npm - decocms - Versions diffs - 4.92.1 → 4.92.2 - Mend

decocms 4.92.1 → 4.92.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (234) hide show

package/dist/server/server.js CHANGED Viewed

@@ -2560,7 +2560,7 @@ Hint: Configure a valid Google account email in Monitor Configuration > Contexto
 `).trim(),H=w.length>0?`Not executed tools (${w.length}/${$.tools.length}): ${w.join(", ")}`:"",N=[F,H].filter((B)=>B.length>0).join(`
-`);return{toolResults:K,agentSummary:N.length>0?N:null,unexecutedTools:w}}finally{await Z.close?.().catch(()=>{})}}async function de0($,Z){let G=$.storage.registry,X=$.organization.id,Y=await G.monitorConnections.findByItemId(X,Z.id);if(Y){if(await $.storage.connections.findById(Y.connection_id,X))return Y.connection_id}let Q=qu6(Z);if(!Q)throw Error(`Registry item ${Z.id} has no remote URL`);if(ge0(Q))throw Error(`Registry item ${Z.id} targets a private network URL, refusing to create a monitor connection`);let J=Iu6($),W=Ru6(Z),K=await $.storage.connections.create({organization_id:X,created_by:J,title:`[MCP Tester] ${Z.title}`,description:`Auto-created monitor connection for ${Z.id}`,app_name:"private-registry-monitor",app_id:`${QC}:monitor`,connection_type:W,connection_url:Q,metadata:{monitorConnection:!0,registryItemId:Z.id,pluginId:QC}});return await G.monitorConnections.upsert({organization_id:X,item_id:Z.id,connection_id:K.id,auth_status:"none"}),K.id}async function vu6($){let Z=$.ctx.storage.registry;switch($.action){case"unlisted":return await Z.items.update($.organizationId,$.item.id,{is_unlisted:!0}),"unlisted";case"remove_public":return await Z.items.update($.organizationId,$.item.id,{is_public:!1}),"removed_public";case"remove_private":case"remove_all":return await Z.items.delete($.organizationId,$.item.id),$.action==="remove_all"?"removed_all":"removed_private";default:return"none"}}async function yu6($){let Z=Date.now();if($.signal.aborted)throw Error("Run cancelled");let G="passed",X=!1,Y=!1,Q=null,J="none",W=null,K=[],U=null,w=async()=>{await $.onProgress?.({status:G,connectionOk:X,toolsListed:Y,toolResults:[...K],agentSummary:W,errorMessage:Q,actionTaken:J,durationMs:Date.now()-Z})};try{let F=await de0($.ctx,$.item);U=await $.ctx.createMCPProxy(F),X=!0;let N=(await At(U.listTools?U.listTools():Promise.resolve({tools:[]}),$.monitorConfig.perMcpTimeoutMs,`listTools ${$.item.id}`)).tools??[];if(Y=!0,$.monitorConfig.monitorMode!=="health_check")K.push(...N.map((B)=>ue0(B.name))),await w();if($.monitorConfig.monitorMode==="full_agent"){let B=await xu6({ctx:$.ctx,monitorConfig:$.monitorConfig,item:$.item,proxy:U,tools:N,signal:$.signal,onProgress:async(D)=>{K.length=0,K.push(...VT$({discoveredTools:N,executedResults:D})),G=D.some((E)=>!E.success)?"failed":"passed",await w()}});if(K.length=0,K.push(...VT$({discoveredTools:N,executedResults:B.toolResults})),W=B.agentSummary,B.toolResults.some((D)=>!D.success))G="failed";if(B.unexecutedTools.length>0){if(G="failed",!Q)Q=`Agent skipped ${B.unexecutedTools.length} tool(s): ${B.unexecutedTools.join(", ")}`}}else if($.monitorConfig.monitorMode!=="health_check"){for(let B=0;B<N.length;B++){let D=N[B];if(!D||$.signal.aborted)throw Error("Run cancelled");let E=Date.now();try{let L={},z=await At(U.callTool({name:D.name,arguments:L}),$.monitorConfig.perToolTimeoutMs,`tool ${D.name}`),j=!z.isError,P=Date.now()-E;CT$(K,{toolName:D.name,success:j,input:L,durationMs:P,outputPreview:xT$(z.structuredContent??z.content),error:j?null:LE0(z.content?.find((A)=>A.type==="text")?.text?.slice(0,300)??"Tool returned error")}),await w()}catch(L){let z=Date.now()-E,j=L instanceof Error?L.message:String(L);CT$(K,{toolName:D.name,success:!1,durationMs:z,error:LE0(j)}),await w()}}if(K.some((B)=>!B.success))G="failed"}else for(let B of N)K.push(ue0(B.name));if($.canApplyFailureAction&&G==="failed"&&$.monitorConfig.onFailure!=="none")J=await vu6({ctx:$.ctx,organizationId:$.organizationId,item:$.item,action:$.monitorConfig.onFailure})}catch(F){if(Q=F instanceof Error?F.message:String(F),Mu6(F))G="needs_auth",await $.ctx.storage.registry.monitorConnections.updateAuthStatus($.organizationId,$.item.id,"needs_auth");else G="error"}finally{await U?.close?.().catch(()=>{})}return{status:G,connectionOk:X,toolsListed:Y,toolResults:K,agentSummary:W,errorMessage:Q,actionTaken:J,durationMs:Date.now()-Z}}async function gu6($){let Z=$.ctx.storage.registry,X=(await Z.items.list($.organizationId,{includeUnlisted:!0})).items.filter((w)=>{if($.monitorConfig.testPublicOnly&&!w.is_public)return!1;if($.monitorConfig.testPrivateOnly&&w.is_public)return!1;return!0}),Y=$.monitorConfig.includePendingRequests?(await Z.publishRequests.list($.organizationId,{status:"pending",limit:500})).items.map((w)=>hu6(w)):[],Q=[...X.map((w)=>({item:w,source:"registry_item"})),...Y.map((w)=>({item:w,source:"publish_request"}))];if(Q.length===0){await Z.monitorRuns.update($.organizationId,$.runId,{total_items:0,status:"completed",started_at:new Date().toISOString(),finished_at:new Date().toISOString()});return}await Z.monitorRuns.update($.organizationId,$.runId,{total_items:Q.length,status:"running",started_at:new Date().toISOString()});let J=0,W=0,K=0,U=0;for(let w=0;w<Q.length;w++){let F=Q[w],H=F?.item;if(!H||$.signal.aborted){await Z.monitorRuns.update($.organizationId,$.runId,{status:"cancelled",current_item_id:null,finished_at:new Date().toISOString()});return}await Z.monitorRuns.update($.organizationId,$.runId,{current_item_id:H.id});let N=null,B=async(E)=>{if(!N){N=(await Z.monitorResults.create({run_id:$.runId,organization_id:$.organizationId,item_id:H.id,item_title:H.title,status:E.status,error_message:E.errorMessage,connection_ok:E.connectionOk,tools_listed:E.toolsListed,tool_results:E.toolResults,agent_summary:E.agentSummary,duration_ms:E.durationMs,action_taken:E.actionTaken})).id;return}await Z.monitorResults.update($.organizationId,N,{status:E.status,error_message:E.errorMessage,connection_ok:E.connectionOk,tools_listed:E.toolsListed,tool_results:E.toolResults,agent_summary:E.agentSummary,duration_ms:E.durationMs,action_taken:E.actionTaken})},D=await yu6({ctx:$.ctx,organizationId:$.organizationId,item:H,monitorConfig:$.monitorConfig,signal:$.signal,canApplyFailureAction:F.source==="registry_item",onProgress:B});if(await B({status:D.status,connectionOk:D.connectionOk,toolsListed:D.toolsListed,toolResults:D.toolResults,agentSummary:D.agentSummary,errorMessage:D.errorMessage,actionTaken:D.actionTaken,durationMs:D.durationMs}),J+=1,D.status==="passed")W+=1;else if(D.status==="failed"||D.status==="error")K+=1;else U+=1;await Z.monitorRuns.update($.organizationId,$.runId,{tested_items:J,passed_items:W,failed_items:K,skipped_items:U})}await Z.monitorRuns.update($.organizationId,$.runId,{status:"completed",current_item_id:null,finished_at:new Date().toISOString()})}function hu6($){return{id:`${EB}${$.id}`,title:$.title,description:$.description,_meta:$._meta,server:$.server,is_public:!1,is_unlisted:!0,created_at:$.created_at,updated_at:$.updated_at}}async function cu6($,Z){let G=Tu6($);await G.access.check();let X=G.storage.registry,Y=await X.monitorRuns.create({organization_id:G.organization.id,status:"pending",config_snapshot:Z,started_at:null}),Q=new AbortController;return EE0.set(Y.id,Q),gu6({ctx:G,runId:Y.id,organizationId:G.organization.id,monitorConfig:Z,signal:Q.signal}).catch(async(J)=>{await X.monitorRuns.update(G.organization.id,Y.id,{status:"failed",current_item_id:null,finished_at:new Date().toISOString()}).catch(()=>{}),Au6(`Run ${Y.id} failed with uncaught error:`,J)}).finally(()=>{EE0.delete(Y.id)}),{run:{id:Y.id}}}var EE0,zu6="[MONITOR-AGENT]",ju6,Pu6="health_check: not called",gT$;var zE0=O(()=>{Y1();E6();he0();$g();Iw();EE0=new Map,ju6=KT$;gT$=$0({name:"REGISTRY_MONITOR_RUN_START",description:"Start an MCP registry monitor run with an isolated set of monitor connections.",inputSchema:BT$,outputSchema:OT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=NT$($.config??{}),{run:Y}=await cu6(Z,X),J=await Z.storage.registry.monitorRuns.findById(G.id,Y.id);if(!J)throw Error(`Failed to load monitor run ${Y.id}`);return{run:J}}})});var hT$;var cT$=O(()=>{Y1();Iw();hT$=$0({name:"REGISTRY_MONITOR_RUN_LIST",description:"List MCP registry monitor runs",inputSchema:LT$,outputSchema:zT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),Z.storage.registry.monitorRuns.list(G.id,$)}})});var uT$;var dT$=O(()=>{Y1();Iw();uT$=$0({name:"REGISTRY_MONITOR_RUN_GET",description:"Get details for one MCP registry monitor run",inputSchema:jT$,outputSchema:PT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),{run:await Z.storage.registry.monitorRuns.findById(G.id,$.runId)}}})});var lT$;var mT$=O(()=>{Y1();Iw();zE0();lT$=$0({name:"REGISTRY_MONITOR_RUN_CANCEL",description:"Cancel a running MCP registry monitor run",inputSchema:DT$,outputSchema:ET$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),fT$($.runId),{run:await Z.storage.registry.monitorRuns.update(G.id,$.runId,{status:"cancelled",current_item_id:null,finished_at:new Date().toISOString()})}}})});var iT$;var nT$=O(()=>{Y1();Iw();iT$=$0({name:"REGISTRY_MONITOR_RESULT_LIST",description:"List results for a given MCP registry monitor run",inputSchema:AT$,outputSchema:TT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),Z.storage.registry.monitorResults.listByRun(G.id,$.runId,{status:$.status,limit:$.limit,offset:$.offset})}})});var pT$;var tT$=O(()=>{Y1();Iw();$g();pT$=$0({name:"REGISTRY_MONITOR_CONNECTION_LIST",description:"List monitor connection mappings for private registry MCP monitor runs, including auth status",inputSchema:IT$,outputSchema:RT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await X.monitorConnections.list(G.id);return{items:await Promise.all(Y.map(async(J)=>{let W=await X.items.findById(G.id,J.item_id);if(!W&&J.item_id.startsWith(EB)){let w=J.item_id.slice(EB.length),F=await X.publishRequests.findById(G.id,w);if(F)W={id:J.item_id,title:F.title,description:F.description,_meta:F._meta,server:F.server,is_public:!1,is_unlisted:!0,created_at:F.created_at,updated_at:F.updated_at}}let K=W?.server.remotes?.find((w)=>w.url)?.url??null,U=J.item_id.startsWith(EB)?"request":"store";return{mapping:J,item:W,remoteUrl:K,source:U}}))}}})});function uu6($){return{id:`${EB}${$.id}`,title:$.title,description:$.description,_meta:$._meta,server:$.server,is_public:!1,is_unlisted:!0,created_at:$.created_at,updated_at:$.updated_at}}var rT$;var oT$=O(()=>{Y1();Iw();zE0();$g();rT$=$0({name:"REGISTRY_MONITOR_CONNECTION_SYNC",description:"Ensure every registry item has a dedicated monitor connection mapping for MCP monitors",inputSchema:qT$,outputSchema:MT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=(await X.items.list(G.id,{includeUnlisted:!0})).items,J=(await X.publishRequests.list(G.id,{status:"pending",limit:500})).items.map(uu6),W=[...Y,...J],K=await X.monitorConnections.list(G.id),U=new Set(K.map((F)=>F.item_id)),w=0;for(let F of W){if(!F.server.remotes?.some((H)=>H.url))continue;try{await de0(Z,F)}catch(H){console.warn(`[REGISTRY_MONITOR_CONNECTION_SYNC] Skipping ${F.id}:`,H instanceof Error?H.message:H);continue}if(!U.has(F.id))w+=1}return{created:w,updated:Math.max(W.length-w,0)}}})});var aT$;var sT$=O(()=>{Y1();Iw();aT$=$0({name:"REGISTRY_MONITOR_CONNECTION_UPDATE_AUTH",description:"Update the auth_status of a monitor connection mapping (by core connection ID)",inputSchema:kT$,outputSchema:ST$,handler:async({connectionId:$,authStatus:Z},G)=>{let X=O0(G);await G.access.check();let Y=G.storage.registry,Q=X.id,J=await Y.monitorConnections.findByConnectionId(Q,$);if(!J)throw Error(`No monitor connection mapping found for connection ${$}`);return await Y.monitorConnections.updateAuthStatus(Q,J.item_id,Z),{success:!0}}})});function du6($){if(!$)return{};if(typeof $==="string")try{return JSON.parse($)}catch{return{}}if(typeof $==="object")return $;return{}}async function Tt($,Z){let X=(await $.db.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",QC).execute()).map((Q)=>du6(Q.settings)),Y={acceptPublishRequests:X.some((Q)=>Q.acceptPublishRequests===!0),requireApiToken:X.some((Q)=>Q.requireApiToken===!0),storePrivateOnly:X.some((Q)=>Q.storePrivateOnly===!0)};if(Y.acceptPublishRequests||Y.requireApiToken||Y.storePrivateOnly)return Y;for(let Q of X)if(Object.keys(Q).length>0)return Q;return{}}var eT$=O(()=>{$g()});import{z as le0}from"zod";function lu6($,Z){if(!Z)return $;let G={field:["is_public"],operator:"eq",value:!1};if(!$)return G;return{operator:"and",conditions:[$,G]}}function mu6($){let Z=new Map,G=new Map;for(let Y of $){let Q=Y._meta?.["mcp.mesh"];for(let J of Q?.tags??[])Z.set(J,(Z.get(J)??0)+1);for(let J of Q?.categories??[])G.set(J,(G.get(J)??0)+1)}let X=(Y)=>Array.from(Y.entries()).map(([Q,J])=>({value:Q,count:J})).sort((Q,J)=>Q.value.localeCompare(J.value));return{tags:X(Z),categories:X(G)}}var $I$,ZI$,GI$,XI$;var YI$=O(()=>{Y1();Y9();eT$();$I$=$0({name:"COLLECTION_REGISTRY_APP_LIST",description:"List registry items for Store discovery. Supports private-only mode from plugin settings.",inputSchema:ry,outputSchema:oy,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id);return X.items.list(G.id,{...$,where:lu6($.where,Y.storePrivateOnly===!0)})}}),ZI$=$0({name:"COLLECTION_REGISTRY_APP_GET",description:"Get a registry item for Store details. Respects private-only mode from plugin settings.",inputSchema:FK,outputSchema:YC,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id),Q=$.id??$.name;if(!Q)return{item:null};let J=await X.items.findByIdOrName(G.id,Q);if(!J)return{item:null};if(Y.storePrivateOnly&&J.is_public)return{item:null};return{item:J}}}),GI$=$0({name:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get registry item versions for Store details. Respects private-only mode from plugin settings.",inputSchema:FK,outputSchema:le0.object({versions:le0.array(SJ)}),handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id),Q=$.id??$.name;if(!Q)return{versions:[]};let J=await X.items.findByIdOrName(G.id,Q);if(!J)return{versions:[]};if(Y.storePrivateOnly&&J.is_public)return{versions:[]};return{versions:[J]}}}),XI$=$0({name:"COLLECTION_REGISTRY_APP_FILTERS",description:"List Store filter facets for registry items. Respects private-only mode from plugin settings.",inputSchema:le0.object({}),outputSchema:ay,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry;if(!(await Tt(Z,G.id)).storePrivateOnly)return X.items.getFilters(G.id);let Q=await X.items.list(G.id,{limit:1e4,where:{field:["is_public"],operator:"eq",value:!1}});return mu6(Q.items)}})});var QI$;var JI$=O(()=>{qA$();kA$();VA$();_A$();he0();vA$();gA$();cA$();dA$();mA$();pA$();rA$();aA$();eA$();ZT$();XT$();QT$();WT$();zE0();cT$();dT$();mT$();nT$();tT$();oT$();sT$();YI$();QI$=[$I$,ZI$,GI$,XI$,hA$,uA$,yA$,nA$,SA$,RA$,lA$,CA$,xA$,fA$,MA$,tA$,oA$,sA$,$T$,GT$,YT$,JT$,gT$,hT$,uT$,lT$,iT$,pT$,rT$,aT$]});import{z as Zg}from"zod";var nu6,me0;var WI$=O(()=>{qY();Y1();pv();RX();AV();nu6=Zg.enum(["agent-sandbox","user-desktop","cluster"]),me0=$0({name:"SANDBOX_DELETE",description:"Delete a sandbox.",annotations:{title:"Delete VM Preview",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:Zg.object({virtualMcpId:Zg.string().describe("Virtual MCP ID that owns this VM"),branch:Zg.string().min(1).describe("Branch whose vm should be deleted (sandboxMap[userId][branch])"),sandboxProviderKind:nu6.describe("Kind of sandbox provider the VM was started with. Hosted provider is `agent-sandbox`; legacy `cluster` input is accepted only for compatibility and normalized to `agent-sandbox`. Used to locate the correct 3-level sandboxMap entry.")}),outputSchema:Zg.object({success:Zg.boolean()}),handler:async($,Z)=>{let G=$w($.sandboxProviderKind),X;try{X=await O3$({...$,sandboxProviderKind:G},Z)}catch(W){if(W instanceof Error&&W.message==="Virtual MCP not found")return{success:!0};throw W}let{entry:Y,userId:Q}=X;if(!Y)return{success:!0};let{provider:J}=await CY(Z,{userId:Q,branch:$.branch,virtualMcpMetadata:X.metadata,explicitKind:G});return await qN(Z.storage.virtualMcps,$.virtualMcpId,Q,Q,$.branch,G),await J.delete(Y.sandboxHandle).catch((W)=>console.error(`[SANDBOX_DELETE] ${G} ${Y.sandboxHandle}: ${W instanceof Error?W.message:String(W)}`)),{success:!0}}})});var KI$=O(()=>{SN0();WI$()});import{z as HK}from"zod";var tu6="https://api.github.com",ie0;var UI$=O(()=>{Y1();XN();YN();QJ();ie0=$0({name:"GITHUB_LIST_USER_ORGS",description:"List GitHub App installations (orgs/accounts) accessible to the authenticated user.",annotations:{title:"List GitHub User Orgs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:HK.object({connectionId:HK.string().describe("ID of the mcp-github connection to use")}),outputSchema:HK.object({installations:HK.array(HK.object({installationId:HK.number(),login:HK.string(),avatarUrl:HK.string(),type:HK.string()})),appSlug:HK.string().optional()}),handler:async($,Z)=>{await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization context required");let X=await Z.storage.connections.findById($.connectionId,G);if(!X)throw Error("Connection not found");if(MQ(X))throw Error("Repo-scoped connections cannot list installations \u2014 use an org-level mcp-github connection");let Y=new _5(Z.db,Z.vault),Q=await Y.get($.connectionId);if(!Q)throw Error("No GitHub token found. Ensure the mcp-github connection is authenticated.");let J=Q.accessToken;if(r40(Q)&&Y.isExpired(Q,_i)){let H=await o40(Q,Y);if(!H)throw Error(m7);J=H,Q=await Y.get($.connectionId)??Q}let W=[],K,U=1,w=100,F=async(H)=>fetch(`${tu6}/user/installations?per_page=${w}&page=${U}`,{headers:{Authorization:`Bearer ${H}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"}});while(!0){let H=await F(J);if(H.status===401){let B=await Y.get($.connectionId);if(!B||!r40(B))throw Error(m7);let D=await o40(B,Y);if(!D)throw Error(m7);if(J=D,H=await F(J),H.status===401)throw Error(m7)}if(!H.ok)throw Error(`GitHub /user/installations failed: ${H.status}`);let N=await H.json();for(let B of N.installations){if(!K)K=B.app_slug??B.app?.slug;W.push({installationId:B.id,login:B.account.login,avatarUrl:B.account.avatar_url,type:B.account.type})}if(N.installations.length<w)break;U++}return{installations:W,...K?{appSlug:K}:{}}}})});var wI$=O(()=>{UI$()});import{z as o1}from"zod";var ne0,Ip9,FI$,ou6,It,au6,su6,Rp9;var pe0=O(()=>{ne0=o1.enum(["claude-code","codex","decopilot-sandbox","body-offload"]),Ip9=o1.array(o1.string()).catch([]).transform(($)=>$.filter((Z)=>ne0.safeParse(Z).success)),FI$=o1.discriminatedUnion("type",[o1.object({type:o1.literal("ui-message-chunk"),chunk:o1.unknown()}),o1.object({type:o1.literal("error"),code:o1.string(),message:o1.string()}),o1.object({type:o1.literal("done")})]),ou6=o1.record(o1.string(),o1.unknown()),It=o1.object({id:o1.string(),title:o1.string().optional(),provider:o1.string().nullable().optional(),credentialId:o1.string(),limits:o1.object({contextWindow:o1.number().int().positive().optional(),maxOutputTokens:o1.number().int().positive().optional()}).optional(),capabilities:o1.object({vision:o1.boolean().optional(),text:o1.boolean().optional(),reasoning:o1.boolean().optional()}).optional()}).strict(),au6=o1.object({thinking:It.extend({title:o1.string()}),fast:It.optional(),smart:It.optional(),image:It.optional(),deepResearch:It.optional()}).strict(),su6=o1.discriminatedUnion("cwd",[o1.object({cwd:o1.literal("/repo"),repo:o1.object({owner:o1.string(),name:o1.string(),connectedGithub:o1.boolean()}).strict(),branch:o1.string().nullable()}).strict(),o1.object({cwd:o1.null()}).strict()]),Rp9=o1.object({harnessId:o1.enum(["decopilot","claude-code","codex"]).optional(),threadId:o1.string(),userMessage:ou6,harness:o1.object({sessionId:o1.string().optional()}).strict(),workspace:su6,models:au6,mcp:o1.object({url:o1.string().url(),headers:o1.record(o1.string(),o1.string()),expiresAt:o1.number().int().positive()}).strict(),mode:o1.enum(["default","plan","web-search","gen-image"]),temperature:o1.number(),toolApprovalLevel:o1.enum(["auto","readonly"]),toolAllowlist:o1.array(o1.string()).nullable().optional(),maxAgentSteps:o1.number().int().optional(),user:o1.object({id:o1.string(),email:o1.string()}).strict(),organizationId:o1.string(),organizationSlug:o1.string().optional(),agent:o1.object({id:o1.string(),instructions:o1.string().optional()}).strict(),triggerId:o1.string().optional(),currentThreadTitle:o1.string().optional(),traceparent:o1.string().optional(),runFenceToken:o1.string().optional()}).strict()});import{z as HI$}from"zod";var Sp9;var NI$=O(()=>{pe0();Sp9=HI$.object({seq:HI$.number().int().positive(),event:FI$})});var BI$=()=>{};var OI$=O(()=>{BI$();NI$();pe0()});var DI$=O(()=>{OI$()});import JC from"zod";var te0;var EI$=O(()=>{DI$();Y1();te0=$0({name:"LINK_CURRENT_GET",description:"Return the calling user's currently registered desktop link, or `online: false` if no link is registered or the TTL has expired.",inputSchema:JC.object({}),outputSchema:JC.object({online:JC.boolean(),machineId:JC.string().optional(),hostname:JC.string().optional(),cliVersion:JC.string().optional(),capabilities:JC.array(ne0).default([])}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.linkStatusProbe;if(!G)return{online:!1,capabilities:[]};let X=await G(Z.auth.user.id);if(!X.online)return{online:!1,capabilities:[]};return{online:!0,hostname:X.hostname,cliVersion:X.cliVersion,capabilities:X.capabilities}}})});import re0 from"zod";var oe0;var LI$=O(()=>{Y1();oe0=$0({name:"LINK_DISCONNECT",description:"Disconnect the calling user's desktop link from the Studio side: tells the linked daemon to shut down (via a `shutdown` control frame) and removes the presence claim. The user re-links by running `bunx decocms@latest link` on the desktop.",inputSchema:re0.object({}),outputSchema:re0.object({disconnected:re0.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.auth.user.id;if(!Z.publishLinkControlFrame)return{disconnected:!1};return Z.publishLinkControlFrame(G,{type:"shutdown"}),{disconnected:!0}}})});var zI$=O(()=>{EI$();LI$()});import{z as g9}from"zod";function jI$($){if(!$)return"";return typeof $==="string"?$:$.toISOString()}var Zd6,Gd6,Xd6,Yd6,Qd6,ae0;var PI$=O(()=>{Y1();Zd6=["thread"],Gd6=g9.object({type:g9.literal("thread"),id:g9.string(),title:g9.string(),created_at:g9.string(),updated_at:g9.string(),virtual_mcp_id:g9.string().nullable(),run_config:g9.record(g9.string(),g9.unknown()).nullable(),status:g9.string().nullable()}),Xd6=g9.discriminatedUnion("type",[Gd6]),Yd6=g9.object({query:g9.string().min(1).describe("Free-text search query."),limit:g9.number().int().min(1).max(50).optional().describe("Maximum results per resource type (default: 20)."),types:g9.array(g9.enum(Zd6)).optional().describe("Restrict the search to specific resource types. Omit to search across all available types.")}),Qd6=g9.object({items:g9.array(Xd6),totalCount:g9.number()});ae0=$0({name:"GLOBAL_SEARCH",description:"Search across organization resources by free-text query. Returns a typed union of matches (currently: threads). New resource types may be added over time without changes to the call shape.",annotations:{title:"Global Search",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Yd6,outputSchema:Qd6,handler:async($,Z)=>{await Z.access.check(),O0(Z);let G=$.limit??20,X=$.types?.length?new Set($.types):null,Y=!X||X.has("thread"),Q=[],J=0;if(Y){let{threads:W,total:K}=await Z.storage.threads.list(void 0,{limit:G,offset:0,search:$.query,includeArchived:!1});J+=K;for(let U of W)Q.push({type:"thread",id:U.id,title:U.title??"",created_at:jI$(U.created_at),updated_at:jI$(U.updated_at),virtual_mcp_id:U.virtual_mcp_id??null,run_config:U.run_config??null,status:U.status??null})}return{items:Q,totalCount:J}}})});var AI$=O(()=>{PI$()});var k50={};G6(k50,{managementMCP:()=>Yy,managementContextStore:()=>MV,listManagementTools:()=>Wd6,TOOL_BY_NAME:()=>Rt,CORE_TOOLS:()=>II$});import{z as TI$}from"zod";async function Wd6($){let Z=await Yy($),[G,X]=Rd.createLinkedPair();await Z.connect(X);let Y=new U9({name:"tools-hydration",version:"1.0.0"},{jsonSchemaValidator:L5});try{return await Y.connect(G),(await Y.listTools()).tools}finally{await Y.close().catch(()=>{}),await Z.close().catch(()=>{})}}var II$,Rt,Yy=async($)=>{let Z=new BU({name:"mcp-cms-management",version:"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:L5});for(let Y of Rt.values()){let{config:Q,handler:J}=YE0(Y);Z.registerTool(Y.name,Q,J)}let G=XE0();for(let Y of G){let Q=Y.arguments?.length?Object.fromEntries(Y.arguments.map((J)=>{let W=J.required?TI$.string():TI$.string().optional();return[J.name,J.description?W.describe(J.description):W]})):void 0;Z.registerPrompt(Y.name,{title:Y.title,description:Y.description,...Q?{argsSchema:Q}:{}},(J)=>{return{messages:[{role:"user",content:{type:"text",text:typeof Y.text==="function"?Y.text(J??{}):Y.text}}]}})}if($.organization?.id){let Y=await $.storage.brandContext.list($.organization.id),Q=new Set;for(let J of Y){let W=J.name.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-|-$/g,""),K=W?`brand-${W}`:`brand-${J.id}`;if(Q.has(K))K=`${K}-${J.id.slice(0,8)}`;Q.add(K);let U=[`# Brand: ${J.name}`,"",`**Domain:** ${J.domain}`,"","## Overview",J.overview];if(J.colors){let F=Object.entries(J.colors).filter(([,H])=>H);if(F.length>0){U.push("","## Colors");for(let[H,N]of F)U.push(`- **${H}:** ${N}`)}}if(J.fonts){let F=Object.entries(J.fonts).filter(([,H])=>H);if(F.length>0){U.push("","## Fonts");for(let[H,N]of F)U.push(`- ${N} (${H})`)}}if(J.logo)U.push("",`**Logo:** ${J.logo}`);if(J.favicon)U.push(`**Favicon:** ${J.favicon}`);if(J.ogImage)U.push(`**OG Image:** ${J.ogImage}`);if(J.images&&J.images.length>0){U.push("","## Images");for(let F of J.images){let H=Object.entries(F).map(([N,B])=>`${N}: ${B}`).join(", ");U.push(`- ${H}`)}}let w=U.join(`
