id:"ON_MCP_CONFIGURATION",description:"MCP Configuration On Change",inputSchema:JZ.object({state:Z??JZ.unknown(),scopes:JZ.array(JZ.string()).describe("Array of scopes in format 'KEY::SCOPE' (e.g., 'GMAIL::GetCurrentUser')"),firstRun:JZ.boolean().optional().describe("True on the first configuration save for this connection \u2014 fires onInstall."),vault:JZ.object({baseUrl:JZ.string(),org:JZ.string(),subjectConnectionId:JZ.string(),token:JZ.string()}).optional()}),outputSchema:JZ.object({}),execute:async(J)=>{let W=J.context.state,K=J.context.vault;if(await X?.(J.runtimeContext.env,{state:W,scopes:J.context.scopes,vault:K}),Y&&J.context.firstRun){let{meshUrl:w,token:U,connectionId:F}=rV$(J);await Y(J.runtimeContext.env,{createAgent:tV$(w,U,F),vault:K})}return Promise.resolve({})}})]:[],...$?.handlers?[qU({id:"ON_EVENTS",description:"Receive and process CloudEvents from the event bus. Returns per-event or batch results.",inputSchema:v40,outputSchema:y40,execute:async(J)=>{let W=J.runtimeContext.env,K=W.MESH_REQUEST_CONTEXT?.state,{connectionId:w}=rV$(J);return pV$.execute($.handlers,J.context.events,W,K,w)}})]:[],qU({id:"MCP_CONFIGURATION",description:"MCP Configuration",inputSchema:JZ.object({}),outputSchema:JZ.object({stateSchema:JZ.unknown(),scopes:JZ.array(JZ.string()).optional()}),execute:()=>{return Promise.resolve({stateSchema:Q,scopes:[...G??[]]})}})]},oV$=($)=>{let Z=null,G=null,X=null,Y=!1,Q=()=>{if(!Y)console.warn("[runtime] Passing factory functions to tools/prompts/resources is deprecated. Pass createTool()/createPrompt()/createResource() instances directly."),Y=!0},J=(N)=>typeof N==="object"&&N!==null&&(("id"in N)||("name"in N)||("uri"in N));async function W(N,B){if(!N)return[];return(await Promise.all(N.flatMap(async(E)=>{if(J(E))return[E];Q();let D=await E(B);if(Array.isArray(D))return D;return[D]}))).flat()}let K=async(N)=>{if(Z)return Z;if(G)return G;return G=(async()=>{try{let B;if(typeof $.tools==="function")Q(),B=await $.tools(N);else B=await W($.tools,N);B.push(...s$4({...$}));let E;if(typeof $.prompts==="function")Q(),E=await $.prompts(N);else E=await W($.prompts,N);let D;if(typeof $.resources==="function")Q(),D=await $.resources(N);else D=await W($.resources,N);let L={tools:B,prompts:E,resources:D};return Z=L,L}catch(B){throw G=null,B}})(),G},w=(N,B)=>{for(let E of B.tools)N.registerTool(E.id,{_meta:E._meta,title:E.title,description:E.description,annotations:E.annotations,inputSchema:E.inputSchema&&"shape"in E.inputSchema?E.inputSchema:JZ.object({}),outputSchema:E.outputSchema&&typeof E.outputSchema==="object"&&"shape"in E.outputSchema?E.outputSchema:void 0},async(D)=>{let L=qt(),z=await E.execute({context:D,runtimeContext:L},L);if(z!=null&&typeof z==="object"&&"content"in z&&Array.isArray(z.content)&&z.content.every((j)=>j!=null&&typeof j==="object"&&("type"in j)&&typeof j.type==="string"))return z;return{structuredContent:z,content:[{type:"text",text:JSON.stringify(z)}]}});for(let E of B.prompts)N.registerPrompt(E.name,{title:E.title,description:E.description,argsSchema:E.argsSchema?E.argsSchema:JZ.object({}).shape},async(D)=>{let L=qt();return await E.execute({args:D,runtimeContext:L},L)});for(let E of B.resources)N.resource(E.name,E.uri,{description:E.description,mimeType:E.mimeType},async(D)=>{let L=qt(),z=await E.read({uri:D,runtimeContext:L},L),j=z._meta??void 0;if(z.text!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,text:z.text,...j!==void 0?{_meta:j}:{}}]};else if(z.blob!==void 0)return{contents:[{uri:z.uri,mimeType:z.mimeType,blob:z.blob,...j!==void 0?{_meta:j}:{}}]};return{contents:[{uri:z.uri,mimeType:z.mimeType,text:""}]}})},U=async(N)=>{await $.before?.(N);let{instructions:B,...E}=$.serverInfo??{},D=new Xw({...E,name:E.name??"@deco/mcp-api",version:E.version??"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:B5,...B&&{instructions:B}}),L=await K(N);w(D,L);let z="tools/list",j=D.server._requestHandlers,P=j.get(z);if(P)j.set(z,async(A,M)=>{if(!X)X=await P(A,M);return X});return{server:D,...L}};return{fetch:async(N,B)=>{let{server:E}=await U(B),D=new MY;await E.connect(D);let L=()=>{try{D.close?.()}catch{}try{E.close?.()}catch{}};try{let z=await D.handleRequest(N),j=z.headers.get("content-type");if(!(j?.includes("text/event-stream")||j?.includes("application/json-rpc"))||!z.body)return L(),z;let{readable:A,writable:M}=new TransformStream;return z.body.pipeTo(M).catch(()=>{}).finally(L),new Response(A,{status:z.status,statusText:z.statusText,headers:z.headers})}catch(z){throw L(),z}},callTool:async({toolCallId:N,toolCallInput:B})=>{let E=Rt.getStore();if(!E)throw Error("Missing state, did you forget to call State.bind?");let D=E?.env,{tools:L}=await K(D),j=L.find((A)=>A.id===N)?.execute;if(!j)throw Error(`Tool ${N} not found or does not have an execute function`);let P=qt();return j({context:B,runtimeContext:P},P)}}};var sD0=O(()=>{sc0();BG();Gu();Av();ey();Q$1();Y$1();J$1();Q$1();J$1()});import{decodeJwt as aV$}from"jose";var e$4=({env:$,server:Z,url:G})=>{$.SELF=new Proxy({},{get:(X,Y)=>{if(Y==="toJSON")return null;return async(Q)=>{return await Z.callTool({toolCallId:Y,toolCallInput:Q})}}}),$.IS_LOCAL=(G?.startsWith("http://localhost")||G?.startsWith("http://127.0.0.1"))??!1},sV$=($)=>()=>{return{...