watchbell 1.0.0 → 1.2.0

package/server/.next/server/chunks/src_lib_collector_runners_ts_12z4gtgikss74._.js

@@ -1,21 +1,21 @@
 module.exports=[380167,e=>{"use strict";var t=e.i(533102),a=e.i(406212),r=e.i(200123),n=e.i(595262);async function s(){let e=await (0,a.db)().execute(t.sql`
     select pid, state, extract(epoch from now() - state_change)::int as idle_s,
       coalesce(extract(epoch from now() - query_start)::int, 0) as run_s, left(query, 400) as query
-    from pg_stat_activity where usename = current_user and pid <> pg_backend_pid()`);return(0,r.f)(e).map(e=>{var t;let a;return{pid:Number(e.pid),state:e.state,idleS:Number(e.idle_s),runS:Number(e.run_s),table:(t=e.query,(a=/(?:from|into|update|join)\s+"?ops"?\."?([a-z_]+)"?/i.exec(t??""))?a[1]:null)}})}async function o(e=10,i=10){let l=await s(),u=function(e,t=10,a=10){let r=function(e){let t=new Set,a=[];for(let r of e.filter(e=>"idle"===e.state&&e.table).sort((e,t)=>e.idleS-t.idleS))t.has(r.table)?r.idleS>=60&&a.push(r):t.add(r.table);return a}(e),n=e.filter(e=>!r.includes(e)),s=Math.max(0,n.length+1-t);return s?[...r,...[...n.filter(e=>"idle"===e.state&&e.idleS>=a).sort((e,t)=>t.idleS-e.idleS),...n.filter(e=>"idle"!==e.state&&e.runS>60).sort((e,t)=>t.runS-e.runS)].slice(0,s)]:r}(l,e,i),d=0;if(u.length){let e=u.map(e=>e.pid).filter(e=>Number.isInteger(e)&&e>0),n=await (0,a.db)().execute(t.sql`select pg_terminate_backend(pid) as ok from unnest(array[${t.sql.raw(e.join(","))}]::int[]) as pid`);d=(0,r.f)(n).filter(e=>e.ok).length}let c=function(e){let t=new Map;for(let a of e)t.set(a.table??"unknown",(t.get(a.table??"unknown")??0)+1);return[...t.entries()].sort((e,t)=>t[1]-e[1]).map(([e,t])=>`${e} \xd7${t}`)}(u);return d>0&&(console.info(`pool guard: ${l.length+1} connections, closed ${d} (${c.join(", ")})`),await (0,n.f)({kind:"ok",message:`Pool guard: closed ${d} of ${l.length+1} database connections`,detail:c.join(", ").slice(0,300),resourceId:null,actorUserId:null}).catch(()=>void 0)),{total:l.length+1,trimmed:d,culprits:c}}var i=e.i(90879),l=e.i(366171);let u=[{name:"pool-guard",run:async()=>{(0,i.isCloud)()&&await o().catch(e=>console.warn("pool guard failed:",e instanceof Error?e.message.slice(0,160):"error"))}},{name:"supabase-metrics",run:async(e,t)=>{await (0,l.E)(e,t?.deadline??e.getTime()+3e4)}}];var d=e.i(336763),c=e.i(157406),p=e.i(668304);function f(e){if((0,i.isCloud)())for(let t of new Set(e))try{let e;e=t,(0,p.revalidateTag)(e,{expire:0})}catch(e){console.warn(`cache: couldn't expire ${t}: ${e instanceof Error?e.message.slice(0,120):"unknown"}`)}}var m=e.i(188477),h=e.i(530298),w=e.i(396918),g=e.i(727028),b=e.i(760859);let k="Watchbell backups",y="Watchpost backups",v=["Overview","Applications","Incidents","Databases","Domains"],I=["January","February","March","April","May","June","July","August","September","October","November","December"];function $(e){let t=new Date(e.getTime()+252e5);return`${t.getUTCFullYear()}-${String(t.getUTCMonth()+1).padStart(2,"0")}`}function A(e){let[t,a]=e.split("-").map(Number);return{start:new Date(Date.UTC(t,a-1,1)-252e5),end:new Date(Date.UTC(t,a,1)-252e5)}}function S(e){let[t,a]=e.split("-").map(Number);return 1===a?`${t-1}-12`:`${t}-${String(a-1).padStart(2,"0")}`}function D(e){let[t,a]=e.split("-").map(Number);return`${I[a-1]} ${t}`}let T=e=>`Watchbell \xb7 ${e}`;function E(e){if(!e)return"";let t=new Date(e.getTime()+252e5),a=e=>String(e).padStart(2,"0");return`${t.getUTCFullYear()}-${a(t.getUTCMonth()+1)}-${a(t.getUTCDate())} ${a(t.getUTCHours())}:${a(t.getUTCMinutes())}`}let x=(e,t)=>e>0?Math.round((e-t)/e*1e5)/1e3:"",z=e=>{if(!e.length)return null;let t=[...e].sort((e,t)=>e-t),a=Math.floor(t.length/2);return t.length%2?t[a]:Math.round((t[a-1]+t[a])/2)},R=e=>e.reduce((e,t)=>e+t,0),M=e=>"production"===e.target,j=e=>"ERROR"===e.state,_={supabase_project:"Supabase",neon_project:"Neon",firestore:"Firebase"};function C(e,t){if(!e)return"";let a=Date.parse(e);return Number.isFinite(a)?Math.floor((a-t.getTime())/864e5):""}let q=e=>null===e?"":Math.round(e/1048576*10)/10;function P(e){if(null===e)return"";if("number"==typeof e||"boolean"==typeof e)return String(e);let t=/^[=+\-@\t\r]/.test(e)?`'${e}`:e;return/[",\r\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}let N=["record","at","subject","resource_id","checks","failures","p50_ms","p95_ms","max_ms","status_5xx","maintenance","type","kind","reason","count","message","detail"];var O=e.i(803237),U=e.i(788264),B=e.i(93387),F=e.i(857799),G=e.i(503313),W=e.i(827439);let L="backup.folder";async function H(){let[e]=await (0,a.db)().select().from(h.accounts).where((0,d.eq)(h.accounts.provider,"drive")).orderBy((0,w.asc)(h.accounts.createdAt)).limit(1);if(!e)return null;let t=(0,O.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,B.serverEnv)().OPS_ENCRYPTION_KEY);return{id:e.id,status:e.status,lastError:e.lastError,lastTestAt:e.lastTestAt,refreshToken:t}}async function V(e,t){let r=new Date;await (0,a.db)().update(h.accounts).set({...t,lastTestAt:r,updatedAt:r}).where((0,d.eq)(h.accounts.id,e))}async function J(){return(0,a.db)().select().from(h.backups).orderBy((0,w.desc)(h.backups.month)).limit(120)}async function Y(e){let[t]=await (0,a.db)().select().from(h.backups).where((0,d.eq)(h.backups.month,e)).limit(1);return t??null}async function K(e,t){let r=new Date;await (0,a.db)().insert(h.backups).values({month:e,...t,updatedAt:r}).onConflictDoUpdate({target:h.backups.month,set:{...t,updatedAt:r}})}async function X(){let[e]=await (0,a.db)().select().from(h.settings).where((0,d.eq)(h.settings.key,L)).limit(1),t=e?.value;return"string"==typeof t?.id&&t.id?{id:t.id,name:"string"==typeof t.name&&t.name?t.name:null}:null}async function Q(e,t){let r=t?{id:e,name:t}:{id:e};await (0,a.db)().insert(h.settings).values({key:L,value:r}).onConflictDoUpdate({target:h.settings.key,set:{value:r,updatedAt:new Date}})}let Z=e=>"number"==typeof e&&Number.isFinite(e)?e:null;async function ee(e,t,r){let{start:n,end:s}=A(e),o=t&&r<s?r:s,[i,l,u,c,p,f,m,g]=await Promise.all([(0,G.f)(),(0,a.db)().select({id:h.resources.id,name:h.resources.name}).from(h.resources).where((0,d.and)((0,d.eq)(h.resources.kind,"app"),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt))).orderBy((0,w.asc)(h.resources.name)).limit(500),(0,a.db)().select({r:h.rollupsHourly,appId:h.monitors.resourceId,app:h.resources.name,url:h.monitors.url,kind:h.monitors.kind,name:h.monitors.name}).from(h.rollupsHourly).innerJoin(h.monitors,(0,d.eq)(h.monitors.id,h.rollupsHourly.monitorId)).innerJoin(h.resources,(0,d.eq)(h.resources.id,h.monitors.resourceId)).where((0,d.and)((0,d.gte)(h.rollupsHourly.hour,n),(0,d.lt)(h.rollupsHourly.hour,o))).orderBy((0,w.asc)(h.rollupsHourly.hour)).limit(5e4),(0,a.db)().select({e:h.events,resource:h.resources.name}).from(h.events).leftJoin(h.resources,(0,d.eq)(h.resources.id,h.events.resourceId)).where((0,d.and)((0,d.gte)(h.events.at,n),(0,d.lt)(h.events.at,o))).orderBy((0,w.asc)(h.events.at)).limit(5e4),(0,a.db)().select().from(h.alerts).where((0,d.and)((0,d.gte)(h.alerts.startedAt,n),(0,d.lt)(h.alerts.startedAt,o))).orderBy((0,w.asc)(h.alerts.startedAt)).limit(5e3),(0,a.db)().select({appId:h.deployments.resourceId,target:h.deployments.target,state:h.deployments.state,createdAt:h.deployments.createdAtProvider}).from(h.deployments).where((0,d.and)((0,d.gte)(h.deployments.createdAtProvider,n),(0,d.lt)(h.deployments.createdAtProvider,o))).limit(1e4),(0,a.db)().select({r:h.resources,s:h.snapshots,account:h.accounts.label}).from(h.resources).innerJoin(h.accounts,(0,d.eq)(h.accounts.id,h.resources.accountId)).leftJoin(h.snapshots,(0,d.eq)(h.snapshots.resourceId,h.resources.id)).where((0,d.and)((0,d.inArray)(h.resources.kind,[...F.H]),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt))).limit(500),(0,W.p)()]),b=m.map(({r:e,s:t,account:a})=>{let r=t?.data??{},n=e.kind,s="neon_project"===n?(0,U.k)(U.s,r):null,o="supabase_project"===n?Z((0,U.k)(U.B,r).sizeBytes):s?(s.branches??[]).reduce((e,t)=>null===t.logicalSize?e:(e??0)+t.logicalSize,null):null;return{id:e.id,kind:n,account:a,state:t?.state??"unknown",sizeBytes:o,cuHours:s&&null!==Z(s.computeSeconds)?Math.round(s.computeSeconds/3600*10)/10:null,reads:"firestore"===n?Z((0,U.k)(U.w,r).reads):null}}),k=g.map(e=>({name:e.name,app:e.appName,tlsExpires:e.tls?.notAfter??null,domainExpires:e.rdap?.expiresAt??null,registrar:e.rdap?.registrar??null}));return{month:e,partial:t,generatedAt:r,book:i,apps:l,rollups:u.map(({r:e,appId:t,app:a,url:r,kind:n,name:s})=>({monitorId:e.monitorId,appId:t,app:a,path:(e=>{if("heartbeat"===e.kind)return` heartbeat ${e.name??""}`.trimEnd();try{return new URL(e.url).pathname}catch{return e.url}})({kind:n,name:s,url:r}),hour:e.hour,checks:e.checks,failures:e.failures,p50Ms:e.p50Ms,p95Ms:e.p95Ms,maxMs:e.maxMs,status5xx:e.status5xx,maintenance:e.maintenance})),events:c.map(({e,resource:t})=>({at:e.at,resourceId:e.resourceId,resource:t,type:e.type,kind:e.kind,reason:e.reason,count:e.count,message:e.message,detail:e.detail})),alerts:p.map(e=>({ruleKey:e.ruleKey,severity:e.severity,title:e.title,message:e.message,resourceId:e.resourceId,startedAt:e.startedAt,resolvedAt:e.resolvedAt})),deployments:f,databases:b,domains:k}}var et=e.i(75064),ea=e.i(909592),er=e.i(684330),en=e.i(492973),es=e.i(246517),eo=e.i(260417),ei=e.i(978071);let el="application/vnd.google-apps.folder",eu="https://www.googleapis.com/drive/v3/files",ed="https://www.googleapis.com/upload/drive/v3/files",ec="https://sheets.googleapis.com/v4/spreadsheets",ep=et.z.object({error:et.z.object({errors:ea.z.array(er.z.looseObject({reason:en.z.string().optional()})).optional(),status:en.z.string().optional()})});async function ef(e,t,a,r,n){let s,o,i=n.timeoutMs??1e4,l={Authorization:`Bearer ${a}`,Accept:"application/json"};r?.raw?(l["Content-Type"]=r.contentType??"application/octet-stream",s=new Uint8Array(r.raw)):r&&void 0!==r.json&&(l["Content-Type"]="application/json",s=JSON.stringify(r.json));try{o=await (n.fetch??fetch)(t,{method:e,headers:l,body:s,signal:AbortSignal.timeout(i),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`Google Drive didn't answer within ${Math.round(i/1e3)} seconds.`:"Couldn't reach Google Drive."}}let u=await o.json().catch(()=>null);if(o.ok)return{ok:!0,data:u};let d=ep.safeParse(u),c=d.success?d.data.error.errors?.find(e=>e.reason)?.reason??d.data.error.status:void 0;return 401===o.status?{ok:!1,kind:"auth",status:401,error:"Google Drive rejected the access token (401)."}:404===o.status?{ok:!1,kind:"missing",status:404,error:"Google Drive doesn't know this file (404)."}:403===o.status&&"storageQuotaExceeded"===c?{ok:!1,kind:"full",status:403,error:"Your Google Drive is full. Free some space; the next run tries again."}:429===o.status||o.status>=500||403===o.status&&/rateLimit/i.test(c??"")?{ok:!1,kind:"transient",status:o.status,error:`Google Drive is busy (${o.status}). The next run tries again.`}:{ok:!1,kind:"format",status:o.status,error:`Google Drive refused the request (${o.status}${c?` ${c}`:""}).`}}let em=et.z.object({id:en.z.string().min(1)}),eh=e=>({ok:!1,kind:"format",error:`Google Drive answered ${e} in a format the console doesn't recognise.`});function ew(e,t){if(!e.ok)return e;let a=em.safeParse(e.data);return a.success?{ok:!0,data:a.data.id}:eh(t)}async function eg(e,t,a={}){let r=`name = '${t.replace(/['\\]/g,"\\$&")}' and mimeType = '${el}' and trashed = false`,n=await ef("GET",`${eu}?${new URLSearchParams({q:r,fields:"files(id,name)",spaces:"drive",pageSize:"10"})}`,e,null,a);if(!n.ok)return n;let s=et.z.object({files:ea.z.array(em)}).safeParse(n.data);return s.success?{ok:!0,data:s.data.files[0]?.id??null}:eh("the folder search")}async function eb(e,t,a={}){let r=await ef("GET",`${eu}/${encodeURIComponent(t)}?fields=id,trashed,name`,e,null,a);if(!r.ok)return"missing"===r.kind?{ok:!0,data:{usable:!1,name:null}}:r;let n=et.z.object({id:en.z.string(),trashed:es.z.boolean().optional(),name:en.z.string().optional()}).safeParse(r.data);return n.success?{ok:!0,data:{usable:!n.data.trashed,name:n.data.name?.trim()||null}}:eh("the folder")}async function ek(e,t,a={}){return ew(await ef("POST",`${eu}?fields=id`,e,{json:{name:t,mimeType:el}},a),"the new folder")}async function ey(e,t,a,r={}){return ew(await ef("POST",`${eu}?fields=id`,e,{json:{name:t,mimeType:"application/vnd.google-apps.spreadsheet",parents:[a]}},r),"the new spreadsheet")}let ev=e=>`'${e.replace(/'/g,"''")}'`;async function eI(e,t,a,r={}){let n=await ef("GET",`${ec}/${encodeURIComponent(t)}?fields=sheets.properties(sheetId,title)`,e,null,r);if(!n.ok)return n;let s=et.z.object({sheets:ea.z.array(et.z.object({properties:et.z.object({sheetId:eo.z.number(),title:en.z.string()})})).default([])}).safeParse(n.data);if(!s.success)return eh("the spreadsheet's tabs");let o=s.data.sheets.map(e=>e.properties),i=new Set(o.map(e=>e.title)),l=[],u=a.filter(e=>!i.has(e)),d=o[0];for(let e of(d&&u.length&&!a.includes(d.title)&&(l.push({updateSheetProperties:{properties:{sheetId:d.sheetId,title:u[0]},fields:"title"}}),u.shift()),u))l.push({addSheet:{properties:{title:e}}});if(!l.length)return{ok:!0,data:void 0};let c=await ef("POST",`${ec}/${encodeURIComponent(t)}:batchUpdate`,e,{json:{requests:l}},r);return c.ok?{ok:!0,data:void 0}:c}async function e$(e,t,a,r={}){let n=encodeURIComponent(t),s=await ef("POST",`${ec}/${n}/values:batchClear`,e,{json:{ranges:a.map(e=>ev(e.title))}},r);if(!s.ok)return s;let o=a.map(e=>({range:`${ev(e.title)}!A1`,majorDimension:"ROWS",values:e.rows.map(e=>e.map(e=>e??""))})),i=await ef("POST",`${ec}/${n}/values:batchUpdate`,e,{json:{valueInputOption:"RAW",data:o}},r);return i.ok?{ok:!0,data:void 0}:i}let eA="watchbell-backup-part";function eS(e,t,a){return Buffer.concat([Buffer.from(`--${eA}\r
+    from pg_stat_activity where usename = current_user and pid <> pg_backend_pid()`);return(0,r.f)(e).map(e=>{var t;let a;return{pid:Number(e.pid),state:e.state,idleS:Number(e.idle_s),runS:Number(e.run_s),table:(t=e.query,(a=/(?:from|into|update|join)\s+"?ops"?\."?([a-z_]+)"?/i.exec(t??""))?a[1]:null)}})}async function o(e=10,i=10){let l=await s(),u=function(e,t=10,a=10){let r=function(e){let t=new Set,a=[];for(let r of e.filter(e=>"idle"===e.state&&e.table).sort((e,t)=>e.idleS-t.idleS))t.has(r.table)?r.idleS>=60&&a.push(r):t.add(r.table);return a}(e),n=e.filter(e=>!r.includes(e)),s=Math.max(0,n.length+1-t);return s?[...r,...[...n.filter(e=>"idle"===e.state&&e.idleS>=a).sort((e,t)=>t.idleS-e.idleS),...n.filter(e=>"idle"!==e.state&&e.runS>60).sort((e,t)=>t.runS-e.runS)].slice(0,s)]:r}(l,e,i),d=0;if(u.length){let e=u.map(e=>e.pid).filter(e=>Number.isInteger(e)&&e>0),n=await (0,a.db)().execute(t.sql`select pg_terminate_backend(pid) as ok from unnest(array[${t.sql.raw(e.join(","))}]::int[]) as pid`);d=(0,r.f)(n).filter(e=>e.ok).length}let c=function(e){let t=new Map;for(let a of e)t.set(a.table??"unknown",(t.get(a.table??"unknown")??0)+1);return[...t.entries()].sort((e,t)=>t[1]-e[1]).map(([e,t])=>`${e} \xd7${t}`)}(u);return d>0&&(console.info(`pool guard: ${l.length+1} connections, closed ${d} (${c.join(", ")})`),await (0,n.f)({kind:"ok",message:`Pool guard: closed ${d} of ${l.length+1} database connections`,detail:c.join(", ").slice(0,300),resourceId:null,actorUserId:null}).catch(()=>void 0)),{total:l.length+1,trimmed:d,culprits:c}}var i=e.i(90879),l=e.i(638809),u=e.i(366171);let d=[{name:"pool-guard",run:async()=>{(0,i.isCloud)()&&await o().catch(e=>console.warn("pool guard failed:",e instanceof Error?e.message.slice(0,160):"error"))}},{name:"supabase-metrics",run:async(e,t)=>{(await (0,l.I)()).has("database")||await (0,u.E)(e,t?.deadline??e.getTime()+3e4)}}];var c=e.i(336763),p=e.i(157406),f=e.i(668304);function m(e){if((0,i.isCloud)())for(let t of new Set(e))try{let e;e=t,(0,f.revalidateTag)(e,{expire:0})}catch(e){console.warn(`cache: couldn't expire ${t}: ${e instanceof Error?e.message.slice(0,120):"unknown"}`)}}var h=e.i(188477),w=e.i(530298),g=e.i(396918),b=e.i(727028),y=e.i(728335),k=e.i(760859);let v="Watchbell backups",I="Watchpost backups",$=["Overview","Applications","Incidents","Databases","Domains"],A=["January","February","March","April","May","June","July","August","September","October","November","December"];function S(e){let t=(0,y.zonedParts)(e);return`${t.year}-${String(t.month).padStart(2,"0")}`}function D(e){return{start:(0,y.dayStart)(`${e}-01`),end:(0,y.dayStart)(`${function(e){let[t,a]=e.split("-").map(Number);return 12===a?`${t+1}-01`:`${t}-${String(a+1).padStart(2,"0")}`}(e)}-01`)}}function T(e){let[t,a]=e.split("-").map(Number);return 1===a?`${t-1}-12`:`${t}-${String(a-1).padStart(2,"0")}`}function E(e){let[t,a]=e.split("-").map(Number);return`${A[a-1]} ${t}`}let x=e=>`Watchbell \xb7 ${e}`;function z(e){if(!e)return"";let t=(0,y.zonedParts)(e),a=e=>String(e).padStart(2,"0");return`${t.year}-${a(t.month)}-${a(t.day)} ${a(t.hour)}:${a(t.minute)}`}let R=(e,t)=>e>0?Math.round((e-t)/e*1e5)/1e3:"",j=e=>{if(!e.length)return null;let t=[...e].sort((e,t)=>e-t),a=Math.floor(t.length/2);return t.length%2?t[a]:Math.round((t[a-1]+t[a])/2)},_=e=>e.reduce((e,t)=>e+t,0),M=e=>"production"===e.target,q=e=>"ERROR"===e.state,N={supabase_project:"Supabase",neon_project:"Neon",firestore:"Firebase"};function P(e,t){if(!e)return"";let a=Date.parse(e);return Number.isFinite(a)?Math.floor((a-t.getTime())/864e5):""}let C=e=>null===e?"":Math.round(e/1048576*10)/10;function O(e){if(null===e)return"";if("number"==typeof e||"boolean"==typeof e)return String(e);let t=/^[=+\-@\t\r]/.test(e)?`'${e}`:e;return/[",\r\n]/.test(t)?`"${t.replace(/"/g,'""')}"`:t}let B=["record","at","subject","resource_id","checks","failures","p50_ms","p95_ms","max_ms","status_5xx","maintenance","type","kind","reason","count","message","detail"];var F=e.i(803237),G=e.i(788264),U=e.i(93387),L=e.i(857799),W=e.i(503313),H=e.i(827439);let V="backup.folder";async function J(){let[e]=await (0,a.db)().select().from(w.accounts).where((0,c.eq)(w.accounts.provider,"drive")).orderBy((0,g.asc)(w.accounts.createdAt)).limit(1);if(!e)return null;let t=(0,F.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,U.serverEnv)().OPS_ENCRYPTION_KEY);return{id:e.id,status:e.status,lastError:e.lastError,lastTestAt:e.lastTestAt,refreshToken:t}}async function K(e,t){let r=new Date;await (0,a.db)().update(w.accounts).set({...t,lastTestAt:r,updatedAt:r}).where((0,c.eq)(w.accounts.id,e))}async function Y(){return(0,a.db)().select().from(w.backups).orderBy((0,g.desc)(w.backups.month)).limit(120)}async function X(e){let[t]=await (0,a.db)().select().from(w.backups).where((0,c.eq)(w.backups.month,e)).limit(1);return t??null}async function Q(e,t){let r=new Date;await (0,a.db)().insert(w.backups).values({month:e,...t,updatedAt:r}).onConflictDoUpdate({target:w.backups.month,set:{...t,updatedAt:r}})}async function Z(){let[e]=await (0,a.db)().select().from(w.settings).where((0,c.eq)(w.settings.key,V)).limit(1),t=e?.value;return"string"==typeof t?.id&&t.id?{id:t.id,name:"string"==typeof t.name&&t.name?t.name:null}:null}async function ee(e,t){let r=t?{id:e,name:t}:{id:e};await (0,a.db)().insert(w.settings).values({key:V,value:r}).onConflictDoUpdate({target:w.settings.key,set:{value:r,updatedAt:new Date}})}let et=e=>"number"==typeof e&&Number.isFinite(e)?e:null;async function ea(e,t,r){let{start:n,end:s}=D(e),o=t&&r<s?r:s,[i,l,u,d,p,f,m,h]=await Promise.all([(0,W.f)(),(0,a.db)().select({id:w.resources.id,name:w.resources.name}).from(w.resources).where((0,c.and)((0,c.eq)(w.resources.kind,"app"),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt))).orderBy((0,g.asc)(w.resources.name)).limit(500),(0,a.db)().select({r:w.rollupsHourly,appId:w.monitors.resourceId,app:w.resources.name,url:w.monitors.url,kind:w.monitors.kind,name:w.monitors.name}).from(w.rollupsHourly).innerJoin(w.monitors,(0,c.eq)(w.monitors.id,w.rollupsHourly.monitorId)).innerJoin(w.resources,(0,c.eq)(w.resources.id,w.monitors.resourceId)).where((0,c.and)((0,c.gte)(w.rollupsHourly.hour,n),(0,c.lt)(w.rollupsHourly.hour,o))).orderBy((0,g.asc)(w.rollupsHourly.hour)).limit(5e4),(0,a.db)().select({e:w.events,resource:w.resources.name}).from(w.events).leftJoin(w.resources,(0,c.eq)(w.resources.id,w.events.resourceId)).where((0,c.and)((0,c.gte)(w.events.at,n),(0,c.lt)(w.events.at,o))).orderBy((0,g.asc)(w.events.at)).limit(5e4),(0,a.db)().select().from(w.alerts).where((0,c.and)((0,c.gte)(w.alerts.startedAt,n),(0,c.lt)(w.alerts.startedAt,o))).orderBy((0,g.asc)(w.alerts.startedAt)).limit(5e3),(0,a.db)().select({appId:w.deployments.resourceId,target:w.deployments.target,state:w.deployments.state,createdAt:w.deployments.createdAtProvider}).from(w.deployments).where((0,c.and)((0,c.gte)(w.deployments.createdAtProvider,n),(0,c.lt)(w.deployments.createdAtProvider,o))).limit(1e4),(0,a.db)().select({r:w.resources,s:w.snapshots,account:w.accounts.label}).from(w.resources).innerJoin(w.accounts,(0,c.eq)(w.accounts.id,w.resources.accountId)).leftJoin(w.snapshots,(0,c.eq)(w.snapshots.resourceId,w.resources.id)).where((0,c.and)((0,c.inArray)(w.resources.kind,[...L.H]),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt))).limit(500),(0,H.p)()]),b=m.map(({r:e,s:t,account:a})=>{let r=t?.data??{},n=e.kind,s="neon_project"===n?(0,G.k)(G.s,r):null,o="supabase_project"===n?et((0,G.k)(G.B,r).sizeBytes):s?(s.branches??[]).reduce((e,t)=>null===t.logicalSize?e:(e??0)+t.logicalSize,null):null;return{id:e.id,kind:n,account:a,state:t?.state??"unknown",sizeBytes:o,cuHours:s&&null!==et(s.computeSeconds)?Math.round(s.computeSeconds/3600*10)/10:null,reads:"firestore"===n?et((0,G.k)(G.w,r).reads):null}}),y=h.map(e=>({name:e.name,app:e.appName,tlsExpires:e.tls?.notAfter??null,domainExpires:e.rdap?.expiresAt??null,registrar:e.rdap?.registrar??null}));return{month:e,partial:t,generatedAt:r,book:i,apps:l,rollups:u.map(({r:e,appId:t,app:a,url:r,kind:n,name:s})=>({monitorId:e.monitorId,appId:t,app:a,path:(e=>{if("heartbeat"===e.kind)return` heartbeat ${e.name??""}`.trimEnd();try{return new URL(e.url).pathname}catch{return e.url}})({kind:n,name:s,url:r}),hour:e.hour,checks:e.checks,failures:e.failures,p50Ms:e.p50Ms,p95Ms:e.p95Ms,maxMs:e.maxMs,status5xx:e.status5xx,maintenance:e.maintenance})),events:d.map(({e,resource:t})=>({at:e.at,resourceId:e.resourceId,resource:t,type:e.type,kind:e.kind,reason:e.reason,count:e.count,message:e.message,detail:e.detail})),alerts:p.map(e=>({ruleKey:e.ruleKey,severity:e.severity,title:e.title,message:e.message,resourceId:e.resourceId,startedAt:e.startedAt,resolvedAt:e.resolvedAt})),deployments:f,databases:b,domains:y}}var er=e.i(75064),en=e.i(909592),es=e.i(684330),eo=e.i(492973),ei=e.i(246517),el=e.i(260417),eu=e.i(978071);let ed="application/vnd.google-apps.folder",ec="https://www.googleapis.com/drive/v3/files",ep="https://www.googleapis.com/upload/drive/v3/files",ef="https://sheets.googleapis.com/v4/spreadsheets",em=er.z.object({error:er.z.object({errors:en.z.array(es.z.looseObject({reason:eo.z.string().optional()})).optional(),status:eo.z.string().optional()})});async function eh(e,t,a,r,n){let s,o,i=n.timeoutMs??1e4,l={Authorization:`Bearer ${a}`,Accept:"application/json"};r?.raw?(l["Content-Type"]=r.contentType??"application/octet-stream",s=new Uint8Array(r.raw)):r&&void 0!==r.json&&(l["Content-Type"]="application/json",s=JSON.stringify(r.json));try{o=await (n.fetch??fetch)(t,{method:e,headers:l,body:s,signal:AbortSignal.timeout(i),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`Google Drive didn't answer within ${Math.round(i/1e3)} seconds.`:"Couldn't reach Google Drive."}}let u=await o.json().catch(()=>null);if(o.ok)return{ok:!0,data:u};let d=em.safeParse(u),c=d.success?d.data.error.errors?.find(e=>e.reason)?.reason??d.data.error.status:void 0;return 401===o.status?{ok:!1,kind:"auth",status:401,error:"Google Drive rejected the access token (401)."}:404===o.status?{ok:!1,kind:"missing",status:404,error:"Google Drive doesn't know this file (404)."}:403===o.status&&"storageQuotaExceeded"===c?{ok:!1,kind:"full",status:403,error:"Your Google Drive is full. Free some space; the next run tries again."}:429===o.status||o.status>=500||403===o.status&&/rateLimit/i.test(c??"")?{ok:!1,kind:"transient",status:o.status,error:`Google Drive is busy (${o.status}). The next run tries again.`}:{ok:!1,kind:"format",status:o.status,error:`Google Drive refused the request (${o.status}${c?` ${c}`:""}).`}}let ew=er.z.object({id:eo.z.string().min(1)}),eg=e=>({ok:!1,kind:"format",error:`Google Drive answered ${e} in a format the console doesn't recognise.`});function eb(e,t){if(!e.ok)return e;let a=ew.safeParse(e.data);return a.success?{ok:!0,data:a.data.id}:eg(t)}async function ey(e,t,a={}){let r=`name = '${t.replace(/['\\]/g,"\\$&")}' and mimeType = '${ed}' and trashed = false`,n=await eh("GET",`${ec}?${new URLSearchParams({q:r,fields:"files(id,name)",spaces:"drive",pageSize:"10"})}`,e,null,a);if(!n.ok)return n;let s=er.z.object({files:en.z.array(ew)}).safeParse(n.data);return s.success?{ok:!0,data:s.data.files[0]?.id??null}:eg("the folder search")}async function ek(e,t,a={}){let r=await eh("GET",`${ec}/${encodeURIComponent(t)}?fields=id,trashed,name`,e,null,a);if(!r.ok)return"missing"===r.kind?{ok:!0,data:{usable:!1,name:null}}:r;let n=er.z.object({id:eo.z.string(),trashed:ei.z.boolean().optional(),name:eo.z.string().optional()}).safeParse(r.data);return n.success?{ok:!0,data:{usable:!n.data.trashed,name:n.data.name?.trim()||null}}:eg("the folder")}async function ev(e,t,a={}){return eb(await eh("POST",`${ec}?fields=id`,e,{json:{name:t,mimeType:ed}},a),"the new folder")}async function eI(e,t,a,r={}){return eb(await eh("POST",`${ec}?fields=id`,e,{json:{name:t,mimeType:"application/vnd.google-apps.spreadsheet",parents:[a]}},r),"the new spreadsheet")}let e$=e=>`'${e.replace(/'/g,"''")}'`;async function eA(e,t,a,r={}){let n=await eh("GET",`${ef}/${encodeURIComponent(t)}?fields=sheets.properties(sheetId,title)`,e,null,r);if(!n.ok)return n;let s=er.z.object({sheets:en.z.array(er.z.object({properties:er.z.object({sheetId:el.z.number(),title:eo.z.string()})})).default([])}).safeParse(n.data);if(!s.success)return eg("the spreadsheet's tabs");let o=s.data.sheets.map(e=>e.properties),i=new Set(o.map(e=>e.title)),l=[],u=a.filter(e=>!i.has(e)),d=o[0];for(let e of(d&&u.length&&!a.includes(d.title)&&(l.push({updateSheetProperties:{properties:{sheetId:d.sheetId,title:u[0]},fields:"title"}}),u.shift()),u))l.push({addSheet:{properties:{title:e}}});if(!l.length)return{ok:!0,data:void 0};let c=await eh("POST",`${ef}/${encodeURIComponent(t)}:batchUpdate`,e,{json:{requests:l}},r);return c.ok?{ok:!0,data:void 0}:c}async function eS(e,t,a,r={}){let n=encodeURIComponent(t),s=await eh("POST",`${ef}/${n}/values:batchClear`,e,{json:{ranges:a.map(e=>e$(e.title))}},r);if(!s.ok)return s;let o=a.map(e=>({range:`${e$(e.title)}!A1`,majorDimension:"ROWS",values:e.rows.map(e=>e.map(e=>e??""))})),i=await eh("POST",`${ef}/${n}/values:batchUpdate`,e,{json:{valueInputOption:"RAW",data:o}},r);return i.ok?{ok:!0,data:void 0}:i}let eD="watchbell-backup-part";function eT(e,t,a){return Buffer.concat([Buffer.from(`--${eD}\r
