watchbell 1.1.0 → 1.2.0

package/server/.next/server/chunks/_1b7pc6ohhqxs3._.js

@@ -1,5 +1,5 @@
 module.exports=[[132245,(e,t,r)=>{function s(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,r=new WeakMap;return(s=function(e){return e?r:t})(e)}r._=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e||"object"!=typeof e&&"function"!=typeof e)return{default:e};var r=s(t);if(r&&r.has(e))return r.get(e);var n={__proto__:null},i=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var a in e)if("default"!==a&&Object.prototype.hasOwnProperty.call(e,a)){var o=i?Object.getOwnPropertyDescriptor(e,a):null;o&&(o.get||o.set)?Object.defineProperty(n,a,o):n[a]=e[a]}return n.default=e,r&&r.set(e,n),n}},738458,(e,t,r)=>{let s;Object.defineProperty(r,"__esModule",{value:!0}),r.parseCookie=h,r.parse=h,r.stringifyCookie=function(e,t){let r=t?.encode||encodeURIComponent,s=[];for(let t of Object.keys(e)){let a=e[t];if(void 0===a)continue;if(!n.test(t))throw TypeError(`cookie name is invalid: ${t}`);let o=r(a);if(!i.test(o))throw TypeError(`cookie val is invalid: ${a}`);s.push(`${t}=${o}`)}return s.join("; ")},r.stringifySetCookie=d,r.serialize=d,r.parseSetCookie=function(e,t){let r=t?.decode||g,s=e.length,n=p(e,0,s),i=f(e,0,n),a=-1===i?{name:"",value:r(m(e,0,n))}:{name:m(e,0,i),value:r(m(e,i+1,n))},o=n+1;for(;o<s;){let t=p(e,o,s),r=f(e,o,t),n=-1===r?m(e,o,t):m(e,o,r),i=-1===r?void 0:m(e,r+1,t);switch(n.toLowerCase()){case"httponly":a.httpOnly=!0;break;case"secure":a.secure=!0;break;case"partitioned":a.partitioned=!0;break;case"domain":a.domain=i;break;case"path":a.path=i;break;case"max-age":i&&l.test(i)&&(a.maxAge=Number(i));break;case"expires":if(!i)break;let c=new Date(i);Number.isFinite(c.valueOf())&&(a.expires=c);break;case"priority":if(!i)break;let u=i.toLowerCase();("low"===u||"medium"===u||"high"===u)&&(a.priority=u);break;case"samesite":if(!i)break;let h=i.toLowerCase();("lax"===h||"strict"===h||"none"===h)&&(a.sameSite=h)}o=t+1}return a},r.stringifySetCookie=d,r.serialize=d;let n=/^[\u0021-\u003A\u003C\u003E-\u007E]+$/,i=/^[\u0021-\u003A\u003C-\u007E]*$/,a=/^([.]?[a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)([.][a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?)*$/i,o=/^[\u0020-\u003A\u003D-\u007E]*$/,l=/^-?\d+$/,c=Object.prototype.toString,u=((s=function(){}).prototype=Object.create(null),s);function h(e,t){let r=new u,s=e.length;if(s<2)return r;let n=t?.decode||g,i=0;do{let t=f(e,i,s);if(-1===t)break;let a=p(e,i,s);if(t>a){i=e.lastIndexOf(";",t-1)+1;continue}let o=m(e,i,t);void 0===r[o]&&(r[o]=n(m(e,t+1,a))),i=a+1}while(i<s)return r}function d(e,t,r){let s="object"==typeof e?e:{...r,name:e,value:String(t)},l=("object"==typeof t?t:r)?.encode||encodeURIComponent;if(!n.test(s.name))throw TypeError(`argument name is invalid: ${s.name}`);let u=s.value?l(s.value):"";if(!i.test(u))throw TypeError(`argument val is invalid: ${s.value}`);let h=s.name+"="+u;if(void 0!==s.maxAge){if(!Number.isInteger(s.maxAge))throw TypeError(`option maxAge is invalid: ${s.maxAge}`);h+="; Max-Age="+s.maxAge}if(s.domain){if(!a.test(s.domain))throw TypeError(`option domain is invalid: ${s.domain}`);h+="; Domain="+s.domain}if(s.path){if(!o.test(s.path))throw TypeError(`option path is invalid: ${s.path}`);h+="; Path="+s.path}if(s.expires){var d;if(d=s.expires,"[object Date]"!==c.call(d)||!Number.isFinite(s.expires.valueOf()))throw TypeError(`option expires is invalid: ${s.expires}`);h+="; Expires="+s.expires.toUTCString()}if(s.httpOnly&&(h+="; HttpOnly"),s.secure&&(h+="; Secure"),s.partitioned&&(h+="; Partitioned"),s.priority)switch("string"==typeof s.priority?s.priority.toLowerCase():void 0){case"low":h+="; Priority=Low";break;case"medium":h+="; Priority=Medium";break;case"high":h+="; Priority=High";break;default:throw TypeError(`option priority is invalid: ${s.priority}`)}if(s.sameSite)switch("string"==typeof s.sameSite?s.sameSite.toLowerCase():s.sameSite){case!0:case"strict":h+="; SameSite=Strict";break;case"lax":h+="; SameSite=Lax";break;case"none":h+="; SameSite=None";break;default:throw TypeError(`option sameSite is invalid: ${s.sameSite}`)}return h}function p(e,t,r){let s=e.indexOf(";",t);return -1===s?r:s}function f(e,t,r){let s=e.indexOf("=",t);return s<r?s:-1}function m(e,t,r){let s=t,n=r;do{let t=e.charCodeAt(s);if(32!==t&&9!==t)break}while(++s<n)for(;n>s;){let t=e.charCodeAt(n-1);if(32!==t&&9!==t)break;n--}return e.slice(s,n)}function g(e){if(-1===e.indexOf("%"))return e;try{return decodeURIComponent(e)}catch(t){return e}}},63493,e=>{var t=e.i(31194);e.n(t)},133791,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0});var s={default:function(){return l},useLinkStatus:function(){return o.useLinkStatus}};for(var n in s)Object.defineProperty(r,n,{enumerable:!0,get:s[n]});let i=e.r(132245),a=e.r(133210),o=i._(e.r(63493));function l(e){let t=e.legacyBehavior,r="string"==typeof e.children||"number"==typeof e.children||"string"==typeof e.children?.type,s=e.children?.type?.$$typeof===Symbol.for("react.client.reference");return!t||r||s||(e.children?.type?.$$typeof===Symbol.for("react.lazy")?console.error("Using a Lazy Component as a direct child of `<Link legacyBehavior>` from a Server Component is not supported. If you need legacyBehavior, wrap your Lazy Component in a Client Component that renders the Link's `<a>` tag."):console.error("Using a Server Component as a direct child of `<Link legacyBehavior>` is not supported. If you need legacyBehavior, wrap your Server Component in a Client Component that renders the Link's `<a>` tag.")),(0,a.jsx)(o.default,{...e})}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},385585,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"after",{enumerable:!0,get:function(){return i}});let s=e.r(556704),n=e.r(832319);function i(e){let t=s.workAsyncStorage.getStore(),r=n.workUnitAsyncStorage.getStore();if(!t||!r)throw Error("`after` was called outside a request scope. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context");let{afterContext:i}=t;return i.after(e,r)}},910473,(e,t,r)=>{var s,n;Object.defineProperty(r,"__esModule",{value:!0}),s=e.r(385585),n=r,Object.keys(s).forEach(function(e){"default"===e||Object.prototype.hasOwnProperty.call(n,e)||Object.defineProperty(n,e,{enumerable:!0,get:function(){return s[e]}})})},476550,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"connection",{enumerable:!0,get:function(){return h}});let s=e.r(556704),n=e.r(832319),i=e.r(258200),a=e.r(183589),o=e.r(225176),l=e.r(679847);e.r(865832);let c=e.r(585346),u=e.r(748448);function h(){let e=s.workAsyncStorage.getStore(),t=n.workUnitAsyncStorage.getStore();if(e){if(t&&!(0,l.isRequestApiAllowedInCurrentPhase)(t))throw Error(`Route ${e.route} used \`connection()\` inside \`after()\` while rendering. The \`connection()\` function is used to indicate the subsequent code must only run when there is an actual Request, but \`after()\` executes after the request, so this function is not allowed in this scope. See more info here: https://nextjs.org/docs/app/api-reference/functions/after`);if(e.forceStatic)return Promise.resolve(void 0);if(e.dynamicShouldError)throw new a.StaticGenBailoutError(`Route ${e.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`connection()\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`);if(t)switch(t.type){case"cache":{let t=(0,u.createConnectionInPublicUseCacheError)(e.route);throw Error.captureStackTrace(t,h),(0,o.applyOwnerStack)(t),e.invalidDynamicUsageError??=t,t}case"private-cache":{let t=(0,u.createConnectionInPrivateUseCacheError)(e.route);throw Error.captureStackTrace(t,h),(0,o.applyOwnerStack)(t),e.invalidDynamicUsageError??=t,t}case"unstable-cache":throw(0,u.createConnectionInUnstableCacheError)(e.route);case"build-time-generator":throw Error(`Route ${e.route} used \`connection()\` inside \`${t.functionName}\`. This is not supported because \`${t.functionName}\` runs at build time without an HTTP request. Read more: https://nextjs.org/docs/messages/next-dynamic-api-wrong-context`);case"prerender":case"prerender-client":case"prerender-runtime":return(0,o.makeDynamicHangingPromise)(t.renderSignal,e.route,"`connection()`");case"validation-client":{let e="`connection`";throw new c.InvariantError(`${e} must not be used within a Client Component. Next.js should be preventing ${e} from being included in Client Components statically, but did not in this case.