$??{}}},$84=({env:$,server:Z,tokenOrContext:G,url:X,authToken:Y})=>{let Q=$,J=Y?Y.split(" ")[1]:void 0,W;if(typeof G==="string"){let K=aV$(G),w=K.metadata??{};W={authorization:J,state:K.state??w.state??{},token:G,meshUrl:K.meshUrl??w.meshUrl,connectionId:K.connectionId??w.connectionId,organizationId:K.organizationId??w.organizationId,organizationName:K.organizationName??w.organizationName,organizationSlug:K.organizationSlug??w.organizationSlug,ensureAuthenticated:sV$(K.user??K.sub)}}else if(typeof G==="object"){W=G;let K=aV$(G.token),w=K.metadata??{},U=K.appName;W.authorization??=J,W.callerApp=U,W.connectionId??=K.connectionId??w.connectionId,W.organizationId??=K.organizationId??w.organizationId,W.organizationName??=K.organizationName??w.organizationName,W.organizationSlug??=K.organizationSlug??w.organizationSlug,W.ensureAuthenticated=sV$(K.user??K.sub)}else W={state:{},authorization:J,token:void 0,meshUrl:void 0,connectionId:void 0,ensureAuthenticated:()=>{throw Error("Unauthorized")}};return Q.MESH_REQUEST_CONTEXT=W,W.state=bV$(W),e$4({env:Q,server:Z,url:X}),Q},Z84,eV$=($)=>{let Z=oV$($),G=$.cors??Z84,X=$.oauth,Y=X?cV$(X):null,Q=async(J,W,K)=>{let w=new URL(J.url);if(Y){if(w.pathname==="/.well-known/oauth-protected-resource"||w.pathname==="/mcp/.well-known/oauth-protected-resource")return Y.handleProtectedResourceMetadata(J);if(w.pathname==="/.well-known/oauth-authorization-server")return Y.handleAuthorizationServerMetadata(J);if(w.pathname==="/authorize")return Y.handleAuthorize(J);if(w.pathname==="/oauth/callback")return Y.handleOAuthCallback(J);if(w.pathname==="/token"&&J.method==="POST")return Y.handleToken(J);if((w.pathname==="/register"||w.pathname==="/mcp/register")&&J.method==="POST")return Y.handleClientRegistration(J)}if(w.pathname==="/mcp"){if(J.method==="GET")return new Response("Method not allowed",{status:405});if(Y&&!Y.hasAuth(J)){let U=J.clone();try{if((await U.json())?.method!=="tools/list")return Y.createUnauthorizedResponse(J)}catch{return Y.createUnauthorizedResponse(J)}}return Z.fetch(J,W,K)}if(w.pathname.startsWith("/mcp/call-tool")){let U=w.pathname.split("/").pop();if(!U)return new Response("Not found",{status:404});let F=await J.json(),H=await Z.callTool({toolCallId:U,toolCallInput:F});return new Response(JSON.stringify(H),{headers:{"Content-Type":"application/json"}})}return $.fetch?.(J,W,K)||new Response("Not found",{status:404})};return{fetch:async(J,W,K)=>{if(new URL(J.url).pathname==="/_healthcheck")return new Response("OK",{status:200});if(G!==!1&&J.method==="OPTIONS")return fV$(J,G??{});let w=$84({authToken:J.headers.get("authorization")??null,env:{...process.env,...W},server:Z,tokenOrContext:J.headers.get("x-mesh-token")??void 0,url:J.url}),U=await Rt.run({req:J,env:w,ctx:K},async()=>await Q(J,w,K));if(G!==!1)return xV$(U,J,G??{});return U}}};var $C$=O(()=>{ey();vV$();X$1();X$1();Y$1();sD0();sD0();ey();tD0();Z84={origin:($)=>{if($.includes("localhost")||$.includes("127.0.0.1"))return $;return $},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"]}});import{z as W$1}from"zod";function Y84($,Z){let G=qU({id:"COLLECTION_REGISTRY_APP_LIST",description:"List public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:Ny,outputSchema:By,execute:async({context:W})=>{let K={limit:W.limit,offset:W.offset,cursor:W.cursor,tags:W.tags,categories:W.categories,where:W.where},w=`${Z}:${JSON.stringify(K)}`,U=ZC$.get(w);if(U)return U;let F=await $.listPublic(Z,K);return ZC$.set(w,F),F}}),X=qU({id:"COLLECTION_REGISTRY_APP_GET",description:"Get a public registry item by ID or name",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:$K,outputSchema:SV,execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{item:null};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{item:w};return{item:null}}}),Y=qU({id:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get available versions of a public registry item",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:$K,outputSchema:W$1.object({versions:W$1.array(SV.shape.item)}),execute:async({context:W})=>{let K=W.id??W.name;if(!K)return{versions:[]};let w=await $.findByIdOrName(Z,K);if(w&&w.is_public)return{versions:[w]};return{versions:[]}}}),Q=qU({id:"COLLECTION_REGISTRY_APP_SEARCH",description:"Search public registry items returning minimal data (id, title, tags, categories, is_public). Use this instead of LIST when you need to find items efficiently without loading full details.",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:UE0,outputSchema:FE0,execute:async({context:W})=>{return await $.search(Z,W,{publicOnly:!0})}}),J=qU({id:"COLLECTION_REGISTRY_APP_FILTERS",description:"Get available tags and categories for public registry