+`);return{toolResults:K,agentSummary:N.length>0?N:null,unexecutedTools:w}}finally{await Z.close?.().catch(()=>{})}}async function de0($,Z){let G=$.storage.registry,X=$.organization.id,Y=await G.monitorConnections.findByItemId(X,Z.id);if(Y){if(await $.storage.connections.findById(Y.connection_id,X))return Y.connection_id}let Q=qu6(Z);if(!Q)throw Error(`Registry item ${Z.id} has no remote URL`);if(ge0(Q))throw Error(`Registry item ${Z.id} targets a private network URL, refusing to create a monitor connection`);let J=Iu6($),W=Ru6(Z),K=await $.storage.connections.create({organization_id:X,created_by:J,title:`[MCP Tester] ${Z.title}`,description:`Auto-created monitor connection for ${Z.id}`,app_name:"private-registry-monitor",app_id:`${QC}:monitor`,connection_type:W,connection_url:Q,metadata:{monitorConnection:!0,registryItemId:Z.id,pluginId:QC}});return await G.monitorConnections.upsert({organization_id:X,item_id:Z.id,connection_id:K.id,auth_status:"none"}),K.id}async function vu6($){let Z=$.ctx.storage.registry;switch($.action){case"unlisted":return await Z.items.update($.organizationId,$.item.id,{is_unlisted:!0}),"unlisted";case"remove_public":return await Z.items.update($.organizationId,$.item.id,{is_public:!1}),"removed_public";case"remove_private":case"remove_all":return await Z.items.delete($.organizationId,$.item.id),$.action==="remove_all"?"removed_all":"removed_private";default:return"none"}}async function yu6($){let Z=Date.now();if($.signal.aborted)throw Error("Run cancelled");let G="passed",X=!1,Y=!1,Q=null,J="none",W=null,K=[],U=null,w=async()=>{await $.onProgress?.({status:G,connectionOk:X,toolsListed:Y,toolResults:[...K],agentSummary:W,errorMessage:Q,actionTaken:J,durationMs:Date.now()-Z})};try{let F=await de0($.ctx,$.item);U=await $.ctx.createMCPProxy(F),X=!0;let N=(await At(U.listTools?U.listTools():Promise.resolve({tools:[]}),$.monitorConfig.perMcpTimeoutMs,`listTools ${$.item.id}`)).tools??[];if(Y=!0,$.monitorConfig.monitorMode!=="health_check")K.push(...N.map((B)=>ue0(B.name))),await w();if($.monitorConfig.monitorMode==="full_agent"){let B=await xu6({ctx:$.ctx,monitorConfig:$.monitorConfig,item:$.item,proxy:U,tools:N,signal:$.signal,onProgress:async(D)=>{K.length=0,K.push(...VT$({discoveredTools:N,executedResults:D})),G=D.some((E)=>!E.success)?"failed":"passed",await w()}});if(K.length=0,K.push(...VT$({discoveredTools:N,executedResults:B.toolResults})),W=B.agentSummary,B.toolResults.some((D)=>!D.success))G="failed";if(B.unexecutedTools.length>0){if(G="failed",!Q)Q=`Agent skipped ${B.unexecutedTools.length} tool(s): ${B.unexecutedTools.join(", ")}`}}else if($.monitorConfig.monitorMode!=="health_check"){for(let B=0;B<N.length;B++){let D=N[B];if(!D||$.signal.aborted)throw Error("Run cancelled");let E=Date.now();try{let L={},z=await At(U.callTool({name:D.name,arguments:L}),$.monitorConfig.perToolTimeoutMs,`tool ${D.name}`),j=!z.isError,P=Date.now()-E;CT$(K,{toolName:D.name,success:j,input:L,durationMs:P,outputPreview:xT$(z.structuredContent??z.content),error:j?null:LE0(z.content?.find((A)=>A.type==="text")?.text?.slice(0,300)??"Tool returned error")}),await w()}catch(L){let z=Date.now()-E,j=L instanceof Error?L.message:String(L);CT$(K,{toolName:D.name,success:!1,durationMs:z,error:LE0(j)}),await w()}}if(K.some((B)=>!B.success))G="failed"}else for(let B of N)K.push(ue0(B.name));if($.canApplyFailureAction&&G==="failed"&&$.monitorConfig.onFailure!=="none")J=await vu6({ctx:$.ctx,organizationId:$.organizationId,item:$.item,action:$.monitorConfig.onFailure})}catch(F){if(Q=F instanceof Error?F.message:String(F),Mu6(F))G="needs_auth",await $.ctx.storage.registry.monitorConnections.updateAuthStatus($.organizationId,$.item.id,"needs_auth");else G="error"}finally{await U?.close?.().catch(()=>{})}return{status:G,connectionOk:X,toolsListed:Y,toolResults:K,agentSummary:W,errorMessage:Q,actionTaken:J,durationMs:Date.now()-Z}}async function gu6($){let Z=$.ctx.storage.registry,X=(await Z.items.list($.organizationId,{includeUnlisted:!0})).items.filter((w)=>{if($.monitorConfig.testPublicOnly&&!w.is_public)return!1;if($.monitorConfig.testPrivateOnly&&w.is_public)return!1;return!0}),Y=$.monitorConfig.includePendingRequests?(await Z.publishRequests.list($.organizationId,{status:"pending",limit:500})).items.map((w)=>hu6(w)):[],Q=[...X.map((w)=>({item:w,source:"registry_item"})),...Y.map((w)=>({item:w,source:"publish_request"}))];if(Q.length===0){await Z.monitorRuns.update($.organizationId,$.runId,{total_items:0,status:"completed",started_at:new Date().toISOString(),finished_at:new Date().toISOString()});return}await Z.monitorRuns.update($.organizationId,$.runId,{total_items:Q.length,status:"running",started_at:new Date().toISOString()});let J=0,W=0,K=0,U=0;for(let w=0;w<Q.length;w++){let F=Q[w],H=F?.item;if(!H||$.signal.aborted){await Z.monitorRuns.update($.organizationId,$.runId,{status:"cancelled",current_item_id:null,finished_at:new Date().toISOString()});return}await Z.monitorRuns.update($.organizationId,$.runId,{current_item_id:H.id});let N=null,B=async(E)=>{if(!N){N=(await Z.monitorResults.create({run_id:$.runId,organization_id:$.organizationId,item_id:H.id,item_title:H.title,status:E.status,error_message:E.errorMessage,connection_ok:E.connectionOk,tools_listed:E.toolsListed,tool_results:E.toolResults,agent_summary:E.agentSummary,duration_ms:E.durationMs,action_taken:E.actionTaken})).id;return}await Z.monitorResults.update($.organizationId,N,{status:E.status,error_message:E.errorMessage,connection_ok:E.connectionOk,tools_listed:E.toolsListed,tool_results:E.toolResults,agent_summary:E.agentSummary,duration_ms:E.durationMs,action_taken:E.actionTaken})},D=await yu6({ctx:$.ctx,organizationId:$.organizationId,item:H,monitorConfig:$.monitorConfig,signal:$.signal,canApplyFailureAction:F.source==="registry_item",onProgress:B});if(await B({status:D.status,connectionOk:D.connectionOk,toolsListed:D.toolsListed,toolResults:D.toolResults,agentSummary:D.agentSummary,errorMessage:D.errorMessage,actionTaken:D.actionTaken,durationMs:D.durationMs}),J+=1,D.status==="passed")W+=1;else if(D.status==="failed"||D.status==="error")K+=1;else U+=1;await Z.monitorRuns.update($.organizationId,$.runId,{tested_items:J,passed_items:W,failed_items:K,skipped_items:U})}await Z.monitorRuns.update($.organizationId,$.runId,{status:"completed",current_item_id:null,finished_at:new Date().toISOString()})}function hu6($){return{id:`${EB}${$.id}`,title:$.title,description:$.description,_meta:$._meta,server:$.server,is_public:!1,is_unlisted:!0,created_at:$.created_at,updated_at:$.updated_at}}async function cu6($,Z){let G=Tu6($);await G.access.check();let X=G.storage.registry,Y=await X.monitorRuns.create({organization_id:G.organization.id,status:"pending",config_snapshot:Z,started_at:null}),Q=new AbortController;return EE0.set(Y.id,Q),gu6({ctx:G,runId:Y.id,organizationId:G.organization.id,monitorConfig:Z,signal:Q.signal}).catch(async(J)=>{await X.monitorRuns.update(G.organization.id,Y.id,{status:"failed",current_item_id:null,finished_at:new Date().toISOString()}).catch(()=>{}),Au6(`Run ${Y.id} failed with uncaught error:`,J)}).finally(()=>{EE0.delete(Y.id)}),{run:{id:Y.id}}}var EE0,zu6="[MONITOR-AGENT]",ju6,Pu6="health_check: not called",gT$;var zE0=O(()=>{Y1();E6();he0();$g();Iw();EE0=new Map,ju6=KT$;gT$=$0({name:"REGISTRY_MONITOR_RUN_START",description:"Start an MCP registry monitor run with an isolated set of monitor connections.",inputSchema:BT$,outputSchema:OT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=NT$($.config??{}),{run:Y}=await cu6(Z,X),J=await Z.storage.registry.monitorRuns.findById(G.id,Y.id);if(!J)throw Error(`Failed to load monitor run ${Y.id}`);return{run:J}}})});var hT$;var cT$=O(()=>{Y1();Iw();hT$=$0({name:"REGISTRY_MONITOR_RUN_LIST",description:"List MCP registry monitor runs",inputSchema:LT$,outputSchema:zT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),Z.storage.registry.monitorRuns.list(G.id,$)}})});var uT$;var dT$=O(()=>{Y1();Iw();uT$=$0({name:"REGISTRY_MONITOR_RUN_GET",description:"Get details for one MCP registry monitor run",inputSchema:jT$,outputSchema:PT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),{run:await Z.storage.registry.monitorRuns.findById(G.id,$.runId)}}})});var lT$;var mT$=O(()=>{Y1();Iw();zE0();lT$=$0({name:"REGISTRY_MONITOR_RUN_CANCEL",description:"Cancel a running MCP registry monitor run",inputSchema:DT$,outputSchema:ET$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry;if(!await X.monitorRuns.findById(G.id,$.runId))throw Error(`Monitor run not found: ${$.runId}`);return fT$($.runId),{run:await X.monitorRuns.update(G.id,$.runId,{status:"cancelled",current_item_id:null,finished_at:new Date().toISOString()})}}})});var iT$;var nT$=O(()=>{Y1();Iw();iT$=$0({name:"REGISTRY_MONITOR_RESULT_LIST",description:"List results for a given MCP registry monitor run",inputSchema:AT$,outputSchema:TT$,handler:async($,Z)=>{let G=O0(Z);return await Z.access.check(),Z.storage.registry.monitorResults.listByRun(G.id,$.runId,{status:$.status,limit:$.limit,offset:$.offset})}})});var pT$;var tT$=O(()=>{Y1();Iw();$g();pT$=$0({name:"REGISTRY_MONITOR_CONNECTION_LIST",description:"List monitor connection mappings for private registry MCP monitor runs, including auth status",inputSchema:IT$,outputSchema:RT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await X.monitorConnections.list(G.id);return{items:await Promise.all(Y.map(async(J)=>{let W=await X.items.findById(G.id,J.item_id);if(!W&&J.item_id.startsWith(EB)){let w=J.item_id.slice(EB.length),F=await X.publishRequests.findById(G.id,w);if(F)W={id:J.item_id,title:F.title,description:F.description,_meta:F._meta,server:F.server,is_public:!1,is_unlisted:!0,created_at:F.created_at,updated_at:F.updated_at}}let K=W?.server.remotes?.find((w)=>w.url)?.url??null,U=J.item_id.startsWith(EB)?"request":"store";return{mapping:J,item:W,remoteUrl:K,source:U}}))}}})});function uu6($){return{id:`${EB}${$.id}`,title:$.title,description:$.description,_meta:$._meta,server:$.server,is_public:!1,is_unlisted:!0,created_at:$.created_at,updated_at:$.updated_at}}var rT$;var oT$=O(()=>{Y1();Iw();zE0();$g();rT$=$0({name:"REGISTRY_MONITOR_CONNECTION_SYNC",description:"Ensure every registry item has a dedicated monitor connection mapping for MCP monitors",inputSchema:qT$,outputSchema:MT$,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=(await X.items.list(G.id,{includeUnlisted:!0})).items,J=(await X.publishRequests.list(G.id,{status:"pending",limit:500})).items.map(uu6),W=[...Y,...J],K=await X.monitorConnections.list(G.id),U=new Set(K.map((F)=>F.item_id)),w=0;for(let F of W){if(!F.server.remotes?.some((H)=>H.url))continue;try{await de0(Z,F)}catch(H){console.warn(`[REGISTRY_MONITOR_CONNECTION_SYNC] Skipping ${F.id}:`,H instanceof Error?H.message:H);continue}if(!U.has(F.id))w+=1}return{created:w,updated:Math.max(W.length-w,0)}}})});var aT$;var sT$=O(()=>{Y1();Iw();aT$=$0({name:"REGISTRY_MONITOR_CONNECTION_UPDATE_AUTH",description:"Update the auth_status of a monitor connection mapping (by core connection ID)",inputSchema:kT$,outputSchema:ST$,handler:async({connectionId:$,authStatus:Z},G)=>{let X=O0(G);await G.access.check();let Y=G.storage.registry,Q=X.id,J=await Y.monitorConnections.findByConnectionId(Q,$);if(!J)throw Error(`No monitor connection mapping found for connection ${$}`);return await Y.monitorConnections.updateAuthStatus(Q,J.item_id,Z),{success:!0}}})});function du6($){if(!$)return{};if(typeof $==="string")try{return JSON.parse($)}catch{return{}}if(typeof $==="object")return $;return{}}async function Tt($,Z){let X=(await $.db.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",QC).execute()).map((Q)=>du6(Q.settings)),Y={acceptPublishRequests:X.some((Q)=>Q.acceptPublishRequests===!0),requireApiToken:X.some((Q)=>Q.requireApiToken===!0),storePrivateOnly:X.some((Q)=>Q.storePrivateOnly===!0)};if(Y.acceptPublishRequests||Y.requireApiToken||Y.storePrivateOnly)return Y;for(let Q of X)if(Object.keys(Q).length>0)return Q;return{}}var eT$=O(()=>{$g()});import{z as le0}from"zod";function lu6($,Z){if(!Z)return $;let G={field:["is_public"],operator:"eq",value:!1};if(!$)return G;return{operator:"and",conditions:[$,G]}}function mu6($){let Z=new Map,G=new Map;for(let Y of $){let Q=Y._meta?.["mcp.mesh"];for(let J of Q?.tags??[])Z.set(J,(Z.get(J)??0)+1);for(let J of Q?.categories??[])G.set(J,(G.get(J)??0)+1)}let X=(Y)=>Array.from(Y.entries()).map(([Q,J])=>({value:Q,count:J})).sort((Q,J)=>Q.value.localeCompare(J.value));return{tags:X(Z),categories:X(G)}}var $I$,ZI$,GI$,XI$;var YI$=O(()=>{Y1();Y9();eT$();$I$=$0({name:"COLLECTION_REGISTRY_APP_LIST",description:"List registry items for Store discovery. Supports private-only mode from plugin settings.",inputSchema:ry,outputSchema:oy,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id);return X.items.list(G.id,{...$,where:lu6($.where,Y.storePrivateOnly===!0)})}}),ZI$=$0({name:"COLLECTION_REGISTRY_APP_GET",description:"Get a registry item for Store details. Respects private-only mode from plugin settings.",inputSchema:FK,outputSchema:YC,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id),Q=$.id??$.name;if(!Q)return{item:null};let J=await X.items.findByIdOrName(G.id,Q);if(!J)return{item:null};if(Y.storePrivateOnly&&J.is_public)return{item:null};return{item:J}}}),GI$=$0({name:"COLLECTION_REGISTRY_APP_VERSIONS",description:"Get registry item versions for Store details. Respects private-only mode from plugin settings.",inputSchema:FK,outputSchema:le0.object({versions:le0.array(SJ)}),handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry,Y=await Tt(Z,G.id),Q=$.id??$.name;if(!Q)return{versions:[]};let J=await X.items.findByIdOrName(G.id,Q);if(!J)return{versions:[]};if(Y.storePrivateOnly&&J.is_public)return{versions:[]};return{versions:[J]}}}),XI$=$0({name:"COLLECTION_REGISTRY_APP_FILTERS",description:"List Store filter facets for registry items. Respects private-only mode from plugin settings.",inputSchema:le0.object({}),outputSchema:ay,handler:async($,Z)=>{let G=O0(Z);await Z.access.check();let X=Z.storage.registry;if(!(await Tt(Z,G.id)).storePrivateOnly)return X.items.getFilters(G.id);let Q=await X.items.list(G.id,{limit:1e4,where:{field:["is_public"],operator:"eq",value:!1}});return mu6(Q.items)}})});var QI$;var JI$=O(()=>{qA$();kA$();VA$();_A$();he0();vA$();gA$();cA$();dA$();mA$();pA$();rA$();aA$();eA$();ZT$();XT$();QT$();WT$();zE0();cT$();dT$();mT$();nT$();tT$();oT$();sT$();YI$();QI$=[$I$,ZI$,GI$,XI$,hA$,uA$,yA$,nA$,SA$,RA$,lA$,CA$,xA$,fA$,MA$,tA$,oA$,sA$,$T$,GT$,YT$,JT$,gT$,hT$,uT$,lT$,iT$,pT$,rT$,aT$]});import{z as Zg}from"zod";var nu6,me0;var WI$=O(()=>{qY();Y1();pv();RX();AV();nu6=Zg.enum(["agent-sandbox","user-desktop","cluster"]),me0=$0({name:"SANDBOX_DELETE",description:"Delete a sandbox.",annotations:{title:"Delete VM Preview",readOnlyHint:!1,destructiveHint:!0,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:Zg.object({virtualMcpId:Zg.string().describe("Virtual MCP ID that owns this VM"),branch:Zg.string().min(1).describe("Branch whose vm should be deleted (sandboxMap[userId][branch])"),sandboxProviderKind:nu6.describe("Kind of sandbox provider the VM was started with. Hosted provider is `agent-sandbox`; legacy `cluster` input is accepted only for compatibility and normalized to `agent-sandbox`. Used to locate the correct 3-level sandboxMap entry.")}),outputSchema:Zg.object({success:Zg.boolean()}),handler:async($,Z)=>{let G=$w($.sandboxProviderKind),X;try{X=await O3$({...$,sandboxProviderKind:G},Z)}catch(W){if(W instanceof Error&&W.message==="Virtual MCP not found")return{success:!0};throw W}let{entry:Y,userId:Q}=X;if(!Y)return{success:!0};let{provider:J}=await CY(Z,{userId:Q,branch:$.branch,virtualMcpMetadata:X.metadata,explicitKind:G});return await qN(Z.storage.virtualMcps,$.virtualMcpId,Q,Q,$.branch,G),await J.delete(Y.sandboxHandle).catch((W)=>console.error(`[SANDBOX_DELETE] ${G} ${Y.sandboxHandle}: ${W instanceof Error?W.message:String(W)}`)),{success:!0}}})});var KI$=O(()=>{SN0();WI$()});import{z as HK}from"zod";var tu6="https://api.github.com",ie0;var UI$=O(()=>{Y1();XN();YN();QJ();ie0=$0({name:"GITHUB_LIST_USER_ORGS",description:"List GitHub App installations (orgs/accounts) accessible to the authenticated user.",annotations:{title:"List GitHub User Orgs",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!0},_meta:{ui:{visibility:"app"}},inputSchema:HK.object({connectionId:HK.string().describe("ID of the mcp-github connection to use")}),outputSchema:HK.object({installations:HK.array(HK.object({installationId:HK.number(),login:HK.string(),avatarUrl:HK.string(),type:HK.string()})),appSlug:HK.string().optional()}),handler:async($,Z)=>{await Z.access.check();let G=Z.organization?.id;if(!G)throw Error("Organization context required");let X=await Z.storage.connections.findById($.connectionId,G);if(!X)throw Error("Connection not found");if(MQ(X))throw Error("Repo-scoped connections cannot list installations \u2014 use an org-level mcp-github connection");let Y=new _5(Z.db,Z.vault),Q=await Y.get($.connectionId);if(!Q)throw Error("No GitHub token found. Ensure the mcp-github connection is authenticated.");let J=Q.accessToken;if(r40(Q)&&Y.isExpired(Q,_i)){let H=await o40(Q,Y);if(!H)throw Error(m7);J=H,Q=await Y.get($.connectionId)??Q}let W=[],K,U=1,w=100,F=async(H)=>fetch(`${tu6}/user/installations?per_page=${w}&page=${U}`,{headers:{Authorization:`Bearer ${H}`,Accept:"application/vnd.github+json","X-GitHub-Api-Version":"2022-11-28"}});while(!0){let H=await F(J);if(H.status===401){let B=await Y.get($.connectionId);if(!B||!r40(B))throw Error(m7);let D=await o40(B,Y);if(!D)throw Error(m7);if(J=D,H=await F(J),H.status===401)throw Error(m7)}if(!H.ok)throw Error(`GitHub /user/installations failed: ${H.status}`);let N=await H.json();for(let B of N.installations){if(!K)K=B.app_slug??B.app?.slug;W.push({installationId:B.id,login:B.account.login,avatarUrl:B.account.avatar_url,type:B.account.type})}if(N.installations.length<w)break;U++}return{installations:W,...K?{appSlug:K}:{}}}})});var wI$=O(()=>{UI$()});import{z as o1}from"zod";var ne0,Ip9,FI$,ou6,It,au6,su6,Rp9;var pe0=O(()=>{ne0=o1.enum(["claude-code","codex","decopilot-sandbox","body-offload"]),Ip9=o1.array(o1.string()).catch([]).transform(($)=>$.filter((Z)=>ne0.safeParse(Z).success)),FI$=o1.discriminatedUnion("type",[o1.object({type:o1.literal("ui-message-chunk"),chunk:o1.unknown()}),o1.object({type:o1.literal("error"),code:o1.string(),message:o1.string()}),o1.object({type:o1.literal("done")})]),ou6=o1.record(o1.string(),o1.unknown()),It=o1.object({id:o1.string(),title:o1.string().optional(),provider:o1.string().nullable().optional(),credentialId:o1.string(),limits:o1.object({contextWindow:o1.number().int().positive().optional(),maxOutputTokens:o1.number().int().positive().optional()}).optional(),capabilities:o1.object({vision:o1.boolean().optional(),text:o1.boolean().optional(),reasoning:o1.boolean().optional()}).optional()}).strict(),au6=o1.object({thinking:It.extend({title:o1.string()}),fast:It.optional(),smart:It.optional(),image:It.optional(),deepResearch:It.optional()}).strict(),su6=o1.discriminatedUnion("cwd",[o1.object({cwd:o1.literal("/repo"),repo:o1.object({owner:o1.string(),name:o1.string(),connectedGithub:o1.boolean()}).strict(),branch:o1.string().nullable()}).strict(),o1.object({cwd:o1.null()}).strict()]),Rp9=o1.object({harnessId:o1.enum(["decopilot","claude-code","codex"]).optional(),threadId:o1.string(),userMessage:ou6,harness:o1.object({sessionId:o1.string().optional()}).strict(),workspace:su6,models:au6,mcp:o1.object({url:o1.string().url(),headers:o1.record(o1.string(),o1.string()),expiresAt:o1.number().int().positive()}).strict(),mode:o1.enum(["default","plan","web-search","gen-image"]),temperature:o1.number(),toolApprovalLevel:o1.enum(["auto","readonly"]),toolAllowlist:o1.array(o1.string()).nullable().optional(),maxAgentSteps:o1.number().int().optional(),user:o1.object({id:o1.string(),email:o1.string()}).strict(),organizationId:o1.string(),organizationSlug:o1.string().optional(),agent:o1.object({id:o1.string(),instructions:o1.string().optional()}).strict(),triggerId:o1.string().optional(),currentThreadTitle:o1.string().optional(),traceparent:o1.string().optional(),runFenceToken:o1.string().optional()}).strict()});import{z as HI$}from"zod";var Sp9;var NI$=O(()=>{pe0();Sp9=HI$.object({seq:HI$.number().int().positive(),event:FI$})});var BI$=()=>{};var OI$=O(()=>{BI$();NI$();pe0()});var DI$=O(()=>{OI$()});import JC from"zod";var te0;var EI$=O(()=>{DI$();Y1();te0=$0({name:"LINK_CURRENT_GET",description:"Return the calling user's currently registered desktop link, or `online: false` if no link is registered or the TTL has expired.",inputSchema:JC.object({}),outputSchema:JC.object({online:JC.boolean(),machineId:JC.string().optional(),hostname:JC.string().optional(),cliVersion:JC.string().optional(),capabilities:JC.array(ne0).default([])}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.linkStatusProbe;if(!G)return{online:!1,capabilities:[]};let X=await G(Z.auth.user.id);if(!X.online)return{online:!1,capabilities:[]};return{online:!0,hostname:X.hostname,cliVersion:X.cliVersion,capabilities:X.capabilities}}})});import re0 from"zod";var oe0;var LI$=O(()=>{Y1();oe0=$0({name:"LINK_DISCONNECT",description:"Disconnect the calling user's desktop link from the Studio side: tells the linked daemon to shut down (via a `shutdown` control frame) and removes the presence claim. The user re-links by running `bunx decocms@latest link` on the desktop.",inputSchema:re0.object({}),outputSchema:re0.object({disconnected:re0.boolean()}),handler:async($,Z)=>{M0(Z),await Z.access.check();let G=Z.auth.user.id;if(!Z.publishLinkControlFrame)return{disconnected:!1};return Z.publishLinkControlFrame(G,{type:"shutdown"}),{disconnected:!0}}})});var zI$=O(()=>{EI$();LI$()});import{z as g9}from"zod";function jI$($){if(!$)return"";return typeof $==="string"?$:$.toISOString()}var Zd6,Gd6,Xd6,Yd6,Qd6,ae0;var PI$=O(()=>{Y1();Zd6=["thread"],Gd6=g9.object({type:g9.literal("thread"),id:g9.string(),title:g9.string(),created_at:g9.string(),updated_at:g9.string(),virtual_mcp_id:g9.string().nullable(),run_config:g9.record(g9.string(),g9.unknown()).nullable(),status:g9.string().nullable()}),Xd6=g9.discriminatedUnion("type",[Gd6]),Yd6=g9.object({query:g9.string().min(1).describe("Free-text search query."),limit:g9.number().int().min(1).max(50).optional().describe("Maximum results per resource type (default: 20)."),types:g9.array(g9.enum(Zd6)).optional().describe("Restrict the search to specific resource types. Omit to search across all available types.")}),Qd6=g9.object({items:g9.array(Xd6),totalCount:g9.number()});ae0=$0({name:"GLOBAL_SEARCH",description:"Search across organization resources by free-text query. Returns a typed union of matches (currently: threads). New resource types may be added over time without changes to the call shape.",annotations:{title:"Global Search",readOnlyHint:!0,destructiveHint:!1,idempotentHint:!0,openWorldHint:!1},inputSchema:Yd6,outputSchema:Qd6,handler:async($,Z)=>{await Z.access.check(),O0(Z);let G=$.limit??20,X=$.types?.length?new Set($.types):null,Y=!X||X.has("thread"),Q=[],J=0;if(Y){let{threads:W,total:K}=await Z.storage.threads.list(void 0,{limit:G,offset:0,search:$.query,includeArchived:!1});J+=K;for(let U of W)Q.push({type:"thread",id:U.id,title:U.title??"",created_at:jI$(U.created_at),updated_at:jI$(U.updated_at),virtual_mcp_id:U.virtual_mcp_id??null,run_config:U.run_config??null,status:U.status??null})}return{items:Q,totalCount:J}}})});var AI$=O(()=>{PI$()});var k50={};G6(k50,{managementMCP:()=>Yy,managementContextStore:()=>MV,listManagementTools:()=>Wd6,TOOL_BY_NAME:()=>Rt,CORE_TOOLS:()=>II$});import{z as TI$}from"zod";async function Wd6($){let Z=await Yy($),[G,X]=Rd.createLinkedPair();await Z.connect(X);let Y=new U9({name:"tools-hydration",version:"1.0.0"},{jsonSchemaValidator:L5});try{return await Y.connect(G),(await Y.listTools()).tools}finally{await Y.close().catch(()=>{}),await Z.close().catch(()=>{})}}var II$,Rt,Yy=async($)=>{let Z=new BU({name:"mcp-cms-management",version:"1.0.0"},{capabilities:{tools:{},prompts:{},resources:{}},jsonSchemaValidator:L5});for(let Y of Rt.values()){let{config:Q,handler:J}=YE0(Y);Z.registerTool(Y.name,Q,J)}let G=XE0();for(let Y of G){let Q=Y.arguments?.length?Object.fromEntries(Y.arguments.map((J)=>{let W=J.required?TI$.string():TI$.string().optional();return[J.name,J.description?W.describe(J.description):W]})):void 0;Z.registerPrompt(Y.name,{title:Y.title,description:Y.description,...Q?{argsSchema:Q}:{}},(J)=>{return{messages:[{role:"user",content:{type:"text",text:typeof Y.text==="function"?Y.text(J??{}):Y.text}}]}})}if($.organization?.id){let Y=await $.storage.brandContext.list($.organization.id),Q=new Set;for(let J of Y){let W=J.name.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-|-$/g,""),K=W?`brand-${W}`:`brand-${J.id}`;if(Q.has(K))K=`${K}-${J.id.slice(0,8)}`;Q.add(K);let U=[`# Brand: ${J.name}`,"",`**Domain:** ${J.domain}`,"","## Overview",J.overview];if(J.colors){let F=Object.entries(J.colors).filter(([,H])=>H);if(F.length>0){U.push("","## Colors");for(let[H,N]of F)U.push(`- **${H}:** ${N}`)}}if(J.fonts){let F=Object.entries(J.fonts).filter(([,H])=>H);if(F.length>0){U.push("","## Fonts");for(let[H,N]of F)U.push(`- ${N} (${H})`)}}if(J.logo)U.push("",`**Logo:** ${J.logo}`);if(J.favicon)U.push(`**Favicon:** ${J.favicon}`);if(J.ogImage)U.push(`**OG Image:** ${J.ogImage}`);if(J.images&&J.images.length>0){U.push("","## Images");for(let F of J.images){let H=Object.entries(F).map(([N,B])=>`${N}: ${B}`).join(", ");U.push(`- ${H}`)}}let w=U.join(`
 `);Z.prompt(K,`Brand context for ${J.name}`,()=>({messages:[{role:"user",content:{type:"text",text:w}}]}))}}let X=$P$();for(let Y of X)Z.resource(Y.name,Y.uri,{description:Y.description,mimeType:Y.mimeType??"text/markdown"},async(Q)=>{return{contents:[{uri:typeof Q==="string"?Q:Q.href,mimeType:Y.mimeType??"text/markdown",text:Y.text}]}});return Z};var AE=O(()=>{_3();vu();LG();fh1();nh1();ie1();re1();K0$();N0$();g0$();O5$();P5$();OW$();ZK$();XK$();MK$();VK$();Sj$();Cj$();ze0();QE0();QE0();qP$();JI$();KI$();wI$();zI$();AI$();II$=[kd0,Sd0,Vd0,Cd0,_d0,bd0,fd0,ym0,hm0,cm0,um0,lm0,xd0,vd0,yd0,gd0,hd0,ud0,dd0,ld0,nd0,pd0,td0,rd0,od0,ad0,sd0,ed0,$l0,Zl0,Gl0,Xl0,ru0,Xd0,Yd0,Jd0,Wd0,Kd0,rx0,px0,ix0,nx0,wd0,Hd0,Bd0,Dd0,Ld0,te1,Td0,Id0,Rd0,qd0,cx0,dx0,lx0,ux0,gt0,rm0,hE,cE,em0,$i0,uE,Jt0,Wt0,mm0,im0,nm0,pm0,tm0,Kt0,Ut0,wt0,Ct0,_t0,bt0,ft0,xt0,vt0,yt0,zd0,jd0,Pd0,Ad0,ht0,dt0,lt0,mt0,it0,nt0,pt0,tt0,rt0,ot0,at0,st0,et0,Zr0,Gr0,Ue0,Fe0,He0,Ne0,Le0,Vj$,je0,Pe0,Ae0,Te0,Ie0,Re0,...QI$,xp0,me0,ie0,te0,oe0,ae0],Rt=new Map(II$.map(($)=>[$.name,$]))});import{z as RI$}from"zod";function Kd6($){return[{permissions:{self:["*"]},getTools:async()=>{let{CORE_TOOLS:Z}=await Promise.resolve().then(() => (AE(),k50));return Z.map((G)=>{return{name:G.name,inputSchema:RI$.toJSONSchema(G.inputSchema,{unrepresentable:"any"}),outputSchema:G.outputSchema?RI$.toJSONSchema(G.outputSchema,{unrepresentable:"any"}):void 0,description:G.description}})},data:d_0(zZ(),$)},{data:u_0()},{data:c_0($)}]}async function qI$($,Z){try{let G=F6(),X=O1(),Y=new PU(X.encryptionKey),Q=new Dd(G.db,Y),J=Kd6($);await Promise.all(J.map(async(W)=>{let K=null;if(W.permissions)K=(await B8.api.createApiKey({body:{name:`${W.data.app_name??crypto.randomUUID()}-mcp`,userId:Z,permissions:W.permissions,rateLimitEnabled:!1,metadata:{organization:{id:$},purpose:"default-org-connections"}}}))?.key;let U=await $H({id:"pending",title:W.data.title,connection_type:W.data.connection_type,connection_url:W.data.connection_url,connection_token:W.data.connection_token??K,connection_headers:W.data.connection_headers}).catch(()=>null),w=await W.getTools?.()??U?.tools??null,F=U?.scopes?.length?U.scopes:null,H=W.data.id?W.data.id.startsWith(`${$}_`)?W.data.id:`${$}_${W.data.id}`:void 0;await Q.create({...W.data,id:H,tools:w,configuration_scopes:F,organization_id:$,created_by:Z,connection_token:W.data.connection_token??K})}));try{await gx0({orgId:$,createdBy:Z})}catch(W){console.error("Failed to enqueue studio pack install:",W)}if(X.aiGatewayEnabled&&X.studioProvisionSecretKey&&Hd.provisionKey)try{let W=await ZH(Z),K=await Hd.provisionKey(W,$);await new Od(G.db,Y).upsert({providerId:"deco",label:"Auto-provisioned",apiKey:K,organizationId:$,createdBy:Z})}catch(W){console.error("Failed to auto-provision Deco AI Gateway key:",W)}}catch(G){console.error("Error creating default MCP connections:",G)}}var MI$=O(()=>{I8();Yx0();NG();FQ();Bd();Wx0();Hx0();Td();w8();_Q();o$0();UD()});async function kI$($,Z){let G=GY();if(!G)return Z;let X=await F6().db.selectFrom("organization").select("slug").where("id","=",$).executeTakeFirst();if(!X?.slug)return Z;return await Iu0({objectStorage:L3(G,$),baseUrl:zZ(),orgSlug:X.slug,prefix:"org-logos"})(Z)??Z}var SI$=O(()=>{FQ();MO();qu0();NG()});function Ud6($,Z){let G=$.email.split("@")[1]?.toLowerCase()??null;return{distinctId:$.id,properties:{$set:{email:$.email,name:$.name,email_verified:$.emailVerified},$set_once:{first_seen_at:Z.toISOString(),signup_email_domain:G}}}}function se0($){i1.identify(Ud6($,new Date))}var VI$=O(()=>{R4()});import{decodeJwt as wd6}from"jose";import{sql as qt}from"kysely";async function Nd6($){let{user:Z,token:G}=$;if(!G?.idToken)return;let X;try{X=wd6(G.idToken)}catch{return}let{preferred_username:Y,upn:Q}=X,J=[Y,Q].filter((U)=>typeof U==="string"&&U.length>0&&U.toLowerCase()!==Z.email.toLowerCase()).map((U)=>U.toLowerCase());if(J.length===0)return;let{db:W}=F6(),K=await W.selectFrom("user").selectAll().where("email","in",J).where("id","!=",Z.id).executeTakeFirst();if(!K)return;try{await W.transaction().execute(async(U)=>{await qt`UPDATE "account" SET "userId" = ${K.id} WHERE "userId" = ${Z.id}`.execute(U),await qt`UPDATE "session" SET "userId" = ${K.id} WHERE "userId" = ${Z.id}`.execute(U),await qt`
         UPDATE "member" SET "userId" = ${K.id}
         WHERE "userId" = ${Z.id}
@@ -2721,7 +2721,7 @@ NKEYs are sensitive and should be treated as secrets.