`)}case"prerender-legacy":return(0,i.throwToInterruptStaticGeneration)("connection",e,t);case"request":if((0,i.trackDynamicDataInDynamicRender)(t),t.asyncApiPromises)return t.asyncApiPromises.connection;return Promise.resolve(void 0)}}(0,n.throwForMissingRequestStore)("connection")}},133210,(e,t,r)=>{t.exports=e.r(307450).vendored["react-rsc"].ReactJsxRuntime},310086,(e,t,r)=>{t.exports=e.r(307450).vendored["react-rsc"].ReactServerDOMTurbopackServer},853702,(e,t,r)=>{function s(){throw Error('ImageResponse moved from "next/server" to "next/og" since Next.js 14, please import from "next/og" instead')}Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"ImageResponse",{enumerable:!0,get:function(){return s}})},628661,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"NextResponse",{enumerable:!0,get:function(){return h}});let s=e.r(86547),n=e.r(723866),i=e.r(287790),a=e.r(770956),o=e.r(86547),l=Symbol("internal response"),c=new Set([301,302,303,307,308]);function u(e,t){var r;if(null==e||null==(r=e.request)?void 0:r.headers){if(!(e.request.headers instanceof Headers))throw Error("request.headers must be an instance of Headers");let r=[];for(let[s,n]of e.request.headers)t.set("x-middleware-request-"+s,n),r.push(s);t.set("x-middleware-override-headers",r.join(","))}}class h extends Response{constructor(e,t={}){super(e,t);let r=this.headers,c=new Proxy(new o.ResponseCookies(r),{get(e,n,i){switch(n){case"delete":case"set":return(...i)=>{let a=Reflect.apply(e[n],e,i),l=new Headers(r);return a instanceof o.ResponseCookies&&r.set("x-middleware-set-cookie",a.getAll().map(e=>(0,s.stringifyCookie)(e)).join(",")),u(t,l),a};default:return a.ReflectAdapter.get(e,n,i)}}});this[l]={cookies:c,url:t.url?new n.NextURL(t.url,{headers:(0,i.toNodeOutgoingHttpHeaders)(r),nextConfig:t.nextConfig}):void 0}}[Symbol.for("edge-runtime.inspect.custom")](){return{cookies:this.cookies,url:this.url,body:this.body,bodyUsed:this.bodyUsed,headers:Object.fromEntries(this.headers),ok:this.ok,redirected:this.redirected,status:this.status,statusText:this.statusText,type:this.type}}get cookies(){return this[l].cookies}static json(e,t){let r=Response.json(e,t);return new h(r.body,r)}static redirect(e,t){let r="number"==typeof t?t:(null==t?void 0:t.status)??307;if(!c.has(r))throw RangeError('Failed to execute "redirect" on "response": Invalid status code');let s="object"==typeof t?t:{},n=new Headers(null==s?void 0:s.headers);return n.set("Location",(0,i.validateURL)(e)),new h(null,{...s,headers:n,status:r})}static rewrite(e,t){let r=new Headers(null==t?void 0:t.headers);return r.set("x-middleware-rewrite",(0,i.validateURL)(e)),u(t,r),new h(null,{...t,headers:r})}static next(e){let t=new Headers(null==e?void 0:e.headers);return t.set("x-middleware-next","1"),u(e,t),new h(null,{...e,headers:t})}}},374644,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0}),Object.defineProperty(r,"URLPattern",{enumerable:!0,get:function(){return s}});let s="u"<typeof URLPattern?void 0:URLPattern},276870,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0});var s,n={isBot:function(){return o},userAgent:function(){return c},userAgentFromString:function(){return l}};for(var i in n)Object.defineProperty(r,i,{enumerable:!0,get:n[i]});let a=(s=e.r(547850))&&s.__esModule?s:{default:s};function o(e){return/Googlebot|Mediapartners-Google|AdsBot-Google|googleweblight|Storebot-Google|Google-PageRenderer|Google-InspectionTool|Bingbot|BingPreview|Slurp|DuckDuckBot|baiduspider|yandex|sogou|LinkedInBot|bitlybot|tumblr|vkShare|quora link preview|facebookexternalhit|facebookcatalog|Twitterbot|applebot|redditbot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|ia_archiver|GPTBot/i.test(e)}function l(e){return{...(0,a.default)(e),isBot:void 0!==e&&o(e)}}function c({headers:e}){return l(e.get("user-agent")||void 0)}},352565,e=>{var t=e.i(310086);(0,t.registerClientReference)(function(){throw Error("Attempted to call AliasProvider() from the server but AliasProvider is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","AliasProvider"),(0,t.registerClientReference)(function(){throw Error("Attempted to call DbName() from the server but DbName is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","DbName"),(0,t.registerClientReference)(function(){throw Error("Attempted to call Masked() from the server but Masked is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Masked");let r=(0,t.registerClientReference)(function(){throw Error("Attempted to call MaskedText() from the server but MaskedText is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","MaskedText");(0,t.registerClientReference)(function(){throw Error("Attempted to call Reveal() from the server but Reveal is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Reveal"),(0,t.registerClientReference)(function(){throw Error("Attempted to call maskedValue() from the server but maskedValue is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","maskedValue"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useAliasBook() from the server but useAliasBook is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useAliasBook"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useMask() from the server but useMask is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useMask"),(0,t.registerClientReference)(function(){throw Error("Attempted to call usePrivacy() from the server but usePrivacy is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","usePrivacy"),e.s(["MaskedText",0,r])},639307,e=>{var t=e.i(352565);e.n(t)},455891,e=>{var t=e.i(336763),r=e.i(75064),s=e.i(492973),n=e.i(79322),i=e.i(909592),a=e.i(406212),o=e.i(530298),l=e.i(27479),c=e.i(728335);let u=e=>{let t=(0,c.calendarDate)(e);return`${t.day} ${t.month} ${t.year}`},h=c.dayKey;var d=e.i(857799),p=e.i(123076),f=e.i(70377),m=e.i(586307),g=e.i(827439);let b="advisor.latest",y=r.z.object({key:s.z.string(),severity:n.z.enum(["warning","info"]),appId:s.z.string().nullable(),subject:s.z.string(),title:s.z.string(),why:s.z.string(),fix:s.z.string(),href:s.z.string()}),w=r.z.object({at:s.z.string(),items:i.z.array(y)});async function v(e){let r=(0,t.and)((0,t.eq)(o.resources.kind,"app"),(0,t.eq)(o.resources.monitored,!0),(0,t.isNull)(o.resources.goneAt)),s=await (0,g.P)(),n=await (0,m.V)(),[i,c,u,h,b]=await Promise.all([(0,a.db)().select({id:o.monitors.id,appId:o.monitors.resourceId,appName:o.resources.name,url:o.monitors.url,kind:o.monitors.kind,name:o.monitors.name,paused:o.monitors.paused,ownerPaused:o.monitors.ownerPaused,lastStatus:o.monitors.lastStatus,expectedStatus:o.monitors.expectedStatus,lastPingAt:o.monitors.lastPingAt,createdAt:o.monitors.createdAt}).from(o.monitors).innerJoin(o.resources,(0,t.eq)(o.resources.id,o.monitors.resourceId)).where(r).orderBy(o.resources.name,o.monitors.url).limit(f.O.monitors),(0,a.db)().select({id:o.resources.id,name:o.resources.name,version:o.appSecurity.version}).from(o.resources).innerJoin(o.appSecurity,(0,t.eq)(o.appSecurity.resourceId,o.resources.id)).where(r).orderBy(o.resources.name).limit(f.O.apps),(0,a.db)().select({id:o.resources.id,name:o.resources.name,kind:o.resources.kind,accountId:o.resources.accountId,accountLabel:o.accounts.label,state:o.snapshots.state}).from(o.resources).innerJoin(o.accounts,(0,t.eq)(o.accounts.id,o.resources.accountId)).leftJoin(o.snapshots,(0,t.eq)(o.snapshots.resourceId,o.resources.id)).where((0,t.and)((0,t.inArray)(o.resources.kind,[...d.H]),(0,t.eq)(o.resources.monitored,!0),(0,t.isNull)(o.resources.goneAt))).orderBy(o.resources.name).limit(f.O.databases),(0,a.db)().select({appId:o.links.fromResourceId,dbId:o.links.toResourceId}).from(o.links).where((0,t.eq)(o.links.kind,"uses_db")).limit(f.O.apps),(0,a.db)().select({id:o.accounts.id,provider:o.accounts.provider,label:o.accounts.label,expiresAt:o.accounts.expiresAt,scopeNote:o.accounts.scopeNote}).from(o.accounts).orderBy(o.accounts.label).limit(200)]);return{now:e,monitors:i.map(e=>({id:e.id,appId:e.appId,appName:e.appName,path:"heartbeat"===e.kind?e.url:(0,l.K)(e.url),kind:e.kind,name:e.name,paused:e.paused||e.ownerPaused,lastStatus:e.lastStatus,expectedStatus:e.expectedStatus,lastPingAt:e.lastPingAt,createdAt:e.createdAt})),eol:function(e,t){if(!t)return null;let r=t.cycles.find(e=>!e.isEol)?.latest??null,s=[];for(let n of e){let e=n.version?.split(".")[0],i=e?t.cycles.find(t=>t.name===e):void 0;i&&s.push({appId:n.id,appName:n.name,cycle:i.name,eolFrom:i.eolFrom?new Date(`${i.eolFrom}T00:00:00Z`):null,latest:r})}return s}(c,s),headers:null,dbs:u.map(e=>({id:e.id,name:e.name,provider:(0,d.Z)(e.kind),accountId:e.accountId,accountLabel:e.accountLabel,state:e.state??"unknown"})),slots:(0,p.f)(n).map(e=>({account:e.account,used:e.used,total:e.total,planUnknown:e.planUnknown})),links:h,accounts:b}}async function k(e){let t=function(e){let t=[];for(let r of e.eol??[]){if(!r.eolFrom||r.eolFrom.getTime()-e.now.getTime()>2592e6)continue;let s=r.eolFrom.getTime()<=e.now.getTime(),n=r.latest?.split(".")