 Content-Type: application/json; charset=UTF-8\r
 \r
 ${JSON.stringify(e)}\r
---${eA}\r
+--${eD}\r
 Content-Type: ${a}\r
 \r
 `),t,Buffer.from(`\r
---${eA}--`)])}async function eD(e,t,a={}){let r=`multipart/related; boundary=${eA}`,n=e=>{if(!e.ok)return e;let a=et.z.object({id:en.z.string().min(1),size:ei.z.union([en.z.string(),eo.z.number()]).optional()}).safeParse(e.data);return a.success?{ok:!0,data:{id:a.data.id,size:Number(a.data.size??t.content.length)||t.content.length}}:eh("the upload")};if(t.fileId){let s=eS({name:t.name,mimeType:t.mimeType},t.content,t.mimeType),o=await ef("PATCH",`${ed}/${encodeURIComponent(t.fileId)}?uploadType=multipart&fields=id,size`,e,{raw:s,contentType:r},a);if(o.ok||"missing"!==o.kind)return n(o)}let s=eS({name:t.name,mimeType:t.mimeType,parents:[t.folderId]},t.content,t.mimeType);return n(await ef("POST",`${ed}?uploadType=multipart&fields=id,size`,e,{raw:s,contentType:r},a))}async function eT(e,t,a={}){let r=await ef("PATCH",`${eu}/${encodeURIComponent(t)}?fields=id,trashed`,e,{json:{trashed:!0}},a);return r.ok||"missing"===r.kind?{ok:!0,data:void 0}:r}var eE=e.i(666680),ex=e.i(547963);let ez=ex.n.notSet("GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET",!0),eR="invalid_grant: Google Drive access was removed or has expired. Reconnect Google Drive.",eM=et.z.object({error:en.z.string()});async function ej(e,t){let a,r=t.timeoutMs??1e4;try{a=await (t.fetch??fetch)("https://oauth2.googleapis.com/token",{method:"POST",headers:{Accept:"application/json","Content-Type":"application/x-www-form-urlencoded"},body:e.toString(),signal:AbortSignal.timeout(r),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`Google didn't answer within ${Math.round(r/1e3)} seconds.`:"Couldn't reach Google."}}let n=await a.json().catch(()=>null);if(a.ok)return{ok:!0,body:n};let s=eM.safeParse(n).success?n.error:null;return"invalid_grant"===s?{ok:!1,kind:"revoked",error:eR}:"invalid_client"===s||"unauthorized_client"===s?{ok:!1,kind:"client",error:`Google refused the OAuth client. Check GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET ${ex.n.checkWhere}.`}:429===a.status||a.status>=500?{ok:!1,kind:"transient",error:`Google returned an error (${a.status}). The next run tries again.`}:{ok:!1,kind:"format",error:`Google refused the request (${s??a.status}).`}}et.z.object({refresh_token:en.z.string().min(1),scope:en.z.string().optional()});let e_=et.z.object({access_token:en.z.string().min(1)});async function eC(e,t,a={}){let r=await ej(new URLSearchParams({grant_type:"refresh_token",refresh_token:t,client_id:e.clientId,client_secret:e.clientSecret}),a);if(!r.ok)return r;let n=e_.safeParse(r.body);return n.success?{ok:!0,accessToken:n.data.access_token}:{ok:!1,kind:"format",error:"Google answered the token request in a format the console doesn't recognise."}}class eq extends Error{kind;constructor(e,t){super(t),this.kind=e}}async function eP(e){let{month:t,partial:a,now:r}=e,n=function(e=process.env){let t=e.GOOGLE_CLIENT_ID?.trim()??"",a=e.GOOGLE_CLIENT_SECRET?.trim()??"";return a&&/^[\w.-]+\.apps\.googleusercontent\.com$/.test(t)?{clientId:t,clientSecret:a}:null}();if(!n)return{ok:!1,month:t,kind:"env",error:ez};let s=await H();if(!s)return{ok:!1,month:t,kind:"not-connected",error:"Google Drive isn't connected."};if(!s.refreshToken){let e="The stored Google Drive token can't be read (the encryption key changed). Reconnect Google Drive.";return await V(s.id,{status:"error",lastError:e}),{ok:!1,month:t,kind:"failed",error:e}}let o=await Y(t),i={sheetFileId:o?.sheetFileId??null,csvFileId:o?.csvFileId??null,driveFolderId:o?.driveFolderId??null},l=o?.status??"error";await K(t,{status:l,attempts:(o?.attempts??0)+1,startedAt:r});let u=e=>(i={...i,...e},K(t,{status:l,...e})),d={fetch:e.fetch},c=()=>{if(Date.now()>e.deadline)throw new eq("time","Stopped at the daily job's time budget; the next daily run continues where this one stopped.")},p=e=>{if(!e.ok)throw new eq("failed",e.error);return e.data};try{let o,l=await eC(n,s.refreshToken,d);if(!l.ok){if("revoked"===l.kind)throw await V(s.id,{status:"error",lastError:eR}),new eq("revoked",eR);throw new eq("failed",l.error)}"error"===s.status&&await V(s.id,{status:"ok",lastError:null});let f=l.accessToken;c();let m=await X(),h=m?.id??null;if(m){let e=p(await eb(f,m.id,d));e.usable?e.name&&e.name!==m.name&&await Q(m.id,e.name):h=null}if(!h){c();let e=p(await eg(f,k,d)),t=e?null:p(await eg(f,y,d));h=e??t??p(await ek(f,k,d)),await Q(h,t?y:k)}let w=await ee(t,a,r);c(),i.sheetFileId||await u({sheetFileId:p(await ey(f,T(t),h,d)),driveFolderId:h}),c();let I=await eI(f,i.sheetFileId,v,d);I.ok||"missing"!==I.kind||(await u({sheetFileId:p(await ey(f,T(t),h,d)),driveFolderId:h}),c(),I=await eI(f,i.sheetFileId,v,d)),p(I),c(),p(await e$(f,i.sheetFileId,function(e){let{start:t,end:a}=A(e.month),r=e.partial&&e.generatedAt<a?e.generatedAt:a,n=e.deployments.filter(M),s=R(e.rollups.map(e=>e.checks)),o=R(e.rollups.map(e=>e.failures)),i=e=>(0,b.G)(e),l=[["Watchbell backup",e.month],["Covers",`${E(t)} to ${E(r)} WIB${e.partial?" (month so far)":""}`],["Kind",e.partial?"Partial: Back up now":"Full month"],["Generated",`${E(e.generatedAt)} WIB`],[],["Applications watched",e.apps.length],["Uptime, all monitors (%)",x(s,o)],["Checks (rolled-up hours)",s],["Failed checks",o],["Incidents (alerts opened)",e.alerts.length],["Critical incidents",e.alerts.filter(e=>"critical"===e.severity).length],["Production deployments",n.length],["Failed production deployments",n.filter(j).length],["Events",R(e.events.map(e=>e.count))]],u=[["Application","Monitors","Checks","Uptime (%)","p95 response, typical hour (ms)","p95 response, worst hour (ms)","5xx responses","Production deploys","Failed production deploys"]];for(let t of[...e.apps].sort((e,t)=>e.name.localeCompare(t.name))){let a=e.rollups.filter(e=>e.appId===t.id),r=a.map(e=>e.p95Ms).filter(e=>null!==e),s=n.filter(e=>e.appId===t.id);u.push([i(t.name),new Set(a.map(e=>e.monitorId)).size,R(a.map(e=>e.checks)),x(R(a.map(e=>e.checks)),R(a.map(e=>e.failures))),z(r),r.length?Math.max(...r):null,R(a.map(e=>e.status5xx)),s.length,s.filter(j).length])}let d=[["Rule","Severity","Subject","Started (WIB)","Resolved (WIB)","Duration","Message"]];for(let t of[...e.alerts].sort((e,t)=>e.startedAt.getTime()-t.startedAt.getTime())){let a=(0,b.o)({title:t.title,message:t.message,causedBy:null,resourceId:t.resourceId},e.book);d.push([t.ruleKey,t.severity,a.title,E(t.startedAt),E(t.resolvedAt),function(e,t,a){let r=Math.max(0,Math.round(((t??a).getTime()-e.getTime())/6e4)),n=r<60?`${r} min`:r<2880?`${Math.floor(r/60)} h ${r%60} min`:`${Math.round(r/1440)} days`;return t?n:`${n} (still open)`}(t.startedAt,t.resolvedAt,r),a.message])}let c=[["Database","Provider","Account","State at backup","Status changes this month","Size (MB)","Neon CU-hours this period","Firestore reads (last reading)"]];for(let t of[...e.databases].sort((t,a)=>(0,b.X)(e.book,t.id).localeCompare((0,b.X)(e.book,a.id)))){let a=R(e.events.filter(e=>"database"===e.type&&e.resourceId===t.id).map(e=>e.count));c.push([(0,b.X)(e.book,t.id),_[t.kind],i(t.account),t.state,a,q(t.sizeBytes),t.cuHours,t.reads])}let p=[["Domain","Application","TLS certificate expires","TLS days left at month end","Domain expires (RDAP)","Domain days left at month end","Registrar"]];for(let t of[...e.domains].sort((e,t)=>e.name.localeCompare(t.name)))p.push([t.name,t.app?i(t.app):"",t.tlsExpires??"",C(t.tlsExpires,r),t.domainExpires??"",C(t.domainExpires,r),t.registrar??""]);return[{title:"Overview",rows:l},{title:"Applications",rows:u},{title:"Incidents",rows:d},{title:"Databases",rows:c},{title:"Domains",rows:p}]}(w),d)),c();let $=(o=function(e){let t=[N.join(",")];for(let a of[...e.rollups].sort((e,t)=>e.hour.getTime()-t.hour.getTime()||e.monitorId.localeCompare(t.monitorId)))t.push(["rollup",a.hour.toISOString(),(0,b.G)(`${a.app}${a.path}`),a.appId,a.checks,a.failures,a.p50Ms,a.p95Ms,a.maxMs,a.status5xx,a.maintenance,null,null,null,null,null,null].map(P).join(","));for(let a of[...e.events].sort((e,t)=>e.at.getTime()-t.at.getTime())){let r=a.resourceId&&e.book.db.some(e=>e.id===a.resourceId)?(0,b.X)(e.book,a.resourceId):(0,b.J)(a.resource??"",e.book);t.push(["event",a.at.toISOString(),r,a.resourceId,null,null,null,null,null,null,null,a.type,a.kind,a.reason,a.count,(0,b.J)(a.message,e.book,a.resourceId),(0,b.J)(a.detail,e.book,a.resourceId)].map(P).join(","))}return`${t.join("\r\n")}\r
-`}(w),(0,g.gzipSync)(Buffer.from(o,"utf8"),{level:9})),S=p(await eD(f,{name:`watchbell-${t}-raw.csv.gz`,mimeType:"application/gzip",folderId:h,content:$,fileId:i.csvFileId},d));await u({csvFileId:S.id}),await K(t,{status:a?"partial":"ok",sizeBytes:S.size,error:null,finishedAt:new Date});let O=a?null:await eN(f,r,e.deadline,d);return{ok:!0,month:t,retention:O,message:`${D(t)}${a?" so far":""} saved to Google Drive.`}}catch(n){let e=n instanceof eq?n:new eq("failed","The backup failed. The next daily run tries again.");n instanceof eq||console.error("backup failed:",n instanceof Error?n.name:"unknown");let r=a&&"partial"===l?"partial":"error";return await K(t,{status:r,error:e.message.slice(0,500),finishedAt:new Date}).catch(()=>void 0),{ok:!1,month:t,kind:e.kind,error:e.message}}}async function eN(e,t,a,r){let n=function(e,t){let a=$(t),r=e.filter(e=>"ok"===e.status&&e.month<a).map(e=>e.month).sort().reverse().slice(0,3);if(r.length<3)return[];let n=r[r.length-1];return e.filter(e=>!e.trashedAt&&e.month<n&&(e.sheetFileId||e.csvFileId))}(await J(),t),s=[];for(let o of n){if(Date.now()>a)break;let n=!0;for(let t of[o.sheetFileId,o.csvFileId])t&&((await eT(e,t,r)).ok||(n=!1));n&&(await K(o.month,{status:o.status,trashedAt:t}),s.push(D(o.month)))}return s.length?`Moved to Drive trash: ${s.join(", ")}.`:null}async function eO(e,t,a={}){let r=await H();if(!r||"error"===r.status&&r.lastError?.startsWith("invalid_grant"))return null;let n=function(e,t){let a=S($(t)),r=new Map(e.map(e=>[e.month,e.status]));if("ok"!==r.get(a))return a;let n=a;for(let e=1;e<3;e++)if(n=S(n),"error"===r.get(n))return n;return null}(await J(),e);if(!n)return null;let s=await eP({month:n,partial:!1,now:e,deadline:t,...a});return s.ok?null:`${D(n)}: ${s.error}`}var eU=e.i(455891),eB=e.i(889234),eF=e.i(328586),eG=e.i(333407),eW=e.i(459702),eL=e.i(200346),eH=e.i(368230),eV=e.i(584820),eJ=e.i(902509),eY=e.i(668141),eK=e.i(242960),eX=e.i(112515),eQ=e.i(185890);function eZ(e){if(!e)return null;if("unknown"!==e.state)return e.state;let t=e.data?.lastGoodState;return"string"==typeof t&&eQ.f.includes(t)?t:null}let e0={turso_database:"Turso database",upstash_redis:"Upstash Redis",d1_database:"D1 database"};function e1(e,t){return"auth"===e.kind?"auth":"scope"===e.kind?t?"auth":"column":"missing"===e.kind?t?"unknown":"column":"unknown"}var e5=e.i(35048),e3=e.i(516464),e4=e.i(88316),e2=e.i(437122),e6=e.i(319718),e8=e.i(941536),e9=e.i(686454),e7=e.i(122603);let te="skipped the rest, time budget used";function tt(e){let t=e.deadline-Date.now()-500;if(t<250)throw Error(te);return{timeoutMs:Math.min(5e3,t)}}async function ta(e,t,a){let r=!1;return{out:await (0,e7.P)(t,3,async t=>{let n;try{n=tt(e)}catch{r=!0;return}return a(t,n)}),skipped:r}}function tr(e){if(e)throw Error(te)}async function tn(e){let t=await (0,a.db)().select().from(h.accounts).where((0,d.and)((0,d.eq)(h.accounts.provider,e),(0,d.eq)(h.accounts.status,"ok"))),r=(0,B.serverEnv)().OPS_ENCRYPTION_KEY;return t.map(e=>({acc:e,credential:(0,O.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},r)}))}function ts(e,t){return(0,a.db)().select({r:h.resources,s:h.snapshots}).from(h.resources).leftJoin(h.snapshots,(0,d.eq)(h.snapshots.resourceId,h.resources.id)).where((0,d.and)((0,d.eq)(h.resources.accountId,e),(0,d.eq)(h.resources.kind,t),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt))).limit(100)}let to=e=>t.sql`${h.snapshots.data} || ${JSON.stringify(e)}::jsonb`;async function ti(e,t,r){let n=eZ(e.s?{state:e.s.state,data:e.s.data}:null),s="unknown"===t.state,o=s?n?{lastGoodState:n}:{}:{...t.patch,lastGoodState:t.state},i=!s&&n!==t.state;return await (0,a.db)().insert(h.snapshots).values({resourceId:e.r.id,state:t.state,data:o,collectedAt:r,stateSince:r}).onConflictDoUpdate({target:h.snapshots.resourceId,set:{state:t.state,data:to(o),...s?{}:{collectedAt:r},...i?{stateSince:r}:{}}}),s?null:function(e){let{prev:t,next:a}=e;if(null===t||"unknown"===t||"unknown"===a||t===a)return null;let r={resourceId:e.resourceId,type:"database",at:e.at};if("supabase_project"===e.kind)return"paused"===a?{...r,reason:"DatabasePaused",kind:"paused",message:"Supabase project paused",detail:"Status changed to INACTIVE"}:"ok"===a?{...r,reason:"DatabaseRestored",kind:"ok",message:"Supabase project active again",detail:"Status changed to ACTIVE_HEALTHY"}:"warn"===a?{...r,reason:"DatabaseUnhealthy",kind:"warn",message:"Supabase project unhealthy",detail:e.label}:"err"===a?{...r,reason:"DatabaseFailed",kind:"err",message:`Supabase project: ${e.label.toLowerCase()}`,detail:e.label}:null;if("neon_project"===e.kind)return"err"===a?{...r,reason:"NeonSuspended",kind:"err",message:"Neon compute suspended",detail:e.label}:"err"===t&&("ok"===a||"idle"===a)?{...r,reason:"NeonAvailable",kind:"ok",message:"Neon compute available again",detail:e.label}:null;let n=e0[e.kind];if(n)return"err"===a?{...r,reason:"DatabaseFailed",kind:"err",message:`${n}: ${e.label.toLowerCase()}`,detail:e.label}:"off"===a?{...r,reason:"DatabaseMissing",kind:"off",message:`${n} missing`,detail:e.label}:"ok"===a&&("err"===t||"off"===t)?{...r,reason:"DatabaseRestored",kind:"ok",message:`${n} available again`,detail:e.label}:null;if("err"===a){let t="Daily quota used up"===e.label;return{...r,reason:t?"FirestoreQuotaUsedUp":"FirestoreUnreachable",kind:"err",message:t?"Firestore daily quota used up":"Firestore not reachable",detail:e.label}}return"off"===a?{...r,reason:"FirestoreMissing",kind:"off",message:"Firestore database missing",detail:e.label}:"ok"===a&&("err"===t||"off"===t)?{...r,reason:"FirestoreReachable",kind:"ok",message:"Firestore reachable again",detail:e.label}:null}({kind:e.r.kind,resourceId:e.r.id,prev:n,next:t.state,label:t.label,at:r})}async function tl(e,t){await (0,a.db)().update(h.snapshots).set({data:to(t)}).where((0,d.eq)(h.snapshots.resourceId,e.r.id))}let tu=e=>(0,eG.f)(e);async function td(e,t,r,n,s){if("auth"===e1(n,!0)){let e=(0,eX.E)({ok:!1,kind:"auth",error:n.error});e&&await (0,a.db)().update(h.accounts).set({...e,updatedAt:s.now}).where((0,d.eq)(h.accounts.id,t.id))}for(let e of r)await ti(e,{state:"unknown",label:"Unknown",patch:{}},s.now);s.errors.push(`${e}/${t.label}: ${n.error}`)}let tc=e=>e.toISOString();async function tp(e){return e.length?new Set((await (0,a.db)().select({app:h.links.fromResourceId,state:h.snapshots.state,data:h.snapshots.data}).from(h.links).innerJoin(h.resources,(0,d.eq)(h.resources.id,h.links.toResourceId)).innerJoin(h.snapshots,(0,d.eq)(h.snapshots.resourceId,h.resources.id)).where((0,d.and)((0,d.eq)(h.links.kind,"uses_db"),(0,d.inArray)(h.links.fromResourceId,e),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt)))).filter(e=>"paused"===e.state||"unknown"===e.state&&"paused"===e.data.lastGoodState).map(e=>e.app)):new Set}async function tf(e){for(let{acc:t,credential:a}of(await tn("supabase"))){if(tt(e),!a){e.errors.push(`supabase/${t.label}: credential can't be read`);continue}let r=await ts(t.id,"supabase_project");if(!r.length)continue;let n=await (0,e9.W)(a,tt(e));if(!n.ok){await td("supabase",t,r,n,e);continue}let s=new Map(n.data.map(e=>[e.ref,e])),o=[];for(let t of r){let a=s.get(t.r.externalId);if(!a){o.push(await ti(t,{state:"off",label:"Not found",patch:{status:"REMOVED"}},e.now));continue}let r=(0,e4.P)(a.status),n=eZ(t.s?{state:t.s.state,data:t.s.data}:null),i={status:a.status,region:a.region,pgVersion:a.pgVersion,orgSlug:a.orgSlug};"paused"===r.state&&"paused"!==n&&(i.pausedBeforeSeen=null===n),o.push(await ti(t,{state:r.state,label:r.label,patch:i},e.now))}await tu(o);let i=new Map(r.map(e=>[e.r.externalId,e.r.id])),l=n.data.map(e=>({resourceId:i.get(e.ref)??null,accountId:t.id,status:e.status,orgSlug:e.orgSlug}));await (0,eL.z)(e.now,l,e.deadline).catch(()=>{console.warn("auto-restore failed"),e.errors.push("auto-restore failed")})}}async function tm(e){for(let{acc:t,credential:a}of(await tn("supabase"))){if(tt(e),!a)continue;let r=await ts(t.id,"supabase_project");if(!r.length)continue;let n=new Map(r.map(e=>[e.r.id,(0,U.k)(U.B,e.s?.data)])),s=new Map;for(let r of new Set([...n.values()].map(e=>e.orgSlug).filter(e=>!!e))){let n=await (0,e9.K)(a,r,tt(e));s.set(r,n.ok&&null!==n.data?"free"===n.data:null),n.ok||"scope"===n.kind||e.errors.push(`supabase/${t.label} plan: ${n.error}`)}let{skipped:o}=await ta(e,r,async(t,r)=>{let o=n.get(t.r.id),i={freeOrg:o.orgSlug?s.get(o.orgSlug)??null:null};if((o.status??"").startsWith("ACTIVE_")){let[n,s]=await Promise.all([(0,e9.F)(a,t.r.externalId,r),(0,e9.Z)(a,t.r.externalId,r)]);n.ok?Object.assign(i,{health:n.data.map(({name:e,status:t})=>({name:e,status:t})),healthAt:tc(e.now),healthError:null}):"column"===e1(n,!1)?i.healthError=n.error:e.errors.push(`supabase/${t.r.name} health: ${n.error}`),s.ok?Object.assign(i,{lastTrafficAt:(0,e4.H)(s.data)?.toISOString()??null,trafficAt:tc(e.now),trafficError:null}):"column"===e1(s,!1)?i.trafficError=s.error:e.errors.push(`supabase/${t.r.name} traffic: ${s.error}`)}await tl(t,i)});tr(o)}}async function th(e){for(let{acc:t,credential:a}of(await tn("neon"))){if(tt(e),!a){e.errors.push(`neon/${t.label}: credential can't be read`);continue}let r=await ts(t.id,"neon_project");if(!r.length)continue;let{out:n,skipped:s}=await ta(e,r,(e,t)=>Promise.all([(0,e8.Z)(a,e.r.externalId,t),(0,e8.k)(a,e.r.externalId,t),(0,e8.e)(a,e.r.externalId,t)])),o=n.flat().find(e=>void 0!==e&&!e.ok&&"auth"===e.kind);if(o){await td("neon",t,r,o,e);continue}let i=[];for(let[t,a]of r.entries()){let r=n[t];if(!r)continue;let[s,o,l]=r;if(!s.ok||!o.ok||!l.ok){let t=[s,o,l].find(e=>!e.ok);"missing"===t.kind?i.push(await ti(a,{state:"off",label:"Not found",patch:{}},e.now)):(await ti(a,{state:"unknown",label:"Unknown",patch:{}},e.now),e.errors.push(`neon/${a.r.name}: ${t.error}`));continue}let u=(0,e3.p)({endpoints:o.data,computeSeconds:s.data.computeSeconds});i.push(await ti(a,{state:u.state,label:u.label,patch:{region:s.data.region,pgVersion:s.data.pgVersion,computeSeconds:s.data.computeSeconds,transferBytes:s.data.transferBytes,activeSeconds:s.data.activeSeconds,periodStart:s.data.periodStart,periodEnd:s.data.periodEnd,endpoints:o.data,branches:l.data}},e.now))}await tu(i),tr(s)}}async function tw(e){for(let{acc:t,credential:a}of(await tn("firebase"))){tt(e);let r=a?(0,e6.p)(a):null;if(!r){e.errors.push(`firebase/${t.label}: credential can't be read`);continue}let n=await ts(t.id,"firestore");if(!n.length)continue;let s=await (0,e6.X)(r,tt(e));if(!s.ok){await td("firebase",t,n,s,e);continue}let{out:o,skipped:i}=await ta(e,n,(e,t)=>(0,e2.G)(s.data,e.r.externalId,t)),l=[];for(let[t,a]of n.entries()){let r=o[t];if(!r)continue;let n=(0,e5.g)(r);"unknown"!==n.state||r.ok||e.errors.push(`firebase/${a.r.name}: ${r.error}`);let s=r.ok?{latencyMs:r.data.latencyMs,pingError:null,pingReason:null,pingKind:null}:{pingError:r.error,pingReason:r.reason??null,pingKind:r.kind};l.push(await ti(a,{...n,patch:s},e.now))}await tu(l),tr(i)}}async function tg(e){for(let{acc:t,credential:a}of(await tn("firebase"))){tt(e);let r=a?(0,e6.p)(a):null;if(!r)continue;let n=(await ts(t.id,"firestore")).filter(e=>e.s?.state!=="off");if(!n.length)continue;let s=await (0,e6.X)(r,tt(e));if(!s.ok){e.errors.push(`firebase/${t.label}: ${s.error}`);continue}let o=(0,e5.a)(e.now),{skipped:i}=await ta(e,n,async(t,a)=>{let r=await (0,e2.W)(s.data,t.r.externalId,o,e.now,a);r.ok?await tl(t,{...r.data,opsAt:tc(e.now),opsError:null}):"column"===e1(r,!1)?await tl(t,{reads:null,writes:null,deletes:null,opsAt:tc(e.now),opsError:/requires billing/i.test(r.message??"")?"Not available on Spark: Firestore usage needs billing (Blaze plan)":"SERVICE_DISABLED"===r.reason?"Not readable: the Cloud Monitoring API is off in this project":"Not readable: the service account needs monitoring.viewer"}):e.errors.push(`firebase/${t.r.name} usage: ${r.error}`)});tr(i)}}async function tb(e){let t=Date.now()+2*Math.max(0,e.deadline-Date.now())/3,a=await tk(()=>ty({...e,deadline:t})),r=await tk(()=>tv(e));if(a)throw a;if(r)throw r}async function tk(e){try{return await e(),null}catch(e){return e instanceof Error?e:Error(String(e))}}async function ty(e){for(let{acc:t,credential:a}of(await tn("supabase")))if(tt(e),a)for(let r of(await ts(t.id,"supabase_project"))){let t=(0,U.k)(U.B,r.s?.data);if(!(0,e4.z)({status:t.status??"",lastTrafficAt:t.lastTrafficAt?new Date(t.lastTrafficAt):null,sizeAt:t.sizeAt?new Date(t.sizeAt):null,now:e.now}))continue;let n=await (0,e9.r)(a,r.r.externalId,tt(e));n.ok?await tl(r,{sizeBytes:n.data,sizeAt:tc(e.now),sizeError:null}):"column"===e1(n,!1)?await tl(r,{sizeError:n.error}):e.errors.push(`supabase/${r.r.name} size: ${n.error}`)}}async function tv(e){for(let{acc:t,credential:a}of(await tn("firebase"))){tt(e);let r=a?(0,e6.p)(a):null;if(!r)continue;let n=(await ts(t.id,"firestore")).filter(e=>e.s?.state!=="off");if(!n.length)continue;let s=await (0,e6.X)(r,tt(e));if(!s.ok){e.errors.push(`firebase/${t.label}: ${s.error}`);continue}let{skipped:o}=await ta(e,n,async(t,a)=>{let r=await (0,e2.q)(s.data,t.r.externalId,a);r.ok?await tl(t,{authUsers:r.data,authAt:tc(e.now),authError:null}):"column"===e1(r,!1)?await tl(t,{authError:"Not readable: the service account needs firebaseauth.viewer"}):e.errors.push(`firebase/${t.r.name} users: ${r.error}`)});tr(o)}}var tI=e.i(369179),t$=e.i(476866),tA=e.i(649297),tS=e.i(541211);async function tD(e){let[t]=await (0,a.db)().select({hour:(0,c.max)(h.rollupsHourly.hour)}).from(h.rollupsHourly),r=(0,tA.r)(t?.hour??null,e),n=await (0,a.db)().select().from(h.checks).where((0,d.and)((0,d.gte)(h.checks.at,r),(0,d.lt)(h.checks.at,(0,tA.b)(e)))).orderBy(h.checks.at),s=new Map;for(let e of n){let t=`${e.monitorId}|${(0,tA.b)(e.at).toISOString()}`,a=s.get(t);a?a.push(e):s.set(t,[e])}for(let[e,t]of s){let[r,n]=e.split("|"),s=(0,tA.z)(t);await (0,a.db)().insert(h.rollupsHourly).values({monitorId:r,hour:new Date(n),...s}).onConflictDoUpdate({target:[h.rollupsHourly.monitorId,h.rollupsHourly.hour],set:s})}}async function tT(e){let t=await (0,t$.J)().catch(()=>tI.f);await (0,a.db)().delete(h.checks).where((0,d.lt)(h.checks.at,new Date(e.getTime()-864e5*t.checks))),await (0,a.db)().delete(h.rollupsHourly).where((0,d.lt)(h.rollupsHourly.hour,new Date(e.getTime()-864e5*t.rollupsHourly))),await (0,a.db)().delete(h.deployments).where((0,d.and)((0,d.lt)(h.deployments.createdAtProvider,new Date(e.getTime()-864e5*t.deployments)),(0,d.eq)(h.deployments.isCurrent,!1),(0,d.eq)(h.deployments.isPreviousProduction,!1))),await (0,a.db)().delete(h.events).where((0,d.lt)(h.events.at,new Date(e.getTime()-864e5*t.events))),await (0,a.db)().delete(h.alerts).where((0,d.and)((0,d.isNotNull)(h.alerts.resolvedAt),(0,d.lt)(h.alerts.resolvedAt,new Date(e.getTime()-864e5*t.alerts)))),await (0,a.db)().delete(h.collectorRuns).where((0,d.lt)(h.collectorRuns.startedAt,new Date(e.getTime()-864e5*t.collectorRuns))),await (0,a.db)().delete(h.storedLogs).where((0,d.lt)(h.storedLogs.at,new Date(e.getTime()-864e5*t.storedLogs))),await (0,a.db)().delete(h.recommendationDismissals).where((0,d.lt)(h.recommendationDismissals.dismissedAt,new Date(e.getTime()-864e5*t.recommendationDismissals)))}async function tE(){let e=new Date,[t]=await (0,a.db)().insert(h.collectorRuns).values({startedAt:e,trigger:"vercel_cron"}).returning({id:h.collectorRuns.id}),r=[],n=[["rollups",()=>tD(e)],["backup",async()=>{let t=await eO(e,e.getTime()+2e4);t&&r.push(`backup: ${t}`)}],["retention",()=>tT(e)],["sync",async()=>{let t=await (0,a.db)().select({id:h.accounts.id,label:h.accounts.label,provider:h.accounts.provider}).from(h.accounts).where((0,d.inArray)(h.accounts.provider,eY.I));for(let[a,n]of t.entries()){if(Date.now()>e.getTime()+25e3){r.push(`sync: ${t.length-a} account${t.length-a>1?"s":""} left for the next run, time budget used`);break}let s=await (0,eK.k)(n.id);s.ok?