items",annotations:{readOnlyHint:!0,idempotentHint:!0},inputSchema:W$1.object({}),outputSchema:Oy,execute:async()=>{return await $.getFilters(Z,{publicOnly:!0})}});return[G,Q,X,Y,J]}function GC$($){let Z=$.db,G=new Mf(Z);return async(X)=>{let Y=X.req.param("orgSlug")??X.req.param("org");if(!Y)return X.json({error:"Organization not found"},404);let Q=await Z.selectFrom("organization").select(["id","slug","name"]).where("slug","=",Y).executeTakeFirst();if(!Q)return X.json({error:"Organization not found"},404);let J=Y84(G,Q.id),W=eV$({tools:J}),K=new URL(X.req.url),w=X.req.path.indexOf("/registry"),U=w>=0?X.req.path.slice(w+9):"",F=new URL(U||"/",K.origin);K.searchParams.forEach((B,E)=>{F.searchParams.set(E,B)});let H=new Request(F.toString(),{method:X.req.method,headers:X.req.raw.headers,body:X.req.method!=="GET"&&X.req.method!=="HEAD"?X.req.raw.body:void 0}),N={organizationId:Q.id,db:Z,MESH_REQUEST_CONTEXT:{},MESH_APP_DEPLOYMENT_ID:"public-registry",IS_LOCAL:!1};return await W.fetch(H,N,X)}}var G84=3600000,X84=500,ZC$;var XC$=O(()=>{$C$();sD0();av0();e5();ZC$=ay({ttlMs:G84,maxSize:X84,updateRecencyOnGet:!0})});import{sql as Q84}from"kysely";import{randomUUID as YC$}from"crypto";import{z as J84}from"zod";async function K84($){let Z=new Date().toISOString(),G=YC$(),X=H4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:YC$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await Q84`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function w84($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function U84($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",VV).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):JC$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?QC$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:QC$,rateLimitWindow:W84,rateLimitMax:JC$}}async function F84($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function H84($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function WC$($){let{db:Z,db:G}=$,X=new kf(G),Y=new Sf(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await w84(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await U84(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await F84(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let w;try{w=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let U=Pz$.safeParse(w);if(!U.success)return Q.json({error:"Invalid publish request payload",details:J84.treeifyError(U.error)},400);let F=await H84(G,W,U.data.data.id,U.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:U.data.data.id,title:U.data.data.title,description:U.data.data.description??null,_meta:U.data.data._meta,server:U.data.data.server,requester_name:U.data.requester?.name??null,requester_email:U.data.requester?.email??null});try{await K84({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return r1.capture({distinctId:U.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:U.data.data.title,requester_email:U.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var QC$=!0,W84="hour",JC$=100;var KC$=O(()=>{v4();$6();Ey();sv0();ev0();e5()});var wC$={};e8(wC$,{createPublishRequestHandler:()=>WC$,createPublicMCPHandler:()=>GC$});var UC$=O(()=>{XC$();KC$()});var Dn0={};e8(Dn0,{watchHandler:()=>OC$,getProxyDispatch:()=>E84,createApp:()=>R84});import{readFileSync as N84}from"fs";import{PrometheusSerializer as B84}from"@opentelemetry/exporter-prometheus";import{DBOS as $g}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as j84,oAuthProtectedResourceMetadata as P84}from"better-auth/plugins";async function O84($){let Z=$.connect(),G;try{G=await Promise.race([Z,HC$(FC$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),HC$(FC$)]),G.release(),!0}catch{return G.release(!0),!1}}function HC$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function E84(){if(!K$1)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return K$1}async function D84($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${GC1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function L84($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}async function R84($={}){let Z=$.database??h6(),G=!1;YZ.stop().catch((d)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",d)});let X,Y,Q=new x11,J,W,K,w,U,F=null;if($.disableNats)J=v11(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new Rn,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},U=void 0,K={init:async()=>{},pump:(d)=>{return(async()=>{let m=d.getReader();try{while(!0){let{done:S0}=await m.read();if(S0)break}}catch{}finally{m.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=NS$();let d=z1().natsCredsPath,m;if(d)try{m=N84(d,"utf8")}catch(L1){console.error(`[app] failed to read NATS_CREDS at ${d}; connecting anonymously`,L1)}F.init(z1().natsUrls,m?