[0];t.push({key:`next-eol:${r.appId}:${r.cycle}`,severity:"warning",appId:r.appId,subject:r.appName,title:`Next.js ${r.cycle} ${s?"reached":"reaches"} end of life on ${u(r.eolFrom)}`,why:`No security fixes after that date.${r.latest?` Latest is ${r.latest}.`:""}`,fix:n?`Upgrade to Next.js ${n}.`:"Upgrade Next.js.",href:"https://endoflife.date/nextjs"})}for(let r of e.monitors)!r.paused&&("heartbeat"===r.kind&&!r.lastPingAt&&e.now.getTime()-r.createdAt.getTime()>864e5&&t.push({key:`hb-silent:${r.id}`,severity:"warning",appId:r.appId,subject:r.appName,title:`${r.name??"A heartbeat"} has never pinged`,why:"It was added more than a day ago and no job has called its URL.",fix:"Add the ping to the job, or delete the monitor.",href:"/uptime"}),"http"===r.kind&&"/"===r.path&&200===r.expectedStatus&&null!==r.lastStatus&&[401,403,404].includes(r.lastStatus)&&t.push({key:`monitor-root:${r.id}:${r.lastStatus}`,severity:"info",appId:r.appId,subject:r.appName,title:`The monitor on / answers ${r.lastStatus}`,why:`A login or missing page answering ${r.lastStatus} makes the monitor look down.`,fix:`Point the monitor at a public health route, or expect ${r.lastStatus}.`,href:"/uptime"}));for(let r of e.headers??[]){if(!r.missing.length)continue;let e=[...r.missing].sort();t.push({key:`headers:${r.appId}:${e.join(",")}`,severity:"info",appId:r.appId,subject:r.appName,title:`Missing security headers: ${e.join(", ")}`,why:"Browsers use them to block clickjacking, sniffing and downgrade attacks.",fix:"Add them in next.config headers().",href:"https://developer.mozilla.org/en-US/observatory"})}for(let r of e.slots??[])r.used<r.total||t.push({key:`no-slot:${r.account}`,severity:"warning",appId:null,subject:`supabase \xb7 ${r.account}`,title:`Account ${r.account} has no free slot`,why:r.planUnknown?"Two projects are active. If this account is on the free plan (it couldn't be read), a paused one can't be restored here.":"Both free projects are active, so a paused one can't be restored here.",fix:"Pause one project, or move one to another account.",href:"/supabase"});if(e.dbs&&e.links){let r=new Set(e.links.map(e=>e.dbId));for(let s of e.dbs.filter(e=>!r.has(e.id)))t.push({key:`db-unlinked:${s.id}`,severity:"info",appId:null,subject:s.name,title:"Database isn't linked to any app",why:"Topology and the app status can't use it.",fix:"Link it from the app page.",href:"/apps"})}for(let r of e.accounts)"supabase"===r.provider&&r.scopeNote&&/all[- ]access/i.test(r.scopeNote)&&t.push({key:`broad-cred:${r.id}`,severity:"info",appId:null,subject:`supabase \xb7 ${r.label}`,title:`${r.label} uses an all-access token`,why:"The console only reads; a broader token is a bigger risk if it ever leaks.",fix:"Replace it with a read-only token in Connections, then revoke the old one in Supabase.",href:"/connections"});for(let r of e.accounts){if(!r.expiresAt)continue;let s=r.expiresAt.getTime()-e.now.getTime();s>=12096e5&&s<=5184e6&&t.push({key:`cred-60:${r.id}:${h(r.expiresAt)}`,severity:"info",appId:null,subject:`${r.provider} \xb7 ${r.label}`,title:`The ${r.provider} credential ${r.label} expires on ${(0,c.dayMonth)(r.expiresAt)}`,why:"An expired credential stops every reading from that account.",fix:"Create a new one and use Replace credential in Connections.",href:"/connections"})}return t.map((e,t)=>({r:e,i:t})).sort((e,t)=>("warning"!==e.r.severity)-("warning"!==t.r.severity)||e.i-t.i).map(({r:e})=>e).slice(0,50)}(await v(e)),r={at:e.toISOString(),items:t};return await (0,a.db)().insert(o.settings).values({key:b,value:r}).onConflictDoUpdate({target:o.settings.key,set:{value:r,updatedAt:e}}),t}async function _(e){let[r]=await (0,a.db)().select({value:o.settings.value}).from(o.settings).where((0,t.eq)(o.settings.key,b)).limit(1),s=w.safeParse(r?.value);return s.success?s.data.items:k(e)}async function S(e,r){var s;let n=await _(e);if(!n.length)return[];let i=await (0,a.db)().select({key:o.recommendationDismissals.key,dismissedAt:o.recommendationDismissals.dismissedAt}).from(o.recommendationDismissals).where((0,t.inArray)(o.recommendationDismissals.key,n.map(e=>e.key))).limit(50),l=(s=new Map(i.map(e=>[e.key,e.dismissedAt])),n.filter(t=>{let r=s.get(t.key);return!r||e.getTime()-r.getTime()>=2592e6}));return r?l.filter(e=>e.appId===r):l}e.s(["T",0,S,"O",0,k],455891)},42784,464161,e=>{var t=e.i(336763),r=e.i(396918),s=e.i(406212),n=e.i(530298),i=e.i(412948),a=e.i(178233),o=e.i(785194),l=e.i(70377),c=e.i(586307),u=e.i(764266),h=e.i(471843);e.i(333407);var d=e.i(706959),p=e.i(706539),f=e.i(380719),m=e.i(584820);let g=e=>"string"==typeof e&&e?e:null;async function b(e,b){let y=await (0,s.db)().select({r:n.resources,s:n.snapshots,sec:n.appSecurity,accStatus:n.accounts.status}).from(n.resources).leftJoin(n.accounts,(0,t.eq)(n.accounts.id,n.resources.accountId)).leftJoin(n.snapshots,(0,t.eq)(n.snapshots.resourceId,n.resources.id)).leftJoin(n.appSecurity,(0,t.eq)(n.appSecurity.resourceId,n.resources.id)).where((0,t.and)((0,t.eq)(n.resources.kind,"app"),(0,t.eq)(n.resources.monitored,!0),b?(0,t.eq)(n.resources.id,b):void 0)).orderBy(n.resources.name).limit(l.O.apps);if(!y.length)return[];let w=y.map(e=>e.r.id),v=(await (0,s.db)().select().from(n.monitors).where((0,t.inArray)(n.monitors.resourceId,w)).orderBy(n.monitors.createdAt).limit(l.O.monitors)).map(f.M),k=await (0,s.db)().selectDistinctOn([n.deployments.resourceId]).from(n.deployments).where((0,t.and)((0,t.inArray)(n.deployments.resourceId,w),(0,t.eq)(n.deployments.target,"production"))).orderBy(n.deployments.resourceId,(0,r.desc)(n.deployments.createdAtProvider)),_=await (0,p._)(v.map(e=>e.id),e),S=await (0,p.P)(w,e),x=await (0,c.F)(w),A=v.length?await (0,d.f)():[];return y.map(({r:t,s:r,sec:s,accStatus:n})=>{let c=v.filter(e=>e.appId===t.id).map(t=>({...t,maintUntil:(0,u.x)(A,{monitorId:t.id,appId:t.appId},e)?.end??null})),d=g(t.meta.createdAt),p=k.find(e=>e.resourceId===t.id);return{id:t.id,name:t.name,gone:null!==t.goneAt,state:r?.state??"unknown",stateSince:r?.stateSince??null,domain:(0,i.m)(t.name,c.map(e=>e.url)),framework:g(t.meta.framework),productionBranch:g(t.meta.productionBranch),createdAt:d?new Date(d):null,teamName:g(t.meta.teamName),teamSlug:g(t.meta.teamSlug),repo:g(t.meta.repo),repoType:g(t.meta.repoType),functionRegions:Array.isArray(t.meta.functionRegions)?t.meta.functionRegions.filter(e=>"string"==typeof e):[],monitors:c,lastDeploy:p?(0,h.f)(p):null,uptime30:(0,o.Y)(c.flatMap(t=>(0,o.w)(_.get(t.id),e,o.I))),response:S.get(t.id)??{hourly:Array.from({length:l.A.responseHours},()=>null),p95:null,p50:null},days:new Map(c.flatMap(e=>{let t=_.get(e.id);return t?[[e.id,t]]:[]})),security:s?(0,m.Z)(s):null,database:x.get(t.id)??null,dbPaused:r?.data.dbPaused===!0,pageViews:(0,a.G)(r?.data),pageViewsNote:(0,a.R)({gone:null!==t.goneAt,teamId:g(t.meta.teamId),accountOk:"ok"===n,hasProductionDeploy:void 0!==p})}})}e.s(["f",0,b],42784);var y=e.i(533102);y.sql`coalesce(${n.events.lastAt}, ${n.events.at})`,e.s([],464161)},471843,e=>{e.i(406212),e.i(530298),e.s(["f",0,function(e){return{id:e.id,externalId:e.externalId,state:e.state,target:e.target,branch:e.branch,commitSha:e.commitSha,commitMessage:e.commitMessage,url:e.url,createdAt:e.createdAtProvider,buildingAt:e.buildingAt,readyAt:e.readyAt,isCurrent:e.isCurrent,isPreviousProduction:e.isPreviousProduction}}])},328586,e=>{var t=e.i(336763),r=e.i(396918),s=e.i(406212),n=e.i(530298),i=e.i(112515),a=e.i(803237),o=e.i(93387);let l=e=>e.trim().toLowerCase();var c=e.i(802641),u=e.i(958948);async function h(e){let l=e?(0,t.and)((0,t.eq)(n.accounts.id,e),(0,t.eq)(n.accounts.provider,"github")):(0,t.eq)(n.accounts.provider,"github"),[c]=await (0,s.db)().select().from(n.accounts).where(l).orderBy((0,r.asc)(n.accounts.createdAt)).limit(1);if(!c)return null;let u=(0,a.V)({ciphertext:c.credentialCiphertext,iv:c.credentialIv},(0,o.serverEnv)().OPS_ENCRYPTION_KEY);return{account:c,token:u,problem:(0,i.A)(u)}}async function d(e,t,r){let s=0;for(let n=0;n<e.length&&!(Date.now()>t);n+=5){let t=e.slice(n,n+5);s+=t.length,await Promise.allSettled(t.map(r))}return s}async function p(e,r,a={}){var o,c;let m,g,b=await h(e);if(!b)return{ok:!1,error:"GitHub isn't connected."};let{account:y,token:w,problem:v}=b;if(v||!w)return{ok:!1,error:v??"The credential can't be read."