 -----BEGIN USER NKEY SEED-----
 ${G}
 ------END USER NKEY SEED------
-`;return new TextEncoder().encode(X)}var W81,PC,D64,TC$,J81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",L64,u$,c$,$6,AC$=24,AC,_J;var VC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(W81||(W81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function w0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,w0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),U1=Y0.subarray(16);return X0(Z1,Z1),N0(U1,U1,Z1),d0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function $1(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function L6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function Q4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function u5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=$1(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),a$[P0],b0[P0%16]),Y0[7]=$1(m0,u5(W0[0]),Q4(W0[0],W0[1],W0[2])),Y0[3]=$1(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=$1(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=$1(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var uG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=uG[W0];P9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),P9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function C6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,w),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function $5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function R5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,$5(h,l,r),C6(l,h),C6(h,h),$5(h,l,r)}function A9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),Q9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);M8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,A9(Y0,r),R5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*k8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*k8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*k8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function Z6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;S8(h,l)}function b$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];M8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(b0,h.subarray(32),c+32),Z6(b0),A9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];M8(W0,h,c+64),Z6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return S8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,U),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(M8(b0,h,c),Z6(b0),Q9(m0,P0,b0),A9(P0,l.subarray(32)),C6(m0,P0),R5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,i6=24,s6=32,t8=16,Z5=32,C=32,d=32,u=32,I=32,t=i6,x0=s6,l0=t8,W1=64,F1=32,g1=64,b1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:M8,crypto_sign:b$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:X8,gf:G,D:U,L:k8,pack25519:d0,unpack25519:w0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:C6,set25519:A0,modL:S8,scalarmult:Q9,scalarbase:A9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==i6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(s6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+s6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(t8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(t8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+t8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=t8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(Z5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return b$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(X8);return M8(l,h,h.length),l},$.hash.hashLength=X8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];v$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];v$(W0)})}()})(typeof bg<"u"&&DZZ?DZZ:globalThis.nacl=globalThis.nacl||{});PC=typeof bg<"u"&&DZZ?DZZ:globalThis.nacl,D64={fromSeed:PC.sign.keyPair.fromSeed,sign:PC.sign.detached,verify:PC.sign.detached.verify,randomBytes:PC.randomBytes,scalarBaseMultiply:PC.scalarMult.base,seal:PC.box,open:PC.box.open};L64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})($6||($6={}));AC=[120,107,118,49];E64(D64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function H81($){try{$?.clear?.()}catch{}}async function CC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=kC$($),W=w81(J.sub),K=F81(new TextEncoder().encode(Z)),U=IC$();try{let w=await MC$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(SC$(w,U))}finally{H81(U),H81(K),H81(W)}}var _C$=O(()=>{VC$()});function S64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function bC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(N81(),503);if(!Y.natsPublicUrl)return Z.json(N81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(N81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await CC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:zC$(Q),userId:X,allowedConnectionTypes:S64(Y.natsPublicUrl)})}return Z.json(jC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var N81=()=>({error:"link session unavailable"});var fC$=O(()=>{X6();w8();PC$();_C$()});async function _64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function b64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new MN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function f64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},V64),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function x64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<xC$){await O8(vC$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<xC$){await O8(vC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var V64=90000,C64=15000,yC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=Gw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Gg({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await CY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&mW(w5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return oQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),oQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},C64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await _64(F,U)){await b64({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await f64({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await x64({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},xC$=60000,vC$=500;var gC$=O(()=>{X6();zC();qY();d5();xE0();on();AV();t90();RX()});function y64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function g64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(v64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var v64=1e4,h64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},hC$=()=>{let $=new V1;return $.use("*",h64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await g64(X,Y);return Z.json({apps:y64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var cC$=O(()=>{X6();w8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function r64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function o64($,Z,G){try{return JSON.parse($)}catch{throw new lC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function a64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:o64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function s64($){let Z=$.map((G)=>{let X=G.function.parameters?OY(G.function.parameters):OY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function e64($){if(!$)return;return{openai:{response_format:$}}}function $44(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function uC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function dC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var c64=256,u64,d64,l64,m64,i64,n64,p64,t64,lC$,mC$,iC$;var nC$=O(()=>{E6();X6();zC();u64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),d64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),l64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(d64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),m64=h1.object({type:h1.literal("text")}),i64=h1.object({type:h1.literal("json_object")}),n64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),p64=h1.union([m64,i64,n64]),t64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(l64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(u64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:p64.optional(),user:h1.string().optional()});lC$=class lC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};mC$=new V1;mC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=t64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=r64(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=a64(Q.messages),H=Q.tools?s64(Q.tools):void 0,N=e64(Q.response_format),B=$44(),D=Math.floor(Date.now()/1000);if(Q.stream)return oQ($,async(E)=>{let L=uC$(w,F,H,Q,N,$.req.raw.signal);try{let z=xQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=c64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:dC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=uC$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:dC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});iC$=mC$});var tC$;var pC$=O(()=>{tC$={name:"decocms",version:"4.92.1",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function X44(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??G44}}var rC$,G44="https://ph.studio.decocms.com",oC$;var aC$=O(()=>{X6();Yf0();iN();NG();w8();E01();pC$();rC$=new V1;rC$.get("/",($)=>{let Z={version:tC$.version,theme:Mb1(),...rO().logo&&{logo:rO().logo},...hQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:OR$(),posthog:X44(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!hQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});oC$=rC$});function rL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function eC$($){return(rL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function $_$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(rL0($))}&sz=${Z}`}function sC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function Z_$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?sC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):sC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as Y44}from"path";function vw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function Q44($){let Z=rL0($),G=eC$(Z),X=$_$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=Z_$({brand:G,domain:Z});return[`<title>${vw(J)}</title>`,`<meta name="description" content="${vw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${vw(J)}" />`,`<meta property="og:description" content="${vw(W)}" />`,`<meta property="og:url" content="${vw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${vw(J)}" />`,`<meta name="twitter:description" content="${vw(W)}" />`,`<link rel="canonical" href="${vw(Q)}" />`,`<link rel="icon" href="${vw(X)}" sizes="any" />`].join(`
+`;return new TextEncoder().encode(X)}var W81,PC,D64,TC$,J81="ABCDEFGHIJKLMNOPQRSTUVWXYZ234567",L64,u$,c$,$6,AC$=24,AC,_J;var VC$=O(()=>{(function($){$.Operator="operator",$.Account="account",$.User="user",$.Activation="activation",$.AuthorizationResponse="authorization_response"})(W81||(W81={}));(function($){var Z=function(h,l){this.hi=h|0,this.lo=l|0},G=function(h){var l,c=new Float64Array(16);if(h)for(l=0;l<h.length;l++)c[l]=h[l];return c},X=function(){throw Error("no PRNG")},Y=new Uint8Array(16),Q=new Uint8Array(32);Q[0]=9;var J=G(),W=G([1]),K=G([56129,1]),U=G([30883,4953,19914,30187,55467,16705,2637,112,59544,30585,16505,36039,65139,11119,27886,20995]),w=G([61785,9906,39828,60374,45398,33411,5274,224,53552,61171,33010,6542,64743,22239,55772,9222]),F=G([54554,36645,11616,51542,42930,38181,51040,26924,56412,64982,57905,49316,21502,52590,14035,8553]),H=G([26200,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214,26214]),N=G([41136,18958,6951,50414,58488,44335,6150,12099,55207,15867,153,11085,57099,20417,9344,11139]);function B(h,l){return h<<l|h>>>32-l}function D(h,l){var c=h[l+3]&255;return c=c<<8|h[l+2]&255,c=c<<8|h[l+1]&255,c<<8|h[l+0]&255}function E(h,l){var c=h[l]<<24|h[l+1]<<16|h[l+2]<<8|h[l+3],r=h[l+4]<<24|h[l+5]<<16|h[l+6]<<8|h[l+7];return new Z(c,r)}function L(h,l,c){var r;for(r=0;r<4;r++)h[l+r]=c&255,c>>>=8}function z(h,l,c){h[l]=c.hi>>24&255,h[l+1]=c.hi>>16&255,h[l+2]=c.hi>>8&255,h[l+3]=c.hi&255,h[l+4]=c.lo>>24&255,h[l+5]=c.lo>>16&255,h[l+6]=c.lo>>8&255,h[l+7]=c.lo&255}function j(h,l,c,r,Y0){var W0,b0=0;for(W0=0;W0<Y0;W0++)b0|=h[l+W0]^c[r+W0];return(1&b0-1>>>8)-1}function P(h,l,c,r){return j(h,l,c,r,16)}function A(h,l,c,r){return j(h,l,c,r,32)}function M(h,l,c,r,Y0){var W0=new Uint32Array(16),b0=new Uint32Array(16),m0=new Uint32Array(16),P0=new Uint32Array(4),S0,j0,y0;for(S0=0;S0<4;S0++)b0[5*S0]=D(r,4*S0),b0[1+S0]=D(c,4*S0),b0[6+S0]=D(l,4*S0),b0[11+S0]=D(c,16+4*S0);for(S0=0;S0<16;S0++)m0[S0]=b0[S0];for(S0=0;S0<20;S0++){for(j0=0;j0<4;j0++){for(y0=0;y0<4;y0++)P0[y0]=b0[(5*j0+4*y0)%16];P0[1]^=B(P0[0]+P0[3]|0,7),P0[2]^=B(P0[1]+P0[0]|0,9),P0[3]^=B(P0[2]+P0[1]|0,13),P0[0]^=B(P0[3]+P0[2]|0,18);for(y0=0;y0<4;y0++)W0[4*j0+(j0+y0)%4]=P0[y0]}for(y0=0;y0<16;y0++)b0[y0]=W0[y0]}if(Y0){for(S0=0;S0<16;S0++)b0[S0]=b0[S0]+m0[S0]|0;for(S0=0;S0<4;S0++)b0[5*S0]=b0[5*S0]-D(r,4*S0)|0,b0[6+S0]=b0[6+S0]-D(l,4*S0)|0;for(S0=0;S0<4;S0++)L(h,4*S0,b0[5*S0]),L(h,16+4*S0,b0[6+S0])}else for(S0=0;S0<16;S0++)L(h,4*S0,b0[S0]+m0[S0]|0)}function S(h,l,c,r){return M(h,l,c,r,!1),0}function R(h,l,c,r){return M(h,l,c,r,!0),0}var V=new Uint8Array([101,120,112,97,110,100,32,51,50,45,98,121,116,101,32,107]);function i(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(16),P0=new Uint8Array(64),S0,j0;if(!Y0)return 0;for(j0=0;j0<16;j0++)m0[j0]=0;for(j0=0;j0<8;j0++)m0[j0]=W0[j0];while(Y0>=64){S(P0,m0,b0,V);for(j0=0;j0<64;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0];S0=1;for(j0=8;j0<16;j0++)S0=S0+(m0[j0]&255)|0,m0[j0]=S0&255,S0>>>=8;if(Y0-=64,l+=64,c)r+=64}if(Y0>0){S(P0,m0,b0,V);for(j0=0;j0<Y0;j0++)h[l+j0]=(c?c[r+j0]:0)^P0[j0]}return 0}function f(h,l,c,r,Y0){return i(h,l,null,0,c,r,Y0)}function v(h,l,c,r,Y0){var W0=new Uint8Array(32);return R(W0,r,Y0,V),f(h,l,c,r.subarray(16),W0)}function Z0(h,l,c,r,Y0,W0,b0){var m0=new Uint8Array(32);return R(m0,W0,b0,V),i(h,l,c,r,Y0,W0.subarray(16),m0)}function o(h,l){var c,r=0;for(c=0;c<17;c++)r=r+(h[c]+l[c]|0)|0,h[c]=r&255,r>>>=8}var B0=new Uint32Array([5,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,252]);function D0(h,l,c,r,Y0,W0){var b0,m0,P0,S0,j0=new Uint32Array(17),y0=new Uint32Array(17),o0=new Uint32Array(17),Z1=new Uint32Array(17),U1=new Uint32Array(17);for(P0=0;P0<17;P0++)y0[P0]=o0[P0]=0;for(P0=0;P0<16;P0++)y0[P0]=W0[P0];y0[3]&=15,y0[4]&=252,y0[7]&=15,y0[8]&=252,y0[11]&=15,y0[12]&=252,y0[15]&=15;while(Y0>0){for(P0=0;P0<17;P0++)Z1[P0]=0;for(P0=0;P0<16&&P0<Y0;++P0)Z1[P0]=c[r+P0];Z1[P0]=1,r+=P0,Y0-=P0,o(o0,Z1);for(m0=0;m0<17;m0++){j0[m0]=0;for(P0=0;P0<17;P0++)j0[m0]=j0[m0]+o0[P0]*(P0<=m0?y0[m0-P0]:320*y0[m0+17-P0]|0)|0|0}for(m0=0;m0<17;m0++)o0[m0]=j0[m0];S0=0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0&3,S0=5*(S0>>>2)|0;for(P0=0;P0<16;P0++)S0=S0+o0[P0]|0,o0[P0]=S0&255,S0>>>=8;S0=S0+o0[16]|0,o0[16]=S0}for(P0=0;P0<17;P0++)U1[P0]=o0[P0];o(o0,B0),b0=-(o0[16]>>>7)|0;for(P0=0;P0<17;P0++)o0[P0]^=b0&(U1[P0]^o0[P0]);for(P0=0;P0<16;P0++)Z1[P0]=W0[P0+16];Z1[16]=0,o(o0,Z1);for(P0=0;P0<16;P0++)h[l+P0]=o0[P0];return 0}function J0(h,l,c,r,Y0,W0){var b0=new Uint8Array(16);return D0(b0,0,c,r,Y0,W0),P(h,l,b0,0)}function G0(h,l,c,r,Y0){var W0;if(c<32)return-1;Z0(h,0,l,0,c,r,Y0),D0(h,16,h,32,c-32,h);for(W0=0;W0<16;W0++)h[W0]=0;return 0}function a(h,l,c,r,Y0){var W0,b0=new Uint8Array(32);if(c<32)return-1;if(v(b0,0,32,r,Y0),J0(l,16,l,32,c-32,b0)!==0)return-1;Z0(h,0,l,0,c,r,Y0);for(W0=0;W0<32;W0++)h[W0]=0;return 0}function A0(h,l){var c;for(c=0;c<16;c++)h[c]=l[c]|0}function U0(h){var l,c;for(c=0;c<16;c++)h[c]+=65536,l=Math.floor(h[c]/65536),h[(c+1)*(c<15?1:0)]+=l-1+37*(l-1)*(c===15?1:0),h[c]-=l*65536}function v0(h,l,c){var r,Y0=~(c-1);for(var W0=0;W0<16;W0++)r=Y0&(h[W0]^l[W0]),h[W0]^=r,l[W0]^=r}function d0(h,l){var c,r,Y0,W0=G(),b0=G();for(c=0;c<16;c++)b0[c]=l[c];U0(b0),U0(b0),U0(b0);for(r=0;r<2;r++){W0[0]=b0[0]-65517;for(c=1;c<15;c++)W0[c]=b0[c]-65535-(W0[c-1]>>16&1),W0[c-1]&=65535;W0[15]=b0[15]-32767-(W0[14]>>16&1),Y0=W0[15]>>16&1,W0[14]&=65535,v0(b0,W0,1-Y0)}for(c=0;c<16;c++)h[2*c]=b0[c]&255,h[2*c+1]=b0[c]>>8}function i0(h,l){var c=new Uint8Array(32),r=new Uint8Array(32);return d0(c,h),d0(r,l),A(c,0,r,0)}function n0(h){var l=new Uint8Array(32);return d0(l,h),l[0]&1}function w0(h,l){var c;for(c=0;c<16;c++)h[c]=l[2*c]+(l[2*c+1]<<8);h[15]&=32767}function C0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]+c[r]|0}function T0(h,l,c){var r;for(r=0;r<16;r++)h[r]=l[r]-c[r]|0}function N0(h,l,c){var r,Y0,W0=new Float64Array(31);for(r=0;r<31;r++)W0[r]=0;for(r=0;r<16;r++)for(Y0=0;Y0<16;Y0++)W0[r+Y0]+=l[r]*c[Y0];for(r=0;r<15;r++)W0[r]+=38*W0[r+16];for(r=0;r<16;r++)h[r]=W0[r];U0(h),U0(h)}function Q0(h,l){N0(h,l,l)}function X0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=253;r>=0;r--)if(Q0(c,c),r!==2&&r!==4)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function V0(h,l){var c=G(),r;for(r=0;r<16;r++)c[r]=l[r];for(r=250;r>=0;r--)if(Q0(c,c),r!==1)N0(c,c,l);for(r=0;r<16;r++)h[r]=c[r]}function n(h,l,c){var r=new Uint8Array(32),Y0=new Float64Array(80),W0,b0,m0=G(),P0=G(),S0=G(),j0=G(),y0=G(),o0=G();for(b0=0;b0<31;b0++)r[b0]=l[b0];r[31]=l[31]&127|64,r[0]&=248,w0(Y0,c);for(b0=0;b0<16;b0++)P0[b0]=Y0[b0],j0[b0]=m0[b0]=S0[b0]=0;m0[0]=j0[0]=1;for(b0=254;b0>=0;--b0)W0=r[b0>>>3]>>>(b0&7)&1,v0(m0,P0,W0),v0(S0,j0,W0),C0(y0,m0,S0),T0(m0,m0,S0),C0(S0,P0,j0),T0(P0,P0,j0),Q0(j0,y0),Q0(o0,m0),N0(m0,S0,m0),N0(S0,P0,y0),C0(y0,m0,S0),T0(m0,m0,S0),Q0(P0,m0),T0(S0,j0,o0),N0(m0,S0,K),C0(m0,m0,j0),N0(S0,S0,m0),N0(m0,j0,o0),N0(j0,P0,Y0),Q0(P0,y0),v0(m0,P0,W0),v0(S0,j0,W0);for(b0=0;b0<16;b0++)Y0[b0+16]=m0[b0],Y0[b0+32]=S0[b0],Y0[b0+48]=P0[b0],Y0[b0+64]=j0[b0];var Z1=Y0.subarray(32),U1=Y0.subarray(16);return X0(Z1,Z1),N0(U1,U1,Z1),d0(h,U1),0}function e(h,l){return n(h,l,Q)}function t0(h,l){return X(l,32),e(h,l)}function R0(h,l,c){var r=new Uint8Array(32);return n(r,c,l),R(h,Y,r,V)}var q0=G0,g=a;function H0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),q0(h,l,c,r,b0)}function f0(h,l,c,r,Y0,W0){var b0=new Uint8Array(32);return R0(b0,Y0,W0),g(h,l,c,r,b0)}function $1(){var h=0,l=0,c=0,r=0,Y0=65535,W0,b0,m0;for(m0=0;m0<arguments.length;m0++)W0=arguments[m0].lo,b0=arguments[m0].hi,h+=W0&Y0,l+=W0>>>16,c+=b0&Y0,r+=b0>>>16;return l+=h>>>16,c+=l>>>16,r+=c>>>16,new Z(c&Y0|r<<16,h&Y0|l<<16)}function u0(h,l){return new Z(h.hi>>>l,h.lo>>>l|h.hi<<32-l)}function T1(){var h=0,l=0,c;for(c=0;c<arguments.length;c++)h^=arguments[c].lo,l^=arguments[c].hi;return new Z(l,h)}function e1(h,l){var c,r,Y0=32-l;if(l<32)c=h.hi>>>l|h.lo<<Y0,r=h.lo>>>l|h.hi<<Y0;else if(l<64)c=h.lo>>>l|h.hi<<Y0,r=h.hi>>>l|h.lo<<Y0;return new Z(c,r)}function L6(h,l,c){var r=h.hi&l.hi^~h.hi&c.hi,Y0=h.lo&l.lo^~h.lo&c.lo;return new Z(r,Y0)}function Q4(h,l,c){var r=h.hi&l.hi^h.hi&c.hi^l.hi&c.hi,Y0=h.lo&l.lo^h.lo&c.lo^l.lo&c.lo;return new Z(r,Y0)}function u5(h){return T1(e1(h,28),e1(h,34),e1(h,39))}function s(h){return T1(e1(h,14),e1(h,18),e1(h,41))}function K1(h){return T1(e1(h,1),e1(h,8),u0(h,7))}function o$(h){return T1(e1(h,19),e1(h,61),u0(h,6))}var a$=[new Z(1116352408,3609767458),new Z(1899447441,602891725),new Z(3049323471,3964484399),new Z(3921009573,2173295548),new Z(961987163,4081628472),new Z(1508970993,3053834265),new Z(2453635748,2937671579),new Z(2870763221,3664609560),new Z(3624381080,2734883394),new Z(310598401,1164996542),new Z(607225278,1323610764),new Z(1426881987,3590304994),new Z(1925078388,4068182383),new Z(2162078206,991336113),new Z(2614888103,633803317),new Z(3248222580,3479774868),new Z(3835390401,2666613458),new Z(4022224774,944711139),new Z(264347078,2341262773),new Z(604807628,2007800933),new Z(770255983,1495990901),new Z(1249150122,1856431235),new Z(1555081692,3175218132),new Z(1996064986,2198950837),new Z(2554220882,3999719339),new Z(2821834349,766784016),new Z(2952996808,2566594879),new Z(3210313671,3203337956),new Z(3336571891,1034457026),new Z(3584528711,2466948901),new Z(113926993,3758326383),new Z(338241895,168717936),new Z(666307205,1188179964),new Z(773529912,1546045734),new Z(1294757372,1522805485),new Z(1396182291,2643833823),new Z(1695183700,2343527390),new Z(1986661051,1014477480),new Z(2177026350,1206759142),new Z(2456956037,344077627),new Z(2730485921,1290863460),new Z(2820302411,3158454273),new Z(3259730800,3505952657),new Z(3345764771,106217008),new Z(3516065817,3606008344),new Z(3600352804,1432725776),new Z(4094571909,1467031594),new Z(275423344,851169720),new Z(430227734,3100823752),new Z(506948616,1363258195),new Z(659060556,3750685593),new Z(883997877,3785050280),new Z(958139571,3318307427),new Z(1322822218,3812723403),new Z(1537002063,2003034995),new Z(1747873779,3602036899),new Z(1955562222,1575990012),new Z(2024104815,1125592928),new Z(2227730452,2716904306),new Z(2361852424,442776044),new Z(2428436474,593698344),new Z(2756734187,3733110249),new Z(3204031479,2999351573),new Z(3329325298,3815920427),new Z(3391569614,3928383900),new Z(3515267271,566280711),new Z(3940187606,3454069534),new Z(4118630271,4000239992),new Z(116418474,1914138554),new Z(174292421,2731055270),new Z(289380356,3203993006),new Z(460393269,320620315),new Z(685471733,587496836),new Z(852142971,1086792851),new Z(1017036298,365543100),new Z(1126000580,2618297676),new Z(1288033470,3409855158),new Z(1501505948,4234509866),new Z(1607167915,987167468),new Z(1816402316,1246189591)];function P9(h,l,c){var r=[],Y0=[],W0=[],b0=[],m0,P0,S0;for(P0=0;P0<8;P0++)r[P0]=W0[P0]=E(h,8*P0);var j0=0;while(c>=128){for(P0=0;P0<16;P0++)b0[P0]=E(l,8*P0+j0);for(P0=0;P0<80;P0++){for(S0=0;S0<8;S0++)Y0[S0]=W0[S0];m0=$1(W0[7],s(W0[4]),L6(W0[4],W0[5],W0[6]),a$[P0],b0[P0%16]),Y0[7]=$1(m0,u5(W0[0]),Q4(W0[0],W0[1],W0[2])),Y0[3]=$1(Y0[3],m0);for(S0=0;S0<8;S0++)W0[(S0+1)%8]=Y0[S0];if(P0%16===15)for(S0=0;S0<16;S0++)b0[S0]=$1(b0[S0],b0[(S0+9)%16],K1(b0[(S0+1)%16]),o$(b0[(S0+14)%16]))}for(P0=0;P0<8;P0++)W0[P0]=$1(W0[P0],r[P0]),r[P0]=W0[P0];j0+=128,c-=128}for(P0=0;P0<8;P0++)z(h,8*P0,r[P0]);return c}var uG=new Uint8Array([106,9,230,103,243,188,201,8,187,103,174,133,132,202,167,59,60,110,243,114,254,148,248,43,165,79,245,58,95,29,54,241,81,14,82,127,173,230,130,209,155,5,104,140,43,62,108,31,31,131,217,171,251,65,189,107,91,224,205,25,19,126,33,121]);function M8(h,l,c){var r=new Uint8Array(64),Y0=new Uint8Array(256),W0,b0=c;for(W0=0;W0<64;W0++)r[W0]=uG[W0];P9(r,l,c),c%=128;for(W0=0;W0<256;W0++)Y0[W0]=0;for(W0=0;W0<c;W0++)Y0[W0]=l[b0-c+W0];Y0[c]=128,c=256-128*(c<112?1:0),Y0[c-9]=0,z(Y0,c-8,new Z(b0/536870912|0,b0<<3)),P9(r,Y0,c);for(W0=0;W0<64;W0++)h[W0]=r[W0];return 0}function C6(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G(),S0=G(),j0=G();T0(c,h[1],h[0]),T0(j0,l[1],l[0]),N0(c,c,j0),C0(r,h[0],h[1]),C0(j0,l[0],l[1]),N0(r,r,j0),N0(Y0,h[3],l[3]),N0(Y0,Y0,w),N0(W0,h[2],l[2]),C0(W0,W0,W0),T0(b0,r,c),T0(m0,W0,Y0),C0(P0,W0,Y0),C0(S0,r,c),N0(h[0],b0,m0),N0(h[1],S0,P0),N0(h[2],P0,m0),N0(h[3],b0,S0)}function $5(h,l,c){var r;for(r=0;r<4;r++)v0(h[r],l[r],c)}function R5(h,l){var c=G(),r=G(),Y0=G();X0(Y0,l[2]),N0(c,l[0],Y0),N0(r,l[1],Y0),d0(h,r),h[31]^=n0(c)<<7}function Q9(h,l,c){var r,Y0;A0(h[0],J),A0(h[1],W),A0(h[2],W),A0(h[3],J);for(Y0=255;Y0>=0;--Y0)r=c[Y0/8|0]>>(Y0&7)&1,$5(h,l,r),C6(l,h),C6(h,h),$5(h,l,r)}function A9(h,l){var c=[G(),G(),G(),G()];A0(c[0],F),A0(c[1],H),A0(c[2],W),N0(c[3],F,H),Q9(h,c,l)}function x1(h,l,c){var r=new Uint8Array(64),Y0=[G(),G(),G(),G()],W0;if(!c)X(l,32);M8(r,l,32),r[0]&=248,r[31]&=127,r[31]|=64,A9(Y0,r),R5(h,Y0);for(W0=0;W0<32;W0++)l[W0+32]=h[W0];return 0}var k8=new Float64Array([237,211,245,92,26,99,18,88,214,156,247,162,222,249,222,20,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,16]);function S8(h,l){var c,r,Y0,W0;for(r=63;r>=32;--r){c=0;for(Y0=r-32,W0=r-12;Y0<W0;++Y0)l[Y0]+=c-16*l[r]*k8[Y0-(r-32)],c=Math.floor((l[Y0]+128)/256),l[Y0]-=c*256;l[Y0]+=c,l[r]=0}c=0;for(Y0=0;Y0<32;Y0++)l[Y0]+=c-(l[31]>>4)*k8[Y0],c=l[Y0]>>8,l[Y0]&=255;for(Y0=0;Y0<32;Y0++)l[Y0]-=c*k8[Y0];for(r=0;r<32;r++)l[r+1]+=l[r]>>8,h[r]=l[r]&255}function Z6(h){var l=new Float64Array(64),c;for(c=0;c<64;c++)l[c]=h[c];for(c=0;c<64;c++)h[c]=0;S8(h,l)}function b$(h,l,c,r){var Y0=new Uint8Array(64),W0=new Uint8Array(64),b0=new Uint8Array(64),m0,P0,S0=new Float64Array(64),j0=[G(),G(),G(),G()];M8(Y0,r,32),Y0[0]&=248,Y0[31]&=127,Y0[31]|=64;var y0=c+64;for(m0=0;m0<c;m0++)h[64+m0]=l[m0];for(m0=0;m0<32;m0++)h[32+m0]=Y0[32+m0];M8(b0,h.subarray(32),c+32),Z6(b0),A9(j0,b0),R5(h,j0);for(m0=32;m0<64;m0++)h[m0]=r[m0];M8(W0,h,c+64),Z6(W0);for(m0=0;m0<64;m0++)S0[m0]=0;for(m0=0;m0<32;m0++)S0[m0]=b0[m0];for(m0=0;m0<32;m0++)for(P0=0;P0<32;P0++)S0[m0+P0]+=W0[m0]*Y0[P0];return S8(h.subarray(32),S0),y0}function U8(h,l){var c=G(),r=G(),Y0=G(),W0=G(),b0=G(),m0=G(),P0=G();if(A0(h[2],W),w0(h[1],l),Q0(Y0,h[1]),N0(W0,Y0,U),T0(Y0,Y0,h[2]),C0(W0,h[2],W0),Q0(b0,W0),Q0(m0,b0),N0(P0,m0,b0),N0(c,P0,Y0),N0(c,c,W0),V0(c,c),N0(c,c,Y0),N0(c,c,W0),N0(c,c,W0),N0(h[0],c,W0),Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))N0(h[0],h[0],N);if(Q0(r,h[0]),N0(r,r,W0),i0(r,Y0))return-1;if(n0(h[0])===l[31]>>7)T0(h[0],J,h[0]);return N0(h[3],h[0],h[1]),0}function j7(h,l,c,r){var Y0,W0=new Uint8Array(32),b0=new Uint8Array(64),m0=[G(),G(),G(),G()],P0=[G(),G(),G(),G()];if(c<64)return-1;if(U8(P0,r))return-1;for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0];for(Y0=0;Y0<32;Y0++)h[Y0+32]=r[Y0];if(M8(b0,h,c),Z6(b0),Q9(m0,P0,b0),A9(P0,l.subarray(32)),C6(m0,P0),R5(W0,m0),c-=64,A(l,0,W0,0)){for(Y0=0;Y0<c;Y0++)h[Y0]=0;return-1}for(Y0=0;Y0<c;Y0++)h[Y0]=l[Y0+64];return c}var k$=32,i6=24,s6=32,t8=16,Z5=32,C=32,d=32,u=32,I=32,t=i6,x0=s6,l0=t8,W1=64,F1=32,g1=64,b1=32,X8=64;$.lowlevel={crypto_core_hsalsa20:R,crypto_stream_xor:Z0,crypto_stream:v,crypto_stream_salsa20_xor:i,crypto_stream_salsa20:f,crypto_onetimeauth:D0,crypto_onetimeauth_verify:J0,crypto_verify_16:P,crypto_verify_32:A,crypto_secretbox:G0,crypto_secretbox_open:a,crypto_scalarmult:n,crypto_scalarmult_base:e,crypto_box_beforenm:R0,crypto_box_afternm:q0,crypto_box:H0,crypto_box_open:f0,crypto_box_keypair:t0,crypto_hash:M8,crypto_sign:b$,crypto_sign_keypair:x1,crypto_sign_open:j7,crypto_secretbox_KEYBYTES:k$,crypto_secretbox_NONCEBYTES:i6,crypto_secretbox_ZEROBYTES:s6,crypto_secretbox_BOXZEROBYTES:t8,crypto_scalarmult_BYTES:Z5,crypto_scalarmult_SCALARBYTES:C,crypto_box_PUBLICKEYBYTES:d,crypto_box_SECRETKEYBYTES:u,crypto_box_BEFORENMBYTES:I,crypto_box_NONCEBYTES:t,crypto_box_ZEROBYTES:x0,crypto_box_BOXZEROBYTES:l0,crypto_sign_BYTES:W1,crypto_sign_PUBLICKEYBYTES:F1,crypto_sign_SECRETKEYBYTES:g1,crypto_sign_SEEDBYTES:b1,crypto_hash_BYTES:X8,gf:G,D:U,L:k8,pack25519:d0,unpack25519:w0,M:N0,A:C0,S:Q0,Z:T0,pow2523:V0,add:C6,set25519:A0,modL:S8,scalarmult:Q9,scalarbase:A9};function u1(h,l){if(h.length!