{creds:m}:void 0);let S0=Qy0()?new of0({getJetStream:()=>F.getJetStream()}):null;S0?.init().catch(()=>{}),X=S0;let v0=new Up0({getJetStream:()=>F.getJetStream()});v0.init().catch(()=>{}),Y=v0,J=v11({getConnection:()=>F.getConnection()}),W=new y11({getConnection:()=>F.getConnection()}),K=new c11({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),w=nS$({getConnection:()=>F.getConnection()}),U=sS$({getConnection:()=>F.getConnection()});let N1=eS$({getConnection:()=>F.getConnection()}),i0=W;W={start:(L1)=>i0.start(L1),broadcast:(L1)=>i0.broadcast(L1),publishControlFrame:(L1,R$)=>{N1.publishControlFrame(L1,R$).catch((N6)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",N6)})},stop:()=>i0.stop()},sP$(F),F.onReady(()=>{S0?.init().catch((L1)=>{console.error("[McpListCache] Deferred init failed:",L1)}),v0.init().catch((L1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",L1)}),J.start(),nl1(()=>F.getConnection()),K.init().catch((L1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",L1)})})}if(Zg)await Zg();af0(X),Fp0(Y);let N={storage:new xf(Z.db),sseHub:YZ},B=new kl0(N),E=new Pl(Z.db),D=new m11(E);D.start(),W.start((d)=>{l50(d),B.execute({type:"CANCEL",taskId:d}).catch((m)=>{console.error("[Decopilot] CancelBroadcast execute failed:",m)})}).catch((d)=>{console.error("[Decopilot] CancelBroadcast start failed:",d)}),F?.onReady(()=>{W.start().catch((d)=>{console.error("[CancelBroadcast] Deferred start failed:",d)})}),K.init().catch((d)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",d)}),Zg=async()=>{await B.stopAll(),B.dispose(),D.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),pl1(),Y.teardown(),af0(null),Fp0(null)};let L=new y1;if(L.use("*",tb0({enabled:(d)=>J_(d,"debug")==="1"})),L.use("*",EL0),L.use("/*",uC1({origin:(d)=>{if(d.includes("localhost")||d.includes("127.0.0.1"))return d;return d},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(d,m)=>{if(await m(),d.req.path.includes("/files/"))return;if(d.req.path.includes("/fs/")&&d.req.path.endsWith("/read"))return;d.header("X-Frame-Options","DENY"),d.header("Content-Security-Policy","frame-ancestors 'none'")}),!z1().noTui)L.use("*",UV$());L.use("*",async(d,m)=>{if(await m(),Qg(d.req.path))return;if(d.res.status>=500){let v0=await d.res.clone().text();console.error(`[5xx Response] ${d.req.method} ${d.req.path} - ${d.res.status}:`,v0)}}),L.get(e7.HEALTH,(d)=>{if(G)return d.json({status:"shutting_down"},503);return d.json({status:"ok"})}),L.get(e7.HEALTH_LIVE,(d)=>{return d.json({status:"ok"})}),L.get(e7.HEALTH_READY,async(d)=>{if(G)return d.json({status:"shutting_down"},503);let m={};if(m.postgres={status:await O84(Z.pool)?"up":"down"},F)m.nats=F.isConnected()?{status:"up"}:{status:"down"};else m.nats={status:"down"};let S0=m.postgres.status==="up",v0=S0?200:503;return d.json({status:S0?"ready":"not_ready",services:m},v0)}),L.get(e7.METRICS,async(d)=>{try{let m=await jL0.collect(),S0=z84.serialize(m.resourceMetrics);return d.text(S0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(m){return console.error("Failed to collect metrics:",m),d.text("# Error collecting metrics",500)}}),L.get(`${e7.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(d)=>{let m=d.req.param("queueName");if(!A84.has(m))return d.json({error:`Unknown queue: ${m}`},404);let S0=await $g.listQueuedWorkflows({queueName:m,status:"ENQUEUED"});return d.json({queue_length:S0.length})}),L.route("/api/config",nk$),L.route("/api/auth/custom",zA$),L.all("/api/auth/*",async(d)=>{return await e6.handler(d.req.raw)});let z=To1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",_V),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",_V),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",rm),L.route("/",Mo1()),L.use("/oauth-proxy/:connectionId/*",_V),L.all("/oauth-proxy/:connectionId/*",NC$);let j=async(d)=>{let S0=await T84()(d.req.raw),v0=await S0.json();return Response.json(v0,S0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",_V),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(d)=>{let S0=await I84()(d.req.raw),v0=await S0.json();return Response.json(v0,S0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=tP$({ttlMs:120000}),M=await wo1({db:Z.db,auth:e6,encryption:{key:z1().encryptionKey},observability:{tracer:kU,meter:g8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:w,publishLinkControlFrame:(d,m)=>W.publishControlFrame(d,m)});mH.set(M);let S=new cO(z1().encryptionKey);rI1({db:Z.db,baseUrl:hJ()});let q=T80(Z.db),V=new Nl(Z.db),p=JV$({db:Z.db});Qp0({storage:q,meshContextFactory:p}),yl0({meshContextFactory:p,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:YZ},prepareLinkWorkFn:UR$,workPublisher:U}),bl0({dispatchRunFn:KR$,meshContextFactory:p,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:YZ}});let f=new xf(Z.db);X6$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let d=F?.getConnection();return d?await BC$.jetstreamManager(d):null},messageParts:f.messageParts(),resolveRun:async(d)=>{let m=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",d).executeTakeFirst();return m?