};let k=await (0,u.o)(w,a);if(!k.ok){let e=(0,i.E)({ok:!1,kind:"scope"===k.kind?"auth":"missing"===k.kind?"transient":k.kind,error:k.error});return e&&await (0,s.db)().update(n.accounts).set({...e,updatedAt:new Date}).where((0,t.eq)(n.accounts.id,y.id)),{ok:!1,error:k.error}}let _=new Date,S=(o=await (0,s.db)().select({id:n.githubRepos.id,externalId:n.githubRepos.externalId,goneAt:n.githubRepos.goneAt}).from(n.githubRepos).where((0,t.eq)(n.githubRepos.accountId,y.id)).limit(1e3),c=k.data.repos,m=new Map(o.map(e=>[e.externalId,e])),g=new Set(c.map(e=>e.id)),{insert:c.filter(e=>!m.has(e.id)),update:c.filter(e=>m.has(e.id)).map(e=>({id:m.get(e.id).id,repo:e})),gone:o.filter(e=>!g.has(e.externalId)&&!e.goneAt).map(e=>e.id)}),x=e=>({owner:e.owner,name:e.name,fullName:e.fullName,defaultBranch:e.defaultBranch,private:e.private,archived:e.archived,htmlUrl:e.htmlUrl,pushedAt:e.pushedAt});await (0,s.db)().transaction(async e=>{for(let r of S.update)await e.update(n.githubRepos).set({...x(r.repo),lastSeenAt:_,goneAt:null,updatedAt:_}).where((0,t.eq)(n.githubRepos.id,r.id));S.insert.length&&await e.insert(n.githubRepos).values(S.insert.map(e=>({accountId:y.id,externalId:e.id,...x(e)}))).onConflictDoNothing({target:[n.githubRepos.accountId,n.githubRepos.externalId]}),S.gone.length&&await e.update(n.githubRepos).set({goneAt:_,updatedAt:_}).where((0,t.and)((0,t.inArray)(n.githubRepos.id,S.gone),(0,t.isNull)(n.githubRepos.goneAt)))});let A=await (0,s.db)().select().from(n.githubRepos).where((0,t.eq)(n.githubRepos.accountId,y.id)).limit(1e3),T=[];k.data.truncated&&T.push("Only the 300 most recently pushed repositories are listed.");let R=!1;await d(A.filter(e=>!e.archived&&!e.goneAt&&(!e.packageCheckedAt||null!==e.pushedAt&&e.pushedAt>e.packageCheckedAt)).sort((e,t)=>(t.pushedAt?.getTime()??0)-(e.pushedAt?.getTime()??0)).slice(0,10),r,async e=>{let r=await (0,u.q)(w,e.fullName,a);r.ok?await (0,s.db)().update(n.githubRepos).set({packageName:r.data,packageCheckedAt:new Date,updatedAt:new Date}).where((0,t.eq)(n.githubRepos.id,e.id)):"scope"===r.kind&&(R=!0)}),R&&T.push("Some package.json files can't be read: give the token Contents read on those repositories.");let E=await (0,s.db)().select({id:n.resources.id,name:n.resources.name,meta:n.resources.meta}).from(n.resources).where((0,t.and)((0,t.eq)(n.resources.kind,"app"),(0,t.isNull)(n.resources.goneAt))).limit(500),I=await (0,s.db)().select({appId:n.appRepos.appId,repoId:n.appRepos.repoId,source:n.appRepos.source}).from(n.appRepos).limit(500),O=e=>"string"==typeof e&&e?e:null,j=function(e,t,r){let s=new Map(t.filter(e=>!e.goneAt).map(e=>[l(e.fullName),e.id])),n=new Map(r.map(e=>[e.appId,e])),i=[];for(let t of e){if("github"!==t.repoType||!t.repo)continue;let e=s.get(l(t.repo));if(!e)continue;let r=n.get(t.id);r?.source!=="manual"&&r?.repoId!==e&&i.push({appId:t.id,repoId:e})}return i}(E.map(e=>({id:e.id,name:e.name,repo:O(e.meta.repo),repoType:O(e.meta.repoType)})),A,I);for(let e of j)await (0,s.db)().insert(n.appRepos).values({appId:e.appId,repoId:e.repoId,source:"vercel"}).onConflictDoUpdate({target:n.appRepos.appId,set:{repoId:e.repoId,source:"vercel",updatedAt:new Date},setWhere:(0,t.ne)(n.appRepos.source,"manual")});let C=await (0,s.db)().selectDistinct({id:n.githubRepos.id,fullName:n.githubRepos.fullName,defaultBranch:n.githubRepos.defaultBranch}).from(n.appRepos).innerJoin(n.githubRepos,(0,t.eq)(n.githubRepos.id,n.appRepos.repoId)).where((0,t.and)((0,t.eq)(n.githubRepos.accountId,y.id),(0,t.isNull)(n.githubRepos.goneAt))).limit(500),$=!1,P=await d(C,r,async e=>{let t=await (0,u.W)(w,e.fullName,e.defaultBranch,a);t.ok?await f(e.id,t.data):"scope"===t.kind&&($=!0)});$&&T.push("Some Actions runs can't be read: give the token Actions read on those repositories."),P<C.length&&T.push(`${C.length-P} Actions status${C.length-P==1?"":"es"} left for the next run, time budget used.`);let N=await (0,u.k)(w,a);return await (0,s.db)().update(n.accounts).set({lastSyncAt:_,status:"ok",lastError:null,updatedAt:_,...N.ok?{expiresAt:N.data.expiresAt}:{}}).where((0,t.eq)(n.accounts.id,y.id)),{ok:!0,repos:A.filter(e=>!e.goneAt).length,linked:C.length,newLinks:j.length,notes:T}}async function f(e,r){await (0,s.db)().update(n.githubRepos).set({actions:r,actionsCheckedAt:new Date,updatedAt:new Date}).where((0,t.eq)(n.githubRepos.id,e))}async function m(e){let[r]=await (0,s.db)().select({id:n.accounts.id}).from(n.accounts).where((0,t.eq)(n.accounts.provider,"github")).limit(1);if(!r)return null;if(Date.now()>e)return"left for the next run, time budget used";let i=await p(r.id,e);return i.ok?null:i.error}async function g(e){if(!(0,c.f)(e))return{ok:!1,reason:"no-repo",error:"That app no longer exists."};let[r]=await (0,s.db)().select({r:n.githubRepos}).from(n.appRepos).innerJoin(n.githubRepos,(0,t.eq)(n.githubRepos.id,n.appRepos.repoId)).where((0,t.and)((0,t.eq)(n.appRepos.appId,e),(0,t.isNull)(n.githubRepos.goneAt))).limit(1);if(!r)return{ok:!1,reason:"no-repo",error:"This app isn't linked to a GitHub repository yet."};let i=await h(r.r.accountId);return i?.token?{ok:!0,fullName:r.r.fullName,defaultBranch:r.r.defaultBranch,token:i.token}:{ok:!1,reason:"no-token",error:"The GitHub token can't be read; check the GitHub connection."}}e.s(["D",0,m,"l",0,g],328586)},451682,313903,205746,e=>{var t=e.i(336763),r=e.i(157406),s=e.i(533102),n=e.i(406212),i=e.i(530298),a=e.i(122603),o=e.i(803237),l=e.i(333407),c=e.i(93387),u=e.i(765503),h=e.i(666680),d=e.i(75064),p=e.i(909592),f=e.i(932378),m=e.i(246517),g=e.i(492973),b=e.i(794588);e.s(["z",0,b],313903);var b=b,y=e.i(260417);let w=["debug","info","warning","error","fatal","trace"],v=d.z.object({rows:p.z.array(f.z.unknown()).catch([]),hasMoreRows:m.z.boolean().catch(!1)}),k=d.z.object({requestId:g.z.string().min(1),timestamp:g.z.string().transform((e,t)=>{let r=Date.parse(e);return Number.isNaN(r)?(t.addIssue({code:"custom",message:"bad timestamp"}),b.NEVER):new Date(r)}),deploymentId:g.z.string().nullish().catch(null),requestMethod:g.z.string().nullish().catch(null),requestPath:g.z.string().nullish().catch(null),statusCode:y.z.number().nullish().catch(null),logs:p.z.array(f.z.unknown()).nullish().catch(null),events:p.z.array(f.z.unknown()).nullish().catch(null)}),_=d.z.object({level:g.z.string().nullish().catch(null),message:g.z.string().nullish().catch(null)}),S=d.z.object({source:g.z.string().nullish().catch(null)}),x=(e,t)=>(0,h.createHash)("sha1").update(`${e}
-${t}`).digest("hex").slice(0,8),A=(e,t,r={})=>({ok:!1,kind:e,error:t,...r});async function T(e,t,r,s){let n=(s.now??new Date).getTime(),i=Math.max(s.since.getTime(),n-864e5),o=s.until.getTime();if(i>=o)return{ok:!0,lines:[],more:!1};let l=s.maxRows??300,c=s.levels?new Set(s.levels):null,u=e=>!c||c.has(e),h=s.levels?[...new Set(s.levels.map(e=>"fatal"===e?"error":e))]:[],d=s.fetch??fetch,p=new AbortController,f=setTimeout(()=>p.abort(new DOMException("window","TimeoutError")),s.timeoutMs??8e3),m=s.signal?AbortSignal.any([p.signal,s.signal]):p.signal,g=(0,a.X)(m),b=()=>p.signal.aborted&&!s.signal?.aborted?A("transient","Vercel's log history didn't answer in time."):A("transient","Reading Vercel's log history was cancelled."),y=[],T=!1;try{for(let n=0;n<3;n++){let a,c=new URLSearchParams({projectId:r,ownerId:t,page:String(n),startDate:String(i),endDate:String(o)});s.deploymentId&&c.set("deploymentId",s.deploymentId),s.environment&&c.set("environment",s.environment),h.length&&c.set("level",h.join(","));let p=null;try{let t=await Promise.race([d(`https://vercel.com/api/logs/request-logs?${c}`,{headers:{Authorization:`Bearer ${e}`,Accept:"application/json"},signal:m,cache:"no-store"}),g]);if(401===t.status||403===t.status)p=A("auth",`Vercel rejected this credential (${t.status}).`,{status:t.status});else if(429===t.status){let e=Number(t.headers.get("Retry-After"));p=A("transient","Vercel says there were too many requests.",{status:429,retryAfterS:Number.isFinite(e)&&e>0?e:60})}else if(400===t.status)p=A("transient","Vercel's log history didn't answer (400); the range may be past retention.",{status:400});else if(t.ok)try{a=await Promise.race([t.json(),g])}catch(e){if(m.aborted)throw e;p=A("format","Vercel's log history answered in a format the console doesn't recognise.")}else p=A("transient",`Vercel's log history returned an error (${t.status}).`,{status:t.status});p&&await t.body?.cancel().catch(()=>void 0)}catch{p=m.aborted?b():A("transient","Couldn't reach Vercel's log history.")}if(!p){let e=v.safeParse(a),t=e.success&&a&&"object"==typeof a?Object.keys(a):[];if(!e.success||t.includes("rows")||t.includes("hasMoreRows"))if(e.success){for(let t of e.data.rows)y.push(...function(e,t,r=!1){let s=k.safeParse(e);if(!s.success)return[];let n=s.data,i={at:n.timestamp,requestMethod:n.requestMethod??null,requestPath:n.requestPath??null,statusCode:n.statusCode??null,deploymentId:n.deploymentId??null,source:(n.events??[]).map(e=>S.safeParse(e)).find(e=>e.success&&e.data.source)?.data?.source??null},a=[],o=new Map;for(let e of n.logs??[]){let r=_.safeParse(e);if(!r.success||!r.data.message)continue;let s=function(e){let t=(e??"").toLowerCase();return"warn"===t?"warning":w.includes(t)?t:"info"}(r.data.level),l=x(s,r.data.message),c=o.get(l)??0;o.set(l,c+1),t(s)&&a.push({rowId:`${n.requestId}:${l}${c?