(s.skippedTeams.length&&r.push(`sync ${n.provider}/${n.label}: skipped teams ${s.skippedTeams.join(", ")} (no access)`),s.overLimit&&r.push(`sync ${n.provider}/${n.label}: ${s.overLimit}`)):r.push(`sync ${n.provider}/${n.label}: ${s.error}`)}}],["github",async()=>{let t=await (0,eF.D)(Math.min(Date.now()+6e3,e.getTime()+35e3));t&&r.push(`github: ${t}`)}],["deps",async()=>{let t=await (0,eB.e)(Math.min(Date.now()+eB.o,e.getTime()+eB.R));t&&r.push(`deps: ${t}`)}],["databases",()=>tb({now:e,deadline:Math.min(Date.now()+15e3,e.getTime()+5e4),errors:r})],["keep-active",()=>(0,eL.V)(e,Math.min(Date.now()+5e3,e.getTime()+5e4),r)],["security",async()=>{for(let t of(await (0,eV.h)((0,eJ.F)(e.getTime(),Date.now()))).failed)r.push(`security ${t}`)}],["advisor",async()=>{await (0,eU.O)(e)}]],s=[];try{for(let[e,t]of n)try{await t(),s.push(e)}catch(t){r.push(`${e}: ${(0,tS.safeError)(t)}`)}await (0,eG.f)([{type:"system",kind:r.length?"warn":"info",message:r.length?"Daily jobs finished with problems":"Daily jobs finished",detail:"Rollups, the monthly backup when due, retention, a sync of every account, database sizes, the Next.js security check and the Advisor",resourceId:null}])}catch(e){r.push(`events: ${(0,tS.safeError)(e)}`)}finally{f(m.t),await (0,a.db)().update(h.collectorRuns).set({finishedAt:new Date,ok:0===r.length,errorSummary:r.join("\n").slice(0,2e3)||null,durationMs:Date.now()-e.getTime(),tasks:s}).where((0,d.eq)(h.collectorRuns.id,t.id)).catch(()=>void 0)}await tx(r.length>0);let o=Date.now()-e.getTime();return{skipped:!1,ok:0===r.length,tasks:s,checks:0,durationMs:o,errors:r}}async function tx(e){let t=process.env.DAILY_HEARTBEAT_TOKEN;if(!t)return;let a=(0,eH.i)(t);if(!a)return void console.warn("daily heartbeat: DAILY_HEARTBEAT_TOKEN holds no single hb_ token; set it to the heartbeat's token");let r=await (0,eW._)(a,e?"fail":"ok",new Date).catch(e=>(console.warn("daily heartbeat: the ping couldn't be stored:",e instanceof Error?e.name:"error"),null));r?.status==="unknown"?console.warn("daily heartbeat: DAILY_HEARTBEAT_TOKEN matches no heartbeat monitor (was it regenerated?)"):r?.status==="limited"&&console.warn("daily heartbeat: the ping was rate limited")}async function tz(e,t,a=new Date){if(e.skipped||0===t.length)return e;let r=[...e.tasks],n=[...e.errors];for(let e of t)try{await e.run(a),r.push(e.name)}catch(t){n.push(`${e.name}: ${(0,tS.safeError)(t)}`)}return{...e,tasks:r,errors:n,ok:0===n.length}}var tR=e.i(234195),tM=e.i(706959),tj=e.i(451682),t_=e.i(373200),tC=e.i(753535),tq=e.i(932378),tP=e.i(313903);let tN=/not enabled/i,tO=(e,t,a={})=>({ok:!1,kind:e,error:t,...a}),tU="Vercel Web Analytics answered in a format the console doesn't recognise.",tB=et.z.object({data:et.z.object({pageviews:eo.z.number().finite().nonnegative(),visitors:eo.z.number().finite().nonnegative()})}),tF=et.z.object({data:ea.z.array(tq.z.unknown())}),tG=et.z.object({timestamp:en.z.string().transform((e,t)=>{let a=Date.parse(e);return Number.isNaN(a)?(t.addIssue({code:"custom",message:"bad timestamp"}),tP.z.NEVER):a}),pageviews:eo.z.number().finite().nonnegative().nullish().catch(null)});async function tW(e,t,a,r){let n=r.since.toISOString(),s=r.until.toISOString(),o=r.fetch??fetch,i=new AbortController,l=setTimeout(()=>i.abort(new DOMException("window","TimeoutError")),r.timeoutMs??8e3),u=r.signal?AbortSignal.any([i.signal,r.signal]):i.signal,d=(0,e7.X)(u);async function c(l,c){let p=new URLSearchParams({projectId:a,teamId:t,...c,since:n,until:s});try{let t=await Promise.race([o(`https://api.vercel.com/v1/query/web-analytics/visits/${l}?${p}`,{headers:{Authorization:`Bearer ${e}`,Accept:"application/json"},signal:u,cache:"no-store"}),d]),a=null,r=!1;if(401===t.status||403===t.status)a=tO("auth",`Vercel rejected this credential (${t.status}).`,{status:t.status});else if(429===t.status){let e=Number(t.headers.get("Retry-After"));a=tO("transient","Vercel says there were too many requests.",{status:429,retryAfterS:Number.isFinite(e)&&e>0?e:60})}else if(400===t.status){let e=await Promise.race([t.text(),d]).catch(()=>"");tN.test(e)?r=!0:a=tO("transient","Vercel Web Analytics rejected the request (400).",{status:400})}else t.ok||(a=tO("transient",`Vercel Web Analytics returned an error (${t.status}).`,{status:t.status}));if(r)return{kind:"off"};if(a)return await t.body?.cancel().catch(()=>void 0),{kind:"fail",fail:a};try{return{kind:"body",body:await Promise.race([t.json(),d])}}catch(e){if(u.aborted)throw e;return{kind:"fail",fail:tO("format",tU)}}}catch{return{kind:"fail",fail:u.aborted?i.signal.aborted&&!r.signal?.aborted?tO("transient","Vercel Web Analytics didn't answer in time."):tO("transient","Reading Vercel Web Analytics was cancelled."):tO("transient","Couldn't reach Vercel Web Analytics.")}}}try{let[e,t]=await Promise.all([c("count",{}),c("aggregate",{by:"hour"})]);if("off"===e.kind||"off"===t.kind)return{ok:!0,enabled:!1};let a=[e,t].flatMap(e=>"fail"===e.kind?[e.fail]:[]),r=a.find(e=>"auth"===e.kind);if(r)return r;let n="body"===t.kind?tF.safeParse(t.body):null,s="fail"===t.kind?t.fail:n?.success?null:tO("format",tU),o=a.find(e=>"transient"===e.kind);if(o)return o;if(s)return s;if(!n?.success)return tO("format",tU);let i="body"===e.kind?tB.safeParse(e.body):null,l=n.data.data.flatMap(e=>{let t=tG.safeParse(e);return t.success?[t.data]:[]});if(l.length>0&&l.every(e=>null==e.pageviews))return tO("format",tU);let u=new Map;for(let e of l){let t=36e5*Math.floor(e.timestamp/36e5);u.set(t,(u.get(t)??0)+(e.pageviews??0))}let d=[...u].sort((e,t)=>e[0]-t[0]).slice(-24).map(([e,t])=>({at:new Date(e),views:t}));if(i?.success)return{ok:!0,enabled:!0,total:i.data.data.pageviews,visitors:i.data.data.visitors,hourly:d};return{ok:!0,enabled:!0,total:d.reduce((e,t)=>e+t.views,0),visitors:null,hourly:d}}finally{clearTimeout(l),i.abort()}}var tL=e.i(178233);async function tH(e,t,a){let r=await (0,tj.g)(null);if(!r.length)return;let n=new Date(36e5*Math.floor(e.getTime()/36e5)-828e5);await (0,e7.P)(r,3,async r=>{if(Date.now()+8500>t)return;let s=await tW(r.token,r.teamId,r.projectId,{since:n,until:e});if(!s.ok)return void a.push(`pageviews/${r.appName}: ${s.error}`);try{await (0,tC.r)(r.appId,{pageviews:(0,tL.Z)(s,e)},e)}catch{a.push(`pageviews/${r.appName}: couldn't save the page views`)}})}var tV=e.i(147100),tJ=e.i(764266),tY=e.i(198552),tK=e.i(27479),tX=e.i(707866),tQ=e.i(392710),tZ=e.i(582888),t0=e.i(811539),t1=e.i(725321);async function t5(e){let t=[await tk(()=>t4(e)),await tk(()=>t6(e)),await tk(()=>t8(e))].find(e=>null!==e);if(t)throw t}let t3=e=>e.toISOString();async function t4(e){for(let{acc:t,credential:a}of(await tn("turso"))){if(tt(e),!a){e.errors.push(`turso/${t.label}: credential can't be read`);continue}let r=await ts(t.id,"turso_database");if(!r.length)continue;let n=await (0,tZ.u)(a,tt(e));if(!n.ok){await td("turso",t,r,n,e);continue}let s=new Set(r.map(e=>String(e.r.meta.org??""))),o=[];for(let i of n.data.filter(e=>s.has(e.slug))){let[n,s]=await Promise.all([(0,tZ.X)(a,i.slug,tt(e)),(0,tZ.d)(a,i.slug,tt(e))]),l=r.filter(e=>e.r.meta.org===i.slug);if(!n.ok){for(let t of l)await ti(t,{state:"unknown",label:"Unknown",patch:{}},e.now);e.errors.push(`turso/${t.label}: ${n.error}`);continue}let u=new Map(n.data.map(e=>[e.id,e]));for(let t of l)o.push(await t2(t,u.get(t.r.externalId),i,s,e))}let i=new Set(n.data.map(e=>e.slug));for(let t of r.filter(e=>!i.has(String(e.r.meta.org??""))))o.push(await ti(t,{state:"off",label:"Organization not visible to this token",patch:{}},e.now));await tu(o)}}async function t2(e,t,a,r,n){if(!t)return ti(e,{state:"off",label:"Not found",patch:{}},n.now);let s=(0,tX.h)({blockReads:t.blockReads,blockWrites:t.blockWrites,orgBlockedReads:a.blockedReads,orgBlockedWrites:a.blockedWrites}),o={org:a.slug,group:t.group,primaryRegion:t.primaryRegion,plan:a.plan,blockReads:t.blockReads,blockWrites:t.blockWrites};if(r.ok){let e=r.data.byDb.get(t.id);Object.assign(o,{rowsRead:e?.rowsRead??null,rowsWritten:e?.rowsWritten??null,storageBytes:e?.storageBytes??null,orgRowsRead:r.data.org.rowsRead,orgRowsWritten:r.data.org.rowsWritten,orgStorageBytes:r.data.org.storageBytes,orgDatabases:r.data.org.databases,usageAt:t3(n.now),usageError:null})}else"column"===e1(r,!1)?o.usageError=r.error:n.errors.push(`turso/${e.r.name} usage: ${r.error}`);return ti(e,{...s,patch:o},n.now)}async function t6(e){for(let{acc:t,credential:a}of(await tn("upstash"))){tt(e);let r=a?(0,t0.L)(a):null;if(!r){e.errors.push(`upstash/${t.label}: credential can't be read`);continue}let n=await ts(t.id,"upstash_redis");if(!n.length)continue;let s=await (0,t0.M)(r,tt(e));if(!s.ok){await td("upstash",t,n,s,e);continue}let o=new Map(s.data.map(e=>[e.id,e])),{out:i,skipped:l}=await ta(e,n,(e,t)=>o.has(e.r.externalId)?(0,t0.Z)(r,e.r.externalId,t):Promise.resolve(null)),u=[];for(let[t,a]of n.entries()){let r=o.get(a.r.externalId);if(!r){u.push(await ti(a,{state:"off",label:"Not found",patch:{}},e.now));continue}let n=(0,tX.t)(r.state),s={region:r.region,status:r.state,type:r.type},l=i[t];l?.ok?Object.assign(s,{...l.data,statsAt:t3(e.now),statsError:null}):l&&"column"===e1(l,!1)?s.statsError=l.error:l&&e.errors.push(`upstash/${a.r.name} stats: ${l.error}`),u.push(await ti(a,{...n,patch:s},e.now))}await tu(u),tr(l)}}async function t8(e){let t={};for(let{acc:a,credential:r}of(await tn("cloudflare"))){if(tt(e),!r)continue;let n=await t7(a.id,r,e);if(!n.length){t[a.id]={d1:"error",analytics:null,at:t3(e.now),note:"No Cloudflare account found for this token"};continue}let s="ok",o=null;for(let t of n){let n=await (0,tQ.L)(r,t,tt(e));if(!n.ok){"error"==(s="scope"===n.kind||"auth"===n.kind?"missing":"error")&&e.errors.push(`d1/${a.label}: ${n.error}`);continue}await ae(a.id,t,n.data,e.now);let i=(await ts(a.id,"d1_database")).filter(e=>e.r.meta.accountId===t);if(!i.length)continue;let l=await (0,tQ.t)(r,t,(0,tQ.Y)(e.now),tt(e));o=l.ok?o??"ok":"scope"===l.kind?"missing":o??"error",l.ok||"scope"===l.kind||e.errors.push(`d1/${a.label} analytics: ${l.error}`);let{out:u,skipped:d}=await ta(e,i,(e,a)=>(0,tQ.m)(r,t,e.r.externalId,a)),c=new Map((l.ok?l.data:[]).map(e=>[e.databaseId,e])),p=u.map(e=>e?.ok?e.data.sizeBytes??0:0),f={accountRowsRead:l.ok?l.data.reduce((e,t)=>e+t.rowsRead,0):null,accountRowsWritten:l.ok?l.data.reduce((e,t)=>e+t.rowsWritten,0):null,accountSizeBytes:u.every(e=>e?.ok)?p.reduce((e,t)=>e+t,0):null,accountDatabases:n.data.length},m=[];for(let[t,a]of i.entries()){let r=u[t];void 0!==r&&m.push(await t9(a,r,c.get(a.r.externalId)??null,l.ok,l.ok?null:l.error,f,e))}await tu(m),tr(d)}t[a.id]={d1:s,analytics:o,at:t3(e.now),note:null}}await (0,a.db)().insert(h.settings).values({key:t1.f,value:t}).onConflictDoUpdate({target:h.settings.key,set:{value:t,updatedAt:e.now}})}async function t9(e,t,a,r,n,s,o){let i={accountId:e.r.meta.accountId??null,createdAt:e.r.meta.createdAt??null,accountDatabases:s.accountDatabases};return(t.ok?Object.assign(i,{sizeBytes:t.data.sizeBytes,numTables:t.data.numTables,readReplication:t.data.readReplication,detailsAt:t3(o.now),detailsError:null}):"scope"===t.kind?i.detailsError=t.error:o.errors.push(`d1/${e.r.name}: ${t.error}`),r?Object.assign(i,{rowsRead:a?.rowsRead??0,rowsWritten:a?.rowsWritten??0,readQueries:a?.readQueries??0,writeQueries:a?.writeQueries??0,accountRowsRead:s.accountRowsRead,accountRowsWritten:s.accountRowsWritten,usageDay:(0,tQ.Y)(o.now),usageAt:t3(o.now),usageError:null}):i.usageError=n,null!==s.accountSizeBytes&&(i.accountSizeBytes=s.accountSizeBytes),t.ok||"transient"!==t.kind)?ti(e,{...(0,tX.c)(r?s:{accountRowsRead:null,accountRowsWritten:null}),patch:i},o.now):ti(e,{state:"unknown",label:"Unknown",patch:{}},o.now)}async function t7(e,t,r){let n=new Set,s=await (0,tQ.N)(t,tt(r));if(s.ok)for(let e of s.data)n.add(e.id);for(let t of(await (0,a.db)().select({meta:h.resources.meta}).from(h.resources).where((0,d.and)((0,d.eq)(h.resources.accountId,e),(0,d.eq)(h.resources.kind,"zone"),(0,d.isNull)(h.resources.goneAt))).limit(200)))"string"==typeof t.meta.accountId&&/^[0-9a-f]{32}$/i.test(t.meta.accountId)&&n.add(t.meta.accountId);return[...n].slice(0,5)}async function ae(e,t,r,n){let s=(await (0,a.db)().select({id:h.resources.id,externalId:h.resources.externalId,meta:h.resources.meta,goneAt:h.resources.goneAt}).from(h.resources).where((0,d.and)((0,d.eq)(h.resources.accountId,e),(0,d.eq)(h.resources.kind,"d1_database")))).filter(e=>e.meta.accountId===t),o=new Map(s.map(e=>[e.externalId,e])),i=new Set(r.map(e=>e.uuid));await (0,a.db)().transaction(async a=>{for(let s of r){let r={accountId:t,createdAt:s.createdAt},i=o.get(s.uuid);i?await a.update(h.resources).set({name:s.name,meta:r,lastSeenAt:n,goneAt:null,updatedAt:n}).where((0,d.eq)(h.resources.id,i.id)):await a.insert(h.resources).values({accountId:e,kind:"d1_database",externalId:s.uuid,name:s.name,meta:r,monitored:!0,lastSeenAt:n}).onConflictDoNothing({target:[h.resources.accountId,h.resources.kind,h.resources.externalId]})}let l=s.filter(e=>!i.has(e.externalId)&&!e.goneAt).map(e=>e.id);l.length&&await a.update(h.resources).set({goneAt:n,updatedAt:n}).where((0,d.inArray)(h.resources.id,l))})}var at=e.i(628852);async function aa(e=new Date){let n=(0,eE.randomUUID)(),s=new Date(e.getTime()+at.d).toISOString(),o=await (0,a.db)().execute(t.sql`
+--${eD}--`)])}async function eE(e,t,a={}){let r=`multipart/related; boundary=${eD}`,n=e=>{if(!e.ok)return e;let a=er.z.object({id:eo.z.string().min(1),size:eu.z.union([eo.z.string(),el.z.number()]).optional()}).safeParse(e.data);return a.success?{ok:!0,data:{id:a.data.id,size:Number(a.data.size??t.content.length)||t.content.length}}:eg("the upload")};if(t.fileId){let s=eT({name:t.name,mimeType:t.mimeType},t.content,t.mimeType),o=await eh("PATCH",`${ep}/${encodeURIComponent(t.fileId)}?uploadType=multipart&fields=id,size`,e,{raw:s,contentType:r},a);if(o.ok||"missing"!==o.kind)return n(o)}let s=eT({name:t.name,mimeType:t.mimeType,parents:[t.folderId]},t.content,t.mimeType);return n(await eh("POST",`${ep}?uploadType=multipart&fields=id,size`,e,{raw:s,contentType:r},a))}async function ex(e,t,a={}){let r=await eh("PATCH",`${ec}/${encodeURIComponent(t)}?fields=id,trashed`,e,{json:{trashed:!0}},a);return r.ok||"missing"===r.kind?{ok:!0,data:void 0}:r}var ez=e.i(666680),eR=e.i(547963);let ej=eR.n.notSet("GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET",!0),e_="invalid_grant: Google Drive access was removed or has expired. Reconnect Google Drive.",eM=er.z.object({error:eo.z.string()});async function eq(e,t){let a,r=t.timeoutMs??1e4;try{a=await (t.fetch??fetch)("https://oauth2.googleapis.com/token",{method:"POST",headers:{Accept:"application/json","Content-Type":"application/x-www-form-urlencoded"},body:e.toString(),signal:AbortSignal.timeout(r),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`Google didn't answer within ${Math.round(r/1e3)} seconds.`:"Couldn't reach Google."}}let n=await a.json().catch(()=>null);if(a.ok)return{ok:!0,body:n};let s=eM.safeParse(n).success?n.error:null;return"invalid_grant"===s?{ok:!1,kind:"revoked",error:e_}:"invalid_client"===s||"unauthorized_client"===s?{ok:!1,kind:"client",error:`Google refused the OAuth client. Check GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET ${eR.n.checkWhere}.`}:429===a.status||a.status>=500?{ok:!1,kind:"transient",error:`Google returned an error (${a.status}). The next run tries again.`}:{ok:!1,kind:"format",error:`Google refused the request (${s??a.status}).`}}er.z.object({refresh_token:eo.z.string().min(1),scope:eo.z.string().optional()});let eN=er.z.object({access_token:eo.z.string().min(1)});async function eP(e,t,a={}){let r=await eq(new URLSearchParams({grant_type:"refresh_token",refresh_token:t,client_id:e.clientId,client_secret:e.clientSecret}),a);if(!r.ok)return r;let n=eN.safeParse(r.body);return n.success?{ok:!0,accessToken:n.data.access_token}:{ok:!1,kind:"format",error:"Google answered the token request in a format the console doesn't recognise."}}class eC extends Error{kind;constructor(e,t){super(t),this.kind=e}}async function eO(e){let{month:t,partial:a,now:r}=e,n=function(e=process.env){let t=e.GOOGLE_CLIENT_ID?.trim()??"",a=e.GOOGLE_CLIENT_SECRET?.trim()??"";return a&&/^[\w.-]+\.apps\.googleusercontent\.com$/.test(t)?{clientId:t,clientSecret:a}:null}();if(!n)return{ok:!1,month:t,kind:"env",error:ej};let s=await J();if(!s)return{ok:!1,month:t,kind:"not-connected",error:"Google Drive isn't connected."};if(!s.refreshToken){let e="The stored Google Drive token can't be read (the encryption key changed). Reconnect Google Drive.";return await K(s.id,{status:"error",lastError:e}),{ok:!1,month:t,kind:"failed",error:e}}let o=await X(t),i={sheetFileId:o?.sheetFileId??null,csvFileId:o?.csvFileId??null,driveFolderId:o?.driveFolderId??null},l=o?.status??"error";await Q(t,{status:l,attempts:(o?.attempts??0)+1,startedAt:r});let u=e=>(i={...i,...e},Q(t,{status:l,...e})),d={fetch:e.fetch},c=()=>{if(Date.now()>e.deadline)throw new eC("time","Stopped at the daily job's time budget; the next daily run continues where this one stopped.")},p=e=>{if(!e.ok)throw new eC("failed",e.error);return e.data};try{let o,l=await eP(n,s.refreshToken,d);if(!l.ok){if("revoked"===l.kind)throw await K(s.id,{status:"error",lastError:e_}),new eC("revoked",e_);throw new eC("failed",l.error)}"error"===s.status&&await K(s.id,{status:"ok",lastError:null});let f=l.accessToken;c();let m=await Z(),h=m?.id??null;if(m){let e=p(await ek(f,m.id,d));e.usable?e.name&&e.name!==m.name&&await ee(m.id,e.name):h=null}if(!h){c();let e=p(await ey(f,v,d)),t=e?null:p(await ey(f,I,d));h=e??t??p(await ev(f,v,d)),await ee(h,t?I:v)}let w=await ea(t,a,r);c(),i.sheetFileId||await u({sheetFileId:p(await eI(f,x(t),h,d)),driveFolderId:h}),c();let g=await eA(f,i.sheetFileId,$,d);g.ok||"missing"!==g.kind||(await u({sheetFileId:p(await eI(f,x(t),h,d)),driveFolderId:h}),c(),g=await eA(f,i.sheetFileId,$,d)),p(g),c(),p(await eS(f,i.sheetFileId,function(e){let{start:t,end:a}=D(e.month),r=e.partial&&e.generatedAt<a?e.generatedAt:a,n=e.deployments.filter(M),s=_(e.rollups.map(e=>e.checks)),o=_(e.rollups.map(e=>e.failures)),i=e=>(0,k.G)(e),l=[["Watchbell backup",e.month],["Covers",`${z(t)} to ${z(r)} ${(0,y.zoneName)()}${e.partial?" (month so far)":""}`],["Kind",e.partial?"Partial: Back up now":"Full month"],["Generated",`${z(e.generatedAt)} ${(0,y.zoneName)()}`],[],["Applications watched",e.apps.length],["Uptime, all monitors (%)",R(s,o)],["Checks (rolled-up hours)",s],["Failed checks",o],["Incidents (alerts opened)",e.alerts.length],["Critical incidents",e.alerts.filter(e=>"critical"===e.severity).length],["Production deployments",n.length],["Failed production deployments",n.filter(q).length],["Events",_(e.events.map(e=>e.count))]],u=[["Application","Monitors","Checks","Uptime (%)","p95 response, typical hour (ms)","p95 response, worst hour (ms)","5xx responses","Production deploys","Failed production deploys"]];for(let t of[...e.apps].sort((e,t)=>e.name.localeCompare(t.name))){let a=e.rollups.filter(e=>e.appId===t.id),r=a.map(e=>e.p95Ms).filter(e=>null!==e),s=n.filter(e=>e.appId===t.id);u.push([i(t.name),new Set(a.map(e=>e.monitorId)).size,_(a.map(e=>e.checks)),R(_(a.map(e=>e.checks)),_(a.map(e=>e.failures))),j(r),r.length?Math.max(...r):null,_(a.map(e=>e.status5xx)),s.length,s.filter(q).length])}let d=[["Rule","Severity","Subject",`Started (${(0,y.zoneName)()})`,`Resolved (${(0,y.zoneName)()})`,"Duration","Message"]];for(let t of[...e.alerts].sort((e,t)=>e.startedAt.getTime()-t.startedAt.getTime())){let a=(0,k.o)({title:t.title,message:t.message,causedBy:null,resourceId:t.resourceId},e.book);d.push([t.ruleKey,t.severity,a.title,z(t.startedAt),z(t.resolvedAt),function(e,t,a){let r=Math.max(0,Math.round(((t??a).getTime()-e.getTime())/6e4)),n=r<60?`${r} min`:r<2880?`${Math.floor(r/60)} h ${r%60} min`:`${Math.round(r/1440)} days`;return t?n:`${n} (still open)`}(t.startedAt,t.resolvedAt,r),a.message])}let c=[["Database","Provider","Account","State at backup","Status changes this month","Size (MB)","Neon CU-hours this period","Firestore reads (last reading)"]];for(let t of[...e.databases].sort((t,a)=>(0,k.X)(e.book,t.id).localeCompare((0,k.X)(e.book,a.id)))){let a=_(e.events.filter(e=>"database"===e.type&&e.resourceId===t.id).map(e=>e.count));c.push([(0,k.X)(e.book,t.id),N[t.kind],i(t.account),t.state,a,C(t.sizeBytes),t.cuHours,t.reads])}let p=[["Domain","Application","TLS certificate expires","TLS days left at month end","Domain expires (RDAP)","Domain days left at month end","Registrar"]];for(let t of[...e.domains].sort((e,t)=>e.name.localeCompare(t.name)))p.push([t.name,t.app?i(t.app):"",t.tlsExpires??"",P(t.tlsExpires,r),t.domainExpires??"",P(t.domainExpires,r),t.registrar??""]);return[{title:"Overview",rows:l},{title:"Applications",rows:u},{title:"Incidents",rows:d},{title:"Databases",rows:c},{title:"Domains",rows:p}]}(w),d)),c();let A=(o=function(e){let t=[B.join(",")];for(let a of[...e.rollups].sort((e,t)=>e.hour.getTime()-t.hour.getTime()||e.monitorId.localeCompare(t.monitorId)))t.push(["rollup",a.hour.toISOString(),(0,k.G)(`${a.app}${a.path}`),a.appId,a.checks,a.failures,a.p50Ms,a.p95Ms,a.maxMs,a.status5xx,a.maintenance,null,null,null,null,null,null].map(O).join(","));for(let a of[...e.events].sort((e,t)=>e.at.getTime()-t.at.getTime())){let r=a.resourceId&&e.book.db.some(e=>e.id===a.resourceId)?(0,k.X)(e.book,a.resourceId):(0,k.J)(a.resource??"",e.book);t.push(["event",a.at.toISOString(),r,a.resourceId,null,null,null,null,null,null,null,a.type,a.kind,a.reason,a.count,(0,k.J)(a.message,e.book,a.resourceId),(0,k.J)(a.detail,e.book,a.resourceId)].map(O).join(","))}return`${t.join("\r\n")}\r