==k$)throw Error("bad key size");if(l.length!==i6)throw Error("bad nonce size")}function z$(h,l){if(h.length!==d)throw Error("bad public key size");if(l.length!==u)throw Error("bad secret key size")}function Y$(){for(var h=0;h<arguments.length;h++)if(!(arguments[h]instanceof Uint8Array))throw TypeError("unexpected type, use Uint8Array")}function v$(h){for(var l=0;l<h.length;l++)h[l]=0}$.randomBytes=function(h){var l=new Uint8Array(h);return X(l,h),l},$.secretbox=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(s6+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+s6]=h[W0];return G0(Y0,r,r.length,l,c),Y0.subarray(t8)},$.secretbox.open=function(h,l,c){Y$(h,l,c),u1(c,l);var r=new Uint8Array(t8+h.length),Y0=new Uint8Array(r.length);for(var W0=0;W0<h.length;W0++)r[W0+t8]=h[W0];if(r.length<32)return null;if(a(Y0,r,r.length,l,c)!==0)return null;return Y0.subarray(s6)},$.secretbox.keyLength=k$,$.secretbox.nonceLength=i6,$.secretbox.overheadLength=t8,$.scalarMult=function(h,l){if(Y$(h,l),h.length!==C)throw Error("bad n size");if(l.length!==Z5)throw Error("bad p size");var c=new Uint8Array(Z5);return n(c,h,l),c},$.scalarMult.base=function(h){if(Y$(h),h.length!==C)throw Error("bad n size");var l=new Uint8Array(Z5);return e(l,h),l},$.scalarMult.scalarLength=C,$.scalarMult.groupElementLength=Z5,$.box=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox(h,l,Y0)},$.box.before=function(h,l){Y$(h,l),z$(h,l);var c=new Uint8Array(I);return R0(c,h,l),c},$.box.after=$.secretbox,$.box.open=function(h,l,c,r){var Y0=$.box.before(c,r);return $.secretbox.open(h,l,Y0)},$.box.open.after=$.secretbox.open,$.box.keyPair=function(){var h=new Uint8Array(d),l=new Uint8Array(u);return t0(h,l),{publicKey:h,secretKey:l}},$.box.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==u)throw Error("bad secret key size");var l=new Uint8Array(d);return e(l,h),{publicKey:l,secretKey:new Uint8Array(h)}},$.box.publicKeyLength=d,$.box.secretKeyLength=u,$.box.sharedKeyLength=I,$.box.nonceLength=t,$.box.overheadLength=$.secretbox.overheadLength,$.sign=function(h,l){if(Y$(h,l),l.length!==g1)throw Error("bad secret key size");var c=new Uint8Array(W1+h.length);return b$(c,h,h.length,l),c},$.sign.open=function(h,l){if(Y$(h,l),l.length!==F1)throw Error("bad public key size");var c=new Uint8Array(h.length),r=j7(c,h,h.length,l);if(r<0)return null;var Y0=new Uint8Array(r);for(var W0=0;W0<Y0.length;W0++)Y0[W0]=c[W0];return Y0},$.sign.detached=function(h,l){var c=$.sign(h,l),r=new Uint8Array(W1);for(var Y0=0;Y0<r.length;Y0++)r[Y0]=c[Y0];return r},$.sign.detached.verify=function(h,l,c){if(Y$(h,l,c),l.length!==W1)throw Error("bad signature size");if(c.length!==F1)throw Error("bad public key size");var r=new Uint8Array(W1+h.length),Y0=new Uint8Array(W1+h.length),W0;for(W0=0;W0<W1;W0++)r[W0]=l[W0];for(W0=0;W0<h.length;W0++)r[W0+W1]=h[W0];return j7(Y0,r,r.length,c)>=0},$.sign.keyPair=function(){var h=new Uint8Array(F1),l=new Uint8Array(g1);return x1(h,l),{publicKey:h,secretKey:l}},$.sign.keyPair.fromSecretKey=function(h){if(Y$(h),h.length!==g1)throw Error("bad secret key size");var l=new Uint8Array(F1);for(var c=0;c<l.length;c++)l[c]=h[32+c];return{publicKey:l,secretKey:new Uint8Array(h)}},$.sign.keyPair.fromSeed=function(h){if(Y$(h),h.length!==b1)throw Error("bad seed size");var l=new Uint8Array(F1),c=new Uint8Array(g1);for(var r=0;r<32;r++)c[r]=h[r];return x1(l,c,!0),{publicKey:l,secretKey:c}},$.sign.publicKeyLength=F1,$.sign.secretKeyLength=g1,$.sign.seedLength=b1,$.sign.signatureLength=W1,$.hash=function(h){Y$(h);var l=new Uint8Array(X8);return M8(l,h,h.length),l},$.hash.hashLength=X8,$.verify=function(h,l){if(Y$(h,l),h.length===0||l.length===0)return!1;if(h.length!==l.length)return!1;return j(h,0,l,0,h.length)===0?!0:!1},$.setPRNG=function(h){X=h},function(){var h=typeof globalThis<"u"?globalThis.crypto||globalThis.msCrypto:null;if(h&&h.getRandomValues){var l=65536;$.setPRNG(function(c,r){var Y0,W0=new Uint8Array(r);for(Y0=0;Y0<r;Y0+=l)h.getRandomValues(W0.subarray(Y0,Y0+Math.min(r-Y0,l)));for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];v$(W0)})}else if(h=c0("crypto"),h&&h.randomBytes)$.setPRNG(function(c,r){var Y0,W0=h.randomBytes(r);for(Y0=0;Y0<r;Y0++)c[Y0]=W0[Y0];v$(W0)})}()})(typeof bg<"u"&&DZZ?DZZ:globalThis.nacl=globalThis.nacl||{});PC=typeof bg<"u"&&DZZ?DZZ:globalThis.nacl,D64={fromSeed:PC.sign.keyPair.fromSeed,sign:PC.sign.detached,verify:PC.sign.detached.verify,randomBytes:PC.randomBytes,scalarBaseMultiply:PC.scalarMult.base,seal:PC.box,open:PC.box.open};L64=new Uint16Array([0,4129,8258,12387,16516,20645,24774,28903,33032,37161,41290,45419,49548,53677,57806,61935,4657,528,12915,8786,21173,17044,29431,25302,37689,33560,45947,41818,54205,50076,62463,58334,9314,13379,1056,5121,25830,29895,17572,21637,42346,46411,34088,38153,58862,62927,50604,54669,13907,9842,5649,1584,30423,26358,22165,18100,46939,42874,38681,34616,63455,59390,55197,51132,18628,22757,26758,30887,2112,6241,10242,14371,51660,55789,59790,63919,35144,39273,43274,47403,23285,19156,31415,27286,6769,2640,14899,10770,56317,52188,64447,60318,39801,35672,47931,43802,27814,31879,19684,23749,11298,15363,3168,7233,60846,64911,52716,56781,44330,48395,36200,40265,32407,28342,24277,20212,15891,11826,7761,3696,65439,61374,57309,53244,48923,44858,40793,36728,37256,33193,45514,41451,53516,49453,61774,57711,4224,161,12482,8419,20484,16421,28742,24679,33721,37784,41979,46042,49981,54044,58239,62302,689,4752,8947,13010,16949,21012,25207,29270,46570,42443,38312,34185,62830,58703,54572,50445,13538,9411,5280,1153,29798,25671,21540,17413,42971,47098,34713,38840,59231,63358,50973,55100,9939,14066,1681,5808,26199,30326,17941,22068,55628,51565,63758,59695,39368,35305,47498,43435,22596,18533,30726,26663,6336,2273,14466,10403,52093,56156,60223,64286,35833,39896,43963,48026,19061,23124,27191,31254,2801,6864,10931,14994,64814,60687,56684,52557,48554,44427,40424,36297,31782,27655,23652,19525,15522,11395,7392,3265,61215,65342,53085,57212,44955,49082,36825,40952,28183,32310,20053,24180,11923,16050,3793,7920]);u$=class u$ extends Error{name;code;chainedError;constructor($,Z){super($);this.name="NKeysError",this.code=$,this.chainedError=Z}};(function($){$.InvalidPrefixByte="nkeys: invalid prefix byte",$.InvalidKey="nkeys: invalid key",$.InvalidPublicKey="nkeys: invalid public key",$.InvalidSeedLen="nkeys: invalid seed length",$.InvalidSeed="nkeys: invalid seed",$.InvalidCurveSeed="nkeys: invalid curve seed",$.InvalidCurveKey="nkeys: not a valid curve key",$.InvalidCurveOperation="nkeys: curve key is not valid for sign/verify",$.InvalidNKeyOperation="keys: only curve key can seal/open",$.InvalidEncoding="nkeys: invalid encoded key",$.InvalidRecipient="nkeys: not a valid recipient public curve key",$.InvalidEncrypted="nkeys: encrypted input is not valid",$.CannotSign="nkeys: cannot sign, no private key available",$.PublicKeyOnly="nkeys: no seed or private key available",$.InvalidChecksum="nkeys: invalid checksum",$.SerializationError="nkeys: serialization error",$.ApiError="nkeys: api error",$.ClearedPair="nkeys: pair is cleared"})(c$||(c$={}));(function($){$[$.Unknown=-1]="Unknown",$[$.Seed=144]="Seed",$[$.Private=120]="Private",$[$.Operator=112]="Operator",$[$.Server=104]="Server",$[$.Cluster=16]="Cluster",$[$.Account=0]="Account",$[$.User=160]="User",$[$.Curve=184]="Curve"})($6||($6={}));AC=[120,107,118,49];E64(D64);(function($){$.v1="ed25519",$.v2="ed25519-nkey"})(_J||(_J={}))});function H81($){try{$?.clear?.()}catch{}}async function CC$({accountJwt:$,accountSigningKey:Z,expiresAt:G,permissions:X,userId:Y,allowedConnectionTypes:Q=["WEBSOCKET"]}){let J=kC$($),W=w81(J.sub),K=F81(new TextEncoder().encode(Z)),U=IC$();try{let w=await MC$(Y,U,W,{pub:{allow:X.publish.allow},sub:{allow:X.subscribe.allow},allowed_connection_types:Q},{algorithm:_J.v2,exp:Math.floor(G.getTime()/1000),signer:K});return new TextDecoder().decode(SC$(w,U))}finally{H81(U),H81(K),H81(W)}}var _C$=O(()=>{VC$()});function S64($){return/^wss?:\/\//i.test($.trim())?["WEBSOCKET"]:["STANDARD","WEBSOCKET"]}function bC$(){let $=new V1;return $.post("/links/session",async(Z)=>{let X=Z.get("studioContext").auth?.user?.id;if(!X)return Z.json({error:"Unauthorized"},401);let Y=O1();if(!Y.natsTunnelPublicEnabled)return Z.json(N81(),503);if(!Y.natsPublicUrl)return Z.json(N81(),503);if(!Y.natsAccountJwt||!Y.natsAccountSigningKey){if(!Y.localMode)return Z.json(N81(),503)}let Q=CJ(X),J;if(Y.natsAccountJwt&&Y.natsAccountSigningKey){let W=new Date(Date.now()+Y.natsTunnelSessionTtlSeconds*1000);J=await CC$({accountJwt:Y.natsAccountJwt,accountSigningKey:Y.natsAccountSigningKey,expiresAt:W,permissions:zC$(Q),userId:X,allowedConnectionTypes:S64(Y.natsPublicUrl)})}return Z.json(jC$({publicUrl:Y.natsPublicUrl,userId:X,ttlSeconds:Y.natsTunnelSessionTtlSeconds,credentials:J}))}),$}var N81=()=>({error:"link session unavailable"});var fC$=O(()=>{X6();w8();PC$();_C$()});async function _64($,Z){try{return!await $.alive(Z)}catch(G){return console.warn(`[vm-events] alive probe failed for ${Z}; assuming alive: ${G instanceof Error?G.message:String(G)}`),!1}}async function b64($){let{ctx:Z,runner:G,claimName:X,userId:Y,projectRef:Q,sandboxProviderKind:J}=$;try{await G.delete(X)}catch(W){console.warn(`[vm-events] runner.delete failed for ${X}: ${W instanceof Error?W.message:String(W)}`)}try{await new MN(Z.db).delete({userId:Y,projectRef:Q},J)}catch(W){console.warn(`[vm-events] sandbox_runner_state delete failed for ${Y}/${Q}/${J}: ${W instanceof Error?W.message:String(W)}`)}}async function f64($){let{stream:Z,claimName:G,runner:X,signal:Y}=$;return new Promise((Q)=>{let J=!1,W=!1,K=null,U=(H)=>{if(J)return;J=!0,clearTimeout(w),Y.removeEventListener("abort",F),K?.unsubscribe(),Q(H)},w=setTimeout(()=>{if(W||J)return;Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"claim-never-created",message:"Sandbox claim was never created. The SANDBOX_START call may have failed earlier \u2014 check the start error."})}).catch(()=>{}),U(!1)},V64),F=()=>U(!1);Y.addEventListener("abort",F,{once:!0}),K=rn(X,G,(H)=>{if(J)return;if(H.kind!=="claiming")W=!0;if(Z.writeSSE({event:"phase",data:JSON.stringify(H)}).catch(()=>{}),H.kind==="ready")U(!0);else if(H.kind==="failed")U(!1)})})}async function x64($){let{stream:Z,runner:G,claimName:X,signal:Y}=$,Q=Date.now(),J=null;while(!Y.aborted){let K=null;try{K=await G.proxyDaemonRequest(X,"/_sandbox/events",{method:"GET",headers:new Headers({accept:"text/event-stream"}),body:null,signal:Y})}catch(U){if(Y.aborted)return;if(Date.now()-Q<xC$){await O8(vC$,{signal:Y}).catch(()=>{});continue}let w=U instanceof Error?U.message:String(U);await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE error: ${w}`})}).catch(()=>{});return}if(K.status===404){try{await K.body?.cancel()}catch{}if(Date.now()-Q<xC$){await O8(vC$,{signal:Y}).catch(()=>{});continue}await Z.writeSSE({event:"gone",data:""}).catch(()=>{});return}if(!K.ok||!K.body){try{await K.body?.cancel()}catch{}await Z.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:`Upstream daemon SSE failed (${K.status}).`})}).catch(()=>{});return}J=K;break}if(!J||!J.body)return;let W=J.body.getReader();try{while(!Y.aborted){let{value:K,done:U}=await W.read();if(U)break;if(K)await Z.write(K)}}catch{}finally{try{W.releaseLock()}catch{}}}var V64=90000,C64=15000,yC$=()=>{let $=new V1;return $.get("/",async(Z)=>{let G=Z.var.studioContext;try{M0(G)}catch{return Z.json({error:"Unauthorized"},401)}let X=y1(G);if(!X)return Z.json({error:"Unauthorized"},401);let Y;try{Y=O0(G)}catch{return Z.json({error:"Organization scope required"},403)}let Q=Z.req.query("virtualMcpId"),J=Z.req.query("branch");if(!Q||!J)return Z.json({error:"virtualMcpId and branch are required"},400);let W=await G.storage.virtualMcps.findById(Q);if(!W||W.organization_id!==Y.id)return Z.json({error:"Virtual MCP not found"},404);let K=Gw({orgId:Y.id,virtualMcpId:Q,branch:J}),U=Gg({userId:X,projectRef:K},J),w=W.metadata??null,F,H=null,N=null;try{let E=await CY(G,{userId:X,branch:J,virtualMcpMetadata:w});F=E.provider,H=E.kind}catch(E){N=E instanceof Error?E:Error(String(E)),F=null}let B=H&&mW(w5(w),X,J,H),D=!!B&&B.sandboxHandle===U;if(!F)return oQ(Z,async(E)=>{await E.writeSSE({event:"phase",data:JSON.stringify({kind:"failed",reason:"unknown",message:N?.message??"No sandbox runner configured on this studio instance."})})});return Z.header("X-Accel-Buffering","no"),Z.header("Content-Encoding","identity"),oQ(Z,async(E)=>{let L=new AbortController,z=setInterval(()=>{E.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(z)})},C64);E.onAbort(()=>{L.abort(),clearInterval(z)});try{if(D&&H){if(await _64(F,U)){await b64({ctx:G,runner:F,claimName:U,userId:X,projectRef:K,sandboxProviderKind:H}),await E.writeSSE({event:"gone",data:""}).catch(()=>{});return}}if(!await f64({stream:E,claimName:U,runner:F,signal:L.signal})||L.signal.aborted)return;await x64({stream:E,runner:F,claimName:U,signal:L.signal})}finally{clearInterval(z)}})}),$},xC$=60000,vC$=500;var gC$=O(()=>{X6();zC();qY();d5();xE0();on();AV();t90();RX()});function y64($){return $.filter((Z)=>Z.vendors?.alias).map((Z)=>({name:Z.name,title:Z.title,description:Z.description,logo:Z.logo,category:Z.category,vendor:{alias:Z.vendors.alias,url:Z.vendors.url}}))}async function g64($,Z){let G=await fetch(`${$}/rest/v1/apps?select=name,title,description,logo,category,vendors(alias,url)`,{headers:{apikey:Z,Authorization:`Bearer ${Z}`,Accept:"application/json"},signal:AbortSignal.timeout(v64)});if(!G.ok){let X=await G.text().catch(()=>G.statusText);throw console.error(`[deco-apps] Supabase error (${G.status}): ${X.slice(0,200)}`),Error(`External service error (${G.status})`)}return await G.json()}var v64=1e4,h64=async($,Z)=>{if(!$.get("studioContext").auth.user?.id)return $.json({error:"Unauthorized"},401);return Z()},hC$=()=>{let $=new V1;return $.use("*",h64),$.get("/",async(Z)=>{let G=O1(),X=G.decoSupabaseUrl,Y=G.decoSupabaseServiceKey;if(!X||!Y)return Z.json({apps:[]});try{let Q=await g64(X,Y);return Z.json({apps:y64(Q)})}catch(Q){return console.error("[deco-apps] GET error:",Q),Z.json({error:"Failed to fetch apps"},502)}}),$};var cC$=O(()=>{X6();w8()});import{z as h1}from"zod";function jK($,Z="invalid_request_error",G=null,X=null){return{error:{message:$,type:Z,param:G,code:X}}}function r64($){if(!$)return null;let Z=$.indexOf(":");if(Z===-1)return{credentialId:null,modelId:$};let G=$.substring(0,Z),X=$.substring(Z+1);if(!G||!X)return null;return{credentialId:G,modelId:X}}function o64($,Z,G){try{return JSON.parse($)}catch{throw new lC$(`Invalid JSON in tool call arguments for function '${G}' (tool_call_id: ${Z}): ${$}`)}}function a64($){let Z={};for(let G of $)if(G.role==="assistant"&&G.tool_calls)for(let X of G.tool_calls)Z[X.id]=X.function.name;return $.map((G)=>{switch(G.role){case"system":return{role:"system",content:G.content};case"user":if(typeof G.content==="string")return{role:"user",content:G.content};return{role:"user",content:G.content.map((Y)=>{if(Y.type==="text")return{type:"text",text:Y.text};return{type:"image",image:Y.image_url.url}})};case"assistant":if(G.tool_calls&&G.tool_calls.length>0)return{role:"assistant",content:G.tool_calls.map((Y)=>({type:"tool-call",toolCallId:Y.id,toolName:Y.function.name,input:o64(Y.function.arguments,Y.id,Y.function.name)}))};return{role:"assistant",content:G.content??""};case"tool":let X=Z[G.tool_call_id]??"unknown";return{role:"tool",content:[{type:"tool-result",toolCallId:G.tool_call_id,toolName:X,output:{type:"text",value:G.content}}]}}})}function s64($){let Z=$.map((G)=>{let X=G.function.parameters?OY(G.function.parameters):OY({type:"object",properties:{}});return[G.function.name,f$({description:G.function.description,inputSchema:X})]});return Object.fromEntries(Z)}function e64($){if(!$)return;return{openai:{response_format:$}}}function $44(){return`chatcmpl-${crypto.randomUUID().replace(/-/g,"").substring(0,29)}`}function uC$($,Z,G,X,Y,Q){let J={model:$,messages:Z,tools:G,temperature:X.temperature,maxTokens:X.max_tokens,topP:X.top_p,frequencyPenalty:X.frequency_penalty,presencePenalty:X.presence_penalty,stopSequences:X.stop?Array.isArray(X.stop)?X.stop:[X.stop]:void 0,abortSignal:Q};return Y?{...J,providerOptions:Y}:J}function dC$($){if($==="tool-calls")return"tool_calls";if($==="length")return"length";return"stop"}var c64=256,u64,d64,l64,m64,i64,n64,p64,t64,lC$,mC$,iC$;var nC$=O(()=>{E6();X6();zC();u64=h1.object({type:h1.literal("function"),function:h1.object({name:h1.string(),description:h1.string().optional(),parameters:h1.record(h1.string(),h1.unknown()).optional()})}),d64=h1.object({id:h1.string(),type:h1.literal("function"),function:h1.object({name:h1.string(),arguments:h1.string()})}),l64=h1.discriminatedUnion("role",[h1.object({role:h1.literal("system"),content:h1.string(),name:h1.string().optional()}),h1.object({role:h1.literal("user"),content:h1.union([h1.string(),h1.array(h1.union([h1.object({type:h1.literal("text"),text:h1.string()}),h1.object({type:h1.literal("image_url"),image_url:h1.object({url:h1.string(),detail:h1.string().optional()})})]))]),name:h1.string().optional()}),h1.object({role:h1.literal("assistant"),content:h1.string().nullable().optional(),name:h1.string().optional(),tool_calls:h1.array(d64).optional()}),h1.object({role:h1.literal("tool"),content:h1.string(),tool_call_id:h1.string()})]),m64=h1.object({type:h1.literal("text")}),i64=h1.object({type:h1.literal("json_object")}),n64=h1.object({type:h1.literal("json_schema"),json_schema:h1.object({name:h1.string(),description:h1.string().optional(),schema:h1.record(h1.string(),h1.unknown()),strict:h1.boolean().optional()})}),p64=h1.union([m64,i64,n64]),t64=h1.object({model:h1.string().describe("Format: 'model_id' or 'credential_id:model_id'"),messages:h1.array(l64),stream:h1.boolean().optional().default(!1),temperature:h1.number().min(0).max(2).optional(),max_tokens:h1.number().positive().optional(),top_p:h1.number().min(0).max(1).optional(),frequency_penalty:h1.number().min(-2).max(2).optional(),presence_penalty:h1.number().min(-2).max(2).optional(),stop:h1.union([h1.string(),h1.array(h1.string())]).optional(),tools:h1.array(u64).optional(),tool_choice:h1.union([h1.literal("auto"),h1.literal("none"),h1.literal("required"),h1.object({type:h1.literal("function"),function:h1.object({name:h1.string()})})]).optional(),response_format:p64.optional(),user:h1.string().optional()});lC$=class lC$ extends Error{constructor($){super($);this.name="MessageConversionError"}};mC$=new V1;mC$.post("/:org/v1/chat/completions",async($)=>{let Z=$.get("studioContext"),G=$.req.param("org");try{if(!Z.auth.apiKey?.id)return $.json(jK("API key authentication required. Provide a valid API key via Authorization header.","authentication_error"),401);if(!Z.organization)return $.json(jK("Organization context is required. Ensure your API key has organization metadata.","invalid_request_error","organization"),400);if((Z.organization.slug??Z.organization.id)!==G)return $.json(jK("Organization mismatch. The API key's organization does not match the requested organization.","invalid_request_error","organization"),403);let X=await $.req.json(),Y=t64.safeParse(X);if(!Y.success){let E=Y.error.issues[0]??{message:"Invalid request",path:[]};return $.json(jK(`Invalid request: ${E.message}`,"invalid_request_error",E.path.length>0?E.path.join("."):null),400)}let Q=Y.data,J=r64(Q.model);if(!J)return $.json(jK("Invalid model format. Expected 'model_id' or 'credential_id:model_id' (e.g., 'claude-sonnet-4-6' or 'key_abc123:claude-sonnet-4-6')","invalid_request_error","model"),400);let{credentialId:W}=J,{modelId:K}=J;if(!W){let E=await Z.storage.aiProviderKeys.list({organizationId:Z.organization.id});if(E.length===0)return $.json(jK("No AI provider credentials configured for this organization. Add a credential in settings or specify one explicitly via 'credential_id:model_id'.","invalid_request_error","model"),400);W=E[0].id}let U;try{U=await Z.aiProviders.activate(W,Z.organization.id)}catch{return $.json(jK(`AI provider credential not found or inaccessible: ${W}`,"invalid_request_error","model"),404)}let w=U.aiSdk.languageModel(K),F=a64(Q.messages),H=Q.tools?s64(Q.tools):void 0,N=e64(Q.response_format),B=$44(),D=Math.floor(Date.now()/1000);if(Q.stream)return oQ($,async(E)=>{let L=uC$(w,F,H,Q,N,$.req.raw.signal);try{let z=xQ(L),j=!1,P=0,A="",M=async()=>{if(A.length===0)return;let S=A;A="",await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{content:S},finish_reason:null}]})})};for await(let S of z.fullStream){if(!j&&(S.type==="text-delta"||S.type==="tool-call"))await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{role:"assistant",content:""},finish_reason:null}]})}),j=!0;if(S.type==="text-delta"){if(A+=S.text,A.length>=c64)await M()}else if(S.type==="tool-call"){await M();let R=P++;await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{tool_calls:[{index:R,id:S.toolCallId,type:"function",function:{name:S.toolName,arguments:JSON.stringify(S.input)}}]},finish_reason:null}]})})}else if(S.type==="finish")await M(),await E.writeSSE({data:JSON.stringify({id:B,object:"chat.completion.chunk",created:D,model:Q.model,choices:[{index:0,delta:{},finish_reason:dC$(S.finishReason)}],usage:S.totalUsage?{prompt_tokens:S.totalUsage.inputTokens??0,completion_tokens:S.totalUsage.outputTokens??0,total_tokens:S.totalUsage.totalTokens??0}:void 0})})}await M(),await E.writeSSE({data:"[DONE]"})}catch(z){let j=z;console.error("[openai-compat:stream] Error:",j.message),await E.writeSSE({data:JSON.stringify({error:{message:j.message,type:"server_error"}})})}});else{let E=uC$(w,F,H,Q,N,$.req.raw.signal),L=await ON(E),z={role:"assistant",content:L.text||null};if(L.toolCalls&&L.toolCalls.length>0)z.tool_calls=L.toolCalls.map((j)=>({id:j.toolCallId,type:"function",function:{name:j.toolName,arguments:JSON.stringify("input"in j?j.input:{})}})),z.content=null;return $.json({id:B,object:"chat.completion",created:D,model:Q.model,choices:[{index:0,message:z,finish_reason:dC$(L.finishReason)}],usage:{prompt_tokens:L.usage?.inputTokens??0,completion_tokens:L.usage?.outputTokens??0,total_tokens:L.usage?.totalTokens??0}})}}catch(X){let Y=X;if(Y.name==="AbortError")return $.json(jK("Request aborted","invalid_request_error"),400);if(Y.name==="MessageConversionError")return $.json(jK(Y.message,"invalid_request_error","messages"),400);return console.error("[openai-compat] Error:",Y.message,Y.stack),$.json(jK(Y.message,"server_error"),500)}});iC$=mC$});var tC$;var pC$=O(()=>{tC$={name:"decocms",version:"4.92.2",description:"Deco CMS \u2014 Self-hostable MCP Gateway for managing AI connections and tools",author:"Deco team",repository:{type:"git",url:"git+https://github.com/decocms/studio.git",directory:"apps/mesh"},bugs:{url:"https://github.com/decocms/studio/issues"},type:"module",bin:{deco:"./dist/server/cli.js"},files:["dist/**/*"],scripts:{dev:'bun run migrate && concurrently "bun run dev:client" "bun run dev:server"',"dev:servers":'concurrently "bun run dev:client" "bun run dev:server"',"dev:client":"vite dev","dev:server":"bun run --cwd=../../packages/sandbox build && NODE_ENV=development bun --env-file=.env --hot run src/index.ts","build:client":"bun --bun vite build","build:server":"bun run scripts/bundle-server-script.ts --dist ./dist/server","db:migrate":"bun run ./dist/server/migrate.js",check:"tsc --noEmit",start:"bun run ./dist/server/server.js",migrate:"bun run src/database/migrate.ts",test:"bun test","test:ct":"playwright test -c playwright-ct.config.ts","test:ct:ui":"playwright test -c playwright-ct.config.ts --ui","better-auth:migrate":"bunx --bun @better-auth/cli migrate -y --config src/auth/index.ts","smoke:link":"bun run scripts/smoke-link.ts",prepublishOnly:"bun run build:client && bun run build:server"},optionalDependencies:{"@anthropic-ai/claude-agent-sdk":"^0.3.181","@duckdb/node-api":"^1.5.0-r.1","@openai/codex":"0.144.3","@openai/codex-darwin-arm64":"npm:@openai/codex@0.144.3-darwin-arm64","@openai/codex-darwin-x64":"npm:@openai/codex@0.144.3-darwin-x64","@openai/codex-linux-arm64":"npm:@openai/codex@0.144.3-linux-arm64","@openai/codex-linux-x64":"npm:@openai/codex@0.144.3-linux-x64","@openai/codex-win32-arm64":"npm:@openai/codex@0.144.3-win32-arm64","@openai/codex-win32-x64":"npm:@openai/codex@0.144.3-win32-x64"},dependencies:{"@ai-sdk/anthropic":"^3.0.85","@ai-sdk/google":"^3.0.83","@ai-sdk/openai":"^3.0.73","@anthropic-ai/sdk":"^0.105.0","@aws-sdk/client-s3":"^3.1013.0","@aws-sdk/client-sts":"^3.1013.0","@aws-sdk/lib-storage":"^3.1013.0","@aws-sdk/s3-request-presigner":"^3.1013.0","@clickhouse/client":"^1.8.1","@dbos-inc/dbos-sdk":"^4.21.6","@dnd-kit/core":"^6.3.1","@dnd-kit/sortable":"^10.0.0","@dnd-kit/utilities":"^3.2.2","@inkjs/ui":"^2.0.0","@modelcontextprotocol/ext-apps":"^1.7.1","@nats-io/jetstream":"3.4.0","@nats-io/kv":"3.4.0","@nats-io/nats-core":"3.4.0","@nats-io/transport-node":"3.4.0","@openrouter/ai-sdk-provider":"^2.9.1","@opentelemetry/core":"^2.6.0","@tanstack/react-virtual":"3.13.24","@tiptap/extension-text-align":"3.20.2","@xterm/addon-fit":"^0.11.0","@xterm/xterm":"^6.0.0",echarts:"^5.6.0","embedded-postgres":"^18.3.0-beta.16",ink:"^6.8.0",kysely:"^0.28.12","node-pty":"^1.0.0","posthog-js":"^1.371.1","posthog-node":"^5.0.0",react:"^19.2.6","react-dom":"^19.2.6","use-stick-to-bottom":"^1.1.6"},devDependencies:{"@ai-sdk/provider":"^3.0.10","@ai-sdk/react":"^3.0.210","@better-auth/sso":"1.4.1","@daveyplate/better-auth-ui":"^3.2.7","@deco/ui":"workspace:*","@decocms/better-auth":"1.5.17","@decocms/bindings":"workspace:*","@decocms/harness":"workspace:*","@decocms/mcp-utils":"workspace:*","@decocms/mesh-sdk":"workspace:*","@decocms/runtime":"workspace:*","@decocms/sandbox":"workspace:*","@decocms/std":"workspace:*","@decocms/tunnel":"workspace:*","@floating-ui/react":"^0.27.16","@happy-dom/global-registrator":"^20.9.0","@hookform/resolvers":"^5.2.2","@jitl/quickjs-wasmfile-release-sync":"0.31.0","@modelcontextprotocol/sdk":"1.29.0","@monaco-editor/react":"^4.7.0","@nats-io/jwt":"0.0.10-5","@opentelemetry/api":"^1.9.0","@opentelemetry/api-logs":"^0.211.0","@opentelemetry/exporter-logs-otlp-proto":"^0.211.0","@opentelemetry/exporter-prometheus":"^0.208.0","@opentelemetry/exporter-trace-otlp-proto":"^0.207.0","@opentelemetry/instrumentation-runtime-node":"^0.24.0","@opentelemetry/resources":"^2.6.0","@opentelemetry/sdk-logs":"^0.211.0","@opentelemetry/sdk-metrics":"^2.2.0","@opentelemetry/sdk-node":"^0.207.0","@opentelemetry/sdk-trace-base":"^2.5.0","@playwright/experimental-ct-react":"1.59.1","@playwright/test":"^1.58.2","@radix-ui/react-avatar":"^1.1.10","@radix-ui/react-checkbox":"^1.3.3","@radix-ui/react-dialog":"^1.1.15","@radix-ui/react-dropdown-menu":"^2.1.16","@radix-ui/react-label":"^2.1.7","@radix-ui/react-select":"^2.2.6","@radix-ui/react-separator":"^1.1.7","@radix-ui/react-slot":"^1.2.3","@radix-ui/react-tabs":"^1.1.13","@rjsf/shadcn":"^6.6.2","@rjsf/utils":"^6.6.2","@rjsf/validator-ajv8":"^6.6.2","@tailwindcss/vite":"^4.1.17","@tanstack/react-query":"5.100.10","@tanstack/react-router":"1.169.2","@testing-library/jest-dom":"^6.9.1","@testing-library/react":"^16.3.2","@tiptap/core":"3.20.2","@tiptap/extension-placeholder":"3.20.2","@tiptap/pm":"3.20.2","@tiptap/react":"3.20.2","@tiptap/starter-kit":"3.20.2","@tiptap/suggestion":"3.20.2","@types/bun":"^1.3.1","@types/google.maps":"^3.65.2","@types/pg":"^8.15.6","@types/react-syntax-highlighter":"^15.5.13","@untitledui/icons":"^0.0.19","@vercel/nft":"^1.1.1","@vitejs/plugin-react":"^5.1.0",ai:"^6.0.208","babel-plugin-react-compiler":"^1.0.0","better-auth":"1.4.22","class-variance-authority":"^0.7.1",clsx:"^2.1.1",concurrently:"^9.2.1",croner:"^9.1.0","date-fns":"^4.1.0",degit:"^2.8.4",hono:"^4.10.7","input-otp":"^1.4.2",jose:"^6.0.11","lucide-react":"^0.468.0",marked:"^15.0.6",nanoid:"^5.1.6",pg:"^8.16.3",prettier:"^3.4.2","react-hook-form":"^7.66.0","react-markdown":"^10.1.0","react-resizable-panels":"^2.1.7","react-syntax-highlighter":"^15.6.1",recharts:"^3.6.0","rehype-raw":"^7.0.0","remark-gfm":"^4.0.0","sass-embedded":"^1.97.2",sonner:"^2.0.7","tailwind-merge":"^3.3.1",tailwindcss:"^4.1.17",typescript:"^5.9.3",vite:"^7.2.1","vite-tsconfig-paths":"^5.1.4",zod:"^4.0.0"},homepage:"https://github.com/decocms/studio",keywords:["mcp","model-context-protocol","ai","gateway","self-hosted","mesh","tools"],license:"MIT",publishConfig:{access:"public"}}});function X44(){let $=process.env.POSTHOG_KEY;if(!