`#${c}`:""}`,level:s,message:r.data.message,...i})}if(null!=n.statusCode&&n.statusCode>=500&&t("error")&&!a.some(e=>"error"===e.level||"fatal"===e.level)&&a.push({rowId:`${n.requestId}:status`,level:"error",message:`${n.requestMethod??"GET"} ${n.requestPath??"/"} → ${n.statusCode}`,...i}),r&&0===a.length){let e=n.statusCode??0,r=e>=500?"error":e>=400?"warning":"info";t(r)&&a.push({rowId:`${n.requestId}:request`,level:r,message:`${n.requestMethod??"GET"} ${n.requestPath??"/"}${e>0?` → ${e}`:""}`,...i})}return a}(t,u,s.requests));if(!(T=e.data.hasMoreRows)||y.length>=l)break}else p=A("format","Vercel's log history answered in a format the console doesn't recognise.");else p=A("transient","Vercel's log format changed: the answer has neither rows nor hasMoreRows.")}if(p){if(0===n)return p;T=!0;break}}}finally{clearTimeout(f),p.abort()}return y.sort((e,t)=>e.at.getTime()-t.at.getTime()),y.length>l&&(y.splice(0,y.length-l),T=!0),{ok:!0,lines:y,more:T}}e.s(["f",0,T],205746);var R=e.i(728335);let E=["warning","error","fatal"],I="logs_read_cursor";async function O(e){let[r]=await (0,n.db)().select().from(i.accounts).where((0,t.and)((0,t.eq)(i.accounts.provider,"vercel"),(0,t.eq)(i.accounts.status,"ok"))).limit(1),s=r?(0,o.V)({ciphertext:r.credentialCiphertext,iv:r.credentialIv},(0,c.serverEnv)().OPS_ENCRYPTION_KEY):null;return r&&s?(await (0,n.db)().select({appId:i.resources.id,appName:i.resources.name,projectId:i.resources.externalId,meta:i.resources.meta,deploymentId:i.deployments.externalId}).from(i.deployments).innerJoin(i.resources,(0,t.eq)(i.resources.id,i.deployments.resourceId)).where((0,t.and)((0,t.eq)(i.deployments.isCurrent,!0),(0,t.eq)(i.resources.accountId,r.id),(0,t.eq)(i.resources.monitored,!0),(0,t.isNull)(i.resources.goneAt),...e?[(0,t.eq)(i.resources.id,e)]:[]))).map(e=>({appId:e.appId,appName:e.appName,projectId:e.projectId,deploymentId:e.deploymentId,teamId:String(e.meta.teamId??""),token:s})):[]}let j=(e,t)=>({resourceId:e.appId,deploymentId:t.deploymentId??e.deploymentId,rowId:t.rowId,at:t.at,level:t.level,message:(0,u.l)((0,u.h)(t.message),2e3),requestMethod:t.requestMethod,requestPath:(0,u.n)(t.requestPath?(0,u.h)(t.requestPath):null),statusCode:t.statusCode,source:t.source});async function C(e,o,c){let u,[h]=await (0,n.db)().select().from(i.settings).where((0,t.eq)(i.settings.key,"logs.disabled")).limit(1);if(h?.value===!0)return;let d=await O(null);if(!d.length)return;let p=(0,R.dayStart)((0,R.dayKey)(e)),f=new Map((await (0,n.db)().select({id:i.storedLogs.resourceId,n:s.sql`count(*)::int`}).from(i.storedLogs).where((0,t.and)((0,t.inArray)(i.storedLogs.resourceId,d.map(e=>e.appId)),(0,t.gte)(i.storedLogs.at,p))).groupBy(i.storedLogs.resourceId)).map(e=>[e.id,e.n])),m=new Map((await (0,n.db)().select({id:i.storedLogs.resourceId,at:(0,r.max)(i.storedLogs.at)}).from(i.storedLogs).where((0,t.inArray)(i.storedLogs.resourceId,d.map(e=>e.appId))).groupBy(i.storedLogs.resourceId)).map(e=>[e.id,e.at])),[g]=await (0,n.db)().select().from(i.settings).where((0,t.eq)(i.settings.key,I)).limit(1),b=(u=g?.value)&&"object"==typeof u&&!Array.isArray(u)?Object.fromEntries(Object.entries(u).filter(e=>"string"==typeof e[1]&&!Number.isNaN(Date.parse(e[1])))):{},y=e.getTime()-864e5,w=await (0,a.P)(d,3,t=>{if(Date.now()+8500>o)return Promise.resolve(null);let r=[m.get(t.appId)?.getTime(),b[t.appId]?Date.parse(b[t.appId]):void 0].filter(e=>void 0!==e),s=new Date(Math.max(r.length?Math.max(...r)-3e5:y,y));return T(t.token,t.teamId,t.projectId,{since:s,until:e,now:e,levels:E,environment:"production",maxRows:300})}),v=d.map((e,t)=>{let r=w[t];return r?r.ok?(r.more&&c.push(`logs/${e.appName}: more than 300 log lines since the last read; the oldest were skipped`),r.lines.filter(e=>E.includes(e.level))):(c.push(`logs/${e.appName}: ${r.error}`),[]):[]}),k=v.flat().map(e=>e.rowId),_=new Set(k.length?(await (0,n.db)().select({rowId:i.storedLogs.rowId}).from(i.storedLogs).where((0,t.inArray)(i.storedLogs.rowId,k))).map(e=>e.rowId):[]),S=[];for(let[e,t]of d.entries()){let r=v[e].filter(e=>!_.has(e.rowId));if(!r.length)continue;let s=f.get(t.appId)??0,a=Math.max(0,1e3-s),o=(a>=r.length?r:r.slice(r.length-a)).map(e=>j(t,e));o.length&&await (0,n.db)().insert(i.storedLogs).values(o).onConflictDoNothing({target:i.storedLogs.rowId}),s+r.length>=1e3&&S.push(t.appId)}let x=d.filter((e,t)=>w[t]?.ok);if(x.length){let t={};for(let e of d)b[e.appId]&&(t[e.appId]=b[e.appId]);for(let r of x)t[r.appId]=e.toISOString();await (0,n.db)().insert(i.settings).values({key:I,value:t}).onConflictDoUpdate({target:i.settings.key,set:{value:t,updatedAt:new Date}})}await (0,l.f)(S.map(e=>({resourceId:e,type:"system",kind:"warn",message:"Stored-log limit reached",detail:"More than 1000 warnings and errors today; the rest stay in Vercel only for its short log history (about a day on Hobby).",reason:"LogCapReached"})))}e.s(["g",0,O,"_",0,C],451682)},584820,902509,e=>{var t=e.i(336763),r=e.i(533102),s=e.i(406212),n=e.i(530298),i=e.i(122603),a=e.i(541211),o=e.i(333407);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,c="[\"'`]";function u(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let h={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},d=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>h[e]??h[e.toLowerCase()]??e),p=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${c}(${l})${c}`,"g"),f=RegExp(String.raw`version\s*:\s*${c}(${l})${c}\s*,\s*appDir\s*:`,"g"),m=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${c}(${l})${c}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,b=e=>e.replace(/[$]/g,"\\$");var y=e.i(52535);async function w(e,t,r={}){let s=r.deadline??1/0,n=r.now??(()=>new Date),a=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=a(o))return null;let h=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:n()}),v=(e,t)=>(0,i.K)(e,{maxBytes:3145728,timeoutMs:a(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),k=await v(`https://${e}/`,"www");if(!k.ok&&k.error===i.l)return h("unknown","the site redirects to another host");if(!k.ok||200!==k.status)return Date.now()>=s?null:h("error",`Couldn't load the site: ${k.ok?`HTTP ${k.status}`:k.error}`);let _=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,n=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(d(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var i;s.add(e.href),n.push({href:e.href,rank:(i=e.pathname,/\/main-app[-.]/.test(i)?0:/\/(main|app-index)[-.]/.test(i)?1:/\/(webpack|polyfills|framework)[-.]/.test(i)?3:2),i:n.length})}}return n.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(k.body,k.url).slice(0,12);if(0===_.length)return h("unknown",k.body.includes("/_next/")?"version not exposed":"not a Next.js site");let S=null,x=0,A=!1;for(let e of _){if(0>=a(o)){A=!0;break}let t=await v(e,!0);if(t.ok&&200===t.status&&(x++,S=function(e){for(let t of e.matchAll(p))if(u(t[1]))return t[1];for(let t of[f,m])for(let r of e.matchAll(t))if(u(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${b(r)}\s*=\s*${c}(${l})${c}`,"g"),n=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;n=r[1]}if(n&&u(n))return n}return null}(t.body)))break}if(!S)return Date.now()>=s?null:A||0>=a(o)?h("error","Reading the site's scripts took longer than 15 s"):0===x?h("error","Couldn't load the site's scripts"):h("unknown","version not exposed");let T=a(Date.now()+1e4);if(T<=0)return null;let R=await (0,y.y)(S,{timeoutMs:T,fetch:r.fetch});return R.ok?{version:S,status:R.findings.length?"vulnerable":"ok",findings:R.findings,reason:null,checkedAt:n()}:Date.now()>=s?null:h("error",R.error)}e.s(["P",0,w,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],902509);var v=e.i(631065),k=e.i(412948),_=e.i(70377);function S(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function x(e){let i=await (0,s.db)().select({id:n.resources.id,name:n.resources.name,sec:n.appSecurity}).from(n.resources).leftJoin(n.appSecurity,(0,t.eq)(n.appSecurity.resourceId,n.resources.id)).where((0,t.and)((0,t.eq)(n.resources.kind,"app"),(0,t.eq)(n.resources.monitored,!0),(0,t.isNull)(n.resources.goneAt),e?(0,t.eq)(n.resources.id,e):void 0)).orderBy(r.sql`${n.appSecurity.checkedAt} asc nulls first`,n.resources.name).limit(_.O.apps);if(!i.length)return[];let a=await (0,s.db)().select({resourceId:n.monitors.resourceId,url:n.monitors.url}).from(n.monitors).where((0,t.inArray)(n.monitors.resourceId,i.map(e=>e.id))).orderBy(n.monitors.createdAt).limit(_.O.monitors);return i.map(e=>({id:e.id,name:e.name,prev:e.sec?S(e.sec):null,host:(0,k.m)(e.name,a.