{orgId:m.organization_id,createdBy:m.created_by,version:m.message_storage_version??1,status:m.status,runFenceToken:m.run_fence_token,title:m.title??null}:null},completeRunIfNotCompleted:async(d,m)=>{let S0=await f.completeRunIfNotCompleted(d,m);return mD0(YZ,m,d,S0),S0},markRunRequiresAction:async(d,m)=>{let S0=await f.requiresActionIfInProgress(d,m);return mD0(YZ,m,d,S0),S0},markRunFailed:async(d,m,S0,v0)=>{let N1=await f.markRunFailed(d,m,S0,v0);return mD0(YZ,m,d,N1),N1},persistTitle:(d,m,S0)=>f.update(d,m,{title:S0}),onTitleUpdated:async({runId:d,orgId:m,title:S0})=>{let v0=await f.get(d,m).catch(()=>null);YZ.emit(m,P3(d,v0?.status??"in_progress",{title:S0,virtualMcpId:v0?.virtual_mcp_id??void 0,createdBy:v0?.created_by,triggerId:v0?.trigger_id,branch:v0?.branch??null,createdAt:v0?.created_at,updatedAt:v0?.updated_at}))},bumpProgress:async({runId:d,orgId:m})=>{await f.bumpProgress(d,m)},recordCompleted:async({runId:d,orgId:m,distinctId:S0,usage:v0})=>{r1.capture({distinctId:S0,event:"chat_message_completed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",input_tokens:v0.inputTokens,output_tokens:v0.outputTokens,total_tokens:v0.totalTokens}})},recordFailed:async({runId:d,orgId:m,distinctId:S0,reason:v0,kind:N1})=>{r1.capture({distinctId:S0,event:"chat_message_failed",groups:{organization:m},properties:{organization_id:m,thread_id:d,transport:"projector",error_category:N1,error_message:v0}})},purgeRun:async(d)=>{K.purge(d)}}),hQ$({meshContextFactory:p,systemDatabaseUrl:Ff1(z1().databaseUrl,z1().databasePgSsl),streamBuffer:K}),YV$(),oI1();let v=async(d,m,S0)=>{let v0=await q.findById(d,m);if(!v0)throw Error("Automation not found");return Kp0({automationId:v0.id,organizationId:v0.organization_id,triggerId:null})},Z0=new Cy(q,({automation:d,trigger:m,contextMessages:S0,idempotencyKey:v0})=>Tn({automationId:d.id,organizationId:d.organization_id,triggerId:m.id,contextMessages:S0},{idempotencyKey:v0})),a=[lQ(),oV(),OK()];for(let d of a)pD0(d).then(()=>{}).catch((m)=>console.error("[monitoring] Retention cleanup failed:",m));let B0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((d)=>console.error("[auth] Expired API key cleanup failed:",d));B0(),setInterval(B0,86400000).unref(),L.use("*",async(d,m)=>{if(BL0(d.req.path))return m();let S0={measure:async(N1,i0)=>{$Q(d,N1);try{return await i0()}finally{eX(d,N1)}}},v0=await mH.create(d.req.raw,{timings:S0});v0.automationRunner=v,d.set("meshContext",v0);try{await m()}finally{let N1=v0.pendingRevalidations;if(N1.length>0)Promise.race([Promise.allSettled(N1),new Promise((L1)=>setTimeout(L1,30000))]).catch((L1)=>console.error("[mesh] revalidation cleanup error:",L1))}}),L.use("/api/:org/decopilot/*",fV),L.use("/api/:org/v1/*",fV),L.use("/api/:org/files/*",fV),L.use("*",async(d,m)=>{let S0=d.req.path;if(S0.startsWith("/api/org-sso/")||S0.startsWith("/api/auth/")||S0.startsWith("/api/tools/management")||S0.startsWith("/oauth-proxy/"))return m();let v0=d.get("meshContext");if(!v0?.organization?.id||!v0?.auth?.user?.id)return m();if(!(await v0.storage.orgSsoConfig.getByOrgId(v0.organization.id))?.enforced)return m();if(!await v0.storage.orgSsoSessions.isValid(v0.auth.user.id,v0.organization.id))return d.json({error:"SSO authentication required for this organization"},403);return m()});let O0=new y1;O0.use("*",gQ({mountPath:"/api/org-sso"})),O0.route("/",IE0()),L.route("/api/org-sso",O0),L.get("/api/tools/management",(d)=>{return d.json({tools:ob0,grouped:SO()})}),L.use("/mcp/*",async(d,m)=>{$Q(d,"mcp");try{return await m()}finally{eX(d,"mcp")}});let K0=async(d,m)=>{let S0=d.var.meshContext;if(!S0.auth.user?.id&&!S0.auth.apiKey?.id){let v0=new URL(d.req.url);return d.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${v0.origin}${v0.pathname}/.well-known/oauth-protected-resource"`}})}return await m()};if(L.use("/mcp/:connectionId?",K0),L.use("/mcp/gateway/:virtualMcpId?",K0),L.use("/mcp/virtual-mcp/:virtualMcpId?",K0),L.use("/mcp/self",K0),A3()){let{mountDevRoutes:d}=(MV$(),YL0(qV$));d(L,K0)}let J0=new y1;J0.use("*",gQ({mountPath:"/mcp"})),J0.route("/",FN0()),L.route("/mcp",J0);let s=new y1;s.use("*",gQ({mountPath:"/mcp/self"})),s.route("/",_D0()),L.route("/mcp/self",s);let A0=new y1;A0.use("*",gQ({mountPath:"/mcp"})),A0.route("/",BN0()),L.route("/mcp",A0),L.use("/api/:org/models/*",async(d,m)=>{$Q(d,"llm_models");try{return await m()}finally{eX(d,"llm_models")}});let U0=he0({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:w});if(L.route("/api",U0),F!=null)K$1=tS$({getConnection:()=>F?.getConnection()??null});L.route("/api",Sk$()),L.get("/api/links/me",async(d)=>{try{let m=d.req.header("authorization")??"",S0=/^Bearer\s+(.