$)return null;return{key:$,host:process.env.POSTHOG_HOST??G44}}var rC$,G44="https://ph.studio.decocms.com",oC$;var aC$=O(()=>{X6();Yf0();iN();NG();w8();E01();pC$();rC$=new V1;rC$.get("/",($)=>{let Z={version:tC$.version,theme:Mb1(),...rO().logo&&{logo:rO().logo},...hQ()&&{internalUrl:$00()},...O1().enableDecoImport&&{enableDecoImport:!0},brandExtractEnabled:!!O1().firecrawlApiKey,auth:OR$(),posthog:X44(),googleMapsApiKey:process.env.GOOGLE_MAPS_API_KEY?.trim()||null,runtime:{agentSandbox:!hQ()&&O1().sandboxProviderKind==="agent-sandbox"}};return $.header("Cache-Control","no-store"),$.json({success:!0,config:Z})});oC$=rC$});function rL0($){let Z=($??"").trim().toLowerCase();return Z=Z.replace(/^https?:\/\//,""),Z=Z.replace(/^www\./,""),Z=Z.split(/[/?#]/)[0]??"",Z.replace(/\/+$/,"")}function eC$($){return(rL0($).split(".")[0]||$).replace(/[-_]/g," ").split(" ").filter(Boolean).map((G)=>G.charAt(0).toUpperCase()+G.slice(1)).join(" ")}function $_$($,Z=64){return`https://www.google.com/s2/favicons?domain=${encodeURIComponent(rL0($))}&sz=${Z}`}function sC$($,Z){let G=$.trim();if(G.length<=Z)return G;let X=G.slice(0,Z-1),Y=X.lastIndexOf(" ");return`${(Y>Z*0.6?X.slice(0,Y):X).trimEnd()}\u2026`}function Z_$($){let{brand:Z,domain:G,score:X,verdict:Y}=$,Q=typeof X==="number"?`${Z} commerce report \u2014 ${Math.round(X)}/100 \xB7 decocms`:`${Z} commerce report \xB7 decocms`,J=`See the full ${Z} scorecard \u2014 SEO, performance, conversion & AEO signals scored by decocms.`,W=Y?.trim()?sC$(`${Y.trim().replace(/\s+/g," ")} \u2014 ${J}`,200):sC$(`How does ${G} really perform? ${J}`,200);return{title:Q,description:W}}import{join as Y44}from"path";function vw($){return $.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;")}function Q44($){let Z=rL0($),G=eC$(Z),X=$_$(Z,128),Q=`${(O1().baseUrl??"https://studio.decocms.com").replace(/\/+$/,"")}/report/${encodeURIComponent(Z)}`,{title:J,description:W}=Z_$({brand:G,domain:Z});return[`<title>${vw(J)}</title>`,`<meta name="description" content="${vw(W)}" />`,'<meta name="robots" content="noindex, follow" />','<meta property="og:type" content="website" />','<meta property="og:site_name" content="decocms" />',`<meta property="og:title" content="${vw(J)}" />`,`<meta property="og:description" content="${vw(W)}" />`,`<meta property="og:url" content="${vw(Q)}" />`,'<meta name="twitter:card" content="summary" />',`<meta name="twitter:title" content="${vw(J)}" />`,`<meta name="twitter:description" content="${vw(W)}" />`,`<link rel="canonical" href="${vw(Q)}" />`,`<link rel="icon" href="${vw(X)}" sizes="any" />`].join(`
     `)}function J44($,Z){return $.replace(/<title>[\s\S]*?<\/title>\s*/i,"").replace(/<meta\s+name="(?:description|twitter:[^"]*)"[^>]*>\s*/gi,"").replace(/<meta\s+property="og:[^"]*"[^>]*>\s*/gi,"").replace(/<link\s+rel="icon"[^>]*>\s*/gi,"").replace("</head>",`    ${Z}
   </head>`)}function G_$($){let Z=new V1;return Z.get("/:domain",async(G)=>{let X=G.req.param("domain"),Y=$?Y44($,"index.html"):null,Q=Y?Bun.file(Y):null;if(!Q||!await Q.exists())return G.notFound();let J=await Q.text();try{let W=Q44(X);return G.html(J44(J,W),200,{"Cache-Control":"public, max-age=0, s-maxage=300"})}catch{return G.html(J)}}),Z}var X_$=O(()=>{X6();w8()});import{z as Q1}from"zod";var IC,W44,K44,U44,w44,Y_$;var Q_$=O(()=>{IC=Q1.enum(["good","bad","neutral"]),W44=Q1.preprocess(($)=>{if(Array.isArray($))return{kind:"text",value:$.find((G)=>G!==null&&typeof G!=="object")??""};return $!==null&&typeof $==="object"?$:{kind:"text",value:$}},Q1.object({kind:Q1.enum(["text","number","sparkline","badge","score"]).catch("text"),value:Q1.coerce.string().optional(),tone:IC.optional(),muted:Q1.boolean().optional(),delta:Q1.coerce.string().optional(),deltaDir:Q1.enum(["up","down","neutral"]).optional(),points:Q1.array(Q1.coerce.number()).optional(),label:Q1.coerce.string().optional()}).transform(($)=>{if($.kind==="badge"&&$.label==null)$.label=$.value??"";if($.kind==="score"){let Z=Number($.value);if(Number.isNaN(Z))return{...$,kind:"text"}}return $})),K44=Q1.preprocess(($)=>{let Z=$;if(Z&&typeof Z==="object"&&!Array.isArray(Z)&&Array.isArray(Z.cells))Z=Z.cells;if(Array.isArray(Z)&&Z.length===1&&Array.isArray(Z[0]))Z=Z[0];if(Array.isArray(Z))return Z;if(Z&&typeof Z==="object")return Object.values(Z);return Z},Q1.array(W44)),U44={key:Q1.coerce.string(),title:Q1.coerce.string(),eyebrow:Q1.coerce.string().optional(),headline:Q1.coerce.string(),annotation:Q1.coerce.string().optional(),methodology:Q1.coerce.string().optional(),sources:Q1.array(Q1.object({name:Q1.coerce.string(),logoUrl:Q1.coerce.string()})).optional()},w44=Q1.discriminatedUnion("template",[Q1.object({template:Q1.literal("cover"),score:Q1.object({value:Q1.coerce.number(),max:Q1.coerce.number().optional(),grade:Q1.coerce.string().optional(),label:Q1.coerce.string().optional()}).optional(),brandImage:Q1.coerce.string().optional(),screenshot:Q1.coerce.string().optional(),mobileScreenshot:Q1.coerce.string().optional()}),Q1.object({template:Q1.literal("cta"),ctaUrl:Q1.coerce.string().optional(),ctaLabel:Q1.coerce.string().optional(),bullets:Q1.array(Q1.coerce.string()).optional()}),Q1.object({template:Q1.literal("series"),points:Q1.array(Q1.coerce.number()).min(2),xLabels:Q1.array(Q1.coerce.string()).min(1),unit:Q1.coerce.string().optional(),callout:Q1.object({index:Q1.coerce.number(),value:Q1.coerce.string(),tone:IC.optional()})}),Q1.object({template:Q1.literal("threshold"),value:Q1.coerce.string().default(""),metricLabel:Q1.coerce.string().optional(),ratio:Q1.coerce.number(),thresholdRatio:Q1.coerce.number().optional(),thresholdLabel:Q1.coerce.string().default(""),tone:IC.optional()}),Q1.object({template:Q1.literal("stats"),stats:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),tone:IC.optional()})).min(1)}),Q1.object({template:Q1.literal("bars"),items:Q1.array(Q1.object({value:Q1.coerce.string(),label:Q1.coerce.string(),ratio:Q1.coerce.number(),tone:IC.optional()})).min(1)}),Q1.object({template:Q1.literal("gauges"),gauges:Q1.array(Q1.object({label:Q1.coerce.string(),value:Q1.coerce.string(),status:Q1.enum(["good","warn","bad"]).catch("warn"),caption:Q1.coerce.string().optional(),ratio:Q1.coerce.number().optional()})).min(1)}),Q1.object({template:Q1.literal("checklist"),checks:Q1.array(Q1.object({label:Q1.coerce.string(),status:Q1.enum(["pass","fail","warn"]).catch("fail"),value:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("table"),columns:Q1.array(Q1.object({label:Q1.coerce.string(),align:Q1.enum(["left","right"]).optional()})).min(1),rows:Q1.array(K44).min(1),highlightRow:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("products"),products:Q1.array(Q1.object({name:Q1.coerce.string(),price:Q1.coerce.string().optional(),image:Q1.coerce.string().optional(),url:Q1.coerce.string().optional()})).min(1)}),Q1.object({template:Q1.literal("list"),entries:Q1.array(Q1.object({label:Q1.coerce.string(),severity:Q1.enum(["error","warning","notice"]).catch("notice")})).min(1),moreCount:Q1.coerce.number().optional()}),Q1.object({template:Q1.literal("keywords"),volumeLabel:Q1.coerce.string().optional(),keywords:Q1.array(Q1.object({term:Q1.coerce.string(),volume:Q1.coerce.string(),position:Q1.coerce.number().catch(0)})).min(1)}),Q1.object({template:Q1.literal("competitor"),metricLabel:Q1.coerce.string().optional(),competitors:Q1.array(Q1.object({name:Q1.coerce.string(),value:Q1.coerce.string(),tone:IC.optional(),isYou:Q1.boolean().optional()})).min(1)}),Q1.object({template:Q1.literal("scorecard"),rivalLabel:Q1.coerce.string().optional(),dimensions:Q1.array(Q1.object({label:Q1.coerce.string(),you:Q1.coerce.string(),rival:Q1.coerce.string().optional(),rivalName:Q1.coerce.string().optional(),tone:IC.optional()})).min(1)})]),Y_$=Q1.object({...U44,template:w44})});function J_$($){let Z=[],G=[...$.sections].sort((X,Y)=>X.position-Y.position).map((X)=>{let Y=Y_$.safeParse(X.props);if(Y.success)return Y.data;let Q=Y.error.issues[0];return Z.push({section_type:X.section_type,position:X.position,reason:Q?`${Q.path.join(".")||"(root)"}: ${Q.message}`:"contract violation"}),null}).filter((X)=>X!==null);return{deck:{meta:{...$.meta,scores:$.summary?.scores},slides:G},drops:Z}}var W_$=O(()=>{Q_$()});function wr($,Z){return fetch(`${wD({})}${$}`,Z)}async function F44($,Z){let G=await wr(`/api/v2/public/diagnostics/${encodeURIComponent($)}`+(Z?`?pw=${encodeURIComponent(Z)}`:""),{headers:{Accept:"application/json"}});if(G.status===404)return{status:"not_found",deck:null,scanned_at:null,drops:[]};if(!G.ok)throw Error(`report read HTTP ${G.status}`);let X=await G.json(),{deck:Y,drops:Q}=J_$(X);return{status:Y.slides.length?"ready":"empty",deck:Y,scanned_at:X.scanned_at,drops:Q}}var H44,RC,K_$;var U_$=O(()=>{X6();_Q();Uf();W_$();H44=new Set(["complete","errored","terminated","unknown"]),RC=new V1;RC.use("*",async($,Z)=>{let G=await B8.api.getSession({headers:$.req.raw.headers});if(!G?.user?.id)return $.json({error:"Authentication required"},401,{"Cache-Control":"private, no-store",Vary:"Cookie"});$.set("reportUser",{email:G.user.email}),await Z(),$.header("Cache-Control","private, no-store"),$.header("Vary","Cookie");return});RC.get("/site/:domain",async($)=>{let Z=$.req.param("domain").trim();if(!Z)return $.json({error:"domain is required"},400);let G=$.req.query("key")?.trim()||void 0;try{let X=await F44(Z,G);return $.header("Cache-Control","private, no-store"),$.json(X)}catch{return $.json({error:"report read failed"},502)}});RC.post("/run",async($)=>{let Z;try{Z=await $.req.json()}catch{return $.json({error:"invalid JSON"},400)}let G=typeof Z.domain==="string"?Z.domain.trim():"";if(!G)return $.json({error:"domain is required"},400);let X=$.get("reportUser").email,Y=typeof Z.distinctId==="string"&&Z.distinctId.trim()&&Z.distinctId.length<=200?Z.distinctId.trim():void 0;try{let Q=await wr("/api/v2/diagnostics/run",{method:"POST",headers:{"Content-Type":"application/json",Authorization:`Bearer ${FD({})}`},body:JSON.stringify({url:G,email:X,distinct_id:Y})});if(!Q.ok)return $.json({error:`run HTTP ${Q.status}`},502);let J=await Q.json(),W=J.blocked?{state:"blocked"}:J.status==="fresh"?{state:"fresh"}:J.mode==="sync"?{state:"sync"}:{state:"running",id:J.id??null};return $.json(W)}catch{return $.json({error:"run failed"},502)}});RC.get("/status",async($)=>{let Z=$.req.query("id");if(!Z)return $.json({error:"id is required"},400);try{let G=await wr(`/api/v2/diagnostics/status?id=${encodeURIComponent(Z)}`,{headers:{Authorization:`Bearer ${FD({})}`}});if(!G.ok)return $.json({error:`status HTTP ${G.status}`},502);let Y=(await G.json()).status??"unknown",Q={done:H44.has(Y),status:Y};return $.json(Q)}catch{return $.json({error:"status failed"},502)}});RC.get("/link-token/:id",async($)=>{let Z=$.req.param("id");try{let G=await wr(`/api/v2/public/link-tokens/${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(G.status===404)return $.json(null);if(!G.ok)return $.json({error:`link token HTTP ${G.status}`},502);return $.json(await G.json())}catch{return $.json({error:"link token resolve failed"},502)}});RC.get("/suggest",async($)=>{let Z=($.req.query("q")??"").trim().slice(0,64);if(Z.length<2)return $.json({suggestions:[]});try{let G=await wr(`/api/v2/public/suggest?q=${encodeURIComponent(Z)}`,{headers:{Accept:"application/json"}});if(!G.ok)return $.json({suggestions:[]});let X=await G.json();return $.json({suggestions:Array.isArray(X.suggestions)?X.suggestions:[]})}catch{return $.json({suggestions:[]})}});K_$=RC});function w_$($,Z){if(Z.startsWith("text/html")||Z.startsWith("image/svg"))$.set("Content-Security-Policy","sandbox allow-scripts allow-modals allow-same-origin")}var F_$,N44,B44,H_$;var N_$=O(()=>{X6();v3();ev();vb();F_$=new V1,N44=["range","if-none-match","if-modified-since"],B44=["content-type","content-length","content-range","accept-ranges","etag","last-modified"];F_$.get("/:org/files/*",async($)=>{let Z=$.get("studioContext"),G=Z.organization?.id;if(!Z.auth?.user?.id){if(Ng($))return $.redirect(`/login?next=${encodeURIComponent($.req.path)}`,302);throw new P$(401,{message:"Authentication required"})}if(!G)throw new P$(401,{message:"Organization context required"});let X=$.req.path.replace(/^.*\/files\//,"");if(!X)throw new P$(400,{message:"Missing file key"});let Y=await Qp(X,Z);if(!Y)throw new P$(503,{message:"Object storage not configured"});if(Y.startsWith("data:")&&x3()){let K=Y.match(/^data:([^;]+);base64,(.+)$/s);if(!K)throw new P$(500,{message:"Invalid data URL from storage"});let[,U,w]=K,F=Buffer.from(w,"base64"),H=new Headers({"Content-Type":U,"Cache-Control":"private, max-age=86400"});return w_$(H,U),new Response(F,{status:200,headers:H})}let Q=new Headers;for(let K of N44){let U=$.req.header(K);if(U)Q.set(K,U)}let J=await fetch(Y,{headers:Q});if(J.status===403||J.status===404)throw new P$(404,{message:"File not found"});if(!J.ok&&J.status!==304&&J.status!==416)throw console.error(`[files] upstream storage error ${J.status} for key:`,X),new P$(502,{message:"Upstream storage error"});let W=new Headers;for(let K of B44){let U=J.headers.get(K);if(U)W.set(K,U)}return W.set("Cache-Control","private, max-age=86400"),w_$(W,W.get("content-type")??""),new Response(J.body,{status:J.status,headers:W})});H_$=F_$});var Fr=_((qC)=>{var O44=qC&&qC.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),D44=qC&&qC.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))O44(Z,$,G)};Object.defineProperty(qC,"__esModule",{value:!0});D44(tX(),qC)});var D_$=_((B_$)=>{Object.defineProperty(B_$,"__esModule",{value:!0});B_$.version=void 0;B_$.version="3.4.0"});var z_$=_((PK)=>{var E44=PK&&PK.__importDefault||function($){return $&&$.__esModule?$:{default:$}};Object.defineProperty(PK,"__esModule",{value:!0});PK.NodeTransport=PK.VERSION=void 0;PK.nodeResolveHost=T44;var i4=Fr(),L44=c0("net"),B81=c0("tls"),z44=c0("path"),E_$=c0("fs"),j44=E44(c0("dns")),P44=D_$();PK.VERSION=P44.version;var A44="nats.js";class L_${socket;version;lang;yields=[];signal=(0,i4.deferred)();closedNotification=(0,i4.deferred)();options;connected=!1;tlsName="";done=!1;closeError;constructor(){this.lang=A44,this.version=PK.VERSION}async connect($,Z){this.tlsName=$.tlsName,this.options=Z;let{tls:G}=this.options,{handshakeFirst:X}=G||{};try{if(X===!0)this.socket=await this.tlsFirst($);else this.socket=await this.dial($);if(this.done)this.socket?.destroy();let Y=await this.peekInfo();(0,i4.checkOptions)(Y,Z);let{tls_required:Q,tls_available:J}=Y,W=J===!0&&Z.tls!==null;if(!X&&(Q||W))this.socket=await this.startTLS();if(this.done)this.socket?.destroy();if(Q&&this.socket.encrypted!==!0)throw i4.errors.InvalidArgumentError.format("tls","is not available on this server");return this.connected=!0,this.setupHandlers(),this.signal.resolve(),Promise.resolve()}catch(Y){let Q=Y;if(!Q)Q=new i4.errors.ConnectionError("error connecting - node provided an undefined error");let{code:J}=Q,W=J==="ECONNREFUSED"?new i4.errors.ConnectionError("connection refused",{cause:Q}):Q;throw this.socket?.destroy(),W}}dial($){let Z=(0,i4.deferred)(),G,X=(0,L44.createConnection)($.port,$.hostname,()=>{Z.resolve(X),X.removeAllListeners()});return X.on("error",(Y)=>{G=Y}),X.on("close",()=>{X.removeAllListeners(),Z.reject(G)}),X.setNoDelay(!0),Z}get isClosed(){return this.done}close($){return this._closed($,!1)}peekInfo(){let $=(0,i4.deferred)(),Z;return this.socket.on("data",(G)=>{this.yields.push(G);let X=i4.DataBuffer.concat(...this.yields),Y=(0,i4.extractProtocolMessage)(X);if(Y!=="")try{let Q=i4.INFO.exec(Y);if(!Q)throw Error("unexpected response from server");let J=JSON.parse(Q[1]);$.resolve(J)}catch(Q){$.reject(Q)}finally{this.socket.removeAllListeners()}}),this.socket.on("error",(G)=>{Z=G}),this.socket.on("close",()=>{this.socket.removeAllListeners(),$.reject(Z)}),$}loadFile($){if(!$)return Promise.resolve();let Z=(0,i4.deferred)();try{if($=(0,z44.resolve)($),!(0,E_$.existsSync)($))Z.reject(Error(`${$} doesn't exist`));(0,E_$.readFile)($,(G,X)=>{if(G)return Z.reject(G);Z.resolve(X)})}catch(G){Z.reject(G)}return Z}async loadClientCerts(){let $={},{certFile:Z,cert:G,caFile:X,ca:Y,keyFile:Q,key:J}=this.options.tls;try{if(Z){let W=await this.loadFile(Z);if(W)$.cert=W}else if(G)$.cert=G;if(Q){let W=await this.loadFile(Q);if(W)$.key=W}else if(J)$.key=J;if(X){let W=await this.loadFile(X);if(W)$.ca=[W]}else if(Y)$.ca=Y;return Promise.resolve($)}catch(W){return Promise.reject(W)}}async tlsFirst($){let Z,G={servername:this.tlsName,rejectUnauthorized:!0};if(this.socket)G.socket=this.socket;if(typeof this.options.tls==="object")try{let Y=await this.loadClientCerts()||{};G=(0,i4.extend)(G,this.options.tls,Y)}catch(Y){return Promise.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}let X=(0,i4.deferred)();try{let Y=(0,B81.connect)($.port,$.hostname,G,()=>{Y.removeAllListeners(),X.resolve(Y)});Y.on("error",(Q)=>{Z=Q}),Y.on("secureConnect",()=>{if(G.rejectUnauthorized===!1)return;if(!Y.authorized)throw Y.authorizationError}),Y.on("close",()=>{X.reject(Z),Y.removeAllListeners()}),Y.setNoDelay(!0)}catch(Y){X.reject(new i4.errors.ConnectionError(Y.message,{cause:Y}))}return X}async startTLS(){let $,Z={socket:this.socket,servername:this.tlsName,rejectUnauthorized:!0};if(typeof this.options.tls==="object")try{let X=await this.loadClientCerts()||{};Z=(0,i4.extend)(Z,this.options.tls,X)}catch(X){return Promise.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}let G=(0,i4.deferred)();try{let X=(0,B81.connect)(Z,()=>{X.removeAllListeners(),G.resolve(X)});X.on("error",(Y)=>{$=Y}),X.on("secureConnect",()=>{if(Z.rejectUnauthorized===!1)return;if(!X.authorized)throw X.authorizationError}),X.on("close",()=>{G.reject($),X.removeAllListeners()})}catch(X){G.reject(new i4.errors.ConnectionError(X.message,{cause:X}))}return G}setupHandlers(){let $;this.socket.on("data",(Z)=>{return this.yields.push(Z),this.signal.resolve()}),this.socket.on("error",(Z)=>{$=Z}),this.socket.on("end",()=>{if(this.socket?.destroyed)return;this.socket?.write(new Uint8Array(0),()=>{this.socket?.end()})}),this.socket.on("close",()=>{this._closed($,!1)})}[Symbol.asyncIterator](){return this.iterate()}async*iterate(){while(!0){if(this.yields.length===0)await this.signal;let $=this.yields;this.yields=[];for(let Z=0;Z<$.length;Z++){if(this.options.debug)console.info(`> ${(0,i4.render)($[Z])}`);yield $[Z]}if(this.done)break;else if(this.yields.length===0)$.length=0,this.yields=$,this.signal=(0,i4.deferred)()}}discard(){if(this.done=!0,this.socket)try{this.socket.removeAllListeners(),this.socket.destroy()}catch{}}disconnect(){this._closed(void 0,!0).then().catch()}isEncrypted(){return this.socket instanceof B81.TLSSocket}_send($){if(this.isClosed||this.socket===void 0)return Promise.resolve();if(this.options.debug)console.info(`< ${(0,i4.render)($)}`);let Z=(0,i4.deferred)();try{this.socket.write($,(G)=>{if(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);return Z.reject(G)}return Z.resolve()})}catch(G){if(this.options.debug)console.error(`!!! ${(0,i4.render)($)}: ${G}`);Z.reject(G)}return Z}send($){this._send($).catch((G)=>{})}async _closed($,Z=!0){if(!this.connected)return;if(this.done){this.socket?.destroy();return}if(this.closeError=$,!$&&this.socket&&Z)try{await this._send(new TextEncoder().encode(""))}catch(G){if(this.options.debug)console.log("transport close terminated with an error",G)}try{if(this.socket)this.socket.removeAllListeners(),this.socket?.destroy(),this.socket=void 0}catch(G){console.log(G)}this.done=!0,this.closedNotification.resolve(this.closeError)}closed(){return this.closedNotification}}PK.NodeTransport=L_$;function T44($){let Z=(0,i4.deferred)();return j44.default.lookup($,{all:!0},(G,X)=>{if(G){Z.reject(G);return}let Y=[];for(let Q of X)Y.push(Q.address);if(Y.length===0)Y.push($);Z.resolve(Y)}),Z}});var I_$=_((T_$)=>{Object.defineProperty(T_$,"__esModule",{value:!0});T_$.connect=I44;var j_$=z_$(),P_$=Fr(),A_$=Fr();function I44($={}){if((0,A_$.hasWsProtocol)($))return Promise.reject(A_$.errors.InvalidArgumentError.format("servers","node client doesn't support websockets, use the 'wsconnect' function instead"));return(0,P_$.setTransportFactory)({factory:()=>{return new j_$.NodeTransport},dnsResolveFn:j_$.nodeResolveHost}),P_$.NatsConnectionImpl.connect($)}});var R_$=_((yw)=>{var q44=yw&&yw.__createBinding||(Object.create?function($,Z,G,X){if(X===void 0)X=G;var Y=Object.getOwnPropertyDescriptor(Z,G);if(!Y||("get"in Y?!Z.__esModule:Y.writable||Y.configurable))Y={enumerable:!0,get:function(){return Z[G]}};Object.defineProperty($,X,Y)}:function($,Z,G,X){if(X===void 0)X=G;$[X]=Z[G]}),M44=yw&&yw.__exportStar||function($,Z){for(var G in $)if(G!=="default"&&!Object.prototype.hasOwnProperty.call(Z,G))q44(Z,$,G)};Object.defineProperty(yw,"__esModule",{value:!0});yw.connect=void 0;var k44=I_$();Object.defineProperty(yw,"connect",{enumerable:!0,get:function(){return k44.connect}});M44(Fr(),yw)});function S_$($){let Z=$?.connectFn??_44,G=null,X=null,Y=!1,Q=!1,J=!1,W=[];function K(){return G!==null&&!G.isClosed()&&!G.isDraining()&&!J}function U(){console.log(`[NatsProvider] fireReady: ${W.length} callbacks`);for(let H of W)try{H()}catch{}}function w(H){(async()=>{for await(let N of H.status())if(N.type==="disconnect")console.log("[NatsProvider] Disconnected"),J=!0;else if(N.type==="reconnect")console.log("[NatsProvider] Reconnected, re-firing ready callbacks"),J=!1,X=null,U()})().catch(()=>{})}async function F(H,N){let B=0;while(!Q)try{G=await Z({servers:H,timeout:C44,reconnect:!0,maxReconnectAttempts:-1,...N?{authenticator:N}:{}}),console.log(`[NatsProvider] Connected to ${G.getServer()} after ${B} attempt(s)`),X=null,J=!1,w(G),U();return}catch{B++;let D=lX(V44,S44,B-1,2,0.5);await O8(D)}}return{init(H,N){if(Y)return;Y=!0,Q=!1;let B=N?.creds?q_$.credsAuthenticator(new TextEncoder().encode(N.creds)):void 0;F(H,B).catch(()=>{})},isConnected(){return K()},getConnection(){return K()?G:null},getJetStream(){if(!K())return null;if(!X)X=k_$.jetstream(G);return X},onReady(H){if(W.push(H),K())try{H()}catch{}},async drain(){if(Q=!0,Y=!1,X=null,J=!1,G){let H=G;G=null,await H.drain().catch(()=>{})}}}}function _44($){return M_$.connect($)}var q_$,M_$,k_$,S44=100,V44=3000,C44=3000;var V_$=O(()=>{d5();q_$=k(Qh(),1),M_$=k(R_$(),1),k_$=k(cB(),1)});function O81($,Z){return`${$}.${Z}`}class D81{cache;constructor($){this.cache=sy({ttlMs:$?.ttlMs??b44,maxSize:$?.maxSize??f44})}async get($,Z){return this.cache.get(O81($,Z))??null}async set($,Z,G){this.cache.set(O81($,Z),G)}async invalidate($,Z){this.cache.delete(O81($,Z))}teardown(){this.cache.clear()}}var b44=600000,f44=5000;var C_$=()=>{};function oL0($,Z){return`${$}:${Z}`}function E81($){let Z=sy({ttlMs:$?.ttlMs??x44,maxSize:$?.maxSize??v44}),G=$?.getConnection,X=crypto.randomUUID(),Y=new TextEncoder,Q=new TextDecoder,J=null;function W(K,U){let w=G?.