+`}(w),(0,b.gzipSync)(Buffer.from(o,"utf8"),{level:9})),S=p(await eE(f,{name:`watchbell-${t}-raw.csv.gz`,mimeType:"application/gzip",folderId:h,content:A,fileId:i.csvFileId},d));await u({csvFileId:S.id}),await Q(t,{status:a?"partial":"ok",sizeBytes:S.size,error:null,finishedAt:new Date});let T=a?null:await eB(f,r,e.deadline,d);return{ok:!0,month:t,retention:T,message:`${E(t)}${a?" so far":""} saved to Google Drive.`}}catch(n){let e=n instanceof eC?n:new eC("failed","The backup failed. The next daily run tries again.");n instanceof eC||console.error("backup failed:",n instanceof Error?n.name:"unknown");let r=a&&"partial"===l?"partial":"error";return await Q(t,{status:r,error:e.message.slice(0,500),finishedAt:new Date}).catch(()=>void 0),{ok:!1,month:t,kind:e.kind,error:e.message}}}async function eB(e,t,a,r){let n=function(e,t){let a=S(t),r=e.filter(e=>"ok"===e.status&&e.month<a).map(e=>e.month).sort().reverse().slice(0,3);if(r.length<3)return[];let n=r[r.length-1];return e.filter(e=>!e.trashedAt&&e.month<n&&(e.sheetFileId||e.csvFileId))}(await Y(),t),s=[];for(let o of n){if(Date.now()>a)break;let n=!0;for(let t of[o.sheetFileId,o.csvFileId])t&&((await ex(e,t,r)).ok||(n=!1));n&&(await Q(o.month,{status:o.status,trashedAt:t}),s.push(E(o.month)))}return s.length?`Moved to Drive trash: ${s.join(", ")}.`:null}async function eF(e,t,a={}){let r=await J();if(!r||"error"===r.status&&r.lastError?.startsWith("invalid_grant"))return null;let n=function(e,t){let a=T(S(t)),r=new Map(e.map(e=>[e.month,e.status]));if("ok"!==r.get(a))return a;let n=a;for(let e=1;e<3;e++)if(n=T(n),"error"===r.get(n))return n;return null}(await Y(),e);if(!n)return null;let s=await eO({month:n,partial:!1,now:e,deadline:t,...a});return s.ok?null:`${E(n)}: ${s.error}`}var eG=e.i(455891),eU=e.i(889234),eL=e.i(328586),eW=e.i(333407),eH=e.i(459702),eV=e.i(200346),eJ=e.i(368230),eK=e.i(584820),eY=e.i(902509),eX=e.i(668141),eQ=e.i(242960),eZ=e.i(112515),e0=e.i(185890);function e1(e){if(!e)return null;if("unknown"!==e.state)return e.state;let t=e.data?.lastGoodState;return"string"==typeof t&&e0.f.includes(t)?t:null}let e3={turso_database:"Turso database",upstash_redis:"Upstash Redis",d1_database:"D1 database"};function e5(e,t){return"auth"===e.kind?"auth":"scope"===e.kind?t?"auth":"column":"missing"===e.kind?t?"unknown":"column":"unknown"}var e4=e.i(35048),e6=e.i(516464),e2=e.i(88316),e8=e.i(437122),e9=e.i(319718),e7=e.i(941536),te=e.i(686454),tt=e.i(122603);let ta="skipped the rest, time budget used";function tr(e){let t=e.deadline-Date.now()-500;if(t<250)throw Error(ta);return{timeoutMs:Math.min(5e3,t)}}async function tn(e,t,a){let r=!1;return{out:await (0,tt.P)(t,3,async t=>{let n;try{n=tr(e)}catch{r=!0;return}return a(t,n)}),skipped:r}}function ts(e){if(e)throw Error(ta)}async function to(e){let t=await (0,a.db)().select().from(w.accounts).where((0,c.and)((0,c.eq)(w.accounts.provider,e),(0,c.eq)(w.accounts.status,"ok"))),r=(0,U.serverEnv)().OPS_ENCRYPTION_KEY;return t.map(e=>({acc:e,credential:(0,F.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},r)}))}function ti(e,t){return(0,a.db)().select({r:w.resources,s:w.snapshots}).from(w.resources).leftJoin(w.snapshots,(0,c.eq)(w.snapshots.resourceId,w.resources.id)).where((0,c.and)((0,c.eq)(w.resources.accountId,e),(0,c.eq)(w.resources.kind,t),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt))).limit(100)}let tl=e=>t.sql`${w.snapshots.data} || ${JSON.stringify(e)}::jsonb`;async function tu(e,t,r){let n=e1(e.s?{state:e.s.state,data:e.s.data}:null),s="unknown"===t.state,o=s?n?{lastGoodState:n}:{}:{...t.patch,lastGoodState:t.state},i=!s&&n!==t.state;return await (0,a.db)().insert(w.snapshots).values({resourceId:e.r.id,state:t.state,data:o,collectedAt:r,stateSince:r}).onConflictDoUpdate({target:w.snapshots.resourceId,set:{state:t.state,data:tl(o),...s?{}:{collectedAt:r},...i?{stateSince:r}:{}}}),s?null:function(e){let{prev:t,next:a}=e;if(null===t||"unknown"===t||"unknown"===a||t===a)return null;let r={resourceId:e.resourceId,type:"database",at:e.at};if("supabase_project"===e.kind)return"paused"===a?{...r,reason:"DatabasePaused",kind:"paused",message:"Supabase project paused",detail:"Status changed to INACTIVE"}:"ok"===a?{...r,reason:"DatabaseRestored",kind:"ok",message:"Supabase project active again",detail:"Status changed to ACTIVE_HEALTHY"}:"warn"===a?{...r,reason:"DatabaseUnhealthy",kind:"warn",message:"Supabase project unhealthy",detail:e.label}:"err"===a?{...r,reason:"DatabaseFailed",kind:"err",message:`Supabase project: ${e.label.toLowerCase()}`,detail:e.label}:null;if("neon_project"===e.kind)return"err"===a?{...r,reason:"NeonSuspended",kind:"err",message:"Neon compute suspended",detail:e.label}:"err"===t&&("ok"===a||"idle"===a)?{...r,reason:"NeonAvailable",kind:"ok",message:"Neon compute available again",detail:e.label}:null;let n=e3[e.kind];if(n)return"err"===a?{...r,reason:"DatabaseFailed",kind:"err",message:`${n}: ${e.label.toLowerCase()}`,detail:e.label}:"off"===a?{...r,reason:"DatabaseMissing",kind:"off",message:`${n} missing`,detail:e.label}:"ok"===a&&("err"===t||"off"===t)?{...r,reason:"DatabaseRestored",kind:"ok",message:`${n} available again`,detail:e.label}:null;if("err"===a){let t="Daily quota used up"===e.label;return{...r,reason:t?"FirestoreQuotaUsedUp":"FirestoreUnreachable",kind:"err",message:t?"Firestore daily quota used up":"Firestore not reachable",detail:e.label}}return"off"===a?{...r,reason:"FirestoreMissing",kind:"off",message:"Firestore database missing",detail:e.label}:"ok"===a&&("err"===t||"off"===t)?{...r,reason:"FirestoreReachable",kind:"ok",message:"Firestore reachable again",detail:e.label}:null}({kind:e.r.kind,resourceId:e.r.id,prev:n,next:t.state,label:t.label,at:r})}async function td(e,t){await (0,a.db)().update(w.snapshots).set({data:tl(t)}).where((0,c.eq)(w.snapshots.resourceId,e.r.id))}let tc=e=>(0,eW.f)(e);async function tp(e,t,r,n,s){if("auth"===e5(n,!0)){let e=(0,eZ.E)({ok:!1,kind:"auth",error:n.error});e&&await (0,a.db)().update(w.accounts).set({...e,updatedAt:s.now}).where((0,c.eq)(w.accounts.id,t.id))}for(let e of r)await tu(e,{state:"unknown",label:"Unknown",patch:{}},s.now);s.errors.push(`${e}/${t.label}: ${n.error}`)}let tf=e=>e.toISOString();async function tm(e){return e.length?new Set((await (0,a.db)().select({app:w.links.fromResourceId,state:w.snapshots.state,data:w.snapshots.data}).from(w.links).innerJoin(w.resources,(0,c.eq)(w.resources.id,w.links.toResourceId)).innerJoin(w.snapshots,(0,c.eq)(w.snapshots.resourceId,w.resources.id)).where((0,c.and)((0,c.eq)(w.links.kind,"uses_db"),(0,c.inArray)(w.links.fromResourceId,e),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt)))).filter(e=>"paused"===e.state||"unknown"===e.state&&"paused"===e.data.lastGoodState).map(e=>e.app)):new Set}async function th(e){if(!e.protectOnly||await (0,eV.g)())for(let{acc:t,credential:a}of(await to("supabase"))){if(tr(e),!a){e.errors.push(`supabase/${t.label}: credential can't be read`);continue}let r=await ti(t.id,"supabase_project");if(!r.length)continue;let n=await (0,te.W)(a,tr(e));if(!n.ok){e.protectOnly?e.errors.push(`supabase/${t.label}: ${n.error}`):await tp("supabase",t,r,n,e);continue}let s=new Map(n.data.map(e=>[e.ref,e])),o=[];for(let t of e.protectOnly?[]:r){let a=s.get(t.r.externalId);if(!a){o.push(await tu(t,{state:"off",label:"Not found",patch:{status:"REMOVED"}},e.now));continue}let r=(0,e2.P)(a.status),n=e1(t.s?{state:t.s.state,data:t.s.data}:null),i={status:a.status,region:a.region,pgVersion:a.pgVersion,orgSlug:a.orgSlug};"paused"===r.state&&"paused"!==n&&(i.pausedBeforeSeen=null===n),o.push(await tu(t,{state:r.state,label:r.label,patch:i},e.now))}await tc(o);let i=new Map(r.map(e=>[e.r.externalId,e.r.id])),l=n.data.map(e=>({resourceId:i.get(e.ref)??null,accountId:t.id,status:e.status,orgSlug:e.orgSlug}));await (0,eV.z)(e.now,l,e.deadline).catch(()=>{console.warn("auto-restore failed"),e.errors.push("auto-restore failed")})}}async function tw(e){for(let{acc:t,credential:a}of(await to("supabase"))){if(tr(e),!a)continue;let r=await ti(t.id,"supabase_project");if(!r.length)continue;let n=new Map(r.map(e=>[e.r.id,(0,G.k)(G.B,e.s?.data)])),s=new Map;for(let r of new Set([...n.values()].map(e=>e.orgSlug).filter(e=>!!e))){let n=await (0,te.K)(a,r,tr(e));s.set(r,n.ok&&null!==n.data?"free"===n.data:null),n.ok||"scope"===n.kind||e.errors.push(`supabase/${t.label} plan: ${n.error}`)}let{skipped:o}=await tn(e,r,async(t,r)=>{let o=n.get(t.r.id),i={freeOrg:o.orgSlug?s.get(o.orgSlug)??null:null};if((o.status??"").startsWith("ACTIVE_")){let[n,s]=await Promise.all([(0,te.F)(a,t.r.externalId,r),(0,te.Z)(a,t.r.externalId,r)]);n.ok?Object.assign(i,{health:n.data.map(({name:e,status:t})=>({name:e,status:t})),healthAt:tf(e.now),healthError:null}):"column"===e5(n,!1)?i.healthError=n.error:e.errors.push(`supabase/${t.r.name} health: ${n.error}`),s.ok?Object.assign(i,{lastTrafficAt:(0,e2.H)(s.data)?.toISOString()??null,trafficAt:tf(e.now),trafficError:null}):"column"===e5(s,!1)?i.trafficError=s.error:e.errors.push(`supabase/${t.r.name} traffic: ${s.error}`)}await td(t,i)});ts(o)}}async function tg(e){for(let{acc:t,credential:a}of(await to("neon"))){if(tr(e),!a){e.errors.push(`neon/${t.label}: credential can't be read`);continue}let r=await ti(t.id,"neon_project");if(!r.length)continue;let{out:n,skipped:s}=await tn(e,r,(e,t)=>Promise.all([(0,e7.Z)(a,e.r.externalId,t),(0,e7.k)(a,e.r.externalId,t),(0,e7.e)(a,e.r.externalId,t)])),o=n.flat().find(e=>void 0!==e&&!e.ok&&"auth"===e.kind);if(o){await tp("neon",t,r,o,e);continue}let i=[];for(let[t,a]of r.entries()){let r=n[t];if(!r)continue;let[s,o,l]=r;if(!s.ok||!o.ok||!l.ok){let t=[s,o,l].find(e=>!e.ok);"missing"===t.kind?i.push(await tu(a,{state:"off",label:"Not found",patch:{}},e.now)):(await tu(a,{state:"unknown",label:"Unknown",patch:{}},e.now),e.errors.push(`neon/${a.r.name}: ${t.error}`));continue}let u=(0,e6.p)({endpoints:o.data,computeSeconds:s.data.computeSeconds});i.push(await tu(a,{state:u.state,label:u.label,patch:{region:s.data.region,pgVersion:s.data.pgVersion,computeSeconds:s.data.computeSeconds,transferBytes:s.data.transferBytes,activeSeconds:s.data.activeSeconds,periodStart:s.data.periodStart,periodEnd:s.data.periodEnd,endpoints:o.data,branches:l.data}},e.now))}await tc(i),ts(s)}}async function tb(e){for(let{acc:t,credential:a}of(await to("firebase"))){tr(e);let r=a?(0,e9.p)(a):null;if(!r){e.errors.push(`firebase/${t.label}: credential can't be read`);continue}let n=await ti(t.id,"firestore");if(!n.length)continue;let s=await (0,e9.X)(r,tr(e));if(!s.ok){await tp("firebase",t,n,s,e);continue}let{out:o,skipped:i}=await tn(e,n,(e,t)=>(0,e8.G)(s.data,e.r.externalId,t)),l=[];for(let[t,a]of n.entries()){let r=o[t];if(!r)continue;let n=(0,e4.g)(r);"unknown"!==n.state||r.ok||e.errors.push(`firebase/${a.r.name}: ${r.error}`);let s=r.ok?{latencyMs:r.data.latencyMs,pingError:null,pingReason:null,pingKind:null}:{pingError:r.error,pingReason:r.reason??null,pingKind:r.kind};l.push(await tu(a,{...n,patch:s},e.now))}await tc(l),ts(i)}}async function ty(e){for(let{acc:t,credential:a}of(await to("firebase"))){tr(e);let r=a?(0,e9.p)(a):null;if(!r)continue;let n=(await ti(t.id,"firestore")).filter(e=>e.s?.state!=="off");if(!n.length)continue;let s=await (0,e9.X)(r,tr(e));if(!s.ok){e.errors.push(`firebase/${t.label}: ${s.error}`);continue}let o=(0,e4.a)(e.now),{skipped:i}=await tn(e,n,async(t,a)=>{let r=await (0,e8.W)(s.data,t.r.externalId,o,e.now,a);r.ok?await td(t,{...r.data,opsAt:tf(e.now),opsError:null}):"column"===e5(r,!1)?await td(t,{reads:null,writes:null,deletes:null,opsAt:tf(e.now),opsError:/requires billing/i.test(r.message??"")?"Not available on Spark: Firestore usage needs billing (Blaze plan)":"SERVICE_DISABLED"===r.reason?"Not readable: the Cloud Monitoring API is off in this project":"Not readable: the service account needs monitoring.viewer"}):e.errors.push(`firebase/${t.r.name} usage: ${r.error}`)});ts(i)}}async function tk(e){let t=Date.now()+2*Math.max(0,e.deadline-Date.now())/3,a=await tv(()=>tI({...e,deadline:t})),r=await tv(()=>t$(e));if(a)throw a;if(r)throw r}async function tv(e){try{return await e(),null}catch(e){return e instanceof Error?e:Error(String(e))}}async function tI(e){for(let{acc:t,credential:a}of(await to("supabase")))if(tr(e),a)for(let r of(await ti(t.id,"supabase_project"))){let t=(0,G.k)(G.B,r.s?.data);if(!(0,e2.z)({status:t.status??"",lastTrafficAt:t.lastTrafficAt?new Date(t.lastTrafficAt):null,sizeAt:t.sizeAt?new Date(t.sizeAt):null,now:e.now}))continue;let n=await (0,te.r)(a,r.r.externalId,tr(e));n.ok?await td(r,{sizeBytes:n.data,sizeAt:tf(e.now),sizeError:null}):"column"===e5(n,!1)?await td(r,{sizeError:n.error}):e.errors.push(`supabase/${r.r.name} size: ${n.error}`)}}async function t$(e){for(let{acc:t,credential:a}of(await to("firebase"))){tr(e);let r=a?(0,e9.p)(a):null;if(!r)continue;let n=(await ti(t.id,"firestore")).filter(e=>e.s?.state!=="off");if(!n.length)continue;let s=await (0,e9.X)(r,tr(e));if(!s.ok){e.errors.push(`firebase/${t.label}: ${s.error}`);continue}let{skipped:o}=await tn(e,n,async(t,a)=>{let r=await (0,e8.q)(s.data,t.r.externalId,a);r.ok?await td(t,{authUsers:r.data,authAt:tf(e.now),authError:null}):"column"===e5(r,!1)?await td(t,{authError:"Not readable: the service account needs firebaseauth.viewer"}):e.errors.push(`firebase/${t.r.name} users: ${r.error}`)});ts(o)}}var tA=e.i(369179),tS=e.i(476866),tD=e.i(873083),tT=e.i(649297),tE=e.i(541211);let tx={github:"devops",deps:"devops",databases:"database",security:"hosting"};async function tz(e){let[t]=await (0,a.db)().select({hour:(0,p.max)(w.rollupsHourly.hour)}).from(w.rollupsHourly),r=(0,tT.r)(t?.hour??null,e),n=await (0,a.db)().select().from(w.checks).where((0,c.and)((0,c.gte)(w.checks.at,r),(0,c.lt)(w.checks.at,(0,tT.b)(e)))).orderBy(w.checks.at),s=new Map;for(let e of n){let t=`${e.monitorId}|${(0,tT.b)(e.at).toISOString()}`,a=s.get(t);a?a.push(e):s.set(t,[e])}for(let[e,t]of s){let[r,n]=e.split("|"),s=(0,tT.z)(t);await (0,a.db)().insert(w.rollupsHourly).values({monitorId:r,hour:new Date(n),...s}).onConflictDoUpdate({target:[w.rollupsHourly.monitorId,w.rollupsHourly.hour],set:s})}}async function tR(e){let t=await (0,tS.J)().catch(()=>tA.f);await (0,a.db)().delete(w.checks).where((0,c.lt)(w.checks.at,new Date(e.getTime()-864e5*t.checks))),await (0,a.db)().delete(w.rollupsHourly).where((0,c.lt)(w.rollupsHourly.hour,new Date(e.getTime()-864e5*t.rollupsHourly))),await (0,a.db)().delete(w.deployments).where((0,c.and)((0,c.lt)(w.deployments.createdAtProvider,new Date(e.getTime()-864e5*t.deployments)),(0,c.eq)(w.deployments.isCurrent,!1),(0,c.eq)(w.deployments.isPreviousProduction,!1))),await (0,a.db)().delete(w.events).where((0,c.lt)(w.events.at,new Date(e.getTime()-864e5*t.events))),await (0,a.db)().delete(w.alerts).where((0,c.and)((0,c.isNotNull)(w.alerts.resolvedAt),(0,c.lt)(w.alerts.resolvedAt,new Date(e.getTime()-864e5*t.alerts)))),await (0,a.db)().delete(w.collectorRuns).where((0,c.lt)(w.collectorRuns.startedAt,new Date(e.getTime()-864e5*t.collectorRuns))),await (0,a.db)().delete(w.storedLogs).where((0,c.lt)(w.storedLogs.at,new Date(e.getTime()-864e5*t.storedLogs))),await (0,a.db)().delete(w.recommendationDismissals).where((0,c.lt)(w.recommendationDismissals.dismissedAt,new Date(e.getTime()-864e5*t.recommendationDismissals)))}async function tj(){let e=new Date,[t]=await (0,a.db)().insert(w.collectorRuns).values({startedAt:e,trigger:"vercel_cron"}).returning({id:w.collectorRuns.id}),r=[],n=await (0,l.I)(),s=[["rollups",()=>tz(e)],["backup",async()=>{let t=await eF(e,e.getTime()+2e4);t&&r.push(`backup: ${t}`)}],["retention",()=>tR(e)],["sync",async()=>{let t=(await (0,a.db)().select({id:w.accounts.id,label:w.accounts.label,provider:w.accounts.provider}).from(w.accounts).where((0,c.inArray)(w.accounts.provider,eX.I))).filter(e=>!n.has(tD.D[e.provider]??"manage"));for(let[a,n]of t.entries()){if(Date.now()>e.getTime()+25e3){r.push(`sync: ${t.length-a} account${t.length-a>1?"s":""} left for the next run, time budget used`);break}let s=await (0,eQ.k)(n.id);s.ok?(s.skippedTeams.length&&r.push(`sync ${n.provider}/${n.label}: skipped teams ${s.skippedTeams.join(", ")} (no access)`),s.overLimit&&r.push(`sync ${n.provider}/${n.label}: ${s.overLimit}`)):r.push(`sync ${n.provider}/${n.label}: ${s.error}`)}}],["github",async()=>{let t=await (0,eL.D)(Math.min(Date.now()+6e3,e.getTime()+35e3));t&&r.push(`github: ${t}`)}],["deps",async()=>{let t=await (0,eU.e)(Math.min(Date.now()+eU.o,e.getTime()+eU.R));t&&r.push(`deps: ${t}`)}],["databases",()=>tk({now:e,deadline:Math.min(Date.now()+15e3,e.getTime()+5e4),errors:r})],["keep-active",()=>(0,eV.V)(e,Math.min(Date.now()+5e3,e.getTime()+5e4),r)],["security",async()=>{for(let t of(await (0,eK.h)((0,eY.F)(e.getTime(),Date.now()))).failed)r.push(`security ${t}`)}],["advisor",async()=>{await (0,eG.O)(e)}]],o=[];try{for(let[e,t]of s)if(!n.has(tx[e]))try{await t(),o.push(e)}catch(t){r.push(`${e}: ${(0,tE.safeError)(t)}`)}await (0,eW.f)([{type:"system",kind:r.length?"warn":"info",message:r.length?"Daily jobs finished with problems":"Daily jobs finished",detail:"Rollups, the monthly backup when due, retention, a sync of every account, database sizes, the Next.js security check and the Advisor",resourceId:null}])}catch(e){r.push(`events: ${(0,tE.safeError)(e)}`)}finally{m(h.t),await (0,a.db)().update(w.collectorRuns).set({finishedAt:new Date,ok:0===r.length,errorSummary:r.join("\n").slice(0,2e3)||null,durationMs:Date.now()-e.getTime(),tasks:o}).where((0,c.eq)(w.collectorRuns.id,t.id)).catch(()=>void 0)}await t_(r.length>0);let i=Date.now()-e.getTime();return{skipped:!1,ok:0===r.length,tasks:o,checks:0,durationMs:i,errors:r}}async function t_(e){let t=process.env.DAILY_HEARTBEAT_TOKEN;if(!t)return;let a=(0,eJ.i)(t);if(!a)return void console.warn("daily heartbeat: DAILY_HEARTBEAT_TOKEN holds no single hb_ token; set it to the heartbeat's token");let r=await (0,eH._)(a,e?"fail":"ok",new Date).catch(e=>(console.warn("daily heartbeat: the ping couldn't be stored:",e instanceof Error?e.name:"error"),null));r?.status==="unknown"?console.warn("daily heartbeat: DAILY_HEARTBEAT_TOKEN matches no heartbeat monitor (was it regenerated?)"):r?.status==="limited"&&console.warn("daily heartbeat: the ping was rate limited")}async function tM(e,t,a=new Date){if(e.skipped||0===t.length)return e;let r=[...e.tasks],n=[...e.errors];for(let e of t)try{await e.run(a),r.push(e.name)}catch(t){n.push(`${e.name}: ${(0,tE.safeError)(t)}`)}return{...e,tasks:r,errors:n,ok:0===n.length}}var tq=e.i(234195),tN=e.i(706959),tP=e.i(451682),tC=e.i(373200),tO=e.i(753535),tB=e.i(932378),tF=e.i(313903);let tG=/not enabled/i,tU=(e,t,a={})=>({ok:!1,kind:e,error:t,...a}),tL="Vercel Web Analytics answered in a format the console doesn't recognise.",tW=er.z.object({data:er.z.object({pageviews:el.z.number().finite().nonnegative(),visitors:el.z.number().finite().nonnegative()})}),tH=er.z.object({data:en.z.array(tB.z.unknown())}),tV=er.z.object({timestamp:eo.z.string().transform((e,t)=>{let a=Date.parse(e);return Number.isNaN(a)?(t.addIssue({code:"custom",message:"bad timestamp"}),tF.z.NEVER):a}),pageviews:el.z.number().finite().nonnegative().nullish().catch(null)});async function tJ(e,t,a,r){let n=r.since.toISOString(),s=r.until.toISOString(),o=r.fetch??fetch,i=new AbortController,l=setTimeout(()=>i.abort(new DOMException("window","TimeoutError")),r.timeoutMs??8e3),u=r.signal?AbortSignal.any([i.signal,r.signal]):i.signal,d=(0,tt.X)(u);async function c(l,c){let p=new URLSearchParams({projectId:a,teamId:t,...c,since:n,until:s});try{let t=await Promise.race([o(`https://api.vercel.com/v1/query/web-analytics/visits/${l}?${p}`,{headers:{Authorization:`Bearer ${e}`,Accept:"application/json"},signal:u,cache:"no-store"}),d]),a=null,r=!1;if(401===t.status||403===t.status)a=tU("auth",`Vercel rejected this credential (${t.status}).`,{status:t.status});else if(429===t.status){let e=Number(t.headers.get("Retry-After"));a=tU("transient","Vercel says there were too many requests.",{status:429,retryAfterS:Number.isFinite(e)&&e>0?e:60})}else if(400===t.status){let e=await Promise.race([t.text(),d]).catch(()=>"");tG.test(e)?r=!0:a=tU("transient","Vercel Web Analytics rejected the request (400).",{status:400})}else t.ok||(a=tU("transient",`Vercel Web Analytics returned an error (${t.status}).`,{status:t.status}));if(r)return{kind:"off"};if(a)return await t.body?.cancel().catch(()=>void 0),{kind:"fail",fail:a};try{return{kind:"body",body:await Promise.race([t.json(),d])}}catch(e){if(u.aborted)throw e;return{kind:"fail",fail:tU("format",tL)}}}catch{return{kind:"fail",fail:u.aborted?i.signal.aborted&&!r.signal?.aborted?tU("transient","Vercel Web Analytics didn't answer in time."):tU("transient","Reading Vercel Web Analytics was cancelled."):tU("transient","Couldn't reach Vercel Web Analytics.")}}}try{let[e,t]=await Promise.all([c("count",{}),c("aggregate",{by:"hour"})]);if("off"===e.kind||"off"===t.kind)return{ok:!0,enabled:!1};let a=[e,t].flatMap(e=>"fail"===e.kind?[e.fail]:[]),r=a.find(e=>"auth"===e.kind);if(r)return r;let n="body"===t.kind?tH.safeParse(t.body):null,s="fail"===t.kind?t.fail:n?.success?null:tU("format",tL),o=a.find(e=>"transient"===e.kind);if(o)return o;if(s)return s;if(!n?.success)return tU("format",tL);let i="body"===e.kind?tW.safeParse(e.body):null,l=n.data.data.flatMap(e=>{let t=tV.safeParse(e);return t.success?[t.data]:[]});if(l.length>0&&l.every(e=>null==e.pageviews))return tU("format",tL);let u=new Map;for(let e of l){let t=36e5*Math.floor(e.timestamp/36e5);u.set(t,(u.get(t)??0)+(e.pageviews??0))}let d=[...u].sort((e,t)=>e[0]-t[0]).slice(-24).map(([e,t])=>({at:new Date(e),views:t}));if(i?.success)return{ok:!0,enabled:!0,total:i.data.data.pageviews,visitors:i.data.data.visitors,hourly:d};return{ok:!0,enabled:!0,total:d.reduce((e,t)=>e+t.views,0),visitors:null,hourly:d}}finally{clearTimeout(l),i.abort()}}var tK=e.i(178233);async function tY(e,t,a){let r=await (0,tP.g)(null);if(!r.length)return;let n=new Date(36e5*Math.floor(e.getTime()/36e5)-828e5);await (0,tt.P)(r,3,async r=>{if(Date.now()+8500>t)return;let s=await tJ(r.token,r.teamId,r.projectId,{since:n,until:e});if(!s.ok)return void a.push(`pageviews/${r.appName}: ${s.error}`);try{await (0,tO.r)(r.appId,{pageviews:(0,tK.Z)(s,e)},e)}catch{a.push(`pageviews/${r.appName}: couldn't save the page views`)}})}var tX=e.i(147100),tQ=e.i(764266),tZ=e.i(198552),t0=e.i(27479),t1=e.i(707866),t3=e.i(392710),t5=e.i(582888),t4=e.i(811539),t6=e.i(725321);async function t2(e){let t=[await tv(()=>t9(e)),await tv(()=>ae(e)),await tv(()=>at(e))].find(e=>null!==e);if(t)throw t}let t8=e=>e.toISOString();async function t9(e){for(let{acc:t,credential:a}of(await to("turso"))){if(tr(e),!a){e.errors.push(`turso/${t.label}: credential can't be read`);continue}let r=await ti(t.id,"turso_database");if(!r.length)continue;let n=await (0,t5.u)(a,tr(e));if(!n.ok){await tp("turso",t,r,n,e);continue}let s=new Set(r.map(e=>String(e.r.meta.org??""))),o=[];for(let i of n.data.filter(e=>s.has(e.slug))){let[n,s]=await Promise.all([(0,t5.X)(a,i.slug,tr(e)),(0,t5.d)(a,i.slug,tr(e))]),l=r.filter(e=>e.r.meta.org===i.slug);if(!n.ok){for(let t of l)await tu(t,{state:"unknown",label:"Unknown",patch:{}},e.now);e.errors.push(`turso/${t.label}: ${n.error}`);continue}let u=new Map(n.data.map(e=>[e.id,e]));for(let t of l)o.push(await t7(t,u.get(t.r.externalId),i,s,e))}let i=new Set(n.data.map(e=>e.slug));for(let t of r.filter(e=>!i.has(String(e.r.meta.org??""))))o.push(await tu(t,{state:"off",label:"Organization not visible to this token",patch:{}},e.now));await tc(o)}}async function t7(e,t,a,r,n){if(!t)return tu(e,{state:"off",label:"Not found",patch:{}},n.now);let s=(0,t1.h)({blockReads:t.blockReads,blockWrites:t.blockWrites,orgBlockedReads:a.blockedReads,orgBlockedWrites:a.blockedWrites}),o={org:a.slug,group:t.group,primaryRegion:t.primaryRegion,plan:a.plan,blockReads:t.blockReads,blockWrites:t.blockWrites};if(r.ok){let e=r.data.byDb.get(t.id);Object.assign(o,{rowsRead:e?.rowsRead??null,rowsWritten:e?.rowsWritten??null,storageBytes:e?.storageBytes??null,orgRowsRead:r.data.org.rowsRead,orgRowsWritten:r.data.org.rowsWritten,orgStorageBytes:r.data.org.storageBytes,orgDatabases:r.data.org.databases,usageAt:t8(n.now),usageError:null})}else"column"===e5(r,!1)?o.usageError=r.error:n.errors.push(`turso/${e.r.name} usage: ${r.error}`);return tu(e,{...s,patch:o},n.now)}async function ae(e){for(let{acc:t,credential:a}of(await to("upstash"))){tr(e);let r=a?(0,t4.L)(a):null;if(!r){e.errors.push(`upstash/${t.label}: credential can't be read`);continue}let n=await ti(t.id,"upstash_redis");if(!n.length)continue;let s=await (0,t4.M)(r,tr(e));if(!s.ok){await tp("upstash",t,n,s,e);continue}let o=new Map(s.data.map(e=>[e.id,e])),{out:i,skipped:l}=await tn(e,n,(e,t)=>o.has(e.r.externalId)?(0,t4.Z)(r,e.r.externalId,t):Promise.resolve(null)),u=[];for(let[t,a]of n.entries()){let r=o.get(a.r.externalId);if(!r){u.push(await tu(a,{state:"off",label:"Not found",patch:{}},e.now));continue}let n=(0,t1.t)(r.state),s={region:r.region,status:r.state,type:r.type},l=i[t];l?.ok?Object.assign(s,{...l.data,statsAt:t8(e.now),statsError:null}):l&&"column"===e5(l,!1)?s.statsError=l.error:l&&e.errors.push(`upstash/${a.r.name} stats: ${l.error}`),u.push(await tu(a,{...n,patch:s},e.now))}await tc(u),ts(l)}}async function at(e){let t={};for(let{acc:a,credential:r}of(await to("cloudflare"))){if(tr(e),!r)continue;let n=await ar(a.id,r,e);if(!n.length){t[a.id]={d1:"error",analytics:null,at:t8(e.now),note:"No Cloudflare account found for this token"};continue}let s="ok",o=null;for(let t of n){let n=await (0,t3.L)(r,t,tr(e));if(!n.ok){"error"==(s="scope"===n.kind||"auth"===n.kind?"missing":"error")&&e.errors.push(`d1/${a.label}: ${n.error}`);continue}await an(a.id,t,n.data,e.now);let i=(await ti(a.id,"d1_database")).filter(e=>e.r.meta.accountId===t);if(!i.length)continue;let l=await (0,t3.t)(r,t,(0,t3.Y)(e.now),tr(e));o=l.ok?o??"ok":"scope"===l.kind?"missing":o??"error",l.ok||"scope"===l.kind||e.errors.push(`d1/${a.label} analytics: ${l.error}`);let{out:u,skipped:d}=await tn(e,i,(e,a)=>(0,t3.m)(r,t,e.r.externalId,a)),c=new Map((l.ok?l.data:[]).map(e=>[e.databaseId,e])),p=u.map(e=>e?.ok?e.data.sizeBytes??0:0),f={accountRowsRead:l.ok?l.data.reduce((e,t)=>e+t.rowsRead,0):null,accountRowsWritten:l.ok?l.data.reduce((e,t)=>e+t.rowsWritten,0):null,accountSizeBytes:u.every(e=>e?.ok)?p.reduce((e,t)=>e+t,0):null,accountDatabases:n.data.length},m=[];for(let[t,a]of i.entries()){let r=u[t];void 0!==r&&m.push(await aa(a,r,c.get(a.r.externalId)??null,l.ok,l.ok?null:l.error,f,e))}await tc(m),ts(d)}t[a.id]={d1:s,analytics:o,at:t8(e.now),note:null}}await (0,a.db)().insert(w.settings).values({key:t6.f,value:t}).onConflictDoUpdate({target:w.settings.key,set:{value:t,updatedAt:e.now}})}async function aa(e,t,a,r,n,s,o){let i={accountId:e.r.meta.accountId??null,createdAt:e.r.meta.createdAt??null,accountDatabases:s.accountDatabases};return(t.ok?Object.assign(i,{sizeBytes:t.data.sizeBytes,numTables:t.data.numTables,readReplication:t.data.readReplication,detailsAt:t8(o.now),detailsError:null}):"scope"===t.kind?i.detailsError=t.error:o.errors.push(`d1/${e.r.name}: ${t.error}`),r?Object.assign(i,{rowsRead:a?.rowsRead??0,rowsWritten:a?.rowsWritten??0,readQueries:a?.readQueries??0,writeQueries:a?.writeQueries??0,accountRowsRead:s.accountRowsRead,accountRowsWritten:s.accountRowsWritten,usageDay:(0,t3.Y)(o.now),usageAt:t8(o.now),usageError:null}):i.usageError=n,null!==s.accountSizeBytes&&(i.accountSizeBytes=s.accountSizeBytes),t.ok||"transient"!==t.kind)?tu(e,{...(0,t1.c)(r?s:{accountRowsRead:null,accountRowsWritten:null}),patch:i},o.now):tu(e,{state:"unknown",label:"Unknown",patch:{}},o.now)}async function ar(e,t,r){let n=new Set,s=await (0,t3.N)(t,tr(r));if(s.ok)for(let e of s.data)n.add(e.id);for(let t of(await (0,a.db)().select({meta:w.resources.meta}).from(w.resources).where((0,c.and)((0,c.eq)(w.resources.accountId,e),(0,c.eq)(w.resources.kind,"zone"),(0,c.isNull)(w.resources.goneAt))).limit(200)))"string"==typeof t.meta.accountId&&/^[0-9a-f]{32}$/i.test(t.meta.accountId)&&n.add(t.meta.accountId);return[...n].slice(0,5)}async function an(e,t,r,n){let s=(await (0,a.db)().select({id:w.resources.id,externalId:w.resources.externalId,meta:w.resources.meta,goneAt:w.resources.goneAt}).from(w.resources).where((0,c.and)((0,c.eq)(w.resources.accountId,e),(0,c.eq)(w.resources.kind,"d1_database")))).filter(e=>e.meta.accountId===t),o=new Map(s.map(e=>[e.externalId,e])),i=new Set(r.map(e=>e.uuid));await (0,a.db)().transaction(async a=>{for(let s of r){let r={accountId:t,createdAt:s.createdAt},i=o.get(s.uuid);i?await a.update(w.resources).set({name:s.name,meta:r,lastSeenAt:n,goneAt:null,updatedAt:n}).where((0,c.eq)(w.resources.id,i.id)):await a.insert(w.resources).values({accountId:e,kind:"d1_database",externalId:s.uuid,name:s.name,meta:r,monitored:!0,lastSeenAt:n}).onConflictDoNothing({target:[w.resources.accountId,w.resources.kind,w.resources.externalId]})}let l=s.filter(e=>!i.has(e.externalId)&&!e.goneAt).map(e=>e.id);l.length&&await a.update(w.resources).set({goneAt:n,updatedAt:n}).where((0,c.inArray)(w.resources.id,l))})}var as=e.i(628852);async function ao(e=new Date){let n=(0,ez.randomUUID)(),s=new Date(e.getTime()+as.d).toISOString(),o=await (0,a.db)().execute(t.sql`