+)$/i.exec(m),v0=null;if(S0){let i0=(S0[1]??"").trim();v0=await Hk$(i0,e6.api)}else v0=d.get("meshContext")?.auth?.user?.id??null;if(!v0)return d.json({error:"unauthorized"},401);let N1=w?await w(v0):{online:!1,capabilities:[]};if(!N1.online)return d.json(null);return d.json({hostname:N1.hostname,cliVersion:N1.cliVersion})}catch(m){return console.error("[links/me] presence probe failed; reporting offline:",m instanceof Error?m.message:String(m)),d.json(null)}}),L.use("/api/:org/files/*",fV),L.route("/api",ok$);let f0=new y1;f0.use("*",gQ({mountPath:"/api"})),f0.route("/",fD0()),L.route("/api",f0),L.route("/api",uk$);let m0=new y1;m0.use("*",gQ({mountPath:"/api"})),m0.route("/",xD0({tokenStorage:V,automationEventDispatcher:Z0})),L.route("/api",m0);let x0=new Ol(Z.db),n0=new y1;n0.use("*",gQ({mountPath:"/api"})),n0.route("/",$D0()),L.route("/api",n0),L.route("/api/deco-sites",bR$()),L.route("/api/deco-apps",xk$());let N0=new y1;N0.use("*",gQ({mountPath:"/api/deco-sites"})),N0.route("/",GD0()),L.route("/api/deco-sites",N0);let b0=new y1;b0.use("*",gQ({mountPath:"/api/vm-events"})),b0.route("/",_k$()),L.route("/api/vm-events",b0);let{createPublishRequestHandler:I0,createPublicMCPHandler:F0}=await Promise.resolve().then(() => (UC$(),wC$)),Q0={db:Z.db,vault:{encrypt:(d)=>S.encrypt(d),decrypt:(d)=>S.decrypt(d)}},G0=I0(Q0),k0=F0(Q0);L.use("/org/:orgRef/registry/publish-request",_V),L.post("/org/:orgRef/registry/publish-request",G0),L.use("/org/:orgSlug/registry/*",_V),L.all("/org/:orgSlug/registry/*",k0),L.post("/api/:org/registry/publish-request",G0),L.all("/api/:org/registry/*",k0);let i=Uk$({kvStorage:x0,runRegistry:B,streamBuffer:K,sseHub:YZ,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:Z0,mountDevAssets:A3(),mcpAuth:K0,oauthProxyHandler:NC$,watchHandler:OC$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",i),L.notFound((d)=>{return d.json({error:"Not Found",path:d.req.path},404)}),L.onError(zR$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([YZ.stop(),Zg?Promise.resolve(Zg()).finally(()=>{Zg=null}):Promise.resolve()]),F)await F.drain().catch((d)=>console.error("[shutdown] NATS drain error:",d));console.log("[shutdown] Flushing telemetry..."),await xY().catch((d)=>console.error("[shutdown] Telemetry flush error:",d)),console.log("[shutdown] Closing database..."),await Nf1(Z).catch((d)=>console.error("[shutdown] Database close error:",d)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await $g.registerQueue(fY,{partitionQueue:!0,concurrency:Gp0,minPollingIntervalMs:Xp0}),await $g.registerQueue(dQ,{partitionQueue:!0,concurrency:vl0}),await $g.registerQueue(BK,{partitionQueue:!0,concurrency:Cl0}),await $g.registerQueue(MU,{partitionQueue:!0,concurrency:gQ$}),await le0(q),await Promise.allSettled(["automations-gate","automations-global"].map((d)=>$g.deleteQueue(d))),await Yp0(Z.pool),vy1().catch((d)=>{console.error("[studio-pack-backfill] failed:",d)}),aI1().catch((d)=>{console.error("[org-fs] public-sets boot sync kick failed:",d)})}})}var BC$,FC$=5000,K$1=null,Zg=null,NC$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("meshContext");if(!Y)Y=await mH.create($.req.raw),$.set("meshContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await zx(J.connection_url),K,w=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=w.origin;let U=await om(K);if(!U.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await U.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let q=N.searchParams.get("redirect_uri");if(q){let V=z1().baseUrl??B.origin;try{let p=new URL(q),f=new URL(V);if(!(p.origin===f.origin||p.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",q)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(XC1(J.connection_url))try{let V=await D84(Y,J.organization_id),p=L84(V);for(let[f,v]of p)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let E={Accept:$.req.header("Accept")||"application/json"},D=$.req.header("Content-Type");if(D)E["Content-Type"]=D;let L=$.req.header("Authorization");if(L)E.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&D?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let a=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=a||null,P=B0||null}}catch{}let q=await $.req.formData();if(q.has("resource"))q.set("resource",J.connection_url);let V=q.get("client_id"),p=q.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof p==="string"&&p)P=p;let f=new URLSearchParams;for(let[v,Z0]of q.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&D?.toLowerCase().includes("application/json")){let q=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),p={};try{p=V?JSON.parse(V):{}}catch{z=V}let f=typeof p==="object"&&p!==null&&!Array.isArray(p);if(z===void 0&&!f)z=V;if(z===void 0){let v=p,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...q?.slug?{organization_slug:q.slug}:{},...q?.name?{organization_name:q.name}:{}},z=JSON.stringify(v),E["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:E,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[q,V]of A.headers.entries())if(!S.includes(q.toLowerCase()))M.set(q,V);if(X==="token"&&A.ok){let q=await A.text();try{let V=JSON.parse(q);if(typeof V.access_token==="string"&&V.access_token){let p=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await jx(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:p,clientId:j,clientSecret:P,tokenEndpoint:f};await new S5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(q,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},OC$=async($)=>{let Z=$.var.meshContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return hQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!YZ.