();if(!w)return;try{w.publish(__$,Y.encode(JSON.stringify({organizationId:K,keyId:U,originId:X})))}catch(F){console.warn("[ProviderKeyCache] Publish failed (non-critical):",F)}}return{get(K,U){return Z.get(oL0(K,U))},set(K,U,w){Z.set(oL0(K,U),w)},invalidate(K,U){Z.delete(oL0(K,U)),W(K,U)},start(){if(J)return;let K=G?.();if(!K)return;J=K.subscribe(__$),(async()=>{for await(let U of J)try{let w=JSON.parse(Q.decode(U.data));if(w.originId===X)continue;Z.delete(oL0(w.organizationId,w.keyId))}catch{}})().catch(console.error)},teardown(){J?.unsubscribe(),J=null,Z.clear()}}}var __$="studio.ai-provider-keys.invalidate",x44=30000,v44=5000;var b_$=()=>{};class L81{options;sub=null;onCancel=null;encoder=new TextEncoder;originId=crypto.randomUUID();constructor($){this.options=$}async start($){if($)this.onCancel=$;if(this.sub)return;if(!this.onCancel)return;let Z=this.options.getConnection();if(!Z)return;this.sub=Z.subscribe("mesh.decopilot.cancel");let G=new TextDecoder;(async()=>{for await(let X of this.sub)try{let Y=JSON.parse(G.decode(X.data));if(Y.originId===this.originId)continue;this.onCancel?.(Y.taskId)}catch{}})().catch(console.error)}broadcast($){if(/[.*>\s]/.test($)){console.warn("[NatsCancelBroadcast] Invalid threadId, skipping broadcast");return}this.onCancel?.($);try{let Z=this.options.getConnection();if(!Z)return;Z.publish("mesh.decopilot.cancel",this.encoder.encode(JSON.stringify({taskId:$,originId:this.originId})))}catch(Z){console.warn("[NatsCancelBroadcast] Publish failed (non-critical):",Z)}}publishControlFrame($,Z){}async stop(){this.sub?.unsubscribe(),this.sub=null,this.onCancel=null}}var f_$=($)=>{let Z;return()=>Z??=$()},z81,j81;var x_$=O(()=>{N5();z81=f_$(()=>D8.createHistogram("decopilot.stream.encode_ms",{description:"Per-chunk JSON.stringify+encode time for decopilot stream",unit:"ms"})),j81=f_$(()=>D8.createCounter("decopilot.stream.published_chunks",{description:"Logical decopilot stream chunks published to JetStream",unit:"{chunks}"}))});function l44(){return{name:aU,subjects:[`${Km0}.>`],storage:bJ.StorageType.File,max_age:h44,max_bytes:u44,max_msgs_per_subject:d44,discard:bJ.DiscardPolicy.Old,retention:bJ.RetentionPolicy.Limits,duplicate_window:c44,num_replicas:1}}class g_${chunks=0;encodeMs=0;maxMs=0;bytes=0;windowStart=performance.now();constructor(){setInterval(()=>this.flush(),1e4).unref?.()}record($,Z){if(this.chunks++,this.encodeMs+=$,$>this.maxMs)this.maxMs=$;this.bytes+=Z}flush(){let $=performance.now(),Z=$-this.windowStart;if(this.chunks>0&&Z>0)console.warn(JSON.stringify({msg:"stream-encode-trace",windowMs:Math.round(Z),chunks:this.chunks,encodeMs:Math.round(this.encodeMs),pctOfLoop:+(this.encodeMs/Z*100).toFixed(1),maxChunkMs:+this.maxMs.toFixed(2),mbEncoded:+(this.bytes/1048576).toFixed(2)}));this.chunks=0,this.encodeMs=0,this.maxMs=0,this.bytes=0,this.windowStart=$}}function v_$($){let Z=y_$.headers();for(let[G,X]of Object.entries($))Z.set(G,X);return Z}function p44($,Z){let G=0;return{publish(X,Y,Q,J){X.publish(Y,Q,J?{headers:J}:void 0).catch((W)=>{if(G++,g44().add(1,{"org.id":Z??"unknown"}),G===1||G%100===0)console.warn(`[Decopilot] JetStream publish failed for thread ${$} (${G} total):`,W)})},get errorCount(){return G}}}class P81{options;js=null;jsm=null;constructor($){this.options=$}async init(){let $=this.options.getConnection();if(!$){console.log("[Decopilot] StreamBuffer.init skipped: NATS not connected yet");return}let Z=this.options.getJetStreamManager?await this.options.getJetStreamManager():await bJ.jetstreamManager($),G=l44();try{await Z.streams.info(aU),await Z.streams.update(aU,G)}catch(X){if(X instanceof Error&&X.message.includes("stream not found"))await Z.streams.add(G);else if(X instanceof Error&&/can ?not change.*storage|storage type/i.test(X.message))await Z.streams.delete(aU),await Z.streams.add(G);else throw X}this.js=this.options.getJetStream(),this.jsm=Z,console.log(`[Decopilot] StreamBuffer.init ${this.js?"ready":"degraded (js=null)"}`)}pump($,Z,G,X){let Y=this.js;if(!Y)return console.warn(`[Decopilot] pump: JetStream client unavailable for thread ${Z}; chunks NOT published to NATS`),Promise.resolve();let Q=p44(Z,X),J=!1,W=()=>{if(J)return;J=!0;let U=E4$(Z);Y.publish(U.subject,U.data).catch(()=>{})};G.addEventListener("abort",W,{once:!0});let K=(U)=>{let w=performance.now(),F=wm0(U,{runId:Z}),H=performance.now()-w;if(z81().record(H),j81().add(1,{"org.id":X??"unknown"}),n44?.record(H,F.reduce((N,B)=>N+B.data.length,0)),F.length===0){console.warn(`[Decopilot] dropping oversized stream chunk for thread ${Z}`);return}for(let N of F)Q.publish(Y,N.subject,N.data,N.headers?v_$(N.headers):void 0)};return(async()=>{let U=$.getReader(),w=0,F=0,H;try{while(!0){let{done:N,value:B}=await U.read();if(N)break;if(K(B),F++,++w>=64)w=0,await new Promise((D)=>setImmediate(D))}}catch(N){H=N,console.warn(`[Decopilot] stream pump error for thread ${Z}:`,N?.message??N)}finally{if(U.releaseLock(),W(),i44)console.warn(JSON.stringify({msg:"decopilot-stream-diag",event:"pump-done",taskId:Z,publishedChunks:F,publishErrors:Q.errorCount}))}if(H!==void 0)throw H})()}async publishRawChunk($,Z,G){let X=this.js;if(!X)return!1;let Y=performance.now(),Q=wm0(Z,{runId:$,dedup:G});if(z81().record(performance.now()-Y),j81().add(1),Q.length===0)return console.warn(`[Decopilot] dropping oversized raw chunk for thread ${$} (> MAX_CHUNKED_BYTES)`),!0;for(let J of Q)await X.publish(J.subject,J.data,{...J.headers?{headers:v_$(J.headers)}:{},...J.msgId?{msgID:J.msgId}:{}});return!0}async publishDone($,Z,G){let X=this.js;if(!X)return!1;let Y=D4$({runId:$,fenceToken:Z,finalSeq:G});return await X.publish(Y.subject,Y.data,{msgID:Y.msgId}),!0}async createTailStream($,Z,G){let X=this.js;if(!X)return console.warn(`[Decopilot] createTailStream: JetStream client unavailable for thread ${$}; no live tail`),null;let Y=G?.deliverPolicy==="new"?bJ.DeliverPolicy.New:bJ.DeliverPolicy.All,Q=G?.closeOnDone??!1,J=EN($),W;try{W=await(await X.consumers.get(aU,{filter_subjects:J,deliver_policy:Y})).consume()}catch(D){return console.warn("[Decopilot] JetStream tail unavailable (non-critical):",D?.message??D),null}let w=N90({messages:async function*(){try{for await(let D of W)yield{subject:D.subject,data:D.data,headers:D.headers}}finally{W.stop()}}(),onCancel:()=>W.stop()}).pipeThrough(w90()).pipeThrough(F90()).getReader(),F=!1,H=()=>{if(F)return;F=!0;try{w.releaseLock()}catch{}},N=!1,B=()=>{if(N)return;N=!0,W.stop(),w.cancel().catch(()=>{}),H()};return Z?.addEventListener("abort",B,{once:!0}),new ReadableStream({async pull(D){for(;;){let{done:E,value:L}=await w.read();if(E){B(),D.close();return}let z=L;if(z.kind==="done"){if(Q){B(),D.close();return}continue}D.enqueue(z.chunk);return}},cancel(){B()}})}purge($){if(!this.jsm)return;this.jsm.streams.purge(aU,{filter:EN($)}).catch(()=>{})}teardown(){this.js=null,this.jsm=null}}var bJ,y_$,y44=($)=>{let Z;return()=>Z??=$()},g44,h44=86400000000000,c44=120000000000,u44=4294967296,d44=500000,m44,i44,n44;var h_$=O(()=>{Hm0();B90();Fm0();N5();x_$();bJ=k(cB(),1),y_$=k(Qh(),1),g44=y44(()=>D8.createCounter("decopilot.stream.publish_errors",{description:"Number of JetStream publish failures for decopilot stream chunks",unit:"{errors}"}));m44=process.env.STREAM_ENCODE_TRACE==="1",i44=process.env.DECOPILOT_STREAM_TRACE==="1";n44=m44?new g_$:null});import{z as G8}from"zod";var c_$,u_$,AK,A81,d_$,l_$,m_$,i_$,t44,n_$,p_$,t_$,r_$,o_$,r44,a_$,u7Z,o44,a44=($)=>{return $.issues.map((Z)=>{return`${Z.path.length>0?Z.path.join("."):"frame"}: ${Z.message}`}).join("; ")},s_$=($)=>{return new TextEncoder().encode(JSON.stringify($))},e_$=($)=>{let Z;try{Z=JSON.parse(new TextDecoder().decode($))}catch(Q){throw TypeError("malformed JSON in tunnel frame",{cause:Q})}if(Z===null||typeof Z!=="object"||Array.isArray(Z))throw TypeError("frame must be an object");if(!("type"in Z))throw TypeError("frame type missing");let G=Z.type,X=typeof G==="string"?o44[G]:void 0;if(!X)throw TypeError(`unknown frame type: ${String(G)}`);let Y=X.safeParse(Z);if(!Y.success)throw TypeError(`invalid tunnel frame: ${a44(Y.error)}`);return Y.data};var $b$=O(()=>{c_$=G8.string().regex(/^[A-Za-z0-9_-]*$/u),u_$=G8.array(G8.tuple([G8.string(),G8.string()])),AK=G8.string().regex(/^[A-Za-z0-9_-]+$/u),A81=G8.string().min(1),d_$=G8.object({type:G8.literal("request.start"),protocol:G8.literal("tunnel.v1"),requestId:AK,method:G8.string().min(1),url:G8.string().min(1),headers:u_$,replySubject:A81,bodySubject:A81.optional(),abortSubject:A81,deadlineUnixMs:G8.number().int().nonnegative().optional()}),l_$=G8.object({type:G8.literal("request.chunk"),requestId:AK,seq:G8.number().int().nonnegative(),data:c_$}),m_$=G8.object({type:G8.literal("request.end"),requestId:AK,seq:G8.number().int().nonnegative()}),i_$=G8.object({type:G8.literal("request.error"),requestId:AK,code:G8.string().min(1),message:G8.string()}),t44=G8.union([l_$,m_$,i_$]),n_$=G8.object({type:G8.literal("response.ack"),requestId:AK}),p_$=G8.object({type:G8.literal("response.start"),requestId:AK,status:G8.number().int().min(100).max(599),statusText:G8.string().optional(),headers:u_$}),t_$=G8.object({type:G8.literal("response.chunk"),requestId:AK,seq:G8.number().int().nonnegative(),data:c_$}),r_$=G8.object({type:G8.literal("response.end"),requestId:AK,seq:G8.number().int().nonnegative()}),o_$=G8.object({type:G8.literal("response.error"),requestId:AK,code:G8.string().min(1),message:G8.string()}),r44=G8.union([n_$,p_$,t_$,r_$,o_$]),a_$=G8.object({type:G8.literal("abort"),requestId:AK,reason:G8.string().optional()}),u7Z=G8.union([d_$,t44,r44,a_$]),o44={"request.start":d_$,"request.chunk":l_$,"request.end":m_$,"request.error":i_$,"response.ack":n_$,"response.start":p_$,"response.chunk":t_$,"response.end":r_$,"response.error":o_$,abort:a_$}});var s44=($)=>{return $.replaceAll("+","-").replaceAll("/","_").replaceAll("=","")},e44=($)=>{let Z=$.replaceAll("-","+").replaceAll("_","/"),G=(4-Z.length%4)%4;return Z+"=".repeat(G)},$54=($)=>{let Z=[];for(let G=0;G<$.length;G+=32768)Z.push(String.fromCharCode(...$.subarray(G,G+32768)));return Z.join("")},Z54=($)=>{let Z=new Uint8Array($.length);for(let G=0;G<$.length;G+=32768){let X=$.slice(G,G+32768);Z.set(Uint8Array.from(X,(Y)=>Y.charCodeAt(0)),G)}return Z},Zb$=($)=>{return s44(btoa($54($)))},Gb$=($)=>{return Z54(atob(e44($)))},G54;var Xb$=O(()=>{G54=class G54{#$=[];#Z;#G=!1;#Q=new Set;push($){if(this.#G)return;let Z=this.#Y();if(Z){Z.resolve({value:$,done:!1});return}this.#$.push($)}close(){if(this.#G)return;this.#G=!0,this.#X()}fail($){if(this.#G)return;this.#Z=$,this.#G=!0,this.#J($)}[Symbol.asyncIterator](){let $=!1,Z=new Set;return{next:()=>{if($)return Promise.resolve({value:void 0,done:!0});if(this.#$.length>0)return Promise.resolve({value:this.#$.shift(),done:!1});if(this.#Z)return Promise.reject(this.#Z);if(this.#G)return Promise.resolve({value:void 0,done:!0});return new Promise((G,X)=>{let Y;Y={resolve:(Q)=>{Z.delete(Y),G(Q)},reject:(Q)=>{Z.delete(Y),X(Q)}},Z.add(Y),this.#Q.add(Y)})},return:()=>{$=!0;for(let G of Z)this.#Q.delete(G),G.resolve({value:void 0,done:!0});return Z.clear(),Promise.resolve({value:void 0,done:!0})}}}#Y(){for(let $ of this.#Q)return this.#Q.delete($),$;return}#X(){for(let $ of this.#Q)$.resolve({value:void 0,done:!0});this.#Q.clear()}#J($){for(let Z of this.#Q)Z.reject($);this.#Q.clear()}}});function*H54($,Z){for(let G=0;G<$.length;G+=Z)yield $.subarray(G,G+Z)}class j54{maxSize;ttlMs;now;#$=new Map;constructor($,Z,G=Date.now){this.maxSize=$;this.ttlMs=Z;this.now=G}get($){let Z=this.#$.get($);if(!Z)return;if(Z.expiresAt<=this.now()){this.#$.delete($);return}return Z.value}has($){return this.get($)!==void 0}set($,Z){let G=this.now();this.prune(G),this.#$.delete($),this.#$.set($,{value:Z,expiresAt:G+this.ttlMs});while(this.#$.size>this.maxSize){let X=this.#$.keys().next().value;if(X===void 0)return;this.#$.delete(X)}}take($){let Z=this.get($);return this.#$.delete($),Z}clear(){this.#$.clear()}prune($){for(let[Z,G]of this.#$)if(G.expiresAt<=$)this.#$.delete(Z)}}var X54=30000,Y54=1000,Q54=65536,sQ,J54=($)=>{return"connection"in $},W54=($)=>{let Z=J54($)?$:{connection:$};return{connection:Z.connection,timeoutMs:Z.timeoutMs??0,firstFrameTimeoutMs:Z.firstFrameTimeoutMs??X54,idleTimeoutMs:Z.idleTimeoutMs??0,republishIntervalMs:Z.republishIntervalMs??Y54,maxChunkBytes:Z.maxChunkBytes??Q54,diagnostics:Z.diagnostics}},Yb$=($)=>{return Array.from($.entries())},K54=($)=>{return $!==void 0&&!($ instanceof Headers)&&typeof $!=="function"&&typeof $[Symbol.iterator]==="function"},U54=($,Z,G)=>{if(K54(Z?.headers))return Array.from(Z?.headers,([X,Y])=>[String(X),String(Y)]);if($ instanceof Request)return Yb$(G.headers);return Yb$(G.headers)},Qb$=($)=>{let Z=new Headers;for(let[G,X]of $)Z.append(G,X);return Z},w54=()=>{return crypto.randomUUID().replaceAll("-","")},F54=($)=>{try{$?.unsubscribe()}catch{}},N54=($)=>{if(!Number.isSafeInteger($)||$<1)throw TypeError("maxChunkBytes must be a positive safe integer")},B54=($,Z)=>{return $==="HEAD"||Z===204||Z===205||Z===304},TB=($,Z,G)=>{$.publish(Z,s_$(G))},O54=($)=>{return $.type.startsWith("response.")},T81=($)=>{let Z=$.reason;if(Z instanceof Error)return Z.message;if(typeof Z==="string")return Z;return"aborted"},D54=($)=>{if($==="idle")return new sQ("tunnel_idle_timeout","no response frame within idleTimeoutMs");return new sQ("tunnel_no_first_frame","no response frame arrived before firstFrameTimeoutMs")},Jb$=async($,Z,G,X,Y="first_frame")=>{while(!0){let Q,J;try{let W=await Promise.race([$.next(),new Promise((U,w)=>{if(X.aborted){w(X.reason);return}let F=()=>w(X.reason);J=()=>{X.removeEventListener("abort",F)},X.addEventListener("abort",F,{once:!0})}),...G>0?[new Promise((U,w)=>{Q=setTimeout(()=>{w(D54(Y))},G)})]:[]]);if(W.done)return{value:void 0,done:!0};let K=e_$(W.value.data);if(!O54(K)||K.requestId!==Z)continue;return{value:K,done:!1}}finally{if(J?.(),Q)clearTimeout(Q)}}},E54=async($)=>{let Z=!1;while(!0){let G=await Jb$($.iterator,$.requestId,Z?0:$.firstFrameTimeoutMs,$.signal);if(G.done)throw new sQ("tunnel_response_closed","response subscription closed before response.start");if(!Z)Z=!0,$.onFirstResponseFrame();if(G.value.type==="response.ack")continue;if(G.value.type==="response.start")return G.value;if(G.value.type==="response.error")throw new sQ(G.value.code,G.value.message);throw new sQ("tunnel_unexpected_response_frame",`expected response.start, got ${G.value.type}`)}},L54=async($)=>{let Z=$.body.getReader(),G=0,X=!1,Y=()=>{X=!0,Z.cancel($.signal.reason).catch(()=>{})};try{if($.signal.aborted){Y();return}$.signal.addEventListener("abort",Y,{once:!0});while(!0){let{done:Q,value:J}=await Z.read();if(X)return;if(Q){TB($.connection,$.subject,{type:"request.end",requestId:$.requestId,seq:G});return}for(let W of H54(J,$.maxChunkBytes)){if(X)return;TB($.connection,$.subject,{type:"request.chunk",requestId:$.requestId,seq:G,data:Zb$(W)}),G++}}}catch(Q){if(X)return;TB($.connection,$.subject,{type:"request.error",requestId:$.requestId,code:"tunnel_request_body_error",message:Q instanceof Error?Q.message:String(Q)})}finally{$.signal.removeEventListener("abort",Y),Z.releaseLock()}},z54=($)=>{return new ReadableStream({async pull(Z){while(!0)try{let G=await Jb$($.iterator,$.requestId,$.idleTimeoutMs,$.signal,"idle");if(G.done){Z.error(new sQ("tunnel_response_closed","response subscription closed before response.end")),$.cleanup();return}let X=G.value;if(X.type==="response.ack"||X.type==="response.start")continue;if(X.type==="response.chunk"){Z.enqueue(Gb$(X.data));return}if(X.type==="response.end"){Z.close(),$.cleanup();return}Z.error(new sQ(X.code,X.message)),$.cleanup();return}catch(G){Z.error(G),$.cleanup();return}},cancel(){TB($.connection,$.abortSubject,{type:"abort",requestId:$.requestId,reason:"response_body_cancelled"}),$.cleanup()}},{highWaterMark:0})},IB=($)=>{let Z=W54($);return N54(Z.maxChunkBytes),async(G,X)=>{let Y=EC$(G),Q=new Request(G,X),J=w54(),W=LC$(Y.hostname,J),K=new AbortController,U=new AbortController,w=!1,F,H,N,B,D=!1,E=(P=new sQ("tunnel_closed","tunnel request closed"))=>{if(w)return;if(w=!0,F54(F),Q.body&&!D)Q.body.cancel(P).catch(()=>{});if(U.abort(P),K.abort(P),N)clearInterval(N);if(B)clearTimeout(B);Q.signal.removeEventListener("abort",L)},L=()=>{let P=new sQ("tunnel_aborted",T81(Q.signal));TB(Z.connection,W.abort,{type:"abort",requestId:J,reason:T81(Q.signal)}),K.abort(P),E(P)};if(Q.signal.aborted)throw new sQ("tunnel_aborted",T81(Q.signal));if(F=Z.connection.subscribe(W.reply),H=F[Symbol.asyncIterator](),Q.signal.addEventListener("abort",L,{once:!0}),Z.timeoutMs>0)B=setTimeout(()=>{let P=new sQ("tunnel_timeout",`tunnel request timed out after ${Z.timeoutMs}ms`);TB(Z.connection,W.abort,{type:"abort",requestId:J,reason:"tunnel_timeout"}),K.abort(P),E(P)},Z.timeoutMs);let z={type:"request.start",protocol:"tunnel.v1",requestId:J,method:Q.method,url:Y.pathWithSearch,headers:U54(G,X,Q),replySubject:W.reply,abortSubject:W.abort,...Q.body?{bodySubject:W.body}:{},...Z.timeoutMs>0?{deadlineUnixMs:Date.now()+Z.timeoutMs}:{}};TB(Z.connection,W.request,z),N=Z.republishIntervalMs>0?setInterval(()=>{if(!D)TB(Z.connection,W.request,z)},Z.republishIntervalMs):void 0;let j=()=>{if(D)return;D=!0,(Q.body?L54({connection:Z.connection,subject:W.body,requestId:J,body:Q.body,maxChunkBytes:Z.maxChunkBytes,signal:U.signal}):void 0)?.catch((A)=>{Z.diagnostics?.({event:"request_body_error",requestId:J,subject:W.body,error:A instanceof Error?A.message:String(A)})})};try{let P=await E54({iterator:H,requestId:J,firstFrameTimeoutMs:Z.firstFrameTimeoutMs,signal:K.signal,onFirstResponseFrame:()=>{if(N)clearInterval(N);j()}});if(B54(Q.method,P.status))return E(),new Response(null,{status:P.status,statusText:P.statusText,headers:Qb$(P.headers)});return new Response(z54({connection:Z.connection,abortSubject:W.abort,iterator:H,requestId:J,idleTimeoutMs:Z.idleTimeoutMs,signal:K.signal,cleanup:E}),{status:P.status,statusText:P.statusText,headers:Qb$(P.headers)})}catch(P){throw E(P instanceof Error?P:Error(String(P))),P}}};var Wb$=O(()=>{$b$();Xb$();iL0();sQ=class sQ extends Error{code;constructor($,Z,G){super(`${$}: ${Z}`,G);this.code=$;this.name="TunnelTransportError"}}});var aL0=O(()=>{Wb$()});function Kb$($){let Z=$.createFetch??P54,G=$.timeoutMs??2000;return async(X)=>{try{let Y=$.getConnection();if(!Y)return I81;let Q=CJ(X),W=await Z(Y,G)(`tunnel://${Q}/api/links/status`,{method:"GET"});if(!W.ok)return I81;let K=await W.json();return{online:!0,hostname:K.hostname,capabilities:K.capabilities??[],cliVersion:K.cliVersion}}catch{return I81}}}var I81,P54=($,Z)=>IB({connection:$,firstFrameTimeoutMs:Z});var Ub$=O(()=>{aL0();Kr();I81={online:!1,capabilities:[]}});async function*A54($){if(!$.body){yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};return}let Z=$.body.getReader(),G=!1;try{yield{headers:{status:$.status,headers:Object.fromEntries($.headers.entries())}};while(!0){let{done:X,value:Y}=await Z.read();if(X){G=!0;return}yield{data:Buffer.from(Y).toString("base64")}}}finally{try{if(!G)await Z.cancel()}catch{}finally{Z.releaseLock()}}}function wb$($){let Z=$.createFetch??((G)=>IB({connection:G,idleTimeoutMs:T54}));return async function*(X,Y,Q){let J=$.getConnection();if(!J)throw Error("link_unavailable: NATS unavailable");let W=CJ(X),K=Z(J),U={method:Y.method,headers:Y.headers,signal:Q?.signal};if(Y.body!=null)U.body=Y.body;let w=await K(`tunnel://${W}${Y.path}`,U);yield*A54(w)}}var T54=45000;var Fb$=O(()=>{aL0();Kr()});import{z as fJ}from"zod";function Hb$($){return JSON.stringify($)}var DGZ;var Nb$=O(()=>{DGZ=fJ.discriminatedUnion("type",[fJ.object({type:fJ.literal("cancel"),runId:fJ.string()}),fJ.object({type:fJ.literal("cancel_req"),reqId:fJ.string()}),fJ.object({type:fJ.literal("keep_alive")}),fJ.object({type:fJ.literal("shutdown")})])});function Bb$($){let Z=$.createFetch??((G)=>IB({connection:G,idleTimeoutMs:I54}));return{async publish(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/work`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel work publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}function Ob$($){let Z=$.createFetch??IB;return{async publishControlFrame(G,X,Y){let Q=$.getConnection();if(!Q)throw Error("link_unavailable: NATS unavailable");let J=CJ(G),K=await Z(Q)(`tunnel://${J}/api/links/control`,{method:"POST",headers:{"content-type":"application/json"},body:Hb$(X),signal:Y?.signal});if(!K.ok){let U=await K.text().catch(()=>"");throw Error(`tunnel control publish failed (${K.status})${U?`: ${U}`:""}`)}await K.body?.cancel().catch(()=>{})}}}var I54=45000;var Db$=O(()=>{aL0();Nb$();Kr()});function sL0($,Z,G,X){if(!X)return!1;return $.emit(Z,f3(G,X.status,{title:X.title??void 0,virtualMcpId:X.virtual_mcp_id??void 0,createdBy:X.created_by??void 0,triggerId:X.trigger_id??null,branch:X.branch??null,createdAt:X.created_at,updatedAt:X.updated_at})),!0}var Eb$=O(()=>{I8()});class R81{storage;options;timer=null;constructor($,Z={}){this.storage=$;this.options=Z}start(){if(this.timer)return;let $=this.options.intervalMs??300000;this.timer=setInterval(()=>{this.runOnce()},$)}async runOnce(){let $=this.options.staleAfterMs??3600000;try{let Z=await this.storage.sweepAbandoned($);if(Z>0)console.log(`[async-research-sweeper] marked ${Z} stale jobs as abandoned`);return Z}catch(Z){return console.error("[async-research-sweeper] sweep failed",Z),0}}dispose(){if(this.timer)clearInterval(this.timer),this.timer=null}}import{readdir as R54,rm as eL0}from"fs/promises";import{join as $z0}from"path";async function Zz0($){let Z=new Date;Z.setUTCDate(Z.getUTCDate()-q54),Z.setUTCHours(0,0,0,0);let G=0;try{let X=await MC($);for(let Y of X)if(/^\d{4}$/.test(Y))G+=await Lb$($,Y,Z);else if(!Y.startsWith(".")){let Q=$z0($,Y),J=await MC(Q);for(let K of J){if(!/^\d{4}$/.test(K))continue;G+=await Lb$(Q,K,Z)}if((await MC(Q)).length===0)await eL0(Q,{recursive:!0,force:!0})}}catch(X){console.warn("monitoring retention cleanup failed:",X)}return G}async function Lb$($,Z,G){let X=0,Y=$z0($,Z),Q=await MC(Y);for(let W of Q){if(!/^\d{2}$/.test(W))continue;let K=$z0(Y,W),U=await MC(K);for(let F of U){if(!/^\d{2}$/.test(F))continue;let H=new Date(`${Z}-${W}-${F}T00:00:00Z`);if(isNaN(H.getTime()))continue;if(H<G){let N=$z0(K,F);await eL0(N,{recursive:!0,force:!0}),X++}}if((await MC(K)).length===0)await eL0(K,{recursive:!0,force:!0})}if((await MC(Y)).length===0)await eL0(Y,{recursive:!0,force:!0});return X}async function MC($){try{return(await R54($)).filter((G)=>!G.startsWith("."))}catch{return[]}}var q54=30;var q81=()=>{};import{DBOS as M81,SchedulerMode as M54}from"@dbos-inc/dbos-sdk";async function S54(){let $=[Z3(),SC(),RK()],Z=0;for(let G of $)try{Z+=await Zz0(G)}catch(X){console.error("[monitoring-retention] cleanup failed:",X)}return console.log(`[monitoring-retention] deleted ${Z} day-dir(s) across ${$.length} signal dir(s)`),{deleted:Z,dirs:$.length}}async function V54($,Z){await M81.runStep(()=>S54(),{name:"monitoringRetention"})}function jb$(){if(zb$)return;zb$=!0;let $=M81.registerWorkflow(V54,{name:"monitoringRetentionWorkflow"});M81.registerScheduled($,{name:"monitoringRetentionWorkflow",crontab:k54,mode:M54.ExactlyOncePerIntervalWhenActive})}var k54="23 4 * * *",zb$=!1;var Pb$=O(()=>{mX();q81()});function Ab$($){return async(Z,G)=>{let X=await $.db.selectFrom("member").innerJoin("organization","organization.id","member.organizationId").select(["member.role","organization.id as orgId","organization.slug as orgSlug","organization.name as orgName"]).where("member.userId","=",G).where("member.organizationId","=",Z).executeTakeFirst();if(!X)return console.warn(`[automationContextFactory] User ${G} not found in org ${Z} \u2014 returning null`),null;let Y=await ZN.create();Y.auth.user={id:G,role:X.role},Y.organization={id:X.orgId,slug:X.orgSlug,name:X.orgName};let Q=await Su0($.db,Z,X.role);return Y.boundAuth=ku0({auth:Y.authInstance,headers:new Headers,role:X.role,permissions:Q,userId:G}),Y.access=new yD(G,void 0,Y.boundAuth,X.role,"self"),n40(Y,{id:X.orgId,slug:X.orgSlug}),Y}}var Tb$=O(()=>{gD();ki()});function C54(){return{services:[{name:"Postgres",status:"pending",port:0},{name:"NATS",status:"pending",port:0}],migrationsStatus:"pending",serverUrl:null,logs:[]}}function b54(){for(let $ of _54)$()}function Ib$($){let Z=[...k81.logs,$];k81={...k81,logs:Z.length>500?Z.slice(-500):Z},b54()}function S81(){return f54}var k81,_54,f54=!1;var V81=O(()=>{k81=C54(),_54=new Set});import{EventEmitter as x54}from"events";var C81;var Rb$=O(()=>{V81();C81=new x54;C81.on("request",($)=>{Ib$($)})});function qb$(){return async($,Z)=>{let G=Date.now(),X=$.req.method,Y=$.req.path;if(Y==="/api/auth/get-session"||Y.includes("favicon")){await Z();return}let Q="",J=!1;if(Y.startsWith("/mcp")&&X==="POST"){J=!0;try{if($.req.header("Content-Type")?.includes("application/json")){let H=await $.req.raw.clone().json();if(H.method==="tools/call"&&H.params?.name){let N=fg(H.params.name),B=H.params.arguments||{},D=Object.keys(B).map((L)=>fg(L)),E=D.length>0?D.slice(0,3).join(",")+(D.length>3?"\u2026":""):"";Q=`${e4.tool}${N}${e4.dim}(${E})${e4.reset}`}else if(H.method)Q=`${e4.dim}${fg(H.method)}${e4.reset}`}}catch{}}let W=fg(Y);if(Y.startsWith("/mcp/conn_")){let w=Y.split("/")[2]??"";W=`/mcp/${e4.mcp}${fg(w.slice(0,12))}\u2026${e4.reset}`}else if(Y==="/mcp")W=`${e4.mcp}/mcp${e4.reset}`;else if(Y==="/mcp/registry")W=`${e4.mcp}/mcp/registry${e4.reset}`;let K=y54(X),U=J?"\u25C0":"\u2190";if(!S81())console.log(`${e4.dim}${U}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""}`);try{await Z()}finally{let w=Date.now()-G,F=$.res.status,H=v54(F),N=w<1000?`${w}ms`:`${(w/1000).toFixed(1)}s`,B=J?"