     insert into ops.settings (key, value) values ('collector.lease', ${JSON.stringify({until:s,owner:n})}::jsonb)
     on conflict (key) do update set value = excluded.value, updated_at = now()
     where (ops.settings.value->>'until')::timestamptz < ${e.toISOString()}::timestamptz
-    returning key`);return(0,r.f)(o).length>0?n:null}async function ar(e){await (0,a.db)().execute(t.sql`
+    returning key`);return(0,r.f)(o).length>0?n:null}async function ai(e){await (0,a.db)().execute(t.sql`
     update ops.settings set value = jsonb_build_object('until', '1970-01-01T00:00:00Z'), updated_at = now()
-    where key = 'collector.lease' and value->>'owner' = ${e}`)}var an=e.i(991219),as=e.i(149398),ao=e.i(467404),ai=e.i(816173);e.i(247714);let al="collector.lastRun",au="vercel.backoffUntil",ad="vercel.currentMiss",ac={supabase:tf,supabaseUsage:tm,neon:th,firebase:tw,firebaseUsage:tg,extraDbs:t5};async function ap(){let[e]=await (0,a.db)().select().from(h.settings).where((0,d.eq)(h.settings.key,al)).limit(1);return e?.value??{}}async function af(e){await (0,a.db)().insert(h.settings).values({key:al,value:e}).onConflictDoUpdate({target:h.settings.key,set:{value:e,updatedAt:new Date}})}let am=e=>(0,eG.f)(e);async function ah(e,r,n,s,o=[]){let i=(await (0,a.db)().select({m:h.monitors,app:h.resources}).from(h.monitors).innerJoin(h.resources,(0,d.eq)(h.resources.id,h.monitors.resourceId)).where((0,d.and)((0,d.eq)(h.monitors.kind,"http"),(0,d.eq)(h.monitors.paused,!1),(0,d.eq)(h.monitors.ownerPaused,!1),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt))).orderBy(t.sql`${h.monitors.lastCheckedAt} asc nulls first`,h.monitors.id)).filter(({m:t})=>(0,at.B)(t.lastCheckedAt,e,s));if(!i.length)return 0;let l=await (0,e7.P)(i,6,({m:e})=>{let t=(0,at.P)(e.timeoutMs,r,Date.now());return null===t?Promise.resolve(null):(0,e7.b)(e.url,{expectedStatus:e.expectedStatus,timeoutMs:t,body:(0,as.C)(e)})}),u=i.flatMap((e,t)=>l[t]?[{...e,r:l[t]}]:[]);if(u.length<i.length&&n.push(`checks: ${i.length-u.length} monitors skipped, time budget used`),!u.length)return 0;let c=[];for(let t of u)await (0,ao.f)(t.m,t.r,e)&&c.push(t);return c.length?(await (0,a.db)().insert(h.checks).values(c.map(({m:t,app:a,r})=>({monitorId:t.id,at:e,ok:r.ok,statusCode:r.statusCode,latencyMs:r.latencyMs,error:r.error,inMaintenance:null!==(0,tJ.x)(o,{monitorId:t.id,appId:a.id},e)}))),await am(c.map(({m:t,app:a,r})=>(0,ai.F)({resourceId:a.id,path:(0,tK.K)(t.url),prev:t.state,next:(0,ai.G)(t.failStreak,r).state,code:r.statusCode,error:r.error,at:e}))),c.length):0}let aw=["checks","heartbeats"];async function ag(e,t,a=tM.f){if(!aw.some(t=>e.includes(t)))return[];try{return await a()}catch(e){return t.push(`maintenance: ${(0,tS.safeError)(e)}`),[]}}async function ab(e){let[t]=await (0,a.db)().select().from(h.settings).where((0,d.eq)(h.settings.key,au)).limit(1),r=t?.value?.until;return!!r&&e.getTime()<new Date(r).getTime()}async function ak(e,t){if("transient"!==e.kind||!e.retryAfterS)return!1;let r={until:new Date(t.getTime()+1e3*Math.min(e.retryAfterS,3600)).toISOString()};return await (0,a.db)().insert(h.settings).values({key:au,value:r}).onConflictDoUpdate({target:h.settings.key,set:{value:r,updatedAt:t}}),!0}let ay=e=>t.sql`coalesce(${h.deployments.externalId} = ${e}::text, false)`;async function av(e,r,n){if(await ab(e))return;let s=(0,B.serverEnv)().OPS_ENCRYPTION_KEY;for(let o of(await (0,a.db)().select().from(h.accounts).where((0,d.and)((0,d.eq)(h.accounts.provider,"vercel"),(0,d.eq)(h.accounts.status,"ok"))))){let i=(0,O.V)({ciphertext:o.credentialCiphertext,iv:o.credentialIv},s);if((0,eX.A)(i)||!i){n.push(`vercel/${o.label}: credential can't be read`);continue}let l=await (0,a.db)().select().from(h.resources).where((0,d.and)((0,d.eq)(h.resources.accountId,o.id),(0,d.eq)(h.resources.kind,"app"),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt)));if(!l.length)continue;let u=new Map(l.map(e=>[e.externalId,e])),c=await (0,tY.X)(i);if(!c.ok){let t=(0,eX.E)({ok:!1,kind:c.kind,error:c.error});if(t&&await (0,a.db)().update(h.accounts).set({...t,updatedAt:e}).where((0,d.eq)(h.accounts.id,o.id)),n.push(`vercel/${o.label}: ${c.error}`),await ak(c,e))return;continue}let p=new Set(l.map(e=>String(e.meta.teamId)));for(let s of c.data.filter(e=>p.has(e.id))){if(Date.now()>r)return void n.push("vercel: skipped remaining teams, time budget used");let[o,c]=await Promise.all([(0,tY.W)(i,s),(0,tY.K)(i,s,{since:e.getTime()-6048e5,limit:100})]);if(!o.ok||!c.ok){let t=o.ok?c:o;if(n.push(`vercel/${s.name}: ${t.error}`),await ak(t,e))return;continue}let p=new Map(o.data.map(e=>[e.id,e.currentDeploymentId])),f=c.data.filter(e=>u.has(e.projectId)),m=new Map((f.length?await (0,a.db)().select({externalId:h.deployments.externalId,state:h.deployments.state,target:h.deployments.target,branch:h.deployments.branch,commitSha:h.deployments.commitSha,commitMessage:h.deployments.commitMessage,source:h.deployments.source,url:h.deployments.url,buildingAt:h.deployments.buildingAt,readyAt:h.deployments.readyAt}).from(h.deployments).where((0,d.inArray)(h.deployments.externalId,f.map(e=>e.id))):[]).map(e=>[e.externalId,e])),w=[];for(let t of f){let r=u.get(t.projectId),n=m.get(t.id),s={state:t.state,target:t.target,branch:t.branch,commitSha:t.sha,commitMessage:t.message,source:t.source,url:t.url,buildingAt:t.buildingAt,readyAt:t.readyAt};if((0,tK.E)(n,s)){let n={resourceId:r.id,externalId:t.id,...s,createdAtProvider:t.createdAt,updatedAt:e};await (0,a.db)().insert(h.deployments).values(n).onConflictDoUpdate({target:h.deployments.externalId,set:n})}w.push((0,ai.L)(n?.state,t,r.id,e))}await am(w);let g=l.filter(e=>String(e.meta.teamId)===s.id),b=await (0,a.db)().select({resourceId:h.deployments.resourceId,id:h.deployments.externalId,createdAt:h.deployments.createdAtProvider}).from(h.deployments).where((0,d.and)((0,d.inArray)(h.deployments.resourceId,g.map(e=>e.id)),(0,d.eq)(h.deployments.target,"production"),(0,d.eq)(h.deployments.state,"ready"))),[k]=await (0,a.db)().select().from(h.settings).where((0,d.eq)(h.settings.key,ad)).limit(1),y=[],v=()=>y.length?(0,a.db)().insert(h.settings).values({key:ad,value:(0,tK.Y)(k?.value,y,e)}).onConflictDoUpdate({target:h.settings.key,set:{value:(0,tK.Y)(k?.value,y,e),updatedAt:e}}):Promise.resolve();for(let t of(0,tK.Q)(g,p,b,(0,tK.S)(k?.value,e))){if(Date.now()>r)break;let o=await (0,tY.S)(i,s,t.deploymentId);if(!o.ok){if(n.push(`vercel/${s.name}: current deployment: ${o.error}`),await ak(o,e))return void await v();y.push(t.deploymentId);continue}let l=o.data,u={resourceId:t.appId,externalId:l.id,state:l.state,target:l.target,branch:l.branch,commitSha:l.sha,commitMessage:l.message,source:l.source,url:l.url,buildingAt:l.buildingAt,readyAt:l.readyAt,createdAtProvider:l.createdAt,updatedAt:e};await (0,a.db)().insert(h.deployments).values(u).onConflictDoUpdate({target:h.deployments.externalId,set:u}),"ready"===l.state&&"production"===l.target?b.push({resourceId:t.appId,id:l.id,createdAt:l.createdAt}):y.push(t.deploymentId)}for(let r of(await v(),g)){let{currentId:n,previousId:s}=(0,tK.a)(b.filter(e=>e.resourceId===r.id),p.get(r.externalId)??null);await (0,a.db)().update(h.deployments).set({isCurrent:ay(n),isPreviousProduction:ay(s),updatedAt:e}).where((0,d.and)((0,d.eq)(h.deployments.resourceId,r.id),(0,d.or)(t.sql`${h.deployments.isCurrent} is distinct from ${ay(n)}`,t.sql`${h.deployments.isPreviousProduction} is distinct from ${ay(s)}`)))}}}}async function aI(e){let r=await (0,a.db)().select().from(h.resources).where((0,d.and)((0,d.eq)(h.resources.kind,"app"),(0,d.eq)(h.resources.monitored,!0),(0,d.isNull)(h.resources.goneAt)));if(!r.length)return;let n=await (0,a.db)().select().from(h.monitors).where((0,d.and)((0,d.inArray)(h.monitors.resourceId,r.map(e=>e.id)),(0,d.eq)(h.monitors.paused,!1),(0,d.eq)(h.monitors.ownerPaused,!1))),s=new Set((await (0,a.db)().select({r:h.deployments.resourceId}).from(h.deployments).where((0,d.and)((0,d.inArray)(h.deployments.resourceId,r.map(e=>e.id)),(0,d.eq)(h.deployments.target,"production"),(0,d.eq)(h.deployments.state,"building"),(0,d.gte)(h.deployments.createdAtProvider,new Date(e.getTime()-36e5))))).map(e=>e.r)),o=await tp(r.map(e=>e.id)),i=new Map((await (0,a.db)().select().from(h.snapshots).where((0,d.inArray)(h.snapshots.resourceId,r.map(e=>e.id)))).map(e=>[e.resourceId,e]));for(let l of r){let r=n.filter(e=>e.resourceId===l.id),u=(0,ai.V)({monitors:r.map(e=>e.state),building:s.has(l.id),dbPaused:o.has(l.id)}),d=r.find(e=>"err"===e.state)??r.find(e=>"warn"===e.state),c={code:d?.lastStatus??null,latencyMs:r.find(e=>"heartbeat"!==e.kind)?.lastLatencyMs??null,dbPaused:o.has(l.id)},p=i.get(l.id);await (0,a.db)().insert(h.snapshots).values({resourceId:l.id,state:u,data:c,collectedAt:e,stateSince:e}).onConflictDoUpdate({target:h.snapshots.resourceId,set:{state:u,data:t.sql`${h.snapshots.data} || ${JSON.stringify(c)}::jsonb`,collectedAt:e,...p?.state!==u?{stateSince:e}:{}}})}}async function a$(e,t={}){let a={writeLastRun:af,refreshApps:aI,refreshNetwork:an.x,invalidate:f,...t};try{await a.writeLastRun({...e.lastRun,...Object.fromEntries(e.done.map(t=>[t,e.started.toISOString()]))});try{await a.refreshApps(new Date)}catch(t){e.errors.push(`app-snapshots: ${(0,tS.safeError)(t)}`)}if(e.done.some(e=>an.p.includes(e)))try{await a.refreshNetwork(new Date)}catch(t){e.errors.push(`network-states: ${(0,tS.safeError)(t)}`)}}finally{a.invalidate((0,m.o)(e.tried??e.done))}}async function aA(e,t,a,r={evaluate:tR.$,deliver:t_.q,digest:t_.J}){let n=[];if(e.includes("alerts"))if(Date.now()>t)a.push("alerts: skipped, time budget used");else{let e=!0;try{await r.evaluate(new Date),console.info("collector alerts evaluated")}catch(t){e=!1,a.push(`alerts: ${(0,tS.safeError)(t)}`)}try{await r.deliver(new Date,t),console.info("collector notifications delivered")}catch(t){e=!1,a.push(`notify: ${(0,tS.safeError)(t)}`)}e&&n.push("alerts")}if(e.includes("digest")&&(0,at.z)("digest",t,Date.now()))try{await r.digest(new Date),console.info("collector digest done"),n.push("digest")}catch(e){a.push(`digest: ${(0,tS.safeError)(e)}`)}return n}async function aS(e,t,a,r){let n=[],s=[];for(let o of e){if(Date.now()>t){a.push(`${o}: skipped, time budget used`);continue}if((0,at.z)(o,t,Date.now())){s.push(o);try{await r(o),n.push(o)}catch(e){a.push(`${o}: ${(0,tS.safeError)(e)}`)}}}return{done:n,tried:s}}async function aD(e){let t,r=new Date,n=await aa(r);if(!n)return{skipped:!0,ok:!0,tasks:[],checks:0,durationMs:0,errors:[]};try{[t]=await (0,a.db)().insert(h.collectorRuns).values({startedAt:r,trigger:"builtin"===e?"manual":e}).returning({id:h.collectorRuns.id})}catch(e){throw await ar(n).catch(()=>void 0),e}let s=[],o=[],i=0,l=r.getTime()+at.p,u=e=>console.info(`collector ${e} +${Date.now()-r.getTime()}ms`);try{u("start");let t=await ap(),a="cron_job_org"!==e&&"builtin"!==e,n=(0,at.S)(t,r,a),d=n.filter(e=>at.u.includes(e)),c=d.includes("alerts")?l-at.X:l,p=await ag(n,s);u(`due ${n.join(",")}`);let{done:f,tried:m}=await aS(n.filter(e=>!at.u.includes(e)),c,s,async e=>{if(u(`task ${e}`),"heartbeats"===e){let e=new Date;i+=await (0,eW.r)(e,(t,a)=>null!==(0,tJ.x)(p,{monitorId:t,appId:a},e),a)}"checks"===e&&(i+=await ah(new Date,c,s,a,p)),"vercel"===e&&await av(new Date,c,s);let t=ac[e];t&&await t({now:new Date,deadline:c,errors:s}),"cloudflare"===e&&await (0,an.h)(new Date,c,s),"domains"===e&&await (0,an.H)(new Date,c,s),"tls"===e&&await (0,an.V)(new Date,c,s),"rdap"===e&&await (0,an.W)(new Date,c,s),"eol"===e&&await (0,an.i)(new Date,c,s),"status"===e&&await (0,tV.i)(new Date),"logs"===e&&await (0,tj._)(new Date,c,s),"pageviews"===e&&await tH(new Date,c,s)});o.push(...f),u("main done"),await a$({lastRun:t,done:o,tried:m,started:r,errors:s}),u("settled");let h=await aA(d,l,s);u("post done"),h.length&&await af({...t,...Object.fromEntries([...o,...h].map(e=>[e,r.toISOString()]))}),o.push(...h)}catch(e){s.push(`run: ${(0,tS.safeError)(e)}`)}finally{let e=Date.now()-r.getTime();await (0,a.db)().update(h.collectorRuns).set({finishedAt:new Date,ok:0===s.length,errorSummary:s.join("\n").slice(0,2e3)||null,durationMs:e,tasks:o,checks:i}).where((0,d.eq)(h.collectorRuns.id,t.id)).catch(()=>void 0),await ar(n).catch(()=>void 0)}return{skipped:!1,ok:0===s.length,tasks:o,checks:i,durationMs:Date.now()-r.getTime(),errors:s}}var aT=e.i(486118);async function aE(e){let t=[...u,...aT.extensions.minuteSteps??[]];if(!t.length)return;let a=new Date,r={deadline:e+6e4-5e3};for(let e of t)try{await e.run(a,r)}catch{console.warn(`minute step ${e.name} failed`)}}async function ax(e,t=Date.now()){let a=await aD(e);return await aE(t),a}async function az(){return tz(await tE(),aT.extensions.dailySteps??[])}e.s(["runDailyAll",0,az,"runMinute",0,ax],380167)}];
+    where key = 'collector.lease' and value->>'owner' = ${e}`)}var al=e.i(991219),au=e.i(149398),ad=e.i(467404),ac=e.i(816173);e.i(247714);let ap="collector.lastRun",af="vercel.backoffUntil",am="vercel.currentMiss",ah={supabase:th,supabaseUsage:tw,neon:tg,firebase:tb,firebaseUsage:ty,extraDbs:t2};async function aw(){let[e]=await (0,a.db)().select().from(w.settings).where((0,c.eq)(w.settings.key,ap)).limit(1);return e?.value??{}}async function ag(e){await (0,a.db)().insert(w.settings).values({key:ap,value:e}).onConflictDoUpdate({target:w.settings.key,set:{value:e,updatedAt:new Date}})}let ab=e=>(0,eW.f)(e);async function ay(e,r,n,s,o=[]){let i=(await (0,a.db)().select({m:w.monitors,app:w.resources}).from(w.monitors).innerJoin(w.resources,(0,c.eq)(w.resources.id,w.monitors.resourceId)).where((0,c.and)((0,c.eq)(w.monitors.kind,"http"),(0,c.eq)(w.monitors.paused,!1),(0,c.eq)(w.monitors.ownerPaused,!1),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt))).orderBy(t.sql`${w.monitors.lastCheckedAt} asc nulls first`,w.monitors.id)).filter(({m:t})=>(0,as.B)(t.lastCheckedAt,e,s));if(!i.length)return 0;let l=await (0,tt.P)(i,6,({m:e})=>{let t=(0,as.P)(e.timeoutMs,r,Date.now());return null===t?Promise.resolve(null):(0,tt.b)(e.url,{expectedStatus:e.expectedStatus,timeoutMs:t,body:(0,au.C)(e)})}),u=i.flatMap((e,t)=>l[t]?[{...e,r:l[t]}]:[]);if(u.length<i.length&&n.push(`checks: ${i.length-u.length} monitors skipped, time budget used`),!u.length)return 0;let d=[];for(let t of u)await (0,ad.f)(t.m,t.r,e)&&d.push(t);return d.length?(await (0,a.db)().insert(w.checks).values(d.map(({m:t,app:a,r})=>({monitorId:t.id,at:e,ok:r.ok,statusCode:r.statusCode,latencyMs:r.latencyMs,error:r.error,inMaintenance:null!==(0,tQ.x)(o,{monitorId:t.id,appId:a.id},e)}))),await ab(d.map(({m:t,app:a,r})=>(0,ac.F)({resourceId:a.id,path:(0,t0.K)(t.url),prev:t.state,next:(0,ac.G)(t.failStreak,r).state,code:r.statusCode,error:r.error,at:e}))),d.length):0}let ak=["checks","heartbeats"];async function av(e,t,a=tN.f){if(!ak.some(t=>e.includes(t)))return[];try{return await a()}catch(e){return t.push(`maintenance: ${(0,tE.safeError)(e)}`),[]}}async function aI(e){let[t]=await (0,a.db)().select().from(w.settings).where((0,c.eq)(w.settings.key,af)).limit(1),r=t?.value?.until;return!!r&&e.getTime()<new Date(r).getTime()}async function a$(e,t){if("transient"!==e.kind||!e.retryAfterS)return!1;let r={until:new Date(t.getTime()+1e3*Math.min(e.retryAfterS,3600)).toISOString()};return await (0,a.db)().insert(w.settings).values({key:af,value:r}).onConflictDoUpdate({target:w.settings.key,set:{value:r,updatedAt:t}}),!0}let aA=e=>t.sql`coalesce(${w.deployments.externalId} = ${e}::text, false)`;async function aS(e,r,n){if(await aI(e))return;let s=(0,U.serverEnv)().OPS_ENCRYPTION_KEY;for(let o of(await (0,a.db)().select().from(w.accounts).where((0,c.and)((0,c.eq)(w.accounts.provider,"vercel"),(0,c.eq)(w.accounts.status,"ok"))))){let i=(0,F.V)({ciphertext:o.credentialCiphertext,iv:o.credentialIv},s);if((0,eZ.A)(i)||!i){n.push(`vercel/${o.label}: credential can't be read`);continue}let l=await (0,a.db)().select().from(w.resources).where((0,c.and)((0,c.eq)(w.resources.accountId,o.id),(0,c.eq)(w.resources.kind,"app"),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt)));if(!l.length)continue;let u=new Map(l.map(e=>[e.externalId,e])),d=await (0,tZ.X)(i);if(!d.ok){let t=(0,eZ.E)({ok:!1,kind:d.kind,error:d.error});if(t&&await (0,a.db)().update(w.accounts).set({...t,updatedAt:e}).where((0,c.eq)(w.accounts.id,o.id)),n.push(`vercel/${o.label}: ${d.error}`),await a$(d,e))return;continue}let p=new Set(l.map(e=>String(e.meta.teamId)));for(let s of d.data.filter(e=>p.has(e.id))){if(Date.now()>r)return void n.push("vercel: skipped remaining teams, time budget used");let[o,d]=await Promise.all([(0,tZ.W)(i,s),(0,tZ.K)(i,s,{since:e.getTime()-6048e5,limit:100})]);if(!o.ok||!d.ok){let t=o.ok?d:o;if(n.push(`vercel/${s.name}: ${t.error}`),await a$(t,e))return;continue}let p=new Map(o.data.map(e=>[e.id,e.currentDeploymentId])),f=d.data.filter(e=>u.has(e.projectId)),m=new Map((f.length?await (0,a.db)().select({externalId:w.deployments.externalId,state:w.deployments.state,target:w.deployments.target,branch:w.deployments.branch,commitSha:w.deployments.commitSha,commitMessage:w.deployments.commitMessage,source:w.deployments.source,url:w.deployments.url,buildingAt:w.deployments.buildingAt,readyAt:w.deployments.readyAt}).from(w.deployments).where((0,c.inArray)(w.deployments.externalId,f.map(e=>e.id))):[]).map(e=>[e.externalId,e])),h=[];for(let t of f){let r=u.get(t.projectId),n=m.get(t.id),s={state:t.state,target:t.target,branch:t.branch,commitSha:t.sha,commitMessage:t.message,source:t.source,url:t.url,buildingAt:t.buildingAt,readyAt:t.readyAt};if((0,t0.E)(n,s)){let n={resourceId:r.id,externalId:t.id,...s,createdAtProvider:t.createdAt,updatedAt:e};await (0,a.db)().insert(w.deployments).values(n).onConflictDoUpdate({target:w.deployments.externalId,set:n})}h.push((0,ac.L)(n?.state,t,r.id,e))}await ab(h);let g=l.filter(e=>String(e.meta.teamId)===s.id),b=await (0,a.db)().select({resourceId:w.deployments.resourceId,id:w.deployments.externalId,createdAt:w.deployments.createdAtProvider}).from(w.deployments).where((0,c.and)((0,c.inArray)(w.deployments.resourceId,g.map(e=>e.id)),(0,c.eq)(w.deployments.target,"production"),(0,c.eq)(w.deployments.state,"ready"))),[y]=await (0,a.db)().select().from(w.settings).where((0,c.eq)(w.settings.key,am)).limit(1),k=[],v=()=>k.length?(0,a.db)().insert(w.settings).values({key:am,value:(0,t0.Y)(y?.value,k,e)}).onConflictDoUpdate({target:w.settings.key,set:{value:(0,t0.Y)(y?.value,k,e),updatedAt:e}}):Promise.resolve();for(let t of(0,t0.Q)(g,p,b,(0,t0.S)(y?.value,e))){if(Date.now()>r)break;let o=await (0,tZ.S)(i,s,t.deploymentId);if(!o.ok){if(n.push(`vercel/${s.name}: current deployment: ${o.error}`),await a$(o,e))return void await v();k.push(t.deploymentId);continue}let l=o.data,u={resourceId:t.appId,externalId:l.id,state:l.state,target:l.target,branch:l.branch,commitSha:l.sha,commitMessage:l.message,source:l.source,url:l.url,buildingAt:l.buildingAt,readyAt:l.readyAt,createdAtProvider:l.createdAt,updatedAt:e};await (0,a.db)().insert(w.deployments).values(u).onConflictDoUpdate({target:w.deployments.externalId,set:u}),"ready"===l.state&&"production"===l.target?b.push({resourceId:t.appId,id:l.id,createdAt:l.createdAt}):k.push(t.deploymentId)}for(let r of(await v(),g)){let{currentId:n,previousId:s}=(0,t0.a)(b.filter(e=>e.resourceId===r.id),p.get(r.externalId)??null);await (0,a.db)().update(w.deployments).set({isCurrent:aA(n),isPreviousProduction:aA(s),updatedAt:e}).where((0,c.and)((0,c.eq)(w.deployments.resourceId,r.id),(0,c.or)(t.sql`${w.deployments.isCurrent} is distinct from ${aA(n)}`,t.sql`${w.deployments.isPreviousProduction} is distinct from ${aA(s)}`)))}}}}async function aD(e){let r=await (0,a.db)().select().from(w.resources).where((0,c.and)((0,c.eq)(w.resources.kind,"app"),(0,c.eq)(w.resources.monitored,!0),(0,c.isNull)(w.resources.goneAt)));if(!r.length)return;let n=await (0,a.db)().select().from(w.monitors).where((0,c.and)((0,c.inArray)(w.monitors.resourceId,r.map(e=>e.id)),(0,c.eq)(w.monitors.paused,!1),(0,c.eq)(w.monitors.ownerPaused,!1))),s=new Set((await (0,a.db)().select({r:w.deployments.resourceId}).from(w.deployments).where((0,c.and)((0,c.inArray)(w.deployments.resourceId,r.map(e=>e.id)),(0,c.eq)(w.deployments.target,"production"),(0,c.eq)(w.deployments.state,"building"),(0,c.gte)(w.deployments.createdAtProvider,new Date(e.getTime()-36e5))))).map(e=>e.r)),o=await tm(r.map(e=>e.id)),i=new Map((await (0,a.db)().select().from(w.snapshots).where((0,c.inArray)(w.snapshots.resourceId,r.map(e=>e.id)))).map(e=>[e.resourceId,e]));for(let l of r){let r=n.filter(e=>e.resourceId===l.id),u=(0,ac.V)({monitors:r.map(e=>e.state),building:s.has(l.id),dbPaused:o.has(l.id)}),d=r.find(e=>"err"===e.state)??r.find(e=>"warn"===e.state),c={code:d?.lastStatus??null,latencyMs:r.find(e=>"heartbeat"!==e.kind)?.lastLatencyMs??null,dbPaused:o.has(l.id)},p=i.get(l.id);await (0,a.db)().insert(w.snapshots).values({resourceId:l.id,state:u,data:c,collectedAt:e,stateSince:e}).onConflictDoUpdate({target:w.snapshots.resourceId,set:{state:u,data:t.sql`${w.snapshots.data} || ${JSON.stringify(c)}::jsonb`,collectedAt:e,...p?.state!==u?{stateSince:e}:{}}})}}async function aT(e,t={}){let a={writeLastRun:ag,refreshApps:aD,refreshNetwork:al.x,invalidate:m,...t};try{await a.writeLastRun({...e.lastRun,...Object.fromEntries(e.done.map(t=>[t,e.started.toISOString()]))});try{await a.refreshApps(new Date)}catch(t){e.errors.push(`app-snapshots: ${(0,tE.safeError)(t)}`)}if(e.done.some(e=>al.p.includes(e)))try{await a.refreshNetwork(new Date)}catch(t){e.errors.push(`network-states: ${(0,tE.safeError)(t)}`)}}finally{a.invalidate((0,h.o)(e.tried??e.done))}}async function aE(e,t,a,r={evaluate:tq.$,deliver:tC.q,digest:tC.J}){let n=[];if(e.includes("alerts"))if(Date.now()>t)a.push("alerts: skipped, time budget used");else{let e=!0;try{await r.evaluate(new Date),console.info("collector alerts evaluated")}catch(t){e=!1,a.push(`alerts: ${(0,tE.safeError)(t)}`)}try{await r.deliver(new Date,t),console.info("collector notifications delivered")}catch(t){e=!1,a.push(`notify: ${(0,tE.safeError)(t)}`)}e&&n.push("alerts")}if(e.includes("digest")&&(0,as.z)("digest",t,Date.now()))try{await r.digest(new Date),console.info("collector digest done"),n.push("digest")}catch(e){a.push(`digest: ${(0,tE.safeError)(e)}`)}return n}async function ax(e,t,a,r){let n=[],s=[];for(let o of e){if(Date.now()>t){a.push(`${o}: skipped, time budget used`);continue}if((0,as.z)(o,t,Date.now())){s.push(o);try{await r(o),n.push(o)}catch(e){a.push(`${o}: ${(0,tE.safeError)(e)}`)}}}return{done:n,tried:s}}async function az(e){let t,r=new Date,n=await ao(r);if(!n)return{skipped:!0,ok:!0,tasks:[],checks:0,durationMs:0,errors:[]};try{[t]=await (0,a.db)().insert(w.collectorRuns).values({startedAt:r,trigger:"builtin"===e?"manual":e}).returning({id:w.collectorRuns.id})}catch(e){throw await ai(n).catch(()=>void 0),e}let s=[],o=[],i=0,u=r.getTime()+as.p,d=e=>console.info(`collector ${e} +${Date.now()-r.getTime()}ms`);try{d("start");let t=await aw(),a="cron_job_org"!==e&&"builtin"!==e,n=await (0,l.I)(),c=(0,as.S)(t,r,a,n),p=c.filter(e=>as.u.includes(e)),f=p.includes("alerts")?u-as.X:u,m=await av(c,s);d(`due ${c.join(",")}`);let{done:h,tried:w}=await ax(c.filter(e=>!as.u.includes(e)),f,s,async e=>{if(d(`task ${e}`),"heartbeats"===e){let e=new Date;i+=await (0,eH.r)(e,(t,a)=>null!==(0,tQ.x)(m,{monitorId:t,appId:a},e),a)}"checks"===e&&(i+=await ay(new Date,f,s,a,m)),"vercel"===e&&await aS(new Date,f,s);let t=ah[e];t&&await t({now:new Date,deadline:f,errors:s,protectOnly:(0,as.$)(e,n)}),"cloudflare"===e&&await (0,al.h)(new Date,f,s),"domains"===e&&await (0,al.H)(new Date,f,s),"tls"===e&&await (0,al.V)(new Date,f,s),"rdap"===e&&await (0,al.W)(new Date,f,s),"eol"===e&&await (0,al.i)(new Date,f,s),"status"===e&&await (0,tX.i)(new Date),"logs"===e&&await (0,tP._)(new Date,f,s),"pageviews"===e&&await tY(new Date,f,s)});o.push(...h),d("main done"),await aT({lastRun:t,done:o,tried:w,started:r,errors:s}),d("settled");let g=await aE(p,u,s);d("post done"),g.length&&await ag({...t,...Object.fromEntries([...o,...g].map(e=>[e,r.toISOString()]))}),o.push(...g)}catch(e){s.push(`run: ${(0,tE.safeError)(e)}`)}finally{let e=Date.now()-r.getTime();await (0,a.db)().update(w.collectorRuns).set({finishedAt:new Date,ok:0===s.length,errorSummary:s.join("\n").slice(0,2e3)||null,durationMs:e,tasks:o,checks:i}).where((0,c.eq)(w.collectorRuns.id,t.id)).catch(()=>void 0),await ai(n).catch(()=>void 0)}return{skipped:!1,ok:0===s.length,tasks:o,checks:i,durationMs:Date.now()-r.getTime(),errors:s}}var aR=e.i(486118);async function aj(e){let t=[...d,...aR.extensions.minuteSteps??[]];if(!t.length)return;let a=new Date,r={deadline:e+6e4-5e3};for(let e of t)try{await e.run(a,r)}catch{console.warn(`minute step ${e.name} failed`)}}async function a_(e,t=Date.now()){let a=await az(e);return await aj(t),a}async function aM(){return tM(await tj(),aR.extensions.dailySteps??[])}e.s(["runDailyAll",0,aM,"runMinute",0,a_],380167)}];
 