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(U)=>{W.writeSSE({id:U.id,event:U.type,data:JSON.stringify(U)}).catch(()=>{YZ.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let w=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(w)})},30000);await new Promise((U)=>{W.onAbort(()=>{clearInterval(w),YZ.remove(X,J),U()})})})},z84,A84,T84=()=>P84(e6),I84=()=>j84(e6);var Ln0=O(()=>{M8();sI1();iG();X_();$6();l6();D10();dC1();rb0();xw();tm();fs0();I3();T5();v4();us0();is0();DR$();ce0();p3();H40();ue0();jR$();de0();Fk$();Vk$();fk$();pe0();vk$();HN0();am();dk$();ON0();O11();pk$();ak$();B11();N11();yt();G$0();BS$();GY();u80();Dl();Np0();OS$();DS$();TS$();pS$();rS$();$V$();Sl0();ZV$();Ly0();Ty0();QV$();N$0();i11();yX();me0();ci();ql0();N$0();xe0();dv0();lv0();WV$();W_();FV$();lV();fs0();zv();m50();BC$=k(PB(),1);z84=new B84,A84=new Set([fY,dQ,BK,MU])});var zC$={};e8(zC$,{resolveClientDir:()=>b84,resolveAssetPathWithTraversalCheck:()=>LC$,isPathWithinDirectory:()=>DC$,createAssetHandler:()=>_84});import{resolve as Mt,dirname as q84,join as M84,extname as k84,basename as S84,sep as EC$}from"path";function V84($,Z){if($===Z||S84($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${EC$}assets${EC$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function DC$($,Z){let G=Mt(Z),X=Mt($);return X===G||X.startsWith(G+"/")}function LC$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Mt(Z,G);if(!DC$(X,Z))return null;return X}function b84($,Z="../client"){let G=new URL($),X=q84(G.pathname);return Mt(X,Z)}function _84($={}){let{env:Z="production",clientDir:G=C84,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=LC$({requestPath:W,clientDir:G});if(!K)return null;let w=M84(K,"index.html"),U=Mt(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(k84(K))?[w,U]:[];for(let B of[K,...N])try{let E=Bun.file(B);if(await E.exists())return new Response(E,{headers:V84(B,U)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var C84="./dist/client";var jC$=()=>{};var PC$={};e8(PC$,{tryUpgradePreviewWs:()=>c84,tryHandlePreviewHttp:()=>h84,previewWebSocketHandler:()=>u84,parsePreviewBaseDomain:()=>g84,isPreviewWsData:()=>eD0,extractHandleFromHost:()=>w$1});function v84($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function y84(){return new Response(x84,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function g84($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function w$1($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function h84($,Z){let G=w$1($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return St(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(pS)&&v84($))return y84();return Y.headers.delete(pS),Y}function St($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function eD0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function c84($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=w$1($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return St(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return St(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return St(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),w=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],U={kind:"preview",upstreamUrl:W,upstreamProtocols:w,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:U}))return St(426,"upgrade failed");return}function kt($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var f84=256,x84='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',u84;var AC$=O(()=>{Nn0();u84={open($){let Z=$.data;if(!eD0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),kt($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{kt($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{kt($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!eD0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=f84){kt($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!eD0(Z))return;kt($,Z,1000,"")}}});var qC$={};e8(qC$,{printBanner:()=>l84,bannerLines:()=>RC$,BANNER_LINES:()=>TC$,BANNER_GRADIENT:()=>IC$});function d84($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function RC$($){let Z=TC$.map((G,X)=>{let[Y,Q,J]=d84(IC$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function l84($){console.log("");for(let Z of RC$($))console.log(Z);console.log("")}var TC$,IC$;var MC$=O(()=>{TC$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],IC$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var SC$={};e8(SC$,{bootstrapDevLinkSession:()=>s84});import{existsSync as m84}from"fs";import{chmod as i84,mkdir as n84,rename as p84,writeFile as t84}from"fs/promises";import{dirname as r84,join as kC$}from"path";function o84($){return kC$($,"dev-link")}function a84($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return kC$(o84($),"session.json")}async function s84($,Z){let G=a84($),X=h6().db,Y=kQ()?await zn():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(m84(G))try{let w=await Bun.file(G).json(),U=w.user?.sub,F=w.accessToken;if(U===Y.id&&typeof F==="string"){if(await e6.