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function A(e,i){await (0,s.db)().transaction(async s=>{await s.execute(r.sql`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[a]=await s.select().from(n.appSecurity).where((0,t.eq)(n.appSecurity.resourceId,e.id)).limit(1),l=a?S(a):null;if(l&&l.checkedAt.getTime()>=i.checkedAt.getTime())return;let c="unknown"===i.status||"error"===i.status?{...i,version:l?l.version:i.version,findings:l?l.findings:i.findings}:i,u={framework:"next",version:c.version,status:c.status,findings:c.findings,reason:c.reason,checkedAt:c.checkedAt};await s.insert(n.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:n.appSecurity.resourceId,set:u,setWhere:r.sql`${n.appSecurity.checkedAt} < excluded.checked_at`});let h=(0,v.t)(e.name,l,c);h&&await (0,o.f)([{type:"system",kind:h.kind,message:h.message,detail:h.detail,resourceId:e.id,at:c.checkedAt,reason:"ok"===h.kind?"NextClean":"NextVulnerable"}],s)})}async function T(e){let t=await x(),r=0,s=0,n=[];return await (0,i.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let n=await w(t.host,t.prev,{deadline:e});if(!n)return void s++;await A(t,n),r++}catch(e){n.push(`${t.name}: ${(0,a.safeError)(e)}`)}}),{checked:r,skipped:s,failed:n}}e.s(["h",0,T,"Z",0,S],584820)},486118,e=>{let t;var r,s,n=e.i(547963),i=e.i(804308),a=e.i(515683),o=e.i(25734),l=e.i(27626),c=e.i(64858),u=e.i(248744),h=e.i(379593),d=e.i(423660),p=e.i(717799),f=e.i(336763),m=e.i(396918),g=e.i(406212),b=e.i(530298),y=e.i(503313),w=e.i(595262),v=e.i(732077),k=e.i(908223),_=e.i(328586),S=e.i(406197),x=e.i(964964),A=e.i(958948),T=e.i(348657),R=e.i(198552),E=e.i(205746),I=e.i(760859),O=e.i(518581),j=e.i(633075),C=e.i(108621),$=e.i(809303);async function P(e){let t=Date.now();try{let r=await fetch(e,{redirect:"manual",signal:AbortSignal.timeout(x.w),cache:"no-store",headers:{"User-Agent":"Watchbell smoke test"}}),s=401===r.status||403===r.status?(await r.text().catch(()=>"")).slice(0,8192):"";return{status:r.status,ms:Date.now()-t,authWall:(0,x.S)(r.status,s,r.headers)}}catch{return{status:null,ms:Date.now()-t,authWall:!1}}}async function N(t,r){let{extensions:s}=await e.A(27505);return await s.runner?.lockfileJobActive(t,r).catch(()=>!1)??!1}let D={rows:async()=>await (0,g.db)().select({id:b.dependencyPrs.id,repoId:b.dependencyPrs.repoId,appId:b.dependencyPrs.appId,proposalId:b.dependencyPrs.proposalId,number:b.dependencyPrs.number,branch:b.dependencyPrs.branch,baseBranch:b.dependencyPrs.baseBranch,headSha:b.dependencyPrs.headSha,title:b.dependencyPrs.title,packages:b.dependencyPrs.packages,auto:b.dependencyPrs.auto,stage:b.dependencyPrs.stage,smokeMode:b.dependencyPrs.smokeMode,previewReadyAt:b.dependencyPrs.previewReadyAt,openedAt:b.dependencyPrs.openedAt,fullName:b.githubRepos.fullName,appName:b.resources.name}).from(b.dependencyPrs).innerJoin(b.githubRepos,(0,f.eq)(b.githubRepos.id,b.dependencyPrs.repoId)).leftJoin(b.resources,(0,f.eq)(b.resources.id,b.dependencyPrs.appId)).where((0,f.inArray)(b.dependencyPrs.stage,[...x.X])).orderBy((0,m.asc)(b.dependencyPrs.openedAt)).limit(10),security:$.X,rollback:$.K,writeToken:async()=>{let e=await (0,k.G)();return e&&"unreadable"!==e?e.token:null},readToken:async e=>{let t=await (0,_.l)(e);return t.ok?t.token:null},vercel:async e=>{let t=await (0,S.p)(e,"app"),r=t?.resource.meta.teamId;return t&&"string"==typeof r&&t.resource.externalId?{token:t.token,teamId:r,projectId:t.resource.externalId}:null},monitorUrls:async e=>(await (0,g.db)().select({url:b.monitors.url}).from(b.monitors).where((0,f.and)((0,f.eq)(b.monitors.resourceId,e),(0,f.eq)(b.monitors.kind,"http"))).limit(10)).map(e=>e.url),pull:T.b,checks:T.s,runs:A.L,previews:R.C,probe:P,errorLogs:async(e,t,r,s)=>{let n=await (0,E.f)(e.token,e.teamId,e.projectId,{since:r,until:s,now:s,deploymentId:t,levels:["error","fatal"],maxRows:20,timeoutMs:8e3});return n.ok?n.lines.length:null},merge:T.C,save:async(e,t,r,s)=>{await (0,g.db)().update(b.dependencyPrs).set({...t,stageText:s,checkedAt:new Date}).where((0,f.eq)(b.dependencyPrs.id,e)),r&&await (0,g.db)().update(O.O).set({result:s}).where((0,f.eq)(O.O.id,r)).catch(()=>void 0)},notify:e=>(0,C.y)(e),lockfileBusy:async(e,t,r)=>await N(e,t)||await (0,v.W)(r,t),audit:(e,t)=>(0,w.f)({kind:"ok",message:e,resourceId:t,actorUserId:null}),book:()=>(0,y.f)()};async function U(e,t,r=D){let s={watched:0,merged:0,stopped:0},n=()=>t-Date.now(),i=await r.rows();if(!i.length)return s;let[a,o,l]=await Promise.all([r.security().catch(()=>null),r.rollback().catch(()=>null),r.writeToken().catch(()=>null)]);if(!l)return s;let c=await r.book().catch(()=>I.a);for(let t of i){if(15e3>n())break;if(t.auto||a?.enabled)try{let n=await L(t,e,l,o?.enabled===!0,r);if(!n)continue;s.watched++;let i=t.appName?(0,I.r)(c,t.appName):"app";await q(t,n,i,o?.windowMin??30,e,l,r,s)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}return s}async function L(e,t,r,s,n){let i=await n.pull(r,e.fullName,e.number);if(!i.ok)return null;let a=await n.checks(r,e.fullName,i.data.headSha),o=null;if(a.ok&&null===a.data.checkRuns&&e.appId){let t=await n.readToken(e.appId),r=t?await n.runs(t,e.fullName,i.data.headSha):null;o=r?.ok?r.data:null}a.ok||(a={ok:!0,data:{checkRuns:[{status:"queued",conclusion:null}],combined:null}});let l=(0,x.j)({...a.data,actionRuns:o}),c={state:null,readyAt:null},u=null,h=e.appId?await n.vercel(e.appId):null;if(h&&"success"===l&&i.data.headSha===e.headSha){let r=await n.previews(h.token,h.teamId,h.projectId,i.data.headSha),s=r.ok?r.data.find(e=>"preview"===e.target)??r.data[0]??null:null;if(s&&(c={state:s.state,readyAt:s.readyAt??("ready"===s.state?t:null)},"ready"===s.state&&s.url)){let r=e.previewReadyAt??c.readyAt??t;if("logs"!==e.smokeMode){let t=(0,x.E)(e.appId?await n.monitorUrls(e.appId):[]),r=await Promise.all(t.map(async e=>({path:e,...await n.probe(`https://${s.url}${e}`)})));u=(0,x.L)(r)}u||(u=(0,x.n)(r,t,await n.errorLogs(h,s.id,r,t).catch(()=>null))),c.readyAt=r}}return{step:(0,x.M)({now:t,openedAt:e.openedAt,pr:{state:i.data.state,merged:i.data.merged,mergeable:i.data.mergeable,headSha:i.data.headSha},recordedSha:e.headSha,checks:l,preview:c,smoke:u,autoRollbackOn:s}),smoke:u,previewReadyAt:c.readyAt,headSha:i.data.headSha}}async function q(e,t,r,s,n,i,a,o){let{step:l}=t,c=t.smoke?{smokeMode:t.smoke.mode}:{},u=t.previewReadyAt?{previewReadyAt:t.previewReadyAt}:{},h={app:r,number:e.number,packages:e.packages};if("wait"===l.kind)return void await a.save(e.id,{stage:l.stage,...c,...u,...l.resetSha?{headSha:l.resetSha,previewReadyAt:null,smokeMode:null}:{}},e.proposalId,(0,x.m)(e.number,l.stage,l.reason));if("done"===l.kind)return void await a.save(e.id,{stage:l.stage,finishedAt:n},e.proposalId,(0,x.m)(e.number,l.stage));if("stop"===l.kind&&("CI gagal"===l.reason||"CI failed"===l.reason)&&await a.lockfileBusy?.(e.repoId,e.branch,e.fullName).catch(()=>!1))return void await a.save(e.id,{stage:"checks"},e.proposalId,(0,x.m)(e.number,"checks","waiting for the lockfile from the runner"));if("stop"===l.kind){await a.save(e.id,{stage:l.stage,finishedAt:n,...c},e.proposalId,(0,x.m)(e.number,l.stage,"ready-manual"===l.stage?null:l.reason)),o.stopped++,await a.notify({...h,kind:"ready-manual"===l.stage?"ready-manual":"stopped",reason:l.reason}).catch(()=>void 0);return}await a.save(e.id,{stage:"merging",...c,...u},e.proposalId,(0,x.m)(e.number,"merging"));let d=await a.merge(i,e.fullName,e.number,e.branch,e.baseBranch,e.headSha,e.title);if(d.ok){await a.save(e.id,{stage:"merged",mergedSha:d.data.sha,finishedAt:n},e.proposalId,(0,x.m)(e.number,"merged")),o.merged++,await a.audit(`${j.v}PR #${e.number} merged \xb7 ${e.packages.join(", ")}`.slice(0,200),e.appId).catch(()=>void 0),await a.notify({...h,kind:"merged",windowMin:s}).catch(()=>void 0);return}if(409===d.status)return void await a.save(e.id,{stage:"checks"},e.proposalId,(0,x.m)(e.number,"checks","new commit on the PR branch, checking again"));let p=405===d.status?"GitHub refused the merge (cannot be merged)":`merge failed: ${d.error}`.slice(0,150);await a.save(e.id,{stage:"failed",finishedAt:n},e.proposalId,(0,x.m)(e.number,"failed",p)),o.stopped++,await a.notify({...h,kind:"stopped",reason:p}).catch(()=>void 0)}let M=null;async function B(e,t){if((0,x.f)(e,M)){M=e.getTime();try{let r=await U(e,t?.deadline??e.getTime()+5e4);r.watched&&console.log(`deps/watch: ${r.watched} PR, ${r.merged} merged, ${r.stopped} stopped`)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}}var z=e.i(653587),F=e.i(452475);let W={nav:[{group:"AI & API",after:"Observe",items:[{key:"ai",label:"AI Gateway",href:"/ai",icon:"route",stage:5,ownerOnly:!0},{key:"api-docs",label:"API explorer",href:"/api-docs",icon:"api",stage:5,ownerOnly:!0}]}],palette:[{label:"AI Gateway",href:"/ai",keywords:["ai","gateway","overview"]},{label:"API keys",href:"/ai/keys",keywords:["key","token","wb_","wp_"]},{label:"Agents",href:"/ai/agents",keywords:["agent","client","mcp"]},{label:"Connect an agent",href:"/ai/connect",keywords:["mcp",...n.I.palette.connectKeywords,"gemini cli","quick start"]},{label:"Bring your own key",href:"/ai/providers",keywords:["provider","byok","cloudflare","groq","openrouter","gemini"]},{label:"Quota",href:"/ai/quota",keywords:["limit","usage","rate"]},{label:"AI logs",href:"/ai/logs",keywords:["logs","requests","usage"]},{label:"Models",href:"/ai/models",keywords:["model","llm"]},{label:"Playground",href:"/ai/playground",keywords:["chat","try","prompt"]},{label:"API explorer",href:"/api-docs",keywords:["openapi","swagger","api","v1"]}]},H={dailySteps:[{name:"ai-usage-retention",run:a.