 //# sourceMappingURL=src_lib_collector_runners_ts_12z4gtgikss74._.js.map

package/server/.next/server/chunks/src_lib_data_0ask_rbmgwlf3._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[426099,e=>{var t=e.i(875225),r=e.i(971724),s=e.i(105954),a=e.i(604147),n=e.i(455744),i=e.i(924924),o=e.i(618916),l=e.i(61926),u=e.i(218331);let c=e=>{let t=(0,u.C)(e);return`${t.day} ${t.month} ${t.year}`},d=e=>e.toLocaleDateString("en-CA",{timeZone:u.h});var p=e.i(122143),m=e.i(775843),f=e.i(146394),h=e.i(69679),g=e.i(145647);let y="advisor.latest",w=r.z.object({key:s.z.string(),severity:a.z.enum(["warning","info"]),appId:s.z.string().nullable(),subject:s.z.string(),title:s.z.string(),why:s.z.string(),fix:s.z.string(),href:s.z.string()}),k=r.z.object({at:s.z.string(),items:n.z.array(w)});async function b(e){let r=(0,t.b)((0,t.u)(o.resources.kind,"app"),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt)),s=await (0,g.P)(),a=await (0,h.V)(),[n,u,c,d,y]=await Promise.all([(0,i.f)().select({id:o.monitors.id,appId:o.monitors.resourceId,appName:o.resources.name,url:o.monitors.url,kind:o.monitors.kind,name:o.monitors.name,paused:o.monitors.paused,ownerPaused:o.monitors.ownerPaused,lastStatus:o.monitors.lastStatus,expectedStatus:o.monitors.expectedStatus,lastPingAt:o.monitors.lastPingAt,createdAt:o.monitors.createdAt}).from(o.monitors).innerJoin(o.resources,(0,t.u)(o.resources.id,o.monitors.resourceId)).where(r).orderBy(o.resources.name,o.monitors.url).limit(f.O.monitors),(0,i.f)().select({id:o.resources.id,name:o.resources.name,version:o.appSecurity.version}).from(o.resources).innerJoin(o.appSecurity,(0,t.u)(o.appSecurity.resourceId,o.resources.id)).where(r).orderBy(o.resources.name).limit(f.O.apps),(0,i.f)().select({id:o.resources.id,name:o.resources.name,kind:o.resources.kind,accountId:o.resources.accountId,accountLabel:o.accounts.label,state:o.snapshots.state}).from(o.resources).innerJoin(o.accounts,(0,t.u)(o.accounts.id,o.resources.accountId)).leftJoin(o.snapshots,(0,t.u)(o.snapshots.resourceId,o.resources.id)).where((0,t.b)((0,t.y)(o.resources.kind,[...p.H]),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt))).orderBy(o.resources.name).limit(f.O.databases),(0,i.f)().select({appId:o.links.fromResourceId,dbId:o.links.toResourceId}).from(o.links).where((0,t.u)(o.links.kind,"uses_db")).limit(f.O.apps),(0,i.f)().select({id:o.accounts.id,provider:o.accounts.provider,label:o.accounts.label,expiresAt:o.accounts.expiresAt,scopeNote:o.accounts.scopeNote}).from(o.accounts).orderBy(o.accounts.label).limit(200)]);return{now:e,monitors:n.map(e=>({id:e.id,appId:e.appId,appName:e.appName,path:"heartbeat"===e.kind?e.url:(0,l.K)(e.url),kind:e.kind,name:e.name,paused:e.paused||e.ownerPaused,lastStatus:e.lastStatus,expectedStatus:e.expectedStatus,lastPingAt:e.lastPingAt,createdAt:e.createdAt})),eol:function(e,t){if(!t)return null;let r=t.cycles.find(e=>!e.isEol)?.latest??null,s=[];for(let a of e){let e=a.version?.split(".")[0],n=e?t.cycles.find(t=>t.name===e):void 0;n&&s.push({appId:a.id,appName:a.name,cycle:n.name,eolFrom:n.eolFrom?new Date(`${n.eolFrom}T00:00:00Z`):null,latest:r})}return s}(u,s),headers:null,dbs:c.map(e=>({id:e.id,name:e.name,provider:(0,p.Z)(e.kind),accountId:e.accountId,accountLabel:e.accountLabel,state:e.state??"unknown"})),slots:(0,m.f)(a).map(e=>({account:e.account,used:e.used,total:e.total,planUnknown:e.planUnknown})),links:d,accounts:y}}async function v(e){let t=function(e){let t=[];for(let r of e.eol??[]){if(!r.eolFrom||r.eolFrom.getTime()-e.now.getTime()>2592e6)continue;let s=r.eolFrom.getTime()<=e.now.getTime(),a=r.latest?.split(".")[0];t.push({key:`next-eol:${r.appId}:${r.cycle}`,severity:"warning",appId:r.appId,subject:r.appName,title:`Next.js ${r.cycle} ${s?"reached":"reaches"} end of life on ${c(r.eolFrom)}`,why:`No security fixes after that date.${r.latest?` Latest is ${r.latest}.`:""}`,fix:a?`Upgrade to Next.js ${a}.`:"Upgrade Next.js.",href:"https://endoflife.date/nextjs"})}for(let r of e.monitors)!r.paused&&("heartbeat"===r.kind&&!r.lastPingAt&&e.now.getTime()-r.createdAt.getTime()>864e5&&t.push({key:`hb-silent:${r.id}`,severity:"warning",appId:r.appId,subject:r.appName,title:`${r.name??"A heartbeat"} has never pinged`,why:"It was added more than a day ago and no job has called its URL.",fix:"Add the ping to the job, or delete the monitor.",href:"/uptime"}),"http"===r.kind&&"/"===r.path&&200===r.expectedStatus&&null!==r.lastStatus&&[401,403,404].includes(r.lastStatus)&&t.push({key:`monitor-root:${r.id}:${r.lastStatus}`,severity:"info",appId:r.appId,subject:r.appName,title:`The monitor on / answers ${r.lastStatus}`,why:`A login or missing page answering ${r.lastStatus} makes the monitor look down.`,fix:`Point the monitor at a public health route, or expect ${r.lastStatus}.`,href:"/uptime"}));for(let r of e.headers??[]){if(!r.missing.length)continue;let e=[...r.missing].sort();t.push({key:`headers:${r.appId}:${e.join(",")}`,severity:"info",appId:r.appId,subject:r.appName,title:`Missing security headers: ${e.join(", ")}`,why:"Browsers use them to block clickjacking, sniffing and downgrade attacks.",fix:"Add them in next.config headers().",href:"https://developer.mozilla.org/en-US/observatory"})}for(let r of e.slots??[])r.used<r.total||t.push({key:`no-slot:${r.account}`,severity:"warning",appId:null,subject:`supabase \xb7 ${r.account}`,title:`Account ${r.account} has no free slot`,why:r.planUnknown?"Two projects are active. If this account is on the free plan (it couldn't be read), a paused one can't be restored here.":"Both free projects are active, so a paused one can't be restored here.",fix:"Pause one project, or move one to another account.",href:"/supabase"});if(e.dbs&&e.links){let r=new Set(e.links.map(e=>e.dbId));for(let s of e.dbs.filter(e=>!r.has(e.id)))t.push({key:`db-unlinked:${s.id}`,severity:"info",appId:null,subject:s.name,title:"Database isn't linked to any app",why:"Topology and the app status can't use it.",fix:"Link it from the app page.",href:"/apps"})}for(let r of e.accounts)"supabase"===r.provider&&r.scopeNote&&/all[- ]access/i.test(r.scopeNote)&&t.push({key:`broad-cred:${r.id}`,severity:"info",appId:null,subject:`supabase \xb7 ${r.label}`,title:`${r.label} uses an all-access token`,why:"The console only reads; a broader token is a bigger risk if it ever leaks.",fix:"Replace it with a read-only token in Connections, then revoke the old one in Supabase.",href:"/connections"});for(let r of e.accounts){if(!r.expiresAt)continue;let s=r.expiresAt.getTime()-e.now.getTime();s>=12096e5&&s<=5184e6&&t.push({key:`cred-60:${r.id}:${d(r.expiresAt)}`,severity:"info",appId:null,subject:`${r.provider} \xb7 ${r.label}`,title:`The ${r.provider} credential ${r.label} expires on ${(0,u.L)(r.expiresAt)}`,why:"An expired credential stops every reading from that account.",fix:"Create a new one and use Replace credential in Connections.",href:"/connections"})}return t.map((e,t)=>({r:e,i:t})).sort((e,t)=>("warning"!==e.r.severity)-("warning"!==t.r.severity)||e.i-t.i).map(({r:e})=>e).slice(0,50)}(await b(e)),r={at:e.toISOString(),items:t};return await (0,i.f)().insert(o.settings).values({key:y,value:r}).onConflictDoUpdate({target:o.settings.key,set:{value:r,updatedAt:e}}),t}async function A(e){let[r]=await (0,i.f)().select({value:o.settings.value}).from(o.settings).where((0,t.u)(o.settings.key,y)).limit(1),s=k.safeParse(r?.value);return s.success?s.data.items:v(e)}async function x(e,r){var s;let a=await A(e);if(!a.length)return[];let n=await (0,i.f)().select({key:o.recommendationDismissals.key,dismissedAt:o.recommendationDismissals.dismissedAt}).from(o.recommendationDismissals).where((0,t.y)(o.recommendationDismissals.key,a.map(e=>e.key))).limit(50),l=(s=new Map(n.map(e=>[e.key,e.dismissedAt])),a.filter(t=>{let r=s.get(t.key);return!r||e.getTime()-r.getTime()>=2592e6}));return r?l.filter(e=>e.appId===r):l}e.s(["T",0,x,"O",0,v],426099)},367114,489099,505657,e=>{var t=e.i(875225),r=e.i(349129),s=e.i(924924),a=e.i(618916),n=e.i(195191),i=e.i(943816),o=e.i(46574),l=e.i(146394),u=e.i(69679),c=e.i(275426),d=e.i(703724);e.i(656083);var p=e.i(739886),m=e.i(890948),f=e.i(309055),h=e.i(800523);let g=e=>"string"==typeof e&&e?e:null;async function y(e,y){let w=await (0,s.f)().select({r:a.resources,s:a.snapshots,sec:a.appSecurity,accStatus:a.accounts.status}).from(a.resources).leftJoin(a.accounts,(0,t.u)(a.accounts.id,a.resources.accountId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),y?(0,t.u)(a.resources.id,y):void 0)).orderBy(a.resources.name).limit(l.O.apps);if(!w.length)return[];let k=w.map(e=>e.r.id),b=(await (0,s.f)().select().from(a.monitors).where((0,t.y)(a.monitors.resourceId,k)).orderBy(a.monitors.createdAt).limit(l.O.monitors)).map(f.M),v=await (0,s.f)().selectDistinctOn([a.deployments.resourceId]).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,k),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,r.A)(a.deployments.createdAtProvider)),A=await (0,m._)(b.map(e=>e.id),e),x=await (0,m.P)(k,e),$=await (0,u.F)(k),I=b.length?await (0,p.f)():[];return w.map(({r:t,s:r,sec:s,accStatus:a})=>{let u=b.filter(e=>e.appId===t.id).map(t=>({...t,maintUntil:(0,c.x)(I,{monitorId:t.id,appId:t.appId},e)?.end??null})),p=g(t.meta.createdAt),m=v.find(e=>e.resourceId===t.id);return{id:t.id,name:t.name,gone:null!==t.goneAt,state:r?.state??"unknown",stateSince:r?.stateSince??null,domain:(0,n.m)(t.name,u.map(e=>e.url)),framework:g(t.meta.framework),productionBranch:g(t.meta.productionBranch),createdAt:p?new Date(p):null,teamName:g(t.meta.teamName),teamSlug:g(t.meta.teamSlug),repo:g(t.meta.repo),repoType:g(t.meta.repoType),functionRegions:Array.isArray(t.meta.functionRegions)?t.meta.functionRegions.filter(e=>"string"==typeof e):[],monitors:u,lastDeploy:m?(0,d.f)(m):null,uptime30:(0,o.Y)(u.flatMap(t=>(0,o.w)(A.get(t.id),e,o.I))),response:x.get(t.id)??{hourly:Array.from({length:l.A.responseHours},()=>null),p95:null,p50:null},days:new Map(u.flatMap(e=>{let t=A.get(e.id);return t?[[e.id,t]]:[]})),security:s?(0,h.Z)(s):null,database:$.get(t.id)??null,dbPaused:r?.data.dbPaused===!0,pageViews:(0,i.G)(r?.data),pageViewsNote:(0,i.R)({gone:null!==t.goneAt,teamId:g(t.meta.teamId),accountOk:"ok"===a,hasProductionDeploy:void 0!==m})}})}async function w(e,t){return(await y(t,e))[0]??null}e.s(["Z",0,w,"G",0,y],367114);var k=e.i(518899),b=e.i(165788);let v=k.B`coalesce(${a.events.lastAt}, ${a.events.at})`;async function A(e=l.O.events,n={}){return(await (0,s.f)().select({e:a.events,name:a.resources.name}).from(a.events).leftJoin(a.resources,(0,t.u)(a.resources.id,a.events.resourceId)).where(n.excludeActions?(0,t.c)(a.events.type,"action"):void 0).orderBy((0,r.A)(v)).limit(Math.max(1,Math.min(Number.isFinite(e)?Math.floor(e):l.O.events,l.O.events)))).map(({e,name:t})=>({id:e.id,at:e.at,lastAt:e.lastAt??null,count:e.count??1,reason:e.reason??null,type:e.type,kind:e.kind,message:e.message,detail:e.detail,resourceId:e.resourceId??null,resource:(0,b.L)({type:e.type,reason:e.reason??null,message:e.message,resource:t})}))}e.s(["f",0,A],489099);var x=e.i(959408),$=e.i(122143);e.i(358660);let I=e=>"heartbeat"===e.kind?e.lastError?e.lastError.replace(/^(Down|Late) · /,""):"warn"===e.state?"Late":"No ping":(0,x.H)(e)??(e.lastStatus?`HTTP ${e.lastStatus}`:e.lastError||"No answer");e.s(["f",0,function(e,t){if(e.gone)return[];let r=[],s=e.monitors.filter(e=>(0,x.i)(e)&&!e.maintUntil&&("err"===e.state||"warn"===e.state)),a=e=>2*("heartbeat"===e.kind)+ +("err"!==e.state);for(let e of[...s].sort((e,t)=>a(e)-a(t))){let t="heartbeat"===e.kind,s=t?e.name??e.path:e.path;r.push({kind:"monitor",where:t?`Monitor ${s} (heartbeat)`:`Monitor ${s}`,subject:s,state:e.state,reason:I(e),since:e.stateSince??(t?e.lastPingAt??null:null),href:"/uptime",remedies:t?function(e){let t=(e.lastError??"").toLowerCase();return t.includes("failure")?["The job reported a failure: open its logs","Fix and re-run the job; the next OK ping clears it"]:t.includes("didn't finish")||t.includes("started")?["The job started but never finished: it may have hung or hit its timeout","Check the job's own logs for where it stopped","Raise the job's timeout, or fix what it waits on; the next OK ping clears it"]:["Check that the job's scheduler ran (cron, Vercel Cron, GitHub Actions)","Check the job's own logs for errors before the ping line","Make sure the job calls the ping URL at the end (curl -fsS -m 10 <url>)","If the job is retired, pause or delete the heartbeat"]}(e):function(e){let t=e.lastError??"";if(/blocked address/i.test(t))return["The monitor's URL resolves to a private address; fix the URL in Edit monitor"];let r=(0,x.H)(e);if(r&&/keyword|json|body|content/i.test(r))return["The page answered but its content changed: check the keyword or JSON path in Edit monitor, or the page itself"];let s=e.lastStatus;return null!==s&&s>=500?["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]:null!==s&&s>=300?["Check the expected status and path in Edit monitor","The route may need sign-in or moved"]:null===s||r?["Check the domain, DNS and the provider status page","Cold start or overload: retry with Check now"]:["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]}(e)})}e.dbPaused&&e.database&&r.push({kind:"database",where:`Database ${e.database.name}`,subject:e.database.name,state:"warn",reason:"Paused",since:e.stateSince??null,href:(0,$.N)(e.database.kind),remedies:["Restore the database from its provider (Supabase restore)"]});let i=e.lastDeploy;if(i&&"error"===i.state){let e=(0,n._)(i.commitSha);r.push({kind:"deployment",where:`Production deployment ${e}`,subject:e,state:"fail",reason:"Build failed",since:i.readyAt??i.createdAt,href:"/deployments",remedies:["Open the deployment's build logs; redeploy after fixing"]})}return r}],505657)},703724,e=>{e.i(924924),e.i(618916),e.s(["f",0,function(e){return{id:e.id,externalId:e.externalId,state:e.state,target:e.target,branch:e.branch,commitSha:e.commitSha,commitMessage:e.commitMessage,url:e.url,createdAt:e.createdAtProvider,buildingAt:e.buildingAt,readyAt:e.readyAt,isCurrent:e.isCurrent,isPreviousProduction:e.isPreviousProduction}}])},800523,970465,e=>{var t=e.i(875225),r=e.i(518899),s=e.i(924924),a=e.i(618916),n=e.i(442473),i=e.i(751762),o=e.i(656083);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,u="[\"'`]";function c(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let d={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},p=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>d[e]??d[e.toLowerCase()]??e),m=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${u}(${l})${u}`,"g"),f=RegExp(String.raw`version\s*:\s*${u}(${l})${u}\s*,\s*appDir\s*:`,"g"),h=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${u}(${l})${u}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,y=e=>e.replace(/[$]/g,"\\$");var w=e.i(267485);async function k(e,t,r={}){let s=r.deadline??1/0,a=r.now??(()=>new Date),i=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=i(o))return null;let d=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:a()}),b=(e,t)=>(0,n.K)(e,{maxBytes:3145728,timeoutMs:i(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),v=await b(`https://${e}/`,"www");if(!v.ok&&v.error===n.l)return d("unknown","the site redirects to another host");if(!v.ok||200!==v.status)return Date.now()>=s?null:d("error",`Couldn't load the site: ${v.ok?`HTTP ${v.status}`:v.error}`);let A=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(p(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var n;s.add(e.href),a.push({href:e.href,rank:(n=e.pathname,/\/main-app[-.]/.test(n)?0:/\/(main|app-index)[-.]/.test(n)?1:/\/(webpack|polyfills|framework)[-.]/.test(n)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(v.body,v.url).slice(0,12);if(0===A.length)return d("unknown",v.body.includes("/_next/")?"version not exposed":"not a Next.js site");let x=null,$=0,I=!1;for(let e of A){if(0>=i(o)){I=!0;break}let t=await b(e,!0);if(t.ok&&200===t.status&&($++,x=function(e){for(let t of e.matchAll(m))if(c(t[1]))return t[1];for(let t of[f,h])for(let r of e.matchAll(t))if(c(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${y(r)}\s*=\s*${u}(${l})${u}`,"g"),a=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;a=r[1]}if(a&&c(a))return a}return null}(t.body)))break}if(!x)return Date.now()>=s?null:I||0>=i(o)?d("error","Reading the site's scripts took longer than 15 s"):0===$?d("error","Couldn't load the site's scripts"):d("unknown","version not exposed");let S=i(Date.now()+1e4);if(S<=0)return null;let j=await (0,w.y)(x,{timeoutMs:S,fetch:r.fetch});return j.ok?{version:x,status:j.findings.length?"vulnerable":"ok",findings:j.findings,reason:null,checkedAt:a()}:Date.now()>=s?null:d("error",j.error)}e.s(["P",0,k,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var b=e.i(7494),v=e.i(195191),A=e.i(146394);function x(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function $(e){let n=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,sec:a.appSecurity}).from(a.resources).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt),e?(0,t.u)(a.resources.id,e):void 0)).orderBy(r.B`${a.appSecurity.checkedAt} asc nulls first`,a.resources.name).limit(A.O.apps);if(!n.length)return[];let i=await (0,s.f)().select({resourceId:a.monitors.resourceId,url:a.monitors.url}).from(a.monitors).where((0,t.y)(a.monitors.resourceId,n.map(e=>e.id))).orderBy(a.monitors.createdAt).limit(A.O.monitors);return n.map(e=>({id:e.id,name:e.name,prev:e.sec?x(e.sec):null,host:(0,v.m)(e.name,i.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function I(e,n){await (0,s.f)().transaction(async s=>{await s.execute(r.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[i]=await s.select().from(a.appSecurity).where((0,t.u)(a.appSecurity.resourceId,e.id)).limit(1),l=i?x(i):null;if(l&&l.checkedAt.getTime()>=n.checkedAt.getTime())return;let u="unknown"===n.status||"error"===n.status?{...n,version:l?l.version:n.version,findings:l?l.findings:n.findings}:n,c={framework:"next",version:u.version,status:u.status,findings:u.findings,reason:u.reason,checkedAt:u.checkedAt};await s.insert(a.appSecurity).values({resourceId:e.id,...c}).onConflictDoUpdate({target:a.appSecurity.resourceId,set:c,setWhere:r.B`${a.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,b.t)(e.name,l,u);d&&await (0,o.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:u.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],s)})}async function S(e){let t=await $(),r=0,s=0,a=[];return await (0,n.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let a=await k(t.host,t.prev,{deadline:e});if(!a)return void s++;await I(t,a),r++}catch(e){a.push(`${t.name}: ${(0,i.f)(e)}`)}}),{checked:r,skipped:s,failed:a}}e.s(["h",0,S,"Z",0,x],800523)}]})();
+(()=>{"use strict";module.exports=[426099,e=>{var t=e.i(875225),r=e.i(971724),s=e.i(105954),a=e.i(604147),n=e.i(455744),i=e.i(924924),o=e.i(618916),l=e.i(61926),u=e.i(218331);let c=e=>{let t=(0,u.e)(e);return`${t.day} ${t.month} ${t.year}`},d=u.x;var p=e.i(122143),m=e.i(775843),f=e.i(146394),h=e.i(69679),g=e.i(145647);let y="advisor.latest",w=r.z.object({key:s.z.string(),severity:a.z.enum(["warning","info"]),appId:s.z.string().nullable(),subject:s.z.string(),title:s.z.string(),why:s.z.string(),fix:s.z.string(),href:s.z.string()}),k=r.z.object({at:s.z.string(),items:n.z.array(w)});async function b(e){let r=(0,t.b)((0,t.u)(o.resources.kind,"app"),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt)),s=await (0,g.P)(),a=await (0,h.V)(),[n,u,c,d,y]=await Promise.all([(0,i.f)().select({id:o.monitors.id,appId:o.monitors.resourceId,appName:o.resources.name,url:o.monitors.url,kind:o.monitors.kind,name:o.monitors.name,paused:o.monitors.paused,ownerPaused:o.monitors.ownerPaused,lastStatus:o.monitors.lastStatus,expectedStatus:o.monitors.expectedStatus,lastPingAt:o.monitors.lastPingAt,createdAt:o.monitors.createdAt}).from(o.monitors).innerJoin(o.resources,(0,t.u)(o.resources.id,o.monitors.resourceId)).where(r).orderBy(o.resources.name,o.monitors.url).limit(f.O.monitors),(0,i.f)().select({id:o.resources.id,name:o.resources.name,version:o.appSecurity.version}).from(o.resources).innerJoin(o.appSecurity,(0,t.u)(o.appSecurity.resourceId,o.resources.id)).where(r).orderBy(o.resources.name).limit(f.O.apps),(0,i.f)().select({id:o.resources.id,name:o.resources.name,kind:o.resources.kind,accountId:o.resources.accountId,accountLabel:o.accounts.label,state:o.snapshots.state}).from(o.resources).innerJoin(o.accounts,(0,t.u)(o.accounts.id,o.resources.accountId)).leftJoin(o.snapshots,(0,t.u)(o.snapshots.resourceId,o.resources.id)).where((0,t.b)((0,t.y)(o.resources.kind,[...p.H]),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt))).orderBy(o.resources.name).limit(f.O.databases),(0,i.f)().select({appId:o.links.fromResourceId,dbId:o.links.toResourceId}).from(o.links).where((0,t.u)(o.links.kind,"uses_db")).limit(f.O.apps),(0,i.f)().select({id:o.accounts.id,provider:o.accounts.provider,label:o.accounts.label,expiresAt:o.accounts.expiresAt,scopeNote:o.accounts.scopeNote}).from(o.accounts).orderBy(o.accounts.label).limit(200)]);return{now:e,monitors:n.map(e=>({id:e.id,appId:e.appId,appName:e.appName,path:"heartbeat"===e.kind?e.url:(0,l.K)(e.url),kind:e.kind,name:e.name,paused:e.paused||e.ownerPaused,lastStatus:e.lastStatus,expectedStatus:e.expectedStatus,lastPingAt:e.lastPingAt,createdAt:e.createdAt})),eol:function(e,t){if(!t)return null;let r=t.cycles.find(e=>!e.isEol)?.latest??null,s=[];for(let a of e){let e=a.version?.split(".")[0],n=e?t.cycles.find(t=>t.name===e):void 0;n&&s.push({appId:a.id,appName:a.name,cycle:n.name,eolFrom:n.eolFrom?new Date(`${n.eolFrom}T00:00:00Z`):null,latest:r})}return s}(u,s),headers:null,dbs:c.map(e=>({id:e.id,name:e.name,provider:(0,p.Z)(e.kind),accountId:e.accountId,accountLabel:e.accountLabel,state:e.state??"unknown"})),slots:(0,m.f)(a).map(e=>({account:e.account,used:e.used,total:e.total,planUnknown:e.planUnknown})),links:d,accounts:y}}async function v(e){let t=function(e){let t=[];for(let r of e.eol??[]){if(!r.eolFrom||r.eolFrom.getTime()-e.now.getTime()>2592e6)continue;let s=r.eolFrom.getTime()<=e.now.getTime(),a=r.latest?.split(".")[0];t.push({key:`next-eol:${r.appId}:${r.cycle}`,severity:"warning",appId:r.appId,subject:r.appName,title:`Next.js ${r.cycle} ${s?"reached":"reaches"} end of life on ${c(r.eolFrom)}`,why:`No security fixes after that date.${r.latest?` Latest is ${r.latest}.`:""}`,fix:a?`Upgrade to Next.js ${a}.`:"Upgrade Next.js.",href:"https://endoflife.date/nextjs"})}for(let r of e.monitors)!r.paused&&("heartbeat"===r.kind&&!r.lastPingAt&&e.now.getTime()-r.createdAt.getTime()>864e5&&t.push({key:`hb-silent:${r.id}`,severity:"warning",appId:r.appId,subject:r.appName,title:`${r.name??"A heartbeat"} has never pinged`,why:"It was added more than a day ago and no job has called its URL.",fix:"Add the ping to the job, or delete the monitor.",href:"/uptime"}),"http"===r.kind&&"/"===r.path&&200===r.expectedStatus&&null!==r.lastStatus&&[401,403,404].includes(r.lastStatus)&&t.push({key:`monitor-root:${r.id}:${r.lastStatus}`,severity:"info",appId:r.appId,subject:r.appName,title:`The monitor on / answers ${r.lastStatus}`,why:`A login or missing page answering ${r.lastStatus} makes the monitor look down.`,fix:`Point the monitor at a public health route, or expect ${r.lastStatus}.`,href:"/uptime"}));for(let r of e.headers??[]){if(!r.missing.length)continue;let e=[...r.missing].sort();t.push({key:`headers:${r.appId}:${e.join(",")}`,severity:"info",appId:r.appId,subject:r.appName,title:`Missing security headers: ${e.join(", ")}`,why:"Browsers use them to block clickjacking, sniffing and downgrade attacks.",fix:"Add them in next.config headers().",href:"https://developer.mozilla.org/en-US/observatory"})}for(let r of e.slots??