\u25B6":"\u2192";if(!S81())console.log(`${e4.dim}${B}${e4.reset} ${K}${X}${e4.reset} ${W}${Q?` ${Q}`:""} ${H}${F}${e4.reset} ${e4.duration}${N}${e4.reset}`);C81.emit("request",{method:X,path:fg(Y),status:F,duration:w,timestamp:new Date})}}}var e4,v54=($)=>{if($>=500)return e4.serverError;if($>=400)return e4.clientError;if($>=300)return e4.redirect;return e4.ok},y54=($)=>{return e4[$]||e4.reset},fg=($)=>{return $.replace(/\r/g,"").replace(/\n/g,"").replace(/\x1b\[[0-9;]*m/g,"").replace(/[\x00-\x1f\x7f-\x9f]/g,"")};var Mb$=O(()=>{V81();Rb$();e4={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",GET:"\x1B[36m",POST:"\x1B[33m",PUT:"\x1B[35m",DELETE:"\x1B[31m",ok:"\x1B[32m",redirect:"\x1B[36m",clientError:"\x1B[33m",serverError:"\x1B[31m",mcp:"\x1B[35m",tool:"\x1B[96m",duration:"\x1B[90m"}});import{createHmac as Cb$}from"crypto";import{mkdir as g54,readdir as h54,rm as kb$,stat as _b$}from"fs/promises";import{join as b81,relative as c54}from"path";import{z as T$}from"zod";function fb$($){let Z=$.replace(/[^a-zA-Z0-9_-]/g,"_");return b81(u54,Z)}function xb$($){return $.replace(/^\/+/,"").replace(/\.\./g,"")}function _81($,Z){let G=fb$($),X=xb$(Z);return b81(G,X)}function d54($,Z,G,X){let Y=O1().encryptionKey||"dev-secret",Q=`${$}:${Z}:${G}:${X}`;return Cb$("sha256",Y).update(Q).digest("hex")}function Vb$($,Z,G,X,Y){let Q=Math.floor(Date.now()/1000)+X,J=d54(Z,G,Q,Y),W=new URL(`/api/dev-assets/${Z}/${xb$(G)}`,$);return W.searchParams.set("expires",Q.toString()),W.searchParams.set("signature",J),W.searchParams.set("method",Y),W.toString()}function vb$($,Z,G){let X=`${$}:${Z.getTime()}:${G}`;return`"${Cb$("md5","etag").update(X).digest("hex")}"`}async function yb$($,Z,G,X,Y){try{let Q=await h54($,{withFileTypes:!0});for(let J of Q){let W=b81($,J.name),U=c54(Z,W).replace(/\\/g,"/");if(G&&!U.startsWith(G))continue;if(J.isDirectory())if(X){let w=U+"/";if(!G||w.startsWith(G)){if(!(G?U.slice(G.length):U).includes("/"))Y.commonPrefixes.add(w)}}else await yb$(W,Z,G,X,Y);else if(J.isFile()){if(X&&G){let w=U.slice(G.length);if(w.includes(X)){let F=w.indexOf(X),H=G+w.slice(0,F+1);Y.commonPrefixes.add(H);continue}}try{let w=await _b$(W);Y.objects.push({key:U,size:w.size,lastModified:w.mtime.toISOString(),etag:vb$(W,w.mtime,w.size)})}catch{}}}}catch{}}function gb$($,Z){let X=O0($).id;return[{name:"LIST_OBJECTS",description:"List objects in the local assets directory with pagination support",inputSchema:T$.object({prefix:T$.string().optional(),maxKeys:T$.number().optional().default(1000),continuationToken:T$.string().optional(),delimiter:T$.string().optional()}),outputSchema:T$.object({objects:T$.array(T$.object({key:T$.string(),size:T$.number(),lastModified:T$.string(),etag:T$.string()})),nextContinuationToken:T$.string().optional(),isTruncated:T$.boolean(),commonPrefixes:T$.array(T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=Q.prefix||"",W=Q.maxKeys??1000,K=Q.delimiter,U=Q.continuationToken,w=fb$(X);await g54(w,{recursive:!0});let F={objects:[],commonPrefixes:new Set};await yb$(w,w,J,K,F),F.objects.sort((E,L)=>E.key.localeCompare(L.key));let H=0;if(U){if(H=F.objects.findIndex((E)=>E.key>U),H===-1)H=F.objects.length}let N=F.objects.slice(H,H+W),B=H+W<F.objects.length,D=B?N[N.length-1]?.key:void 0;return{objects:N,isTruncated:B,nextContinuationToken:D,commonPrefixes:Array.from(F.commonPrefixes).sort()}}},{name:"GET_OBJECT_METADATA",description:"Get metadata for a file in the local assets directory",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({contentType:T$.string().optional(),contentLength:T$.number(),lastModified:T$.string(),etag:T$.string(),metadata:T$.record(T$.string(),T$.string()).optional()}),handler:async(Y)=>{let Q=Y,J=_81(X,Q.key),W=await _b$(J);return{contentType:S11(Q.key),contentLength:W.size,lastModified:W.mtime.toISOString(),etag:vb$(J,W.mtime,W.size)}}},{name:"GET_PRESIGNED_URL",description:"Generate a presigned URL for downloading a file from local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Sb$;return{url:Vb$(Z,X,Q.key,J,"GET"),expiresIn:J}}},{name:"PUT_PRESIGNED_URL",description:"Generate a presigned URL for uploading a file to local storage",inputSchema:T$.object({key:T$.string(),expiresIn:T$.number().optional(),contentType:T$.string().optional()}),outputSchema:T$.object({url:T$.string(),expiresIn:T$.number()}),handler:async(Y)=>{let Q=Y,J=Q.expiresIn??Sb$;return{url:Vb$(Z,X,Q.key,J,"PUT"),expiresIn:J}}},{name:"DELETE_OBJECT",description:"Delete a single file from local storage",inputSchema:T$.object({key:T$.string()}),outputSchema:T$.object({success:T$.boolean(),key:T$.string()}),handler:async(Y)=>{let Q=Y,J=_81(X,Q.key);try{return await kb$(J),{success:!0,key:Q.key}}catch{return{success:!1,key:Q.key}}}},{name:"DELETE_OBJECTS",description:"Delete multiple files from local storage",inputSchema:T$.object({keys:T$.array(T$.string()).max(1000)}),outputSchema:T$.object({deleted:T$.array(T$.string()),errors:T$.array(T$.object({key:T$.string(),message:T$.string()}))}),handler:async(Y)=>{let Q=Y,J=[],W=[];return await Promise.all(Q.keys.map(async(K)=>{let U=_81(X,K);try{await kb$(U),J.push(K)}catch(w){W.push({key:K,message:w instanceof Error?w.message:"Unknown error"})}})),{deleted:J,errors:W}}}]}async function f81($,Z,G){let X=gb$(Z,G),Y=new BU({name:"dev-assets-mcp",version:"1.0.0"},{capabilities:{tools:{}},jsonSchemaValidator:L5});for(let J of X){let W="shape"in J.inputSchema?J.inputSchema.shape:T$.object({}).shape,K=J.outputSchema&&"shape"in J.outputSchema?J.outputSchema.shape:T$.object({}).shape;Y.registerTool(J.name,{description:J.description??"",inputSchema:W,outputSchema:K,annotations:J.annotations,_meta:J._meta},async(U)=>{try{let w=await J.handler(U);return{content:[{type:"text",text:JSON.stringify(w)}],structuredContent:w}}catch(w){return{content:[{type:"text",text:`Error: ${w.message}`}],isError:!0}}})}let Q=new xY({enableJsonResponse:$.headers.get("Accept")?.includes("application/json")??!1});return await Y.connect(Q),aW(Y,Q,$,"mcp:dev-assets")}async function hb$($,Z,G,X){let Q=gb$(G,X).find((J)=>J.name===$);if(!Q)return{content:[{type:"text",text:`Tool not found: ${$}`}],isError:!0};try{let J=await Q.handler(Z);return{content:[{type:"text",text:JSON.stringify(J)}]}}catch(J){return{content:[{type:"text",text:J instanceof Error?J.message:String(J)}],isError:!0}}}var u54="./data/assets",Sb$=3600,bb$,cb$;var ub$=O(()=>{w8();Up();X6();vu();Xy();LG();FL0();bb$=new V1;bb$.all("/",async($)=>{let Z=$.get("studioContext"),G=new URL($.req.url),X=`${G.protocol}//${G.host}`;return f81($.req.raw,Z,X)});cb$=bb$});var db$={};G6(db$,{mountDevRoutes:()=>l54});function l54($,Z){$.all("/mcp/:connectionId{.*_dev-assets$}",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`;return f81(X.req.raw,Y,J)}),$.all("/mcp/:connectionId{.*_dev-assets$}/call-tool/:toolName",Z,async(X)=>{let Y=X.get("studioContext"),Q=new URL(X.req.url),J=`${Q.protocol}//${Q.host}`,W=X.req.param("toolName");if(!W)return X.json({error:"Missing tool name"},400);let K=await X.req.json(),U=await hb$(W,K,Y,J);if(U.isError)return X.json(U.content,500);return X.json(U.content)}),$.use("/mcp/dev-assets",Z),$.route("/mcp/dev-assets",cb$);let G=new V1;G.use("*",rQ({mountPath:"/api/dev-assets"})),G.route("/",wL0({orgFromPath:!1})),$.route("/api/dev-assets",G)}var lb$=O(()=>{X6();z11();FL0();ub$()});import{sql as m54}from"kysely";import{randomUUID as mb$}from"crypto";import{z as i54}from"zod";async function p54($){let Z=new Date().toISOString(),G=mb$(),X=Z4.SELF($.organizationId),Y="registry.publish_request.created",Q={requestId:$.request.id,requestedId:$.request.requested_id,title:$.request.title,status:$.request.status,createdAt:$.request.created_at,requester:{name:$.request.requester_name,email:$.request.requester_email}};await $.db.insertInto("events").values({id:G,organization_id:$.organizationId,type:"registry.publish_request.created",source:X,specversion:"1.0",subject:$.request.id,time:Z,datacontenttype:"application/json",dataschema:null,data:JSON.stringify(Q),cron:null,status:"pending",attempts:0,last_error:null,next_retry_at:null,created_at:Z,updated_at:Z}).execute();let J=await $.db.selectFrom("event_subscriptions").select(["id"]).where("organization_id","=",$.organizationId).where("enabled","=",1).where("event_type","=","registry.publish_request.created").where((W)=>W.or([W("publisher","is",null),W("publisher","=",X)])).execute();if(J.length>0)await $.db.insertInto("event_deliveries").values(J.map((W)=>({id:mb$(),event_id:G,subscription_id:W.id,status:"pending",attempts:0,last_error:null,delivered_at:null,next_retry_at:null,created_at:Z}))).execute();try{await m54`SELECT pg_notify('mesh_events', ${G})`.execute($.db)}catch{}}async function t54($,Z){let X=(await $.selectFrom("organization").select(["id"]).where("id","=",Z).execute())[0];if(X?.id)return X.id;return(await $.selectFrom("organization").select(["id"]).where("slug","=",Z).execute())[0]?.id??null}async function r54($,Z){let G=await $.selectFrom("virtual_mcp_plugin_configs").innerJoin("connections","connections.id","virtual_mcp_plugin_configs.virtual_mcp_id").select(["virtual_mcp_plugin_configs.settings as settings"]).where("connections.organization_id","=",Z).where("virtual_mcp_plugin_configs.plugin_id","=",QC).execute();for(let X of G){let Y=X.settings,Q=typeof Y==="string"?(()=>{try{return JSON.parse(Y)}catch{return{}}})():Y??{};if(Q.acceptPublishRequests===!0){let J=Q.rateLimitWindow==="minute"?"minute":"hour",W=Q.rateLimitMax,K=typeof W==="number"&&Number.isFinite(W)&&W>=1?Math.floor(W):nb$;return{acceptPublishRequests:!0,requireApiToken:Q.requireApiToken===!0,rateLimitEnabled:Q.rateLimitEnabled===void 0?ib$:Q.rateLimitEnabled===!0,rateLimitWindow:J,rateLimitMax:K}}}return{acceptPublishRequests:!1,requireApiToken:!1,rateLimitEnabled:ib$,rateLimitWindow:n54,rateLimitMax:nb$}}async function o54($,Z,G){let X=G==="minute"?60000:3600000,Y=new Date(Date.now()-X).toISOString(),Q=await $.selectFrom("private_registry_publish_request").select((J)=>J.fn.countAll().as("count")).where("organization_id","=",Z).where("created_at",">=",Y).executeTakeFirst();return Number(Q?.count??0)}async function a54($,Z,G,X){let Y=await $.selectFrom("private_registry_item").select(["id","title"]).where("organization_id","=",Z).where((Q)=>Q.or([Q("id","=",G),Q("title","=",X)])).executeTakeFirst();return Y?{id:String(Y.id),title:String(Y.title)}:null}function pb$($){let{db:Z,db:G}=$,X=new wx(G),Y=new Fx(G);return async(Q)=>{let J=Q.req.param("orgRef")??Q.req.param("org");if(!J)return Q.json({error:"Organization not found"},404);let W=await t54(Z,J);if(!W)return Q.json({error:"Organization not found"},404);let K=await r54(Z,W);if(!K.acceptPublishRequests)return Q.json({error:"Publish requests are not enabled for this registry."},403);if(K.requireApiToken){let N=Q.req.header("Authorization"),B=N?.startsWith("Bearer ")?N.slice(7).trim():null;if(!B)return Q.json({error:"API key required. Use Authorization: Bearer <key>"},401);if(!await Y.validate(W,B))return Q.json({error:"Invalid API key"},401)}if(K.rateLimitEnabled){if(await o54(G,W,K.rateLimitWindow)>=K.rateLimitMax)return Q.json({error:"Too many publish requests. Please try again later.",retryAfterSeconds:K.rateLimitWindow==="minute"?60:3600},429)}let U;try{U=await Q.req.json()}catch{return Q.json({error:"Invalid JSON body"},400)}let w=LA$.safeParse(U);if(!w.success)return Q.json({error:"Invalid publish request payload",details:i54.treeifyError(w.error)},400);let F=await a54(G,W,w.data.data.id,w.data.data.title);if(F)return Q.json({error:"A registry item with the same id or title already exists. Please use a different name/id.",conflict:F},409);let H=await X.createOrUpdate({organization_id:W,requested_id:w.data.data.id,title:w.data.data.title,description:w.data.data.description??null,_meta:w.data.data._meta,server:w.data.data.server,requester_name:w.data.requester?.name??null,requester_email:w.data.requester?.email??null});try{await p54({db:Z,organizationId:W,request:H})}catch(N){console.warn("[private-registry] failed to emit publish-request event:",N)}return i1.capture({distinctId:w.data.requester?.email??`org:${W}`,event:"registry_publish_request_submitted",groups:{organization:W},properties:{organization_id:W,request_id:H.id,requested_id:H.requested_id,title:w.data.data.title,requester_email:w.data.requester?.email??null}}),Q.json({id:H.id,requested_id:H.requested_id,status:H.status},201)}}var ib$=!0,n54="hour",nb$=100;var tb$=O(()=>{R4();I8();$g();Xg0();Yg0();Y9()});var rb$={};G6(rb$,{createPublishRequestHandler:()=>pb$,createPublicMCPHandler:()=>IA$});var ob$=O(()=>{ey();tb$()});var Vp0={};G6(Vp0,{watchHandler:()=>Gf$,isSsoExemptPath:()=>Zf$,getProxyDispatch:()=>Z94,createApp:()=>w94});import{readFileSync as s54}from"fs";import{PrometheusSerializer as e54}from"@opentelemetry/exporter-prometheus";import{DBOS as xg}from"@dbos-inc/dbos-sdk";import{oAuthDiscoveryMetadata as Q94,oAuthProtectedResourceMetadata as J94}from"better-auth/plugins";async function $94($){let Z=$.connect(),G;try{G=await Promise.race([Z,sb$(ab$)])}catch{return Z.then((X)=>X.release(!0)).catch(()=>{}),!1}try{return await Promise.race([G.query("SELECT 1"),sb$(ab$)]),G.release(),!0}catch{return G.release(!0),!1}}function sb$($){return new Promise((Z,G)=>setTimeout(()=>G(Error("pg health-check timeout")),$))}function Z94(){if(!x81)throw Error("getProxyDispatch() called before createApp() or without NATS \u2014 proxy dispatch unavailable");return x81}async function G94($,Z){let{items:G}=await $.storage.connections.list(Z,{where:{field:["connection_url"],operator:"like",value:`${__1}%`},limit:1}),X=G[0];if(!X?.configuration_state)return null;return X.configuration_state.project_locator}function X94($){let Z=new URLSearchParams;if($){let[G,X]=$.split("/");if(G)Z.set("workspace_hint",G);if(X)Z.set("project_hint",X)}else Z.set("auto_personal","true");return Z.set("force_new","true"),Z}function Zf$($){return $.startsWith("/api/org-sso/")||$.startsWith("/api/auth/")||$.startsWith("/api/tools/management")||$.startsWith("/oauth-proxy/")||/^\/api\/[^/]+\/oauth-proxy\//.test($)||$.startsWith(`${L01}/`)}async function w94($={}){let Z=$.database??F6(),G=!1;$9.stop().catch((g)=>{console.error("[SSEHub] Error stopping previous broadcast (HMR cleanup):",g)});let X,Y,Q=new D81,J,W,K,U,w,F=null;if($.disableNats)J=E81(),X={get:async()=>null,set:async()=>{},invalidate:async()=>{},teardown:()=>{}},Y=new wp,W={start:async()=>{},broadcast:()=>{},publishControlFrame:()=>{},stop:async()=>{}},w=void 0,K={init:async()=>{},pump:(g)=>{return(async()=>{let H0=g.getReader();try{while(!0){let{done:f0}=await H0.read();if(f0)break}}catch{}finally{H0.releaseLock()}})()},publishRawChunk:async()=>!1,publishDone:async()=>!1,createTailStream:async()=>null,purge:()=>{},teardown:()=>{}};else{F=S_$();let g=O1().natsCredsPath,H0;if(g)try{H0=s54(g,"utf8")}catch(e1){console.error(`[app] failed to read NATS_CREDS at ${g}; connecting anonymously`,e1)}F.init(O1().natsUrls,H0?{creds:H0}:void 0);let f0=wg0()?new Zv0({getJetStream:()=>F.getJetStream()}):null;f0?.init().catch(()=>{}),X=f0;let $1=new qt0({getJetStream:()=>F.getJetStream()});$1.init().catch(()=>{}),Y=$1,J=E81({getConnection:()=>F.getConnection()}),W=new L81({getConnection:()=>F.getConnection()}),K=new P81({getConnection:()=>F.getConnection(),getJetStream:()=>F.getJetStream()}),U=Kb$({getConnection:()=>F.getConnection()}),w=Bb$({getConnection:()=>F.getConnection()});let u0=Ob$({getConnection:()=>F.getConnection()}),T1=W;W={start:(e1)=>T1.start(e1),broadcast:(e1)=>T1.broadcast(e1),publishControlFrame:(e1,L6)=>{u0.publishControlFrame(e1,L6).catch((Q4)=>{console.warn("[TunnelControl] publishControlFrame failed (non-critical):",Q4)})},stop:()=>T1.stop()},rI$(F),F.onReady(()=>{f0?.init().catch((e1)=>{console.error("[McpListCache] Deferred init failed:",e1)}),$1.init().catch((e1)=>{console.error("[ConnectionCircuitStore] Deferred init failed:",e1)}),J.start(),Mi1(()=>F.getConnection()),K.init().catch((e1)=>{console.warn("[Decopilot] StreamBuffer init failed (late-join disabled):",e1)})})}if(vg)await vg();Gv0(X),Mt0(Y);let N={storage:new Ex(Z.db),sseHub:$9},B=new Am0(N),D=new Zm(Z.db),E=new R81(D);E.start(),W.start((g)=>{v90(g),B.execute({type:"CANCEL",taskId:g}).catch((H0)=>{console.error("[Decopilot] CancelBroadcast execute failed:",H0)})}).catch((g)=>{console.error("[Decopilot] CancelBroadcast start failed:",g)}),F?.onReady(()=>{W.start().catch((g)=>{console.error("[CancelBroadcast] Deferred start failed:",g)})}),K.init().catch((g)=>{console.warn("[Decopilot] StreamBuffer init failed, attach/late-join disabled:",g)}),vg=async()=>{await B.stopAll(),B.dispose(),E.dispose(),W.stop().catch(()=>{}),K.teardown(),X?.teardown(),Q.teardown(),J.teardown(),ki1(),Y.teardown(),Gv0(null),Mt0(null)};let L=new V1;if(L.use("*",sb0({enabled:(g)=>hb(g,"debug")==="1"})),L.use("*",jz0),L.use("/*",Eb1({origin:(g)=>{if(g.includes("localhost")||g.includes("127.0.0.1"))return g;return g},credentials:!0,allowMethods:["GET","POST","PUT","DELETE","OPTIONS"],allowHeaders:["Content-Type","Authorization","mcp-protocol-version"],exposeHeaders:["WWW-Authenticate"]})),L.use("*",async(g,H0)=>{if(await H0(),g.req.path.includes("/files/"))return;if(g.req.path.includes("/fs/")&&g.req.path.endsWith("/read"))return;g.header("X-Frame-Options","DENY"),g.header("Content-Security-Policy","frame-ancestors 'none'")}),!O1().noTui)L.use("*",qb$());L.use("*",async(g,H0)=>{if(await H0(),cg(g.req.path))return;if(g.res.status>=500){let $1=await g.res.clone().text();console.error(`[5xx Response] ${g.req.method} ${g.req.path} - ${g.res.status}:`,$1)}}),L.get(xZ.HEALTH,(g)=>{if(G)return g.json({status:"shutting_down"},503);return g.json({status:"ok"})}),L.get(xZ.HEALTH_LIVE,(g)=>{return g.json({status:"ok"})}),L.get(xZ.HEALTH_READY,async(g)=>{if(G)return g.json({status:"shutting_down"},503);let H0={};if(H0.postgres={status:await $94(Z.pool)?"up":"down"},F)H0.nats=F.isConnected()?{status:"up"}:{status:"down"};else H0.nats={status:"down"};let f0=H0.postgres.status==="up",$1=f0?200:503;return g.json({status:f0?"ready":"not_ready",services:H0},$1)}),L.get(xZ.METRICS,async(g)=>{try{let H0=await Iz0.collect(),f0=Y94.serialize(H0.resourceMetrics);return g.text(f0,200,{"Content-Type":"text/plain; version=0.0.4; charset=utf-8"})}catch(H0){return console.error("Failed to collect metrics:",H0),g.text("# Error collecting metrics",500)}}),L.get(`${xZ.DBOS_QUEUE_DEPTH_PREFIX}:queueName`,async(g)=>{let H0=g.req.param("queueName");if(!W94.has(H0))return g.json({error:`Unknown queue: ${H0}`},404);let f0=await xg.listQueuedWorkflows({queueName:H0,status:"ENQUEUED"});return g.json({queue_length:f0.length})}),L.get(xZ.HOSTED_RUN_PENDING,(g)=>{let{active:H0,pending:f0,max:$1}=i4$();return g.json({pending:f0,active:H0,max:$1})}),L.route("/api/config",oC$),L.route("/api/_reports",K_$),L.route("/report",G_$($.clientDir)),L.route("/api/auth/custom",DR$),L.route("/api/auth/desktop",LR$),L.all("/api/auth/admin/*",AR$),L.all("/api/auth/*",async(g)=>{return await B8.handler(g.req.raw)});let z=Js1();z.use("/.well-known/oauth-protected-resource/mcp/:connectionId",UC),z.use("/mcp/:connectionId/.well-known/oauth-protected-resource",UC),L.route("/",z),L.get("/.well-known/oauth-protected-resource/api/:org/mcp/:connectionId",Si),L.route("/",ws1()),L.use("/oauth-proxy/:connectionId/*",UC),L.all("/oauth-proxy/:connectionId/*",eb$);let j=async(g)=>{let f0=await K94()(g.req.raw),$1=await f0.json();return Response.json($1,f0)};L.use("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",UC),L.get("/mcp/:gateway?/:connectionId/.well-known/oauth-protected-resource/*",j);let P=async(g)=>{let f0=await U94()(g.req.raw),$1=await f0.json();return Response.json($1,f0)};L.get("/.well-known/oauth-authorization-server/*/:gateway?/:connectionId?",P);let A=tI$({ttlMs:120000}),M=await na1({db:Z.db,auth:B8,encryption:{key:O1().encryptionKey},observability:{tracer:hw,meter:D8},modelListCache:Q,providerKeyCache:J,memberRoleCache:A,linkStatusProbe:U,publishLinkControlFrame:(g,H0)=>W.publishControlFrame(g,H0)});ZN.set(M);let S=new PU(O1().encryptionKey);I21({db:Z.db,baseUrl:A3()});let R=Y60(Z.db),V=new nl(Z.db),i=Ab$({db:Z.db});Pt0({storage:R,studioContextFactory:i}),vm0({studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:$9},prepareLinkWorkFn:BM$,workPublisher:w}),Cm0({dispatchRunFn:HM$,studioContextFactory:i,deps:{runRegistry:B,cancelBroadcast:W,streamBuffer:K,sseHub:$9}});let f=new Ex(Z.db),v=new uD(Z.db);k4$({getJetStream:()=>F?.getJetStream()??null,getJetStreamManager:async()=>{let g=F?.getConnection();return g?await $f$.jetstreamManager(g):null},messageParts:f.messageParts(),resolveRun:async(g)=>{let H0=await Z.db.selectFrom("threads").select(["organization_id","created_by","message_storage_version","status","run_fence_token","title"]).where("id","=",g).executeTakeFirst();return H0?{orgId:H0.organization_id,createdBy:H0.created_by,version:H0.message_storage_version??1,status:H0.status,runFenceToken:H0.run_fence_token,title:H0.title??null}:null},completeRunIfNotCompleted:async(g,H0)=>{let f0=await f.completeRunIfNotCompleted(g,H0);if(sL0($9,H0,g,f0),f0)await km0(v,g,H0);return f0},markRunRequiresAction:async(g,H0)=>{let f0=await f.requiresActionIfInProgress(g,H0);return sL0($9,H0,g,f0),f0},markRunFailed:async(g,H0,f0,$1)=>{let u0=await f.markRunFailed(g,H0,f0,$1);if(sL0($9,H0,g,u0),u0)await km0(v,g,H0);return u0},clearSynthesizedError:async(g,H0)=>{await f.messageParts().replaceMessageParts(g,LN(g,H0),[])},persistTitle:(g,H0,f0)=>f.update(g,H0,{title:f0}),onTitleUpdated:async({runId:g,orgId:H0,title:f0})=>{let $1=await f.get(g,H0).catch(()=>null);$9.emit(H0,f3(g,$1?.status??"in_progress",{title:f0,virtualMcpId:$1?.virtual_mcp_id??void 0,createdBy:$1?.created_by,triggerId:$1?.trigger_id,branch:$1?.branch??null,createdAt:$1?.created_at,updatedAt:$1?.updated_at}))},bumpProgress:async({runId:g,orgId:H0})=>{await f.bumpProgress(g,H0)},recordCompleted:async({runId:g,orgId:H0,distinctId:f0,usage:$1})=>{i1.capture({distinctId:f0,event:"chat_message_completed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",input_tokens:$1.inputTokens,output_tokens:$1.outputTokens,total_tokens:$1.totalTokens}})},recordFailed:async({runId:g,orgId:H0,distinctId:f0,reason:$1,kind:u0})=>{i1.capture({distinctId:f0,event:"chat_message_failed",groups:{organization:H0},properties:{organization_id:H0,thread_id:g,transport:"projector",error_category:u0,error_message:$1}})},purgeRun:async(g)=>{K.purge(g)}}),KW$({studioContextFactory:i,systemDatabaseUrl:ux1(O1().databaseUrl,O1().databasePgSsl),streamBuffer:K}),jb$(),R21();let Z0=async(g,H0,f0)=>{let $1=await R.findById(g,H0);if(!$1)throw Error("Automation not found");return It0({automationId:$1.id,organizationId:$1.organization_id,triggerId:null})},o=new Og(R,({automation:g,trigger:H0,contextMessages:f0,idempotencyKey:$1})=>Kp({automationId:g.id,organizationId:g.organization_id,triggerId:H0.id,contextMessages:f0},{idempotencyKey:$1})),B0=[Z3(),SC(),RK()];for(let g of B0)Zz0(g).then(()=>{}).catch((H0)=>console.error("[monitoring] Retention cleanup failed:",H0));let D0=()=>Z.db.deleteFrom("apikey").where("expiresAt","<",new Date).execute().then(()=>{}).catch((g)=>console.error("[auth] Expired API key cleanup failed:",g));D0(),setInterval(D0,86400000).unref(),L.use("*",async(g,H0)=>{if(Lz0(g.req.path))return H0();let f0={measure:async(u0,T1)=>{KQ(g,u0);try{return await T1()}finally{JY(g,u0)}}},$1=await ZN.create(g.req.raw,{timings:f0});$1.automationRunner=Z0,g.set("studioContext",$1);try{await H0()}finally{let u0=$1.pendingRevalidations;if(u0.length>0)Promise.race([Promise.allSettled(u0),O8(30000)]).catch((e1)=>console.error("[studio] revalidation cleanup error:",e1))}}),L.use("/api/:org/decopilot/*",wC),L.use("/api/:org/v1/*",wC),L.use("/api/:org/files/*",wC),L.use("*",async(g,H0)=>{if(Zf$(g.req.path))return H0();let f0=g.get("studioContext");if(!f0?.organization?.id||!f0?.auth?.user?.id)return H0();if(!(await f0.storage.orgSsoConfig.getByOrgId(f0.organization.id))?.enforced)return H0();if(!await f0.storage.orgSsoSessions.isValid(f0.auth.user.id,f0.organization.id))return g.json({error:"SSO authentication required for this organization"},403);return H0()});let J0=new V1;J0.use("*",rQ({mountPath:"/api/org-sso"})),J0.route("/",VE0()),L.route("/api/org-sso",J0),L.get("/api/tools/management",(g)=>{return g.json({tools:$f0,grouped:tO()})}),L.use("/mcp/*",async(g,H0)=>{KQ(g,"mcp");try{return await H0()}finally{JY(g,"mcp")}});let G0=async(g,H0)=>{let f0=g.var.studioContext;if(!f0.auth.user?.id&&!f0.auth.apiKey?.id){let $1=new URL(g.req.url);return g.res=new Response(null,{status:401,headers:{"WWW-Authenticate":`Bearer realm="mcp",resource_metadata="${$1.origin}${$1.pathname}/.well-known/oauth-protected-resource"`}})}return await H0()};if(L.use("/mcp/:connectionId?",G0),L.use("/mcp/gateway/:virtualMcpId?",G0),L.use("/mcp/virtual-mcp/:virtualMcpId?",G0),L.use("/mcp/self",G0),x3()){let{mountDevRoutes:g}=(lb$(),Wz0(db$));g(L,G0)}let a=new V1;a.use("*",rQ({mountPath:"/mcp"})),a.route("/",UB0()),L.route("/mcp",a);let A0=new V1;A0.use("*",rQ({mountPath:"/mcp/self"})),A0.route("/",cL0()),L.route("/mcp/self",A0);let U0=new V1;U0.use("*",rQ({mountPath:"/mcp"})),U0.route("/",HB0()),L.route("/mcp",U0),L.use("/api/:org/models/*",async(g,H0)=>{KQ(g,"llm_models");try{return await H0()}finally{JY(g,"llm_models")}});let v0=E11({cancelBroadcast:W,streamBuffer:K,runRegistry:B,linkStatusProbe:U});if(L.route("/api",v0),F!=null)x81=wb$({getConnection:()=>F?.getConnection()??null});L.route("/api",bC$()),L.get("/api/links/me",async(g)=>{try{let H0=g.req.header("authorization")??"",f0=/^Bearer\s+(.+)$/i.exec(H0),$1=null;if(f0){let T1=(f0[1]??"").trim();$1=await ME0(T1,B8.api)}else $1=g.get("studioContext")?.auth?.user?.id??null;if(!