$}]},G={WhyAiSlot:h.f,RecSummarySlot:u.f,AiNotesSlot:c.f,dailySteps:[{name:"advisor-summary",run:l.f}],minuteSteps:[{name:"advisor-notes",run:o.f}]},K={dailySteps:[{name:"ai-notes-retention",run:d.v}]},J={nav:[{group:"Automation",after:"Observe",items:[{key:"auto-actions",label:"Auto-actions",href:"/auto-actions",icon:"bolt",stage:9,ownerOnly:!0}]}],palette:[{label:"Auto-actions",href:"/auto-actions",keywords:["proposal","approve","reject","auto-run","rollback"]}],dailySteps:[{name:"auto-actions-retention",run:z.t}],minuteSteps:[{name:"auto-actions",run:z.Z},{name:"deps-pr-watch",run:B}],settingsTabs:[{key:"office-auto-run",label:"Auto-actions",Tab:p.f}]},V={telegramCallback:F.proposalCallback},Y=function(...e){let t={nav:[],palette:[]};for(let r of e){for(let e of r.nav??[]){let r=t.nav.find(t=>t.group===e.group);r?r.items=[...r.items,...e.items]:t.nav.push({...e,items:[...e.items]})}t.palette.push(...r.palette??[]),r.dailySteps?.length&&(t.dailySteps=[...t.dailySteps??[],...r.dailySteps]),r.minuteSteps?.length&&(t.minuteSteps=[...t.minuteSteps??[],...r.minuteSteps]),r.WhyAiSlot&&(t.WhyAiSlot=r.WhyAiSlot),r.RecSummarySlot&&(t.RecSummarySlot=r.RecSummarySlot),r.AiNotesSlot&&(t.AiNotesSlot=r.AiNotesSlot),r.DevNotesSlot&&(t.DevNotesSlot=r.DevNotesSlot),r.office&&(t.office=r.office),r.settingsTabs?.length&&(t.settingsTabs=[...t.settingsTabs??[],...r.settingsTabs]),r.telegramCallback&&(t.telegramCallback=r.telegramCallback),r.runner&&(t.runner=r.runner),r.RepoPreviewSlot&&(t.RepoPreviewSlot=r.RepoPreviewSlot)}return t}({...W,palette:(r=W.palette??[],s={label:"Ask AI",href:"/ai/ask",keywords:["ask","question","answer"]},(t=r.findIndex(e=>"/ai"===e.href))<0?[...r,s]:[...r.slice(0,t+1),s,...r.slice(t+1)])},{dailySteps:[{name:"ai-agents-prune",run:()=>(0,i.f)()}]},H,{},{},K,J,G,V);e.s(["extensions",0,Y],486118)},178233,e=>{let t=e=>"number"==typeof e&&Number.isFinite(e)&&e>=0?e:null;e.s(["G",0,function(e){let r=e&&"object"==typeof e?e.pageviews:null;if(!r||"object"!=typeof r)return null;let s="string"==typeof r.readAt?Date.parse(r.readAt):0/0;if(Number.isNaN(s)||"boolean"!=typeof r.enabled)return null;if(!r.enabled)return{enabled:!1,readAt:new Date(s)};let n=t(r.total24h),i=null===r.visitors24h?null:t(r.visitors24h);if(null===n||null===i&&null!==r.visitors24h)return null;let a=36e5*Math.floor(s/36e5),o=new Map;for(let e of Array.isArray(r.hourly)?r.hourly:[]){if(!Array.isArray(e))continue;let r="string"==typeof e[0]?Date.parse(e[0]):0/0,s=t(e[1]);if(Number.isNaN(r)||null===s)continue;let n=36e5*Math.floor(r/36e5);o.set(n,(o.get(n)??0)+s)}return{enabled:!0,total:n,visitors:i,hours:Array.from({length:24},(e,t)=>{let r=a-(23-t)*36e5;return{at:new Date(r),views:o.get(r)??0}}),readAt:new Date(s)}},"R",0,function(e){return!e.gone&&e.teamId&&e.accountOk?e.hasProductionDeploy?null:"Not read: this app has no production deployment yet.":"Not read: this app isn't in a connected Vercel account."},"Z",0,function(e,t){return e.enabled?{enabled:!0,total24h:e.total,visitors24h:e.visitors,readAt:t.toISOString(),hourly:e.hourly.slice(-24).map(e=>[e.at.toISOString(),e.views])}:{enabled:!1,readAt:t.toISOString()}}])},530831,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoRollbackForm() from the server but AutoRollbackForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-rollback-form.tsx","AutoRollbackForm");e.s(["AutoRollbackForm",0,t])},657753,e=>{var t=e.i(530831);e.n(t)},842941,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoRunForm() from the server but AutoRunForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-run-form.tsx","AutoRunForm");e.s(["AutoRunForm",0,t])},27295,e=>{var t=e.i(842941);e.n(t)},699286,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoSecurityForm() from the server but AutoSecurityForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-security-form.tsx","AutoSecurityForm");e.s(["AutoSecurityForm",0,t])},783671,e=>{var t=e.i(699286);e.n(t)},804308,515683,585585,e=>{var t=e.i(533102),r=e.i(406212);e.i(333407);var s=e.i(518581);async function n(){await (0,r.db)().execute(t.sql`
+${t}`).digest("hex").slice(0,8),A=(e,t,r={})=>({ok:!1,kind:e,error:t,...r});async function T(e,t,r,s){let n=(s.now??new Date).getTime(),i=Math.max(s.since.getTime(),n-864e5),o=s.until.getTime();if(i>=o)return{ok:!0,lines:[],more:!1};let l=s.maxRows??300,c=s.levels?new Set(s.levels):null,u=e=>!c||c.has(e),h=s.levels?[...new Set(s.levels.map(e=>"fatal"===e?"error":e))]:[],d=s.fetch??fetch,p=new AbortController,f=setTimeout(()=>p.abort(new DOMException("window","TimeoutError")),s.timeoutMs??8e3),m=s.signal?AbortSignal.any([p.signal,s.signal]):p.signal,g=(0,a.X)(m),b=()=>p.signal.aborted&&!s.signal?.aborted?A("transient","Vercel's log history didn't answer in time."):A("transient","Reading Vercel's log history was cancelled."),y=[],T=!1;try{for(let n=0;n<3;n++){let a,c=new URLSearchParams({projectId:r,ownerId:t,page:String(n),startDate:String(i),endDate:String(o)});s.deploymentId&&c.set("deploymentId",s.deploymentId),s.environment&&c.set("environment",s.environment),h.length&&c.set("level",h.join(","));let p=null;try{let t=await Promise.race([d(`https://vercel.com/api/logs/request-logs?${c}`,{headers:{Authorization:`Bearer ${e}`,Accept:"application/json"},signal:m,cache:"no-store"}),g]);if(401===t.status||403===t.status)p=A("auth",`Vercel rejected this credential (${t.status}).`,{status:t.status});else if(429===t.status){let e=Number(t.headers.get("Retry-After"));p=A("transient","Vercel says there were too many requests.",{status:429,retryAfterS:Number.isFinite(e)&&e>0?e:60})}else if(400===t.status)p=A("transient","Vercel's log history didn't answer (400); the range may be past retention.",{status:400});else if(t.ok)try{a=await Promise.race([t.json(),g])}catch(e){if(m.aborted)throw e;p=A("format","Vercel's log history answered in a format the console doesn't recognise.")}else p=A("transient",`Vercel's log history returned an error (${t.status}).`,{status:t.status});p&&await t.body?.cancel().catch(()=>void 0)}catch{p=m.aborted?b():A("transient","Couldn't reach Vercel's log history.")}if(!p){let e=v.safeParse(a),t=e.success&&a&&"object"==typeof a?Object.keys(a):[];if(!e.success||t.includes("rows")||t.includes("hasMoreRows"))if(e.success){for(let t of e.data.rows)y.push(...function(e,t,r=!1){let s=k.safeParse(e);if(!s.success)return[];let n=s.data,i={at:n.timestamp,requestMethod:n.requestMethod??null,requestPath:n.requestPath??null,statusCode:n.statusCode??null,deploymentId:n.deploymentId??null,source:(n.events??[]).map(e=>S.safeParse(e)).find(e=>e.success&&e.data.source)?.data?.source??null},a=[],o=new Map;for(let e of n.logs??[]){let r=_.safeParse(e);if(!r.success||!r.data.message)continue;let s=function(e){let t=(e??"").toLowerCase();return"warn"===t?"warning":w.includes(t)?t:"info"}(r.data.level),l=x(s,r.data.message),c=o.get(l)??0;o.set(l,c+1),t(s)&&a.push({rowId:`${n.requestId}:${l}${c?`#${c}`:""}`,level:s,message:r.data.message,...i})}if(null!=n.statusCode&&n.statusCode>=500&&t("error")&&!a.some(e=>"error"===e.level||"fatal"===e.level)&&a.push({rowId:`${n.requestId}:status`,level:"error",message:`${n.requestMethod??"GET"} ${n.requestPath??"/"} → ${n.statusCode}`,...i}),r&&0===a.length){let e=n.statusCode??0,r=e>=500?"error":e>=400?"warning":"info";t(r)&&a.push({rowId:`${n.requestId}:request`,level:r,message:`${n.requestMethod??"GET"} ${n.requestPath??"/"}${e>0?` → ${e}`:""}`,...i})}return a}(t,u,s.requests));if(!(T=e.data.hasMoreRows)||y.length>=l)break}else p=A("format","Vercel's log history answered in a format the console doesn't recognise.");else p=A("transient","Vercel's log format changed: the answer has neither rows nor hasMoreRows.")}if(p){if(0===n)return p;T=!0;break}}}finally{clearTimeout(f),p.abort()}return y.sort((e,t)=>e.at.getTime()-t.at.getTime()),y.length>l&&(y.splice(0,y.length-l),T=!0),{ok:!0,lines:y,more:T}}e.s(["f",0,T],205746);var R=e.i(728335);let E=["warning","error","fatal"],I="logs_read_cursor";async function O(e){let[r]=await (0,n.db)().select().from(i.accounts).where((0,t.and)((0,t.eq)(i.accounts.provider,"vercel"),(0,t.eq)(i.accounts.status,"ok"))).limit(1),s=r?