[])r.used<r.total||t.push({key:`no-slot:${r.account}`,severity:"warning",appId:null,subject:`supabase \xb7 ${r.account}`,title:`Account ${r.account} has no free slot`,why:r.planUnknown?"Two projects are active. If this account is on the free plan (it couldn't be read), a paused one can't be restored here.":"Both free projects are active, so a paused one can't be restored here.",fix:"Pause one project, or move one to another account.",href:"/supabase"});if(e.dbs&&e.links){let r=new Set(e.links.map(e=>e.dbId));for(let s of e.dbs.filter(e=>!r.has(e.id)))t.push({key:`db-unlinked:${s.id}`,severity:"info",appId:null,subject:s.name,title:"Database isn't linked to any app",why:"Topology and the app status can't use it.",fix:"Link it from the app page.",href:"/apps"})}for(let r of e.accounts)"supabase"===r.provider&&r.scopeNote&&/all[- ]access/i.test(r.scopeNote)&&t.push({key:`broad-cred:${r.id}`,severity:"info",appId:null,subject:`supabase \xb7 ${r.label}`,title:`${r.label} uses an all-access token`,why:"The console only reads; a broader token is a bigger risk if it ever leaks.",fix:"Replace it with a read-only token in Connections, then revoke the old one in Supabase.",href:"/connections"});for(let r of e.accounts){if(!r.expiresAt)continue;let s=r.expiresAt.getTime()-e.now.getTime();s>=12096e5&&s<=5184e6&&t.push({key:`cred-60:${r.id}:${d(r.expiresAt)}`,severity:"info",appId:null,subject:`${r.provider} \xb7 ${r.label}`,title:`The ${r.provider} credential ${r.label} expires on ${(0,u.L)(r.expiresAt)}`,why:"An expired credential stops every reading from that account.",fix:"Create a new one and use Replace credential in Connections.",href:"/connections"})}return t.map((e,t)=>({r:e,i:t})).sort((e,t)=>("warning"!==e.r.severity)-("warning"!==t.r.severity)||e.i-t.i).map(({r:e})=>e).slice(0,50)}(await b(e)),r={at:e.toISOString(),items:t};return await (0,i.f)().insert(o.settings).values({key:y,value:r}).onConflictDoUpdate({target:o.settings.key,set:{value:r,updatedAt:e}}),t}async function A(e){let[r]=await (0,i.f)().select({value:o.settings.value}).from(o.settings).where((0,t.u)(o.settings.key,y)).limit(1),s=k.safeParse(r?.value);return s.success?s.data.items:v(e)}async function x(e,r){var s;let a=await A(e);if(!a.length)return[];let n=await (0,i.f)().select({key:o.recommendationDismissals.key,dismissedAt:o.recommendationDismissals.dismissedAt}).from(o.recommendationDismissals).where((0,t.y)(o.recommendationDismissals.key,a.map(e=>e.key))).limit(50),l=(s=new Map(n.map(e=>[e.key,e.dismissedAt])),a.filter(t=>{let r=s.get(t.key);return!r||e.getTime()-r.getTime()>=2592e6}));return r?l.filter(e=>e.appId===r):l}e.s(["T",0,x,"O",0,v],426099)},367114,489099,505657,e=>{var t=e.i(875225),r=e.i(349129),s=e.i(924924),a=e.i(618916),n=e.i(195191),i=e.i(943816),o=e.i(46574),l=e.i(146394),u=e.i(69679),c=e.i(275426),d=e.i(703724);e.i(656083);var p=e.i(739886),m=e.i(890948),f=e.i(309055),h=e.i(800523);let g=e=>"string"==typeof e&&e?e:null;async function y(e,y){let w=await (0,s.f)().select({r:a.resources,s:a.snapshots,sec:a.appSecurity,accStatus:a.accounts.status}).from(a.resources).leftJoin(a.accounts,(0,t.u)(a.accounts.id,a.resources.accountId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),y?(0,t.u)(a.resources.id,y):void 0)).orderBy(a.resources.name).limit(l.O.apps);if(!w.length)return[];let k=w.map(e=>e.r.id),b=(await (0,s.f)().select().from(a.monitors).where((0,t.y)(a.monitors.resourceId,k)).orderBy(a.monitors.createdAt).limit(l.O.monitors)).map(f.M),v=await (0,s.f)().selectDistinctOn([a.deployments.resourceId]).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,k),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,r.A)(a.deployments.createdAtProvider)),A=await (0,m._)(b.map(e=>e.id),e),x=await (0,m.P)(k,e),$=await (0,u.F)(k),I=b.length?await (0,p.f)():[];return w.map(({r:t,s:r,sec:s,accStatus:a})=>{let u=b.filter(e=>e.appId===t.id).map(t=>({...t,maintUntil:(0,c.x)(I,{monitorId:t.id,appId:t.appId},e)?.end??null})),p=g(t.meta.createdAt),m=v.find(e=>e.resourceId===t.id);return{id:t.id,name:t.name,gone:null!==t.goneAt,state:r?.state??"unknown",stateSince:r?.stateSince??null,domain:(0,n.m)(t.name,u.map(e=>e.url)),framework:g(t.meta.framework),productionBranch:g(t.meta.productionBranch),createdAt:p?new Date(p):null,teamName:g(t.meta.teamName),teamSlug:g(t.meta.teamSlug),repo:g(t.meta.repo),repoType:g(t.meta.repoType),functionRegions:Array.isArray(t.meta.functionRegions)?t.meta.functionRegions.filter(e=>"string"==typeof e):[],monitors:u,lastDeploy:m?(0,d.f)(m):null,uptime30:(0,o.Y)(u.flatMap(t=>(0,o.w)(A.get(t.id),e,o.I))),response:x.get(t.id)??{hourly:Array.from({length:l.A.responseHours},()=>null),p95:null,p50:null},days:new Map(u.flatMap(e=>{let t=A.get(e.id);return t?[[e.id,t]]:[]})),security:s?(0,h.Z)(s):null,database:$.get(t.id)??null,dbPaused:r?.data.dbPaused===!0,pageViews:(0,i.G)(r?.data),pageViewsNote:(0,i.R)({gone:null!==t.goneAt,teamId:g(t.meta.teamId),accountOk:"ok"===a,hasProductionDeploy:void 0!==m})}})}async function w(e,t){return(await y(t,e))[0]??null}e.s(["Z",0,w,"G",0,y],367114);var k=e.i(518899),b=e.i(165788);let v=k.B`coalesce(${a.events.lastAt}, ${a.events.at})`;async function A(e=l.O.events,n={}){return(await (0,s.f)().select({e:a.events,name:a.resources.name}).from(a.events).leftJoin(a.resources,(0,t.u)(a.resources.id,a.events.resourceId)).where(n.excludeActions?(0,t.c)(a.events.type,"action"):void 0).orderBy((0,r.A)(v)).limit(Math.max(1,Math.min(Number.isFinite(e)?Math.floor(e):l.O.events,l.O.events)))).map(({e,name:t})=>({id:e.id,at:e.at,lastAt:e.lastAt??null,count:e.count??1,reason:e.reason??null,type:e.type,kind:e.kind,message:e.message,detail:e.detail,resourceId:e.resourceId??null,resource:(0,b.L)({type:e.type,reason:e.reason??null,message:e.message,resource:t})}))}e.s(["f",0,A],489099);var x=e.i(959408),$=e.i(122143);e.i(358660);let I=e=>"heartbeat"===e.kind?e.lastError?e.lastError.replace(/^(Down|Late) · /,""):"warn"===e.state?"Late":"No ping":(0,x.H)(e)??(e.lastStatus?`HTTP ${e.lastStatus}`:e.lastError||"No answer");e.s(["f",0,function(e,t){if(e.gone)return[];let r=[],s=e.monitors.filter(e=>(0,x.i)(e)&&!e.maintUntil&&("err"===e.state||"warn"===e.state)),a=e=>2*("heartbeat"===e.kind)+ +("err"!==e.state);for(let e of[...s].sort((e,t)=>a(e)-a(t))){let t="heartbeat"===e.kind,s=t?e.name??e.path:e.path;r.push({kind:"monitor",where:t?`Monitor ${s} (heartbeat)`:`Monitor ${s}`,subject:s,state:e.state,reason:I(e),since:e.stateSince??(t?e.lastPingAt??null:null),href:"/uptime",remedies:t?function(e){let t=(e.lastError??"").toLowerCase();return t.includes("failure")?["The job reported a failure: open its logs","Fix and re-run the job; the next OK ping clears it"]:t.includes("didn't finish")||t.includes("started")?["The job started but never finished: it may have hung or hit its timeout","Check the job's own logs for where it stopped","Raise the job's timeout, or fix what it waits on; the next OK ping clears it"]:["Check that the job's scheduler ran (cron, Vercel Cron, GitHub Actions)","Check the job's own logs for errors before the ping line","Make sure the job calls the ping URL at the end (curl -fsS -m 10 <url>)","If the job is retired, pause or delete the heartbeat"]}(e):function(e){let t=e.lastError??"";if(/blocked address/i.test(t))return["The monitor's URL resolves to a private address; fix the URL in Edit monitor"];let r=(0,x.H)(e);if(r&&/keyword|json|body|content/i.test(r))return["The page answered but its content changed: check the keyword or JSON path in Edit monitor, or the page itself"];let s=e.lastStatus;return null!==s&&s>=500?["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]:null!==s&&s>=300?["Check the expected status and path in Edit monitor","The route may need sign-in or moved"]:null===s||r?["Check the domain, DNS and the provider status page","Cold start or overload: retry with Check now"]:["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]}(e)})}e.dbPaused&&e.database&&r.push({kind:"database",where:`Database ${e.database.name}`,subject:e.database.name,state:"warn",reason:"Paused",since:e.stateSince??null,href:(0,$.N)(e.database.kind),remedies:["Restore the database from its provider (Supabase restore)"]});let i=e.lastDeploy;if(i&&"error"===i.state){let e=(0,n._)(i.commitSha);r.push({kind:"deployment",where:`Production deployment ${e}`,subject:e,state:"fail",reason:"Build failed",since:i.readyAt??i.createdAt,href:"/deployments",remedies:["Open the deployment's build logs; redeploy after fixing"]})}return r}],505657)},703724,e=>{e.i(924924),e.i(618916),e.s(["f",0,function(e){return{id:e.id,externalId:e.externalId,state:e.state,target:e.target,branch:e.branch,commitSha:e.commitSha,commitMessage:e.commitMessage,url:e.url,createdAt:e.createdAtProvider,buildingAt:e.buildingAt,readyAt:e.readyAt,isCurrent:e.isCurrent,isPreviousProduction:e.isPreviousProduction}}])},800523,970465,e=>{var t=e.i(875225),r=e.i(518899),s=e.i(924924),a=e.i(618916),n=e.i(442473),i=e.i(751762),o=e.i(656083);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,u="[\"'`]";function c(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let d={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},p=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>d[e]??d[e.toLowerCase()]??e),m=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${u}(${l})${u}`,"g"),f=RegExp(String.raw`version\s*:\s*${u}(${l})${u}\s*,\s*appDir\s*:`,"g"),h=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${u}(${l})${u}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,y=e=>e.replace(/[$]/g,"\\$");var w=e.i(267485);async function k(e,t,r={}){let s=r.deadline??1/0,a=r.now??(()=>new Date),i=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=i(o))return null;let d=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:a()}),b=(e,t)=>(0,n.K)(e,{maxBytes:3145728,timeoutMs:i(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),v=await b(`https://${e}/`,"www");if(!v.ok&&v.error===n.l)return d("unknown","the site redirects to another host");if(!v.ok||200!==v.status)return Date.now()>=s?null:d("error",`Couldn't load the site: ${v.ok?`HTTP ${v.status}`:v.error}`);let A=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(p(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var n;s.add(e.href),a.push({href:e.href,rank:(n=e.pathname,/\/main-app[-.]/.test(n)?0:/\/(main|app-index)[-.]/.test(n)?1:/\/(webpack|polyfills|framework)[-.]/.test(n)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(v.body,v.url).slice(0,12);if(0===A.length)return d("unknown",v.body.includes("/_next/")?"version not exposed":"not a Next.js site");let x=null,$=0,I=!1;for(let e of A){if(0>=i(o)){I=!0;break}let t=await b(e,!0);if(t.ok&&200===t.status&&($++,x=function(e){for(let t of e.matchAll(m))if(c(t[1]))return t[1];for(let t of[f,h])for(let r of e.matchAll(t))if(c(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${y(r)}\s*=\s*${u}(${l})${u}`,"g"),a=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;a=r[1]}if(a&&c(a))return a}return null}(t.body)))break}if(!x)return Date.now()>=s?null:I||0>=i(o)?d("error","Reading the site's scripts took longer than 15 s"):0===$?d("error","Couldn't load the site's scripts"):d("unknown","version not exposed");let S=i(Date.now()+1e4);if(S<=0)return null;let j=await (0,w.y)(x,{timeoutMs:S,fetch:r.fetch});return j.ok?{version:x,status:j.findings.length?"vulnerable":"ok",findings:j.findings,reason:null,checkedAt:a()}:Date.now()>=s?null:d("error",j.error)}e.s(["P",0,k,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var b=e.i(7494),v=e.i(195191),A=e.i(146394);function x(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function $(e){let n=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,sec:a.appSecurity}).from(a.resources).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt),e?(0,t.u)(a.resources.id,e):void 0)).orderBy(r.B`${a.appSecurity.checkedAt} asc nulls first`,a.resources.name).limit(A.O.apps);if(!n.length)return[];let i=await (0,s.f)().select({resourceId:a.monitors.resourceId,url:a.monitors.url}).from(a.monitors).where((0,t.y)(a.monitors.resourceId,n.map(e=>e.id))).orderBy(a.monitors.createdAt).limit(A.O.monitors);return n.map(e=>({id:e.id,name:e.name,prev:e.sec?x(e.sec):null,host:(0,v.m)(e.name,i.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function I(e,n){await (0,s.f)().transaction(async s=>{await s.execute(r.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[i]=await s.select().from(a.appSecurity).where((0,t.u)(a.appSecurity.resourceId,e.id)).limit(1),l=i?x(i):null;if(l&&l.checkedAt.getTime()>=n.checkedAt.getTime())return;let u="unknown"===n.status||"error"===n.status?{...n,version:l?l.version:n.version,findings:l?l.findings:n.findings}:n,c={framework:"next",version:u.version,status:u.status,findings:u.findings,reason:u.reason,checkedAt:u.checkedAt};await s.insert(a.appSecurity).values({resourceId:e.id,...c}).onConflictDoUpdate({target:a.appSecurity.resourceId,set:c,setWhere:r.B`${a.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,b.t)(e.name,l,u);d&&await (0,o.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:u.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],s)})}async function S(e){let t=await $(),r=0,s=0,a=[];return await (0,n.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let a=await k(t.host,t.prev,{deadline:e});if(!a)return void s++;await I(t,a),r++}catch(e){a.push(`${t.name}: ${(0,i.f)(e)}`)}}),{checked:r,skipped:s,failed:a}}e.s(["h",0,S,"Z",0,x],800523)}]})();
 
 //# sourceMappingURL=src_lib_data_0ask_rbmgwlf3._.js.map

package/server/.next/server/chunks/src_lib_data_0e155tkqeoojm._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[426099,e=>{var t=e.i(875225),r=e.i(971724),s=e.i(105954),a=e.i(604147),n=e.i(455744),i=e.i(924924),o=e.i(618916),l=e.i(61926),u=e.i(218331);let c=e=>{let t=(0,u.C)(e);return`${t.day} ${t.month} ${t.year}`},d=e=>e.toLocaleDateString("en-CA",{timeZone:u.h});var p=e.i(122143),m=e.i(775843),f=e.i(146394),h=e.i(69679),g=e.i(145647);let y="advisor.latest",w=r.z.object({key:s.z.string(),severity:a.z.enum(["warning","info"]),appId:s.z.string().nullable(),subject:s.z.string(),title:s.z.string(),why:s.z.string(),fix:s.z.string(),href:s.z.string()}),k=r.z.object({at:s.z.string(),items:n.z.array(w)});async function b(e){let r=(0,t.b)((0,t.u)(o.resources.kind,"app"),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt)),s=await (0,g.P)(),a=await (0,h.V)(),[n,u,c,d,y]=await Promise.all([(0,i.f)().select({id:o.monitors.id,appId:o.monitors.resourceId,appName:o.resources.name,url:o.monitors.url,kind:o.monitors.kind,name:o.monitors.name,paused:o.monitors.paused,ownerPaused:o.monitors.ownerPaused,lastStatus:o.monitors.lastStatus,expectedStatus:o.monitors.expectedStatus,lastPingAt:o.monitors.lastPingAt,createdAt:o.monitors.createdAt}).from(o.monitors).innerJoin(o.resources,(0,t.u)(o.resources.id,o.monitors.resourceId)).where(r).orderBy(o.resources.name,o.monitors.url).limit(f.O.monitors),(0,i.f)().select({id:o.resources.id,name:o.resources.name,version:o.appSecurity.version}).from(o.resources).innerJoin(o.appSecurity,(0,t.u)(o.appSecurity.resourceId,o.resources.id)).where(r).orderBy(o.resources.name).limit(f.O.apps),(0,i.f)().select({id:o.resources.id,name:o.resources.name,kind:o.resources.kind,accountId:o.resources.accountId,accountLabel:o.accounts.label,state:o.snapshots.state}).from(o.resources).innerJoin(o.accounts,(0,t.u)(o.accounts.id,o.resources.accountId)).leftJoin(o.snapshots,(0,t.u)(o.snapshots.resourceId,o.resources.id)).where((0,t.b)((0,t.y)(o.resources.kind,[...p.H]),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt))).orderBy(o.resources.name).limit(f.O.databases),(0,i.f)().select({appId:o.links.fromResourceId,dbId:o.links.toResourceId}).from(o.links).where((0,t.u)(o.links.kind,"uses_db")).limit(f.O.apps),(0,i.f)().select({id:o.accounts.id,provider:o.accounts.provider,label:o.accounts.label,expiresAt:o.accounts.expiresAt,scopeNote:o.accounts.scopeNote}).from(o.accounts).orderBy(o.accounts.label).limit(200)]);return{now:e,monitors:n.map(e=>({id:e.id,appId:e.appId,appName:e.appName,path:"heartbeat"===e.kind?e.url:(0,l.K)(e.url),kind:e.kind,name:e.name,paused:e.paused||e.ownerPaused,lastStatus:e.lastStatus,expectedStatus:e.expectedStatus,lastPingAt:e.lastPingAt,createdAt:e.createdAt})),eol:function(e,t){if(!t)return null;let r=t.cycles.find(e=>!e.isEol)?.latest??null,s=[];for(let a of e){let e=a.version?.split(".")[0],n=e?t.cycles.find(t=>t.name===e):void 0;n&&s.push({appId:a.id,appName:a.name,cycle:n.name,eolFrom:n.eolFrom?new Date(`${n.eolFrom}T00:00:00Z`):null,latest:r})}return s}(u,s),headers:null,dbs:c.map(e=>({id:e.id,name:e.name,provider:(0,p.Z)(e.kind),accountId:e.accountId,accountLabel:e.accountLabel,state:e.state??"unknown"})),slots:(0,m.f)(a).map(e=>({account:e.account,used:e.used,total:e.total,planUnknown:e.planUnknown})),links:d,accounts:y}}async function v(e){let t=function(e){let t=[];for(let r of e.eol??[]){if(!r.eolFrom||r.eolFrom.getTime()-e.now.getTime()>2592e6)continue;let s=r.eolFrom.getTime()<=e.now.getTime(),a=r.latest?.split(".")[0];t.push({key:`next-eol:${r.appId}:${r.cycle}`,severity:"warning",appId:r.appId,subject:r.appName,title:`Next.js ${r.cycle} ${s?"reached":"reaches"} end of life on ${c(r.eolFrom)}`,why:`No security fixes after that date.${r.latest?` Latest is ${r.latest}.`:""}`,fix:a?`Upgrade to Next.js ${a}.`:"Upgrade Next.js.",href:"https://endoflife.date/nextjs"})}for(let r of e.monitors)!r.paused&&("heartbeat"===r.kind&&!r.lastPingAt&&e.now.getTime()-r.createdAt.getTime()>864e5&&t.push({key:`hb-silent:${r.id}`,severity:"warning",appId:r.appId,subject:r.appName,title:`${r.name??"A heartbeat"} has never pinged`,why:"It was added more than a day ago and no job has called its URL.",fix:"Add the ping to the job, or delete the monitor.",href:"/uptime"}),"http"===r.kind&&"/"===r.path&&200===r.expectedStatus&&null!==r.lastStatus&&[401,403,404].includes(r.lastStatus)&&t.push({key:`monitor-root:${r.id}:${r.lastStatus}`,severity:"info",appId:r.appId,subject:r.appName,title:`The monitor on / answers ${r.lastStatus}`,why:`A login or missing page answering ${r.lastStatus} makes the monitor look down.`,fix:`Point the monitor at a public health route, or expect ${r.lastStatus}.`,href:"/uptime"}));for(let r of e.headers??[]){if(!r.missing.length)continue;let e=[...r.missing].sort();t.push({key:`headers:${r.appId}:${e.join(",")}`,severity:"info",appId:r.appId,subject:r.appName,title:`Missing security headers: ${e.join(", ")}`,why:"Browsers use them to block clickjacking, sniffing and downgrade attacks.",fix:"Add them in next.config headers().",href:"https://developer.mozilla.org/en-US/observatory"})}for(let r of e.slots??[])r.used<r.total||t.push({key:`no-slot:${r.account}`,severity:"warning",appId:null,subject:`supabase \xb7 ${r.account}`,title:`Account ${r.account} has no free slot`,why:r.planUnknown?"Two projects are active. If this account is on the free plan (it couldn't be read), a paused one can't be restored here.":"Both free projects are active, so a paused one can't be restored here.",fix:"Pause one project, or move one to another account.",href:"/supabase"});if(e.dbs&&e.links){let r=new Set(e.links.map(e=>e.dbId));for(let s of e.dbs.filter(e=>!r.has(e.id)))t.push({key:`db-unlinked:${s.id}`,severity:"info",appId:null,subject:s.name,title:"Database isn't linked to any app",why:"Topology and the app status can't use it.",fix:"Link it from the app page.",href:"/apps"})}for(let r of e.accounts)"supabase"===r.provider&&r.scopeNote&&/all[- ]access/i.test(r.scopeNote)&&t.push({key:`broad-cred:${r.id}`,severity:"info",appId:null,subject:`supabase \xb7 ${r.label}`,title:`${r.label} uses an all-access token`,why:"The console only reads; a broader token is a bigger risk if it ever leaks.",fix:"Replace it with a read-only token in Connections, then revoke the old one in Supabase.",href:"/connections"});for(let r of e.accounts){if(!r.expiresAt)continue;let s=r.expiresAt.getTime()-e.now.getTime();s>=12096e5&&s<=5184e6&&t.push({key:`cred-60:${r.id}:${d(r.expiresAt)}`,severity:"info",appId:null,subject:`${r.provider} \xb7 ${r.label}`,title:`The ${r.provider} credential ${r.label} expires on ${(0,u.L)(r.expiresAt)}`,why:"An expired credential stops every reading from that account.",fix:"Create a new one and use Replace credential in Connections.",href:"/connections"})}return t.map((e,t)=>({r:e,i:t})).sort((e,t)=>("warning"!==e.r.severity)-("warning"!==t.r.severity)||e.i-t.i).map(({r:e})=>e).slice(0,50)}(await b(e)),r={at:e.toISOString(),items:t};return await (0,i.f)().insert(o.settings).values({key:y,value:r}).onConflictDoUpdate({target:o.settings.key,set:{value:r,updatedAt:e}}),t}async function A(e){let[r]=await (0,i.f)().select({value:o.settings.value}).from(o.settings).where((0,t.u)(o.settings.key,y)).limit(1),s=k.safeParse(r?.value);return s.success?s.data.items:v(e)}async function x(e,r){var s;let a=await A(e);if(!a.length)return[];let n=await (0,i.f)().select({key:o.recommendationDismissals.key,dismissedAt:o.recommendationDismissals.dismissedAt}).from(o.recommendationDismissals).where((0,t.y)(o.recommendationDismissals.key,a.map(e=>e.key))).limit(50),l=(s=new Map(n.map(e=>[e.key,e.dismissedAt])),a.filter(t=>{let r=s.get(t.key);return!r||e.getTime()-r.getTime()>=2592e6}));return r?l.filter(e=>e.appId===r):l}e.s(["T",0,x,"O",0,v],426099)},367114,489099,505657,e=>{var t=e.i(875225),r=e.i(349129),s=e.i(924924),a=e.i(618916),n=e.i(195191),i=e.i(943816),o=e.i(46574),l=e.i(146394),u=e.i(69679),c=e.i(275426),d=e.i(703724);e.i(656083);var p=e.i(739886),m=e.i(890948),f=e.i(309055),h=e.i(800523);let g=e=>"string"==typeof e&&e?e:null;async function y(e,y){let w=await (0,s.f)().select({r:a.resources,s:a.snapshots,sec:a.appSecurity,accStatus:a.accounts.status}).from(a.resources).leftJoin(a.accounts,(0,t.u)(a.accounts.id,a.resources.accountId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),y?(0,t.u)(a.resources.id,y):void 0)).orderBy(a.resources.name).limit(l.O.apps);if(!w.length)return[];let k=w.map(e=>e.r.id),b=(await (0,s.f)().select().from(a.monitors).where((0,t.y)(a.monitors.resourceId,k)).orderBy(a.monitors.createdAt).limit(l.O.monitors)).map(f.M),v=await (0,s.f)().selectDistinctOn([a.deployments.resourceId]).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,k),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,r.A)(a.deployments.createdAtProvider)),A=await (0,m._)(b.map(e=>e.id),e),x=await (0,m.P)(k,e),$=await (0,u.F)(k),I=b.length?await (0,p.f)():[];return w.map(({r:t,s:r,sec:s,accStatus:a})=>{let u=b.filter(e=>e.appId===t.id).map(t=>({...t,maintUntil:(0,c.x)(I,{monitorId:t.id,appId:t.appId},e)?.end??null})),p=g(t.meta.createdAt),m=v.find(e=>e.resourceId===t.id);return{id:t.id,name:t.name,gone:null!==t.goneAt,state:r?.state??"unknown",stateSince:r?.stateSince??null,domain:(0,n.m)(t.name,u.map(e=>e.url)),framework:g(t.meta.framework),productionBranch:g(t.meta.productionBranch),createdAt:p?new Date(p):null,teamName:g(t.meta.teamName),teamSlug:g(t.meta.teamSlug),repo:g(t.meta.repo),repoType:g(t.meta.repoType),functionRegions:Array.isArray(t.meta.functionRegions)?t.meta.functionRegions.filter(e=>"string"==typeof e):[],monitors:u,lastDeploy:m?(0,d.f)(m):null,uptime30:(0,o.Y)(u.flatMap(t=>(0,o.w)(A.get(t.id),e,o.I))),response:x.get(t.id)??{hourly:Array.from({length:l.A.responseHours},()=>null),p95:null,p50:null},days:new Map(u.flatMap(e=>{let t=A.get(e.id);return t?[[e.id,t]]:[]})),security:s?(0,h.Z)(s):null,database:$.get(t.id)??null,dbPaused:r?.data.dbPaused===!0,pageViews:(0,i.G)(r?.data),pageViewsNote:(0,i.R)({gone:null!==t.goneAt,teamId:g(t.meta.teamId),accountOk:"ok"===a,hasProductionDeploy:void 0!==m})}})}async function w(e,t){return(await y(t,e))[0]??null}e.s(["Z",0,w,"G",0,y],367114);var k=e.i(518899),b=e.i(165788);let v=k.B`coalesce(${a.events.lastAt}, ${a.events.at})`;async function A(e=l.O.events,n={}){return(await (0,s.f)().select({e:a.events,name:a.resources.name}).from(a.events).leftJoin(a.resources,(0,t.u)(a.resources.id,a.events.resourceId)).where(n.excludeActions?(0,t.c)(a.events.type,"action"):void 0).orderBy((0,r.A)(v)).limit(Math.max(1,Math.min(Number.isFinite(e)?Math.floor(e):l.O.events,l.O.events)))).map(({e,name:t})=>({id:e.id,at:e.at,lastAt:e.lastAt??null,count:e.count??1,reason:e.reason??null,type:e.type,kind:e.kind,message:e.message,detail:e.detail,resourceId:e.resourceId??null,resource:(0,b.L)({type:e.type,reason:e.reason??null,message:e.message,resource:t})}))}e.s(["f",0,A],489099);var x=e.i(959408),$=e.i(122143);e.i(358660);let I=e=>"heartbeat"===e.kind?e.lastError?e.lastError.replace(/^(Down|Late) · /,""):"warn"===e.state?"Late":"No ping":(0,x.H)(e)??(e.lastStatus?`HTTP ${e.lastStatus}`:e.lastError||"No answer");e.s(["f",0,function(e,t){if(e.gone)return[];let r=[],s=e.monitors.filter(e=>(0,x.i)(e)&&!e.maintUntil&&("err"===e.state||"warn"===e.state)),a=e=>2*("heartbeat"===e.kind)+ +("err"!==e.state);for(let e of[...s].sort((e,t)=>a(e)-a(t))){let t="heartbeat"===e.kind,s=t?e.name??e.path:e.path;r.push({kind:"monitor",where:t?`Monitor ${s} (heartbeat)`:`Monitor ${s}`,subject:s,state:e.state,reason:I(e),since:e.stateSince??(t?e.lastPingAt??null:null),href:"/uptime",remedies:t?function(e){let t=(e.lastError??"").toLowerCase();return t.includes("failure")?["The job reported a failure: open its logs","Fix and re-run the job; the next OK ping clears it"]:t.includes("didn't finish")||t.includes("started")?