$1)return g.json({error:"unauthorized"},401);let u0=U?await U($1):{online:!1,capabilities:[]};if(!u0.online)return g.json(null);return g.json({hostname:u0.hostname,cliVersion:u0.cliVersion})}catch(H0){return console.error("[links/me] presence probe failed; reporting offline:",H0 instanceof Error?H0.message:String(H0)),g.json(null)}}),L.use("/api/:org/files/*",wC),L.route("/api",H_$);let d0=new V1;d0.use("*",rQ({mountPath:"/api"})),d0.route("/",uL0()),L.route("/api",d0),L.route("/api",iC$);let i0=new V1;i0.use("*",rQ({mountPath:"/api"})),i0.route("/",dL0({tokenStorage:V,automationEventDispatcher:o})),L.route("/api",i0);let n0=new tl(Z.db),w0=new V1;w0.use("*",rQ({mountPath:"/api"})),w0.route("/",JL0()),L.route("/api",w0),L.route("/api/deco-sites",vM$()),L.route("/api/deco-apps",hC$());let C0=new V1;C0.use("*",rQ({mountPath:"/api/deco-sites"})),C0.route("/",KL0()),L.route("/api/deco-sites",C0);let T0=new V1;T0.use("*",rQ({mountPath:"/api/vm-events"})),T0.route("/",yC$()),L.route("/api/vm-events",T0);let{createPublishRequestHandler:N0,createPublicMCPHandler:Q0}=await Promise.resolve().then(() => (ob$(),rb$)),X0={db:Z.db,vault:{encrypt:(g)=>S.encrypt(g),decrypt:(g)=>S.decrypt(g)}},V0=N0(X0),n=Q0(X0);L.use("/org/:orgRef/registry/publish-request",UC),L.post("/org/:orgRef/registry/publish-request",V0),L.use("/org/:orgSlug/registry/*",UC),L.all("/org/:orgSlug/registry/*",n),L.post("/api/:org/registry/publish-request",V0),L.all("/api/:org/registry/*",n),L.route(L01,TR$());let e=OC$({kvStorage:n0,runRegistry:B,streamBuffer:K,sseHub:$9,cancelBroadcast:W,tokenStorage:V,automationEventDispatcher:o,mountDevAssets:x3(),mcpAuth:G0,oauthProxyHandler:eb$,watchHandler:Gf$,betterAuthProtectedResourceHandler:j,getNatsConnection:()=>F?.getConnection()??null});return L.route("/api/:org",e),L.notFound((g)=>{return g.json({error:"Not Found",path:g.req.path},404)}),L.onError(TM$),Object.assign(L,{markShuttingDown:()=>{G=!0},shutdown:async()=>{if(console.log("[shutdown] Stopping workers..."),await Promise.allSettled([$9.stop(),vg?Promise.resolve(vg()).finally(()=>{vg=null}):Promise.resolve()]),F)await F.drain().catch((g)=>console.error("[shutdown] NATS drain error:",g));console.log("[shutdown] Flushing telemetry..."),await lY().catch((g)=>console.error("[shutdown] Telemetry flush error:",g)),console.log("[shutdown] Closing database..."),await lx1(Z).catch((g)=>console.error("[shutdown] Database close error:",g)),console.log("[shutdown] Cleanup complete.")},initDbos:async()=>{await xg.registerQueue(dY,{partitionQueue:!0,concurrency:Lt0,minPollingIntervalMs:zt0}),await xg.registerQueue($3,{partitionQueue:!0,concurrency:xm0}),await xg.registerQueue(IK,{partitionQueue:!0,concurrency:Vm0}),await xg.registerQueue(gw,{partitionQueue:!0,concurrency:WW$}),await P11(R),await Promise.allSettled(["automations-gate","automations-global"].map((g)=>xg.deleteQueue(g))),await jt0(Z.pool),Dh1().catch((g)=>{console.error("[studio-pack-backfill] failed:",g)}),q21().catch((g)=>{console.error("[org-fs] public-sets boot sync kick failed:",g)})}})}var $f$,ab$=5000,x81=null,vg=null,eb$=async($)=>{let Z=$.req.param("connectionId");if(!Z)return $.json({error:"Missing connectionId"},400);let G=$.req.path.split("/").filter(Boolean),X=G[G.length-1],Y=$.get("studioContext");if(!Y)Y=await ZN.create($.req.raw),$.set("studioContext",Y);let Q=$.req.param("org")?Y.organization?.id:void 0,J=await Y.storage.connections.findById(Z,Q);if(!J?.connection_url)return $.json({error:"Connection not found"},404);let W=await $v(J.connection_url),K,U=new URL(J.connection_url);if(W.ok)K=(await W.json()).authorization_servers?.[0];if(!K)K=U.origin;let w=await Vi(K);if(!w.ok)return $.json({error:"Failed to get auth server metadata"},502);let F=await w.json(),H;if(X==="authorize")H=F.authorization_endpoint;else if(X==="token")H=F.token_endpoint;else if(X==="register")H=F.registration_endpoint;if(!H)return $.json({error:`Unknown OAuth endpoint: ${X}`},404);let N=new URL(H),B=new URL($.req.url);if(N.search=B.search,X==="authorize"){let R=N.searchParams.get("redirect_uri");if(R){let V=O1().baseUrl??B.origin;try{let i=new URL(R),f=new URL(V);if(!(i.origin===f.origin||i.hostname==="localhost"))return $.json({error:"invalid_request",error_description:"redirect_uri is not allowed"},400)}catch{return $.json({error:"invalid_request",error_description:"redirect_uri is malformed"},400)}N.searchParams.set("redirect_uri",R)}if(N.searchParams.has("resource"))N.searchParams.set("resource",J.connection_url);if(b_1(J.connection_url))try{let V=await G94(Y,J.organization_id),i=X94(V);for(let[f,v]of i)N.searchParams.set(f,v)}catch(V){console.warn("[oauth-proxy] Failed to get smart OAuth params, proceeding without:",V)}return $.redirect(N.toString(),302)}let D={Accept:$.req.header("Accept")||"application/json"},E=$.req.header("Content-Type");if(E)D["Content-Type"]=E;let L=$.req.header("Authorization");if(L)D.Authorization=L;let z,j=null,P=null;if($.req.method!=="GET"&&$.req.method!=="HEAD")if(X==="token"&&E?.includes("application/x-www-form-urlencoded")){if(L?.toLowerCase().startsWith("basic "))try{let v=atob(L.slice(6).trim()),Z0=v.indexOf(":");if(Z0!==-1){let o=decodeURIComponent(v.slice(0,Z0)),B0=decodeURIComponent(v.slice(Z0+1));j=o||null,P=B0||null}}catch{}let R=await $.req.formData();if(R.has("resource"))R.set("resource",J.connection_url);let V=R.get("client_id"),i=R.get("client_secret");if(typeof V==="string"&&V)j=V;if(typeof i==="string"&&i)P=i;let f=new URLSearchParams;for(let[v,Z0]of R.entries())f.append(v,Z0.toString());z=f.toString()}else if(X==="register"&&E?.toLowerCase().includes("application/json")){let R=await Y.db.selectFrom("organization").select(["id","slug","name"]).where("id","=",J.organization_id).executeTakeFirst(),V=await $.req.text(),i={};try{i=V?JSON.parse(V):{}}catch{z=V}let f=typeof i==="object"&&i!==null&&!Array.isArray(i);if(z===void 0&&!f)z=V;if(z===void 0){let v=i,Z0=v.metadata&&typeof v.metadata==="object"?v.metadata:{};v.metadata={...Z0,organization_id:J.organization_id,...R?.slug?{organization_slug:R.slug}:{},...R?.name?{organization_name:R.name}:{}},z=JSON.stringify(v),D["Content-Type"]="application/json"}}else z=$.req.raw.body??void 0;let A=await fetch(N.toString(),{method:$.req.method,headers:D,body:z,duplex:"half",redirect:"manual"}),M=new Headers,S=["connection","keep-alive","transfer-encoding","content-encoding","content-length"];for(let[R,V]of A.headers.entries())if(!S.includes(R.toLowerCase()))M.set(R,V);if(X==="token"&&A.ok){let R=await A.text();try{let V=JSON.parse(R);if(typeof V.access_token==="string"&&V.access_token){let i=typeof V.expires_in==="number"?new Date(Date.now()+V.expires_in*1000):null,f=null;try{f=await Zv(J.connection_url)??H}catch{f=H}let v={connectionId:Z,accessToken:V.access_token,refreshToken:typeof V.refresh_token==="string"?V.refresh_token:null,scope:typeof V.scope==="string"?V.scope:null,expiresAt:i,clientId:j,clientSecret:P,tokenEndpoint:f};await new _5(Y.db,Y.vault).upsert(v)}}catch(V){console.error("[oauth-proxy] failed to persist downstream token:",V)}return new Response(R,{status:A.status,statusText:A.statusText,headers:M})}return new Response(A.body,{status:A.status,statusText:A.statusText,headers:M})},Gf$=async($)=>{let Z=$.var.studioContext;if(!(Z.auth.user?.id??Z.auth.apiKey?.userId))return $.json({error:"Unauthorized"},401);let X=Z.organization?.id;if(!X)return $.json({error:"organization id missing"},400);let Y=$.req.query("types"),Q=Y?Y.split(",").map((W)=>W.trim()).filter(Boolean):null,J=crypto.randomUUID();return oQ($,async(W)=>{if(await W.writeSSE({event:"connected",data:JSON.stringify({listenerId:J,organizationId:X,typePatterns:Q,connectedAt:new Date().toISOString()})}),!$9.add({id:J,organizationId:X,typePatterns:Q?.length?Q:null,push:(w)=>{W.writeSSE({id:w.id,event:w.type,data:JSON.stringify(w)}).catch(()=>{$9.remove(X,J)})}})){await W.writeSSE({event:"error",data:JSON.stringify({error:"Too many connections",message:"SSE connection limit reached. Try again later."})});return}let U=setInterval(()=>{W.writeSSE({event:"keepalive",data:""}).catch(()=>{clearInterval(U)})},30000);await new Promise((w)=>{W.onAbort(()=>{clearInterval(U),$9.remove(X,J),w()})})})},Y94,W94,K94=()=>J94(B8),U94=()=>Q94(B8);var Cp0=O(()=>{d5();w8();M21();NG();vb();I8();X6();Z$0();Lb1();eb0();_Q();ki();w01();FQ();N5();R4();E01();zR$();IR$();A01();PM$();L11();QJ();p40();z11();IM$();j11();DC$();fC$();gC$();R11();cC$();wB0();Ci();nC$();NB0();o$1();aC$();X_$();U_$();N_$();r$1();t$1();Ar();Bd();V_$();UY();T60();al();St0();C_$();b_$();h_$();Ub$();Fb$();Db$();Tm0();Eb$();Tg0();_60();sU();kg0();Pb$();o$0();q81();mX();A11();Iv();Mm0();jm0();o$0();N11();py0();ty0();Tb$();cb();Mb$();zC();w01();$y();y90();$f$=k(cB(),1);Y94=new e54,W94=new Set([dY,$3,IK,gw])});var Jf$={};G6(Jf$,{resolveClientDir:()=>E94,resolveAssetPathWithTraversalCheck:()=>Qf$,isPathWithinDirectory:()=>Yf$,createAssetHandler:()=>L94});import{resolve as Hr,dirname as F94,join as H94,extname as N94,basename as B94,sep as Xf$}from"path";function O94($,Z){if($===Z||B94($)==="index.html")return{"Cache-Control":"no-cache"};if($.includes(`${Xf$}assets${Xf$}`))return{"Cache-Control":"public, max-age=31536000, immutable"};return{}}function Yf$($,Z){let G=Hr(Z),X=Hr($);return X===G||X.startsWith(G+"/")}function Qf$({requestPath:$,clientDir:Z}){let G=$.startsWith("/")?$.slice(1):$,X=Hr(Z,G);if(!Yf$(X,Z))return null;return X}function E94($,Z="../client"){let G=new URL($),X=F94(G.pathname);return Hr(X,Z)}function L94($={}){let{env:Z="production",clientDir:G=D94,isServerPath:X=()=>!1}=$;if(Z==="development")return async function(Q){return null};return async function(Q){if(Q.method!=="GET")return null;let J=new URL(Q.url),W;try{W=decodeURIComponent(J.pathname)}catch{return null}if(X(W))return null;let K=Qf$({requestPath:W,clientDir:G});if(!K)return null;let U=H94(K,"index.html"),w=Hr(G,"index.html"),F=Q.headers.get("accept"),N=F?.includes("text/html")||F?.includes("*/*")&&["",".html"].includes(N94(K))?[U,w]:[];for(let B of[K,...N])try{let D=Bun.file(B);if(await D.exists())return new Response(D,{headers:O94(B,w)})}catch{}if(W.includes("/assets/"))return new Response("Not Found",{status:404,headers:{"Cache-Control":"no-store"}});return null}}var D94="./dist/client";var Wf$=()=>{};var Kf$={};G6(Kf$,{tryUpgradePreviewWs:()=>R94,tryHandlePreviewHttp:()=>I94,previewWebSocketHandler:()=>q94,parsePreviewBaseDomain:()=>T94,isPreviewWsData:()=>Gz0,extractHandleFromHost:()=>v81});function P94($){if($.method!=="GET")return!1;return($.headers.get("accept")??"").includes("text/html")}function A94(){return new Response(j94,{status:503,headers:{"content-type":"text/html; charset=utf-8","cache-control":"no-store","retry-after":"1","access-control-allow-origin":"*"}})}function T94($){if(!$||$.trim()==="")return null;let Z=$.includes("{handle}")?$.replace("{handle}","__handle__"):$,G;try{G=new URL(Z)}catch{return null}let X=G.hostname;if($.includes("{handle}")){let Y=X.indexOf(".");if(Y<=0||Y===X.length-1)return null;return X.slice(Y+1)}return X}function v81($,Z){if(!$||!Z)return null;let G=$.indexOf(":"),X=(G>=0?$.slice(0,G):$).toLowerCase(),Q=`.${Z.toLowerCase().replace(/^\.+|\.+$/g,"")}`;if(!X.endsWith(Q))return null;let J=X.slice(0,X.length-Q.length);if(!J||J.includes("."))return null;return J}async function I94($,Z){let G=v81($.headers.get("host"),Z.baseDomain);if(!G)return null;let X=await Z.getRunner();if(!X)return Br(503,"preview proxy not configured");let Y=await X.proxyPreviewRequest(G,$);if(Y.headers.get(PV)&&P94($))return A94();return Y.headers.delete(PV),Y}function Br($,Z){return new Response(JSON.stringify({error:Z}),{status:$,headers:{"content-type":"application/json","access-control-allow-origin":"*"}})}function Gz0($){return typeof $==="object"&&$!==null&&$.kind==="preview"}async function R94($,Z,G){if(($.headers.get("upgrade")??"").toLowerCase()!=="websocket")return null;let X=v81($.headers.get("host"),G.baseDomain);if(!X)return null;let Y=await G.getRunner();if(!Y)return Br(503,"preview proxy not configured");let Q=await Y.resolvePreviewUpstreamUrl(X);if(!Q)return Br(404,"sandbox not found");let J=new URL($.url);if(J.pathname.startsWith("/_sandbox")||J.pathname.startsWith("/_decopilot_vm"))return Br(404,"not found");let W=`${Q.replace(/^http/,"ws")}${J.pathname}${J.search}`,K=$.headers.get("sec-websocket-protocol"),U=K?K.split(",").map((H)=>H.trim()).filter(Boolean):[],w={kind:"preview",upstreamUrl:W,upstreamProtocols:U,pending:[],upstream:null,closed:!1};if(!Z.upgrade($,{data:w}))return Br(426,"upgrade failed");return}function Nr($,Z,G,X){if(Z.closed)return;Z.closed=!0;try{$.close(G,X)}catch{}try{Z.upstream?.close()}catch{}}var z94=256,j94='<!DOCTYPE html><html><head><meta charset="utf-8"><title>Connecting\u2026</title><style>body{font-family:system-ui,sans-serif;display:flex;align-items:center;justify-content:center;min-height:100vh;margin:0;background:#fafafa;color:#555}div{text-align:center;max-width:420px;padding:24px}h3{margin:0 0 8px}p{margin:0;font-size:14px;color:#999;line-height:1.5}</style></head><body><div><h3>Connecting to sandbox\u2026</h3><p>Waiting for the sandbox to come online. This page refreshes automatically.</p></div><script>setTimeout(function(){window.location.reload()},1500)</script></body></html>',q94;var Uf$=O(()=>{qp0();q94={open($){let Z=$.data;if(!Gz0(Z))return;let G;try{G=Z.upstreamProtocols.length>0?new WebSocket(Z.upstreamUrl,Z.upstreamProtocols):new WebSocket(Z.upstreamUrl)}catch(X){console.warn(`[preview-ws] failed to dial upstream ${Z.upstreamUrl}: ${X instanceof Error?X.message:String(X)}`),Nr($,Z,1011,"upstream connect failed");return}G.binaryType="arraybuffer",Z.upstream=G,G.addEventListener("open",()=>{while(Z.pending.length>0){let X=Z.pending.shift();if(X!==void 0)G.send(X)}}),G.addEventListener("message",(X)=>{if(Z.closed)return;$.send(X.data)}),G.addEventListener("close",(X)=>{Nr($,Z,X.code||1000,X.reason||"")}),G.addEventListener("error",()=>{Nr($,Z,1011,"upstream error")})},message($,Z){let G=$.data;if(!Gz0(G))return;let X=G.upstream;if(X&&X.readyState===WebSocket.OPEN){X.send(Z);return}if(G.pending.length>=z94){Nr($,G,1011,"preview ws backlog overflow");return}G.pending.push(Z)},close($){let Z=$.data;if(!Gz0(Z))return;Nr($,Z,1000,"")}}});var Nf$={};G6(Nf$,{printBanner:()=>k94,bannerLines:()=>Hf$,BANNER_LINES:()=>wf$,BANNER_GRADIENT:()=>Ff$});function M94($){let Z=Number.parseInt($.slice(1),16);return[Z>>16&255,Z>>8&255,Z&255]}function Hf$($){let Z=wf$.map((G,X)=>{let[Y,Q,J]=M94(Ff$[X]);return`\x1B[38;2;${Y};${Q};${J}m${G}\x1B[39m`});if($!==void 0)Z.push(`\x1B[2m  v${$}\x1B[22m`);return Z}function k94($){console.log("");for(let Z of Hf$($))console.log(Z);console.log("")}var wf$,Ff$;var Bf$=O(()=>{wf$=[" \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588     \u2588\u2588\u2588\u2588\u2588\u2588\u2588   ","\u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588  \u2588\u2588\u2588\u2591\u2591\u2591\u2591\u2591\u2588\u2588\u2588 "," \u2591\u2588\u2588\u2588   \u2591\u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588  \u2588 \u2591  \u2588\u2588\u2588     \u2591\u2591\u2591  \u2588\u2588\u2588     \u2591\u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2588\u2588\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2591\u2588\u2588\u2588 \u2591\u2588\u2588\u2588\u2591\u2591\u2588   \u2591\u2588\u2588\u2588         \u2591\u2588\u2588\u2588      \u2591\u2588\u2588\u2588"," \u2591\u2588\u2588\u2588    \u2588\u2588\u2588  \u2591\u2588\u2588\u2588 \u2591   \u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588\u2591\u2591\u2588\u2588\u2588     \u2588\u2588\u2588 "," \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588   \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 \u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588  \u2591\u2591\u2591\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2591  ","\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591   \u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591\u2591     \u2591\u2591\u2591\u2591\u2591\u2591\u2591   "],Ff$=["#00ff64","#00ee5e","#00dc56","#00c84e","#00b444","#00a03c","#008832","#006e28"]});var Df$={};G6(Df$,{bootstrapDevLinkSession:()=>y94});import{existsSync as S94}from"fs";import{chmod as V94,mkdir as C94,rename as _94,writeFile as b94}from"fs/promises";import{dirname as f94,join as Of$}from"path";function x94($){return Of$($,"dev-link")}function v94($){let Z=process.env.DEV_LINK_SESSION_PATH;if(Z&&Z.trim()!=="")return Z;return Of$(x94($),"session.json")}async function y94($,Z){let G=v94($),X=F6().db,Y=hQ()?await Yp():await X.selectFrom("user").select(["id","email","name"]).orderBy("createdAt","desc").executeTakeFirst();if(!Y?.id)return null;if(S94(G))try{let U=await Bun.file(G).json(),w=U.user?.sub,F=U.accessToken;if(w===Y.id&&typeof F==="string"){if(await B8.api.verifyApiKey({body:{key:F}}).then((N)=>N?.valid===!0).catch(()=>!1))return{path:G,userSub:w}}}catch{}let Q=null;try{Q=await B8.api.createApiKey({body:{name:"dev-link (auto-minted by bun run dev)",userId:Y.id,permissions:{"*":["*"]},expiresIn:2592000,rateLimitEnabled:!1}})}catch(K){return console.warn("[dev-link] failed to mint API key:",K instanceof Error?K.message:String(K)),null}if(!Q?.key)return null;let J={target:Z,clientId:"dev-link",user:{sub:Y.id,...Y.email?{email:Y.email}:{},...Y.name?{name:Y.name}:{}},accessToken:Q.key,createdAt:new Date().toISOString()};await C94(f94(G),{recursive:!0});let W=`${G}.tmp`;return await b94(W,JSON.stringify(J,null,2),{mode:384}),await V94(W,384),await _94(W,G),{path:G,userSub:Y.id}}var Ef$=O(()=>{FQ();_Q();iN()});d5();var p81="4";function t81($){return{name:"decocms",systemDatabaseUrl:$.systemDatabaseUrl,systemDatabaseSchemaName:"dbos",systemDatabasePoolSize:$.poolSize,runAdminServer:!1,executorID:$.executorID,applicationVersion:p81,...$.listenQueues!==void 0?{listenQueues:$.listenQueues}:{}}}w8();Uz0();N5();function Cx$(){let $=(process.env.BUN_OPTIONS??"").split(/\s+/).filter(Boolean);return[...process.argv.slice(1),...$]}function kz0($,Z){for(let G=0;G<$.length;G++){let X=$[G];if(X===void 0)continue;if(X===Z)return $[G+1];if(X.startsWith(`${Z}=`))return X.slice(Z.length+1)}return}function S61(){let $=Cx$();if($.includes("--cpu-prof")){console.log(JSON.stringify({msg:"cpu-profiling-active",dir:kz0($,"--cpu-prof-dir")??process.cwd(),name:kz0($,"--cpu-prof-name"),markdown:$.includes("--cpu-prof-md"),intervalUs:Number(kz0($,"--cpu-prof-interval")??1000),note:"profile is written on process exit"}));return}if(process.env.CPU_PROFILE)console.warn(JSON.stringify({msg:"cpu-profiling-requested-but-inactive",hint:'CPU profiling is a Bun launch flag. Set BUN_OPTIONS="--cpu-prof --cpu-prof-md --cpu-prof-dir=/tmp" before starting the process.'}))}Cz0();var Rr;function g61(){if(process.env.HEAP_WATCH!=="1")return()=>{};let $=Number(process.env.HEAP_WATCH_INTERVAL_MS??60000),Z=async()=>{let G=MB();if(!G)return;let X={};try{let{heapStats:Y}=await import("bun:jsc"),Q=Y(),J=Object.entries(Q.objectTypeCounts).sort((W,K)=>K[1]-W[1]).slice(0,20);X={objectCount:Q.objectCount,heapSize:Q.heapSize,top:Object.fromEntries(J)}}catch{}console.log(JSON.stringify({msg:"heap-watch",ts:new Date().toISOString(),uptimeS:Math.round(process.uptime()),rss:G.rss,heapUsed:G.heapUsed,heapTotal:G.heapTotal,external:G.external,arrayBuffers:G.arrayBuffers,...X}))};return Z().catch(()=>{}),Rr=setInterval(()=>void Z().catch(()=>{}),$),Rr.unref?.(),process.on("SIGUSR2",()=>{try{let G=Bun.generateHeapSnapshot("v8"),X=typeof G==="string"?G:JSON.stringify(G),Y=`/tmp/heap-${process.pid}-${Date.now()}.heapsnapshot`;Bun.write(Y,X),console.log(JSON.stringify({msg:"heap-snapshot-written",path:Y}))}catch(G){console.error("[heap-watch] snapshot failed:",G)}}),()=>{if(Rr)clearInterval(Rr)}}import*as fx$ from"bun:jsc";var{startSamplingProfiler:xx$,samplingProfilerStackTraces:vx$}=fx$;function h61(){if(process.env.STALL_WATCHDOG!=="1")return()=>{};let $=Number(process.env.STALL_WATCHDOG_MS??100),Z=Number(process.env.STALL_WATCHDOG_TICK_MS??50);try{xx$()}catch(Q){return console.error("[stall-watchdog] failed to start sampling profiler:",Q),()=>{}}let G,X=performance.now()+Z,Y=()=>{let Q=performance.now(),J=Q-X;X=Q+Z;let W=[];try{W=vx$()?.traces??[]}catch{}if(J>$&&W.length>0){let K=new Map;for(let w of W){let F=w.frames.find((B)=>B.sourceURL&&!/Unknown Executable/.test(B.category??""))??w.frames[0];if(!F)continue;let H=(F.sourceURL??"?").replace(/^.*\/node_modules\//,"node_modules/"),N=`${F.name??"?"} @ ${H}:${F.line??"?"}`;K.set(N,(K.get(N)??0)+1)}let U=[...K.entries()].sort((w,F)=>F[1]-w[1]).slice(0,8).map(([w,F])=>({frame:w,count:F}));console.warn(JSON.stringify({msg:"stall-stack",ts:new Date().toISOString(),lagMs:Math.round(J),samplesInWindow:W.length,top:U}))}G=setTimeout(Y,Z),G.unref?.()};return G=setTimeout(Y,Z),G.unref?.(),()=>{if(G)clearTimeout(G)}}function c61(){S61();let $=[g61(),y61(),h61()];return()=>{for(let Z of $)Z()}}import{existsSync as i94}from"fs";var dX=O1();M61();var{DBOS:Or,DBOSClient:g94}=await import("@dbos-inc/dbos-sdk");function Af$($,Z){if(!Z)return $;let G=new URL($);if(!G.searchParams.has("sslmode"))G.searchParams.set("sslmode","verify-full");return G.toString()}var h94=[dY,$3,IK,gw],c94=dX.dispatchRole==="worker"?h94:dX.dispatchRole==="api"?[]:void 0;Or.setConfig(t81({systemDatabaseUrl:Af$(dX.databaseUrl,dX.databasePgSsl),poolSize:Number(process.env.DBOS_POOL_SIZE??5),executorID:dX.podName,listenQueues:c94}));var{createApp:u94}=await Promise.resolve().then(() => (Cp0(),Vp0)),{isServerPath:d94}=await Promise.resolve().then(() => (Ar(),w61)),{createAssetHandler:l94,resolveClientDir:Tf$}=await Promise.resolve().then(() => (Wf$(),Jf$)),m94=dX.port,Lf$=Tf$(import.meta.url,"../client"),If$=i94(Lf$)?Lf$:Tf$(import.meta.url,"../dist/client"),n94=l94({clientDir:If$,isServerPath:d94}),p94={"X-Frame-Options":"DENY","Content-Security-Policy":"frame-ancestors 'none'"};function t94($){let Z=new Headers($.headers);for(let[G,X]of Object.entries(p94))Z.set(G,X);return new Response($.body,{status:$.status,statusText:$.statusText,headers:Z})}var{parsePreviewBaseDomain:r94,tryHandlePreviewHttp:o94,tryUpgradePreviewWs:a94,previewWebSocketHandler:y81,isPreviewWsData:g81}=await Promise.resolve().then(() => (Uf$(),Kf$)),{getOrInitSharedRunner:s94}=await Promise.resolve().then(() => (on(),N3$)),Rf$=r94(process.env.STUDIO_SANDBOX_PREVIEW_URL_PATTERN),zf$={baseDomain:Rf$??"",getRunner:s94},Xz0=await u94({clientDir:If$}),h81=process.env.DBOS_CONDUCTOR_KEY?.trim(),jf$=process.env.DBOS_CONDUCTOR_URL?.trim();await Or.launch({...h81?{conductorKey:h81}:{},...h81&&jf$?{conductorURL:jf$}:{}});console.log(`[dbos] application version: ${Or.applicationVersion}`);var c81=5,u81=0;await eQ(async()=>{u81++;try{return await Xz0.initDbos()}catch($){let Z=u81>=c81?"giving up":"retrying";throw console.warn(`[dbos] initDbos attempt ${u81}/${c81} failed, ${Z}`,$),$}},{maxAttempts:c81,minTimeout:1000,maxTimeout:1e4,jitter:0.5});if(!dX.isCli){let{bannerLines:$}=await Promise.resolve().then(() => (Bf$(),Nf$));console.log("");for(let Z of $())console.log(Z)}var e94=Bun.serve({idleTimeout:0,port:m94,hostname:"0.0.0.0",fetch:async($,Z)=>{if(Rf$){let X=await a94($,Z,zf$);if(X===void 0)return;if(X)return X;let Y=await o94($,zf$);if(Y)return Y}let G=await n94($);if(G)return t94(G);return Xz0.fetch($,{server:Z})},websocket:{open($){if(g81($.data))y81.open($)},message($,Z){if(g81($.data))y81.message($,Z)},close($){if(g81($.data))y81.close($)}},development:!1}),$Z4=c61();if(dX.localMode)Promise.resolve().then(() => (iN(),lN0)).then(async({seedLocalMode:$,markSeedComplete:Z})=>{try{let G=await $();if(process.env.DEV_LINK_SESSION_PATH)try{let{bootstrapDevLinkSession:X}=await Promise.resolve().then(() => (Ef$(),Df$)),Y=dX.baseUrl??`http://localhost:${dX.port}`,Q=await X(dX.dataDir,Y);if(Q)console.log(`[dev-link] session ready at ${Q.path} (userSub=${Q.userSub})`);else console.warn("[dev-link] no admin user yet \u2014 skipping session bootstrap. The auto-spawned link will refuse to start until an admin exists.")}catch(X){console.error("[dev-link] bootstrap failed:",X)}}catch(G){console.error("Failed to seed local mode:",G)}finally{Z()}}).catch(async($)=>{console.error("Failed to load local-mode module:",$);try{let{markSeedComplete:Z}=await Promise.resolve().then(() => (iN(),lN0));Z()}catch{}});var Pf$=!1;async function ZZ4($){let Z;try{Z=await g94.create({systemDatabaseUrl:Af$(dX.databaseUrl,dX.databasePgSsl),systemDatabaseSchemaName:"dbos"});let G=await Z.listWorkflows({status:"PENDING",queueName:$3,executorId:$,loadInput:!1,loadOutput:!1});if(G.length===0){console.log(`[shutdown] no in-flight thread-gate gates to hand off (executor ${$})`);return}let X=G.map((Y)=>Y.workflowID);await Z.resumeWorkflows(X,{queueName:$3}),console.log(`[shutdown] re-enqueued ${X.length} in-flight thread-gate gate(s) for re-adoption by a live executor (from ${$}):`,X)}catch(G){console.error("[shutdown] thread-gate handoff failed:",G)}finally{await Z?.destroy().catch(()=>{})}}async function Yz0($){if(Pf$)return;Pf$=!0,console.log(`
 [shutdown] Received ${$}, shutting down gracefully...`);let Z=Number(process.env.SHUTDOWN_GRACE_SECONDS??60)*1000,G=Math.max(Z-5000,1e4),X=setTimeout(()=>{console.error(`[shutdown] Timed out after ${G}ms, forcing exit.`),process.exit(1)},G);X.unref?.();let Y=0;try{$Z4(),Xz0.markShuttingDown();let Q=o81(dX.dispatchRole,G,process.env.SHUTDOWN_DRAIN_MS);await O8(Q),await e94.stop(!0);let J=Or.executorID;await Or.shutdown(),await ZZ4(J),await Xz0.shutdown()}catch(Q){console.error("[shutdown] Error during shutdown:",Q),Y=1}clearTimeout(X),process.exit(Y)}process.on("SIGTERM",()=>Yz0("SIGTERM"));process.on("SIGINT",()=>Yz0("SIGINT"));process.on("SIGHUP",()=>Yz0("SIGHUP"));process.on("unhandledRejection",($)=>{console.error("[process] Unhandled rejection:",$)});process.on("uncaughtException",($)=>{console.error("[process] Uncaught exception:",$),Yz0("uncaughtException")});