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:U}}}catch{}let Q=null;try{Q=await e6.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await n84(r84(G),{recursive:!0});let W=`${G}.tmp`;return await t84(W,JSON.stringify(J,null,2),{mode:384}),await i84(W,384),await p84(W,G),{path:G,userSub:Y.id}}var VC$=O(()=>{I3();xw();kN()});CZ();var L$1="4";function z$1($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:L$1,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}M8();T5();function lb$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function IL0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function $81(){let $=lb$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:IL0($,"--cpu-prof-dir")??process.cwd(),name:IL0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(IL0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}ML0();var ct;function w81(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=KB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),ct=setInterval(()=>void Z().catch(()=>{}),$),ct.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(ct)clearInterval(ct)}}import*as nb$ from"bun:jsc";var{startSamplingProfiler:pb$,samplingProfilerStackTraces:tb$}=nb$;function U81(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{pb$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=tb$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let U of W){let F=U.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??U.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let w=[...K.entries()].sort((U,F)=>F[1]-U[1]).slice(0,8).map(([U,F])=>({frame:U,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:w}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function F81(){$81();let $=[w81(),K81(),U81()];return()=>{for(let Z of $)Z()}}import{existsSync as J64}from"fs";var _Y=z1();s$1();var{DBOS:Vt,DBOSClient:e84}=await import("@dbos-inc/dbos-sdk");function xC$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var $64=[fY,dQ,BK,MU],Z64=_Y.dispatchRole==="worker"?$64:_Y.dispatchRole==="api"?[]:void 0;Vt.setConfig(z$1({systemDatabaseUrl:xC$(_Y.databaseUrl,_Y.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:_Y.podName,listenQueues:Z64}));var{createApp:G64}=await Promise.resolve().then(() => (Ln0(),Dn0)),{isServerPath:X64}=await Promise.resolve().then(() => (yt(),x$1)),{createAssetHandler:Y64,resolveClientDir:vC$}=await Promise.resolve().then(() => (jC$(),zC$)),Q64=_Y.port,CC$=vC$(import.meta.url,"../client"),W64=J64(CC$)?CC$:vC$(import.meta.url,"../dist/client"),K64=Y64({clientDir:W64,isServerPath:X64}),w64={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function U64($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(w64))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:F64,tryHandlePreviewHttp:H64,tryUpgradePreviewWs:N64,previewWebSocketHandler:U$1,isPreviewWsData:F$1}=await Promise.resolve().then(() => (AC$(),PC$)),{getOrInitSharedRunner:B64}=await Promise.resolve().then(() => (Bn(),gY$)),yC$=F64(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),bC$={baseDomain:yC$??"",getRunner:B64},$L0=await G64(),H$1=process.env.DBOS_CONDUCTOR_KEY?.trim(),_C$=process.env.DBOS_CONDUCTOR_URL?.trim();await Vt.launch({...H$1?{conductorKey:H$1}:{},...H$1&&_C$?{conductorURL:_C$}:{}});console.log(`[dbos] application version: ${Vt.applicationVersion}`);await $L0.initDbos();if(!_Y.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (MC$(),qC$));console.log("");for(let Z of $())console.log(Z)}var O64=Bun.serve({idleTimeout:0,port:Q64,hostname:"0.0.0.0",fetch:async($,Z)=>{if(yC$){let X=await N64($,Z,bC$);if(X===void 0)return;if(X)return X;let Y=await H64($,bC$);if(Y)return Y}let G=await K64($);if(G)return U64(G);return $L0.fetch($,{server:Z})},websocket:{open($){if(F$1($.data))U$1.open($)},message($,Z){if(F$1($.data))U$1.message($,Z)},close($){if(F$1($.data))U$1.close($)}},development:!1}),E64=F81();if(_Y.localMode)Promise.resolve().then(() => (kN(),iH0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (VC$(),SC$)),Y=_Y.baseUrl??`http://localhost:${_Y.port}`,Q=await X(_Y.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (kN(),iH0));Z()}catch{}});var fC$=!1;async function D64($){let Z;try{Z=await e84.create({systemDatabaseUrl:xC$(_Y.databaseUrl,_Y.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:dQ,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:dQ}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function ZL0($){if(fC$)return;fC$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{E64(),$L0.markShuttingDown();let Q=Number(process.env.SHUTDOWN_DRAIN_MS??Math.floor(G*0.6));await G4(Q),await O64.stop(!0);let J=Vt.executorID;await Vt.shutdown(),await D64(J),await $L0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>ZL0("SIGTERM"));process.on("SIGINT",()=>ZL0("SIGINT"));process.on("SIGHUP",()=>ZL0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),ZL0("uncaughtException")});