["The job started but never finished: it may have hung or hit its timeout","Check the job's own logs for where it stopped","Raise the job's timeout, or fix what it waits on; the next OK ping clears it"]:["Check that the job's scheduler ran (cron, Vercel Cron, GitHub Actions)","Check the job's own logs for errors before the ping line","Make sure the job calls the ping URL at the end (curl -fsS -m 10 <url>)","If the job is retired, pause or delete the heartbeat"]}(e):function(e){let t=e.lastError??"";if(/blocked address/i.test(t))return["The monitor's URL resolves to a private address; fix the URL in Edit monitor"];let r=(0,x.H)(e);if(r&&/keyword|json|body|content/i.test(r))return["The page answered but its content changed: check the keyword or JSON path in Edit monitor, or the page itself"];let s=e.lastStatus;return null!==s&&s>=500?["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]:null!==s&&s>=300?["Check the expected status and path in Edit monitor","The route may need sign-in or moved"]:null===s||r?["Check the domain, DNS and the provider status page","Cold start or overload: retry with Check now"]:["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]}(e)})}e.dbPaused&&e.database&&r.push({kind:"database",where:`Database ${e.database.name}`,subject:e.database.name,state:"warn",reason:"Paused",since:e.stateSince??null,href:(0,$.N)(e.database.kind),remedies:["Restore the database from its provider (Supabase restore)"]});let i=e.lastDeploy;if(i&&"error"===i.state){let e=(0,n._)(i.commitSha);r.push({kind:"deployment",where:`Production deployment ${e}`,subject:e,state:"fail",reason:"Build failed",since:i.readyAt??i.createdAt,href:"/deployments",remedies:["Open the deployment's build logs; redeploy after fixing"]})}return r}],505657)},703724,e=>{e.i(924924),e.i(618916),e.s(["f",0,function(e){return{id:e.id,externalId:e.externalId,state:e.state,target:e.target,branch:e.branch,commitSha:e.commitSha,commitMessage:e.commitMessage,url:e.url,createdAt:e.createdAtProvider,buildingAt:e.buildingAt,readyAt:e.readyAt,isCurrent:e.isCurrent,isPreviousProduction:e.isPreviousProduction}}])},800523,970465,e=>{var t=e.i(875225),r=e.i(518899),s=e.i(924924),a=e.i(618916),n=e.i(442473),i=e.i(751762),o=e.i(656083);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,u="[\"'`]";function c(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let d={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},p=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>d[e]??d[e.toLowerCase()]??e),m=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${u}(${l})${u}`,"g"),f=RegExp(String.raw`version\s*:\s*${u}(${l})${u}\s*,\s*appDir\s*:`,"g"),h=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${u}(${l})${u}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,y=e=>e.replace(/[$]/g,"\\$");var w=e.i(267485);async function k(e,t,r={}){let s=r.deadline??1/0,a=r.now??(()=>new Date),i=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=i(o))return null;let d=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:a()}),b=(e,t)=>(0,n.K)(e,{maxBytes:3145728,timeoutMs:i(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),v=await b(`https://${e}/`,"www");if(!v.ok&&v.error===n.l)return d("unknown","the site redirects to another host");if(!v.ok||200!==v.status)return Date.now()>=s?null:d("error",`Couldn't load the site: ${v.ok?`HTTP ${v.status}`:v.error}`);let A=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(p(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var n;s.add(e.href),a.push({href:e.href,rank:(n=e.pathname,/\/main-app[-.]/.test(n)?0:/\/(main|app-index)[-.]/.test(n)?1:/\/(webpack|polyfills|framework)[-.]/.test(n)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(v.body,v.url).slice(0,12);if(0===A.length)return d("unknown",v.body.includes("/_next/")?"version not exposed":"not a Next.js site");let x=null,$=0,I=!1;for(let e of A){if(0>=i(o)){I=!0;break}let t=await b(e,!0);if(t.ok&&200===t.status&&($++,x=function(e){for(let t of e.matchAll(m))if(c(t[1]))return t[1];for(let t of[f,h])for(let r of e.matchAll(t))if(c(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${y(r)}\s*=\s*${u}(${l})${u}`,"g"),a=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;a=r[1]}if(a&&c(a))return a}return null}(t.body)))break}if(!x)return Date.now()>=s?null:I||0>=i(o)?d("error","Reading the site's scripts took longer than 15 s"):0===$?d("error","Couldn't load the site's scripts"):d("unknown","version not exposed");let S=i(Date.now()+1e4);if(S<=0)return null;let j=await (0,w.y)(x,{timeoutMs:S,fetch:r.fetch});return j.ok?{version:x,status:j.findings.length?"vulnerable":"ok",findings:j.findings,reason:null,checkedAt:a()}:Date.now()>=s?null:d("error",j.error)}e.s(["P",0,k,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var b=e.i(7494),v=e.i(195191),A=e.i(146394);function x(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function $(e){let n=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,sec:a.appSecurity}).from(a.resources).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt),e?(0,t.u)(a.resources.id,e):void 0)).orderBy(r.B`${a.appSecurity.checkedAt} asc nulls first`,a.resources.name).limit(A.O.apps);if(!n.length)return[];let i=await (0,s.f)().select({resourceId:a.monitors.resourceId,url:a.monitors.url}).from(a.monitors).where((0,t.y)(a.monitors.resourceId,n.map(e=>e.id))).orderBy(a.monitors.createdAt).limit(A.O.monitors);return n.map(e=>({id:e.id,name:e.name,prev:e.sec?x(e.sec):null,host:(0,v.m)(e.name,i.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function I(e,n){await (0,s.f)().transaction(async s=>{await s.execute(r.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[i]=await s.select().from(a.appSecurity).where((0,t.u)(a.appSecurity.resourceId,e.id)).limit(1),l=i?x(i):null;if(l&&l.checkedAt.getTime()>=n.checkedAt.getTime())return;let u="unknown"===n.status||"error"===n.status?{...n,version:l?l.version:n.version,findings:l?l.findings:n.findings}:n,c={framework:"next",version:u.version,status:u.status,findings:u.findings,reason:u.reason,checkedAt:u.checkedAt};await s.insert(a.appSecurity).values({resourceId:e.id,...c}).onConflictDoUpdate({target:a.appSecurity.resourceId,set:c,setWhere:r.B`${a.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,b.t)(e.name,l,u);d&&await (0,o.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:u.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],s)})}async function S(e){let t=await $(),r=0,s=0,a=[];return await (0,n.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let a=await k(t.host,t.prev,{deadline:e});if(!a)return void s++;await I(t,a),r++}catch(e){a.push(`${t.name}: ${(0,i.f)(e)}`)}}),{checked:r,skipped:s,failed:a}}e.s(["h",0,S,"Z",0,x],800523)}]})();
+(()=>{"use strict";module.exports=[426099,e=>{var t=e.i(875225),r=e.i(971724),s=e.i(105954),a=e.i(604147),n=e.i(455744),i=e.i(924924),o=e.i(618916),l=e.i(61926),u=e.i(218331);let c=e=>{let t=(0,u.e)(e);return`${t.day} ${t.month} ${t.year}`},d=u.x;var p=e.i(122143),m=e.i(775843),f=e.i(146394),h=e.i(69679),g=e.i(145647);let y="advisor.latest",w=r.z.object({key:s.z.string(),severity:a.z.enum(["warning","info"]),appId:s.z.string().nullable(),subject:s.z.string(),title:s.z.string(),why:s.z.string(),fix:s.z.string(),href:s.z.string()}),k=r.z.object({at:s.z.string(),items:n.z.array(w)});async function b(e){let r=(0,t.b)((0,t.u)(o.resources.kind,"app"),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt)),s=await (0,g.P)(),a=await (0,h.V)(),[n,u,c,d,y]=await Promise.all([(0,i.f)().select({id:o.monitors.id,appId:o.monitors.resourceId,appName:o.resources.name,url:o.monitors.url,kind:o.monitors.kind,name:o.monitors.name,paused:o.monitors.paused,ownerPaused:o.monitors.ownerPaused,lastStatus:o.monitors.lastStatus,expectedStatus:o.monitors.expectedStatus,lastPingAt:o.monitors.lastPingAt,createdAt:o.monitors.createdAt}).from(o.monitors).innerJoin(o.resources,(0,t.u)(o.resources.id,o.monitors.resourceId)).where(r).orderBy(o.resources.name,o.monitors.url).limit(f.O.monitors),(0,i.f)().select({id:o.resources.id,name:o.resources.name,version:o.appSecurity.version}).from(o.resources).innerJoin(o.appSecurity,(0,t.u)(o.appSecurity.resourceId,o.resources.id)).where(r).orderBy(o.resources.name).limit(f.O.apps),(0,i.f)().select({id:o.resources.id,name:o.resources.name,kind:o.resources.kind,accountId:o.resources.accountId,accountLabel:o.accounts.label,state:o.snapshots.state}).from(o.resources).innerJoin(o.accounts,(0,t.u)(o.accounts.id,o.resources.accountId)).leftJoin(o.snapshots,(0,t.u)(o.snapshots.resourceId,o.resources.id)).where((0,t.b)((0,t.y)(o.resources.kind,[...p.H]),(0,t.u)(o.resources.monitored,!0),(0,t.M)(o.resources.goneAt))).orderBy(o.resources.name).limit(f.O.databases),(0,i.f)().select({appId:o.links.fromResourceId,dbId:o.links.toResourceId}).from(o.links).where((0,t.u)(o.links.kind,"uses_db")).limit(f.O.apps),(0,i.f)().select({id:o.accounts.id,provider:o.accounts.provider,label:o.accounts.label,expiresAt:o.accounts.expiresAt,scopeNote:o.accounts.scopeNote}).from(o.accounts).orderBy(o.accounts.label).limit(200)]);return{now:e,monitors:n.map(e=>({id:e.id,appId:e.appId,appName:e.appName,path:"heartbeat"===e.kind?e.url:(0,l.K)(e.url),kind:e.kind,name:e.name,paused:e.paused||e.ownerPaused,lastStatus:e.lastStatus,expectedStatus:e.expectedStatus,lastPingAt:e.lastPingAt,createdAt:e.createdAt})),eol:function(e,t){if(!t)return null;let r=t.cycles.find(e=>!e.isEol)?.latest??null,s=[];for(let a of e){let e=a.version?.split(".")[0],n=e?t.cycles.find(t=>t.name===e):void 0;n&&s.push({appId:a.id,appName:a.name,cycle:n.name,eolFrom:n.eolFrom?new Date(`${n.eolFrom}T00:00:00Z`):null,latest:r})}return s}(u,s),headers:null,dbs:c.map(e=>({id:e.id,name:e.name,provider:(0,p.Z)(e.kind),accountId:e.accountId,accountLabel:e.accountLabel,state:e.state??"unknown"})),slots:(0,m.f)(a).map(e=>({account:e.account,used:e.used,total:e.total,planUnknown:e.planUnknown})),links:d,accounts:y}}async function v(e){let t=function(e){let t=[];for(let r of e.eol??[]){if(!r.eolFrom||r.eolFrom.getTime()-e.now.getTime()>2592e6)continue;let s=r.eolFrom.getTime()<=e.now.getTime(),a=r.latest?.split(".")[0];t.push({key:`next-eol:${r.appId}:${r.cycle}`,severity:"warning",appId:r.appId,subject:r.appName,title:`Next.js ${r.cycle} ${s?"reached":"reaches"} end of life on ${c(r.eolFrom)}`,why:`No security fixes after that date.${r.latest?` Latest is ${r.latest}.`:""}`,fix:a?`Upgrade to Next.js ${a}.`:"Upgrade Next.js.",href:"https://endoflife.date/nextjs"})}for(let r of e.monitors)!r.paused&&("heartbeat"===r.kind&&!r.lastPingAt&&e.now.getTime()-r.createdAt.getTime()>864e5&&t.push({key:`hb-silent:${r.id}`,severity:"warning",appId:r.appId,subject:r.appName,title:`${r.name??"A heartbeat"} has never pinged`,why:"It was added more than a day ago and no job has called its URL.",fix:"Add the ping to the job, or delete the monitor.",href:"/uptime"}),"http"===r.kind&&"/"===r.path&&200===r.expectedStatus&&null!==r.lastStatus&&[401,403,404].includes(r.lastStatus)&&t.push({key:`monitor-root:${r.id}:${r.lastStatus}`,severity:"info",appId:r.appId,subject:r.appName,title:`The monitor on / answers ${r.lastStatus}`,why:`A login or missing page answering ${r.lastStatus} makes the monitor look down.`,fix:`Point the monitor at a public health route, or expect ${r.lastStatus}.`,href:"/uptime"}));for(let r of e.headers??[]){if(!r.missing.length)continue;let e=[...r.missing].sort();t.push({key:`headers:${r.appId}:${e.join(",")}`,severity:"info",appId:r.appId,subject:r.appName,title:`Missing security headers: ${e.join(", ")}`,why:"Browsers use them to block clickjacking, sniffing and downgrade attacks.",fix:"Add them in next.config headers().",href:"https://developer.mozilla.org/en-US/observatory"})}for(let r of e.slots??[])r.used<r.total||t.push({key:`no-slot:${r.account}`,severity:"warning",appId:null,subject:`supabase \xb7 ${r.account}`,title:`Account ${r.account} has no free slot`,why:r.planUnknown?"Two projects are active. If this account is on the free plan (it couldn't be read), a paused one can't be restored here.":"Both free projects are active, so a paused one can't be restored here.",fix:"Pause one project, or move one to another account.",href:"/supabase"});if(e.dbs&&e.links){let r=new Set(e.links.map(e=>e.dbId));for(let s of e.dbs.filter(e=>!r.has(e.id)))t.push({key:`db-unlinked:${s.id}`,severity:"info",appId:null,subject:s.name,title:"Database isn't linked to any app",why:"Topology and the app status can't use it.",fix:"Link it from the app page.",href:"/apps"})}for(let r of e.accounts)"supabase"===r.provider&&r.scopeNote&&/all[- ]access/i.test(r.scopeNote)&&t.push({key:`broad-cred:${r.id}`,severity:"info",appId:null,subject:`supabase \xb7 ${r.label}`,title:`${r.label} uses an all-access token`,why:"The console only reads; a broader token is a bigger risk if it ever leaks.",fix:"Replace it with a read-only token in Connections, then revoke the old one in Supabase.",href:"/connections"});for(let r of e.accounts){if(!r.expiresAt)continue;let s=r.expiresAt.getTime()-e.now.getTime();s>=12096e5&&s<=5184e6&&t.push({key:`cred-60:${r.id}:${d(r.expiresAt)}`,severity:"info",appId:null,subject:`${r.provider} \xb7 ${r.label}`,title:`The ${r.provider} credential ${r.label} expires on ${(0,u.L)(r.expiresAt)}`,why:"An expired credential stops every reading from that account.",fix:"Create a new one and use Replace credential in Connections.",href:"/connections"})}return t.map((e,t)=>({r:e,i:t})).sort((e,t)=>("warning"!==e.r.severity)-("warning"!==t.r.severity)||e.i-t.i).map(({r:e})=>e).slice(0,50)}(await b(e)),r={at:e.toISOString(),items:t};return await (0,i.f)().insert(o.settings).values({key:y,value:r}).onConflictDoUpdate({target:o.settings.key,set:{value:r,updatedAt:e}}),t}async function A(e){let[r]=await (0,i.f)().select({value:o.settings.value}).from(o.settings).where((0,t.u)(o.settings.key,y)).limit(1),s=k.safeParse(r?.value);return s.success?s.data.items:v(e)}async function x(e,r){var s;let a=await A(e);if(!a.length)return[];let n=await (0,i.f)().select({key:o.recommendationDismissals.key,dismissedAt:o.recommendationDismissals.dismissedAt}).from(o.recommendationDismissals).where((0,t.y)(o.recommendationDismissals.key,a.map(e=>e.key))).limit(50),l=(s=new Map(n.map(e=>[e.key,e.dismissedAt])),a.filter(t=>{let r=s.get(t.key);return!r||e.getTime()-r.getTime()>=2592e6}));return r?l.filter(e=>e.appId===r):l}e.s(["T",0,x,"O",0,v],426099)},367114,489099,505657,e=>{var t=e.i(875225),r=e.i(349129),s=e.i(924924),a=e.i(618916),n=e.i(195191),i=e.i(943816),o=e.i(46574),l=e.i(146394),u=e.i(69679),c=e.i(275426),d=e.i(703724);e.i(656083);var p=e.i(739886),m=e.i(890948),f=e.i(309055),h=e.i(800523);let g=e=>"string"==typeof e&&e?e:null;async function y(e,y){let w=await (0,s.f)().select({r:a.resources,s:a.snapshots,sec:a.appSecurity,accStatus:a.accounts.status}).from(a.resources).leftJoin(a.accounts,(0,t.u)(a.accounts.id,a.resources.accountId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),y?(0,t.u)(a.resources.id,y):void 0)).orderBy(a.resources.name).limit(l.O.apps);if(!w.length)return[];let k=w.map(e=>e.r.id),b=(await (0,s.f)().select().from(a.monitors).where((0,t.y)(a.monitors.resourceId,k)).orderBy(a.monitors.createdAt).limit(l.O.monitors)).map(f.M),v=await (0,s.f)().selectDistinctOn([a.deployments.resourceId]).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,k),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,r.A)(a.deployments.createdAtProvider)),A=await (0,m._)(b.map(e=>e.id),e),x=await (0,m.P)(k,e),$=await (0,u.F)(k),I=b.length?await (0,p.f)():[];return w.map(({r:t,s:r,sec:s,accStatus:a})=>{let u=b.filter(e=>e.appId===t.id).map(t=>({...t,maintUntil:(0,c.x)(I,{monitorId:t.id,appId:t.appId},e)?.end??null})),p=g(t.meta.createdAt),m=v.find(e=>e.resourceId===t.id);return{id:t.id,name:t.name,gone:null!==t.goneAt,state:r?.state??"unknown",stateSince:r?.stateSince??null,domain:(0,n.m)(t.name,u.map(e=>e.url)),framework:g(t.meta.framework),productionBranch:g(t.meta.productionBranch),createdAt:p?new Date(p):null,teamName:g(t.meta.teamName),teamSlug:g(t.meta.teamSlug),repo:g(t.meta.repo),repoType:g(t.meta.repoType),functionRegions:Array.isArray(t.meta.functionRegions)?t.meta.functionRegions.filter(e=>"string"==typeof e):[],monitors:u,lastDeploy:m?(0,d.f)(m):null,uptime30:(0,o.Y)(u.flatMap(t=>(0,o.w)(A.get(t.id),e,o.I))),response:x.get(t.id)??{hourly:Array.from({length:l.A.responseHours},()=>null),p95:null,p50:null},days:new Map(u.flatMap(e=>{let t=A.get(e.id);return t?[[e.id,t]]:[]})),security:s?(0,h.Z)(s):null,database:$.get(t.id)??null,dbPaused:r?.data.dbPaused===!0,pageViews:(0,i.G)(r?.data),pageViewsNote:(0,i.R)({gone:null!==t.goneAt,teamId:g(t.meta.teamId),accountOk:"ok"===a,hasProductionDeploy:void 0!==m})}})}async function w(e,t){return(await y(t,e))[0]??null}e.s(["Z",0,w,"G",0,y],367114);var k=e.i(518899),b=e.i(165788);let v=k.B`coalesce(${a.events.lastAt}, ${a.events.at})`;async function A(e=l.O.events,n={}){return(await (0,s.f)().select({e:a.events,name:a.resources.name}).from(a.events).leftJoin(a.resources,(0,t.u)(a.resources.id,a.events.resourceId)).where(n.excludeActions?(0,t.c)(a.events.type,"action"):void 0).orderBy((0,r.A)(v)).limit(Math.max(1,Math.min(Number.isFinite(e)?Math.floor(e):l.O.events,l.O.events)))).map(({e,name:t})=>({id:e.id,at:e.at,lastAt:e.lastAt??null,count:e.count??1,reason:e.reason??null,type:e.type,kind:e.kind,message:e.message,detail:e.detail,resourceId:e.resourceId??null,resource:(0,b.L)({type:e.type,reason:e.reason??null,message:e.message,resource:t})}))}e.s(["f",0,A],489099);var x=e.i(959408),$=e.i(122143);e.i(358660);let I=e=>"heartbeat"===e.kind?e.lastError?e.lastError.replace(/^(Down|Late) · /,""):"warn"===e.state?"Late":"No ping":(0,x.H)(e)??(e.lastStatus?`HTTP ${e.lastStatus}`:e.lastError||"No answer");e.s(["f",0,function(e,t){if(e.gone)return[];let r=[],s=e.monitors.filter(e=>(0,x.i)(e)&&!e.maintUntil&&("err"===e.state||"warn"===e.state)),a=e=>2*("heartbeat"===e.kind)+ +("err"!==e.state);for(let e of[...s].sort((e,t)=>a(e)-a(t))){let t="heartbeat"===e.kind,s=t?e.name??e.path:e.path;r.push({kind:"monitor",where:t?`Monitor ${s} (heartbeat)`:`Monitor ${s}`,subject:s,state:e.state,reason:I(e),since:e.stateSince??(t?e.lastPingAt??null:null),href:"/uptime",remedies:t?function(e){let t=(e.lastError??"").toLowerCase();return t.includes("failure")?["The job reported a failure: open its logs","Fix and re-run the job; the next OK ping clears it"]:t.includes("didn't finish")||t.includes("started")?["The job started but never finished: it may have hung or hit its timeout","Check the job's own logs for where it stopped","Raise the job's timeout, or fix what it waits on; the next OK ping clears it"]:["Check that the job's scheduler ran (cron, Vercel Cron, GitHub Actions)","Check the job's own logs for errors before the ping line","Make sure the job calls the ping URL at the end (curl -fsS -m 10 <url>)","If the job is retired, pause or delete the heartbeat"]}(e):function(e){let t=e.lastError??"";if(/blocked address/i.test(t))return["The monitor's URL resolves to a private address; fix the URL in Edit monitor"];let r=(0,x.H)(e);if(r&&/keyword|json|body|content/i.test(r))return["The page answered but its content changed: check the keyword or JSON path in Edit monitor, or the page itself"];let s=e.lastStatus;return null!==s&&s>=500?["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]:null!==s&&s>=300?["Check the expected status and path in Edit monitor","The route may need sign-in or moved"]:null===s||r?["Check the domain, DNS and the provider status page","Cold start or overload: retry with Check now"]:["Open Logs (last hour) for errors","Check the latest deployment; roll back if it started after the deploy"]}(e)})}e.dbPaused&&e.database&&r.push({kind:"database",where:`Database ${e.database.name}`,subject:e.database.name,state:"warn",reason:"Paused",since:e.stateSince??null,href:(0,$.N)(e.database.kind),remedies:["Restore the database from its provider (Supabase restore)"]});let i=e.lastDeploy;if(i&&"error"===i.state){let e=(0,n._)(i.commitSha);r.push({kind:"deployment",where:`Production deployment ${e}`,subject:e,state:"fail",reason:"Build failed",since:i.readyAt??i.createdAt,href:"/deployments",remedies:["Open the deployment's build logs; redeploy after fixing"]})}return r}],505657)},703724,e=>{e.i(924924),e.i(618916),e.s(["f",0,function(e){return{id:e.id,externalId:e.externalId,state:e.state,target:e.target,branch:e.branch,commitSha:e.commitSha,commitMessage:e.commitMessage,url:e.url,createdAt:e.createdAtProvider,buildingAt:e.buildingAt,readyAt:e.readyAt,isCurrent:e.isCurrent,isPreviousProduction:e.isPreviousProduction}}])},800523,970465,e=>{var t=e.i(875225),r=e.i(518899),s=e.i(924924),a=e.i(618916),n=e.i(442473),i=e.i(751762),o=e.i(656083);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,u="[\"'`]";function c(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let d={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},p=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>d[e]??d[e.toLowerCase()]??e),m=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${u}(${l})${u}`,"g"),f=RegExp(String.raw`version\s*:\s*${u}(${l})${u}\s*,\s*appDir\s*:`,"g"),h=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${u}(${l})${u}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,y=e=>e.replace(/[$]/g,"\\$");var w=e.i(267485);async function k(e,t,r={}){let s=r.deadline??1/0,a=r.now??(()=>new Date),i=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=i(o))return null;let d=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:a()}),b=(e,t)=>(0,n.K)(e,{maxBytes:3145728,timeoutMs:i(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),v=await b(`https://${e}/`,"www");if(!v.ok&&v.error===n.l)return d("unknown","the site redirects to another host");if(!v.ok||200!==v.status)return Date.now()>=s?null:d("error",`Couldn't load the site: ${v.ok?`HTTP ${v.status}`:v.error}`);let A=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(p(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var n;s.add(e.href),a.push({href:e.href,rank:(n=e.pathname,/\/main-app[-.]/.test(n)?0:/\/(main|app-index)[-.]/.test(n)?1:/\/(webpack|polyfills|framework)[-.]/.test(n)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(v.body,v.url).slice(0,12);if(0===A.length)return d("unknown",v.body.includes("/_next/")?"version not exposed":"not a Next.js site");let x=null,$=0,I=!1;for(let e of A){if(0>=i(o)){I=!0;break}let t=await b(e,!0);if(t.ok&&200===t.status&&($++,x=function(e){for(let t of e.matchAll(m))if(c(t[1]))return t[1];for(let t of[f,h])for(let r of e.matchAll(t))if(c(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${y(r)}\s*=\s*${u}(${l})${u}`,"g"),a=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;a=r[1]}if(a&&c(a))return a}return null}(t.body)))break}if(!x)return Date.now()>=s?null:I||0>=i(o)?d("error","Reading the site's scripts took longer than 15 s"):0===$?d("error","Couldn't load the site's scripts"):d("unknown","version not exposed");let S=i(Date.now()+1e4);if(S<=0)return null;let j=await (0,w.y)(x,{timeoutMs:S,fetch:r.fetch});return j.ok?{version:x,status:j.findings.length?"vulnerable":"ok",findings:j.findings,reason:null,checkedAt:a()}:Date.now()>=s?null:d("error",j.error)}e.s(["P",0,k,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var b=e.i(7494),v=e.i(195191),A=e.i(146394);function x(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function $(e){let n=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,sec:a.appSecurity}).from(a.resources).leftJoin(a.appSecurity,(0,t.u)(a.appSecurity.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt),e?(0,t.u)(a.resources.id,e):void 0)).orderBy(r.B`${a.appSecurity.checkedAt} asc nulls first`,a.resources.name).limit(A.O.apps);if(!n.length)return[];let i=await (0,s.f)().select({resourceId:a.monitors.resourceId,url:a.monitors.url}).from(a.monitors).where((0,t.y)(a.monitors.resourceId,n.map(e=>e.id))).orderBy(a.monitors.createdAt).limit(A.O.monitors);return n.map(e=>({id:e.id,name:e.name,prev:e.sec?x(e.sec):null,host:(0,v.m)(e.name,i.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function I(e,n){await (0,s.f)().transaction(async s=>{await s.execute(r.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[i]=await s.select().from(a.appSecurity).where((0,t.u)(a.appSecurity.resourceId,e.id)).limit(1),l=i?x(i):null;if(l&&l.checkedAt.getTime()>=n.checkedAt.getTime())return;let u="unknown"===n.status||"error"===n.status?{...n,version:l?l.version:n.version,findings:l?l.findings:n.findings}:n,c={framework:"next",version:u.version,status:u.status,findings:u.findings,reason:u.reason,checkedAt:u.checkedAt};await s.insert(a.appSecurity).values({resourceId:e.id,...c}).onConflictDoUpdate({target:a.appSecurity.resourceId,set:c,setWhere:r.B`${a.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,b.t)(e.name,l,u);d&&await (0,o.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:u.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],s)})}async function S(e){let t=await $(),r=0,s=0,a=[];return await (0,n.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let a=await k(t.host,t.prev,{deadline:e});if(!a)return void s++;await I(t,a),r++}catch(e){a.push(`${t.name}: ${(0,i.f)(e)}`)}}),{checked:r,skipped:s,failed:a}}e.s(["h",0,S,"Z",0,x],800523)}]})();
 
 //# sourceMappingURL=src_lib_data_0e155tkqeoojm._.js.map