(0,o.V)({ciphertext:r.credentialCiphertext,iv:r.credentialIv},(0,c.serverEnv)().OPS_ENCRYPTION_KEY):null;return r&&s?(await (0,n.db)().select({appId:i.resources.id,appName:i.resources.name,projectId:i.resources.externalId,meta:i.resources.meta,deploymentId:i.deployments.externalId}).from(i.deployments).innerJoin(i.resources,(0,t.eq)(i.resources.id,i.deployments.resourceId)).where((0,t.and)((0,t.eq)(i.deployments.isCurrent,!0),(0,t.eq)(i.resources.accountId,r.id),(0,t.eq)(i.resources.monitored,!0),(0,t.isNull)(i.resources.goneAt),...e?[(0,t.eq)(i.resources.id,e)]:[]))).map(e=>({appId:e.appId,appName:e.appName,projectId:e.projectId,deploymentId:e.deploymentId,teamId:String(e.meta.teamId??""),token:s})):[]}let j=(e,t)=>({resourceId:e.appId,deploymentId:t.deploymentId??e.deploymentId,rowId:t.rowId,at:t.at,level:t.level,message:(0,u.l)((0,u.h)(t.message),2e3),requestMethod:t.requestMethod,requestPath:(0,u.n)(t.requestPath?(0,u.h)(t.requestPath):null),statusCode:t.statusCode,source:t.source});async function C(e,o,c){let u,[h]=await (0,n.db)().select().from(i.settings).where((0,t.eq)(i.settings.key,"logs.disabled")).limit(1);if(h?.value===!0)return;let d=await O(null);if(!d.length)return;let p=(0,R.dayStart)((0,R.dayKey)(e)),f=new Map((await (0,n.db)().select({id:i.storedLogs.resourceId,n:s.sql`count(*)::int`}).from(i.storedLogs).where((0,t.and)((0,t.inArray)(i.storedLogs.resourceId,d.map(e=>e.appId)),(0,t.gte)(i.storedLogs.at,p))).groupBy(i.storedLogs.resourceId)).map(e=>[e.id,e.n])),m=new Map((await (0,n.db)().select({id:i.storedLogs.resourceId,at:(0,r.max)(i.storedLogs.at)}).from(i.storedLogs).where((0,t.inArray)(i.storedLogs.resourceId,d.map(e=>e.appId))).groupBy(i.storedLogs.resourceId)).map(e=>[e.id,e.at])),[g]=await (0,n.db)().select().from(i.settings).where((0,t.eq)(i.settings.key,I)).limit(1),b=(u=g?.value)&&"object"==typeof u&&!Array.isArray(u)?Object.fromEntries(Object.entries(u).filter(e=>"string"==typeof e[1]&&!Number.isNaN(Date.parse(e[1])))):{},y=e.getTime()-864e5,w=await (0,a.P)(d,3,t=>{if(Date.now()+8500>o)return Promise.resolve(null);let r=[m.get(t.appId)?.getTime(),b[t.appId]?Date.parse(b[t.appId]):void 0].filter(e=>void 0!==e),s=new Date(Math.max(r.length?Math.max(...r)-3e5:y,y));return T(t.token,t.teamId,t.projectId,{since:s,until:e,now:e,levels:E,environment:"production",maxRows:300})}),v=d.map((e,t)=>{let r=w[t];return r?r.ok?(r.more&&c.push(`logs/${e.appName}: more than 300 log lines since the last read; the oldest were skipped`),r.lines.filter(e=>E.includes(e.level))):(c.push(`logs/${e.appName}: ${r.error}`),[]):[]}),k=v.flat().map(e=>e.rowId),_=new Set(k.length?(await (0,n.db)().select({rowId:i.storedLogs.rowId}).from(i.storedLogs).where((0,t.inArray)(i.storedLogs.rowId,k))).map(e=>e.rowId):[]),S=[];for(let[e,t]of d.entries()){let r=v[e].filter(e=>!_.has(e.rowId));if(!r.length)continue;let s=f.get(t.appId)??0,a=Math.max(0,1e3-s),o=(a>=r.length?r:r.slice(r.length-a)).map(e=>j(t,e));o.length&&await (0,n.db)().insert(i.storedLogs).values(o).onConflictDoNothing({target:i.storedLogs.rowId}),s+r.length>=1e3&&S.push(t.appId)}let x=d.filter((e,t)=>w[t]?.ok);if(x.length){let t={};for(let e of d)b[e.appId]&&(t[e.appId]=b[e.appId]);for(let r of x)t[r.appId]=e.toISOString();await (0,n.db)().insert(i.settings).values({key:I,value:t}).onConflictDoUpdate({target:i.settings.key,set:{value:t,updatedAt:new Date}})}await (0,l.f)(S.map(e=>({resourceId:e,type:"system",kind:"warn",message:"Stored-log limit reached",detail:"More than 1000 warnings and errors today; the rest stay in Vercel only for its short log history (about a day on Hobby).",reason:"LogCapReached"})))}e.s(["g",0,O,"_",0,C],451682)},584820,902509,e=>{var t=e.i(336763),r=e.i(533102),s=e.i(406212),n=e.i(530298),i=e.i(122603),a=e.i(541211),o=e.i(333407);let l=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,c="[\"'`]";function u(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let h={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},d=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>h[e]??h[e.toLowerCase()]??e),p=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${c}(${l})${c}`,"g"),f=RegExp(String.raw`version\s*:\s*${c}(${l})${c}\s*,\s*appDir\s*:`,"g"),m=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${c}(${l})${c}`,"g"),g=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,b=e=>e.replace(/[$]/g,"\\$");var y=e.i(52535);async function w(e,t,r={}){let s=r.deadline??1/0,n=r.now??(()=>new Date),a=e=>Math.floor(Math.min(e,s)-Date.now()),o=Date.now()+15e3;if(0>=a(o))return null;let h=(e,r)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:r,checkedAt:n()}),v=(e,t)=>(0,i.K)(e,{maxBytes:3145728,timeoutMs:a(o),lookup:r.lookup,fetch:r.fetch,userAgent:"OpsConsole-Security/1.0 (+https://west-solutions.web.id)",sameOrigin:t}),k=await v(`https://${e}/`,"www");if(!k.ok&&k.error===i.l)return h("unknown","the site redirects to another host");if(!k.ok||200!==k.status)return Date.now()>=s?null:h("error",`Couldn't load the site: ${k.ok?`HTTP ${k.status}`:k.error}`);let _=(function(e,t){let r;try{r=new URL(t)}catch{return[]}let s=new Set,n=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(d(t[2].trim()),r)}catch{continue}if("https:"===e.protocol&&e.origin===r.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!s.has(e.href))){var i;s.add(e.href),n.push({href:e.href,rank:(i=e.pathname,/\/main-app[-.]/.test(i)?0:/\/(main|app-index)[-.]/.test(i)?1:/\/(webpack|polyfills|framework)[-.]/.test(i)?3:2),i:n.length})}}return n.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(k.body,k.url).slice(0,12);if(0===_.length)return h("unknown",k.body.includes("/_next/")?"version not exposed":"not a Next.js site");let S=null,x=0,A=!1;for(let e of _){if(0>=a(o)){A=!0;break}let t=await v(e,!0);if(t.ok&&200===t.status&&(x++,S=function(e){for(let t of e.matchAll(p))if(u(t[1]))return t[1];for(let t of[f,m])for(let r of e.matchAll(t))if(u(r[1]))return r[1];for(let t of e.matchAll(g)){let r=t[1]??"version",s=RegExp(String.raw`(?:^|[^\w$.])${b(r)}\s*=\s*${c}(${l})${c}`,"g"),n=null;for(let r of e.matchAll(s)){if((r.index??0)>=(t.index??0))break;n=r[1]}if(n&&u(n))return n}return null}(t.body)))break}if(!S)return Date.now()>=s?null:A||0>=a(o)?h("error","Reading the site's scripts took longer than 15 s"):0===x?h("error","Couldn't load the site's scripts"):h("unknown","version not exposed");let T=a(Date.now()+1e4);if(T<=0)return null;let R=await (0,y.y)(S,{timeoutMs:T,fetch:r.fetch});return R.ok?{version:S,status:R.findings.length?"vulnerable":"ok",findings:R.findings,reason:null,checkedAt:n()}:Date.now()>=s?null:h("error",R.error)}e.s(["P",0,w,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],902509);var v=e.i(631065),k=e.i(412948),_=e.i(70377);function S(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function x(e){let i=await (0,s.db)().select({id:n.resources.id,name:n.resources.name,sec:n.appSecurity}).from(n.resources).leftJoin(n.appSecurity,(0,t.eq)(n.appSecurity.resourceId,n.resources.id)).where((0,t.and)((0,t.eq)(n.resources.kind,"app"),(0,t.eq)(n.resources.monitored,!0),(0,t.isNull)(n.resources.goneAt),e?(0,t.eq)(n.resources.id,e):void 0)).orderBy(r.sql`${n.appSecurity.checkedAt} asc nulls first`,n.resources.name).limit(_.O.apps);if(!i.length)return[];let a=await (0,s.db)().select({resourceId:n.monitors.resourceId,url:n.monitors.url}).from(n.monitors).where((0,t.inArray)(n.monitors.resourceId,i.map(e=>e.id))).orderBy(n.monitors.createdAt).limit(_.O.monitors);return i.map(e=>({id:e.id,name:e.name,prev:e.sec?S(e.sec):null,host:(0,k.m)(e.name,a.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function A(e,i){await (0,s.db)().transaction(async s=>{await s.execute(r.sql`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[a]=await s.select().from(n.appSecurity).where((0,t.eq)(n.appSecurity.resourceId,e.id)).limit(1),l=a?S(a):null;if(l&&l.checkedAt.getTime()>=i.checkedAt.getTime())return;let c="unknown"===i.status||"error"===i.status?{...i,version:l?l.version:i.version,findings:l?l.findings:i.findings}:i,u={framework:"next",version:c.version,status:c.status,findings:c.findings,reason:c.reason,checkedAt:c.checkedAt};await s.insert(n.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:n.appSecurity.resourceId,set:u,setWhere:r.sql`${n.appSecurity.checkedAt} < excluded.checked_at`});let h=(0,v.t)(e.name,l,c);h&&await (0,o.f)([{type:"system",kind:h.kind,message:h.message,detail:h.detail,resourceId:e.id,at:c.checkedAt,reason:"ok"===h.kind?"NextClean":"NextVulnerable"}],s)})}async function T(e){let t=await x(),r=0,s=0,n=[];return await (0,i.P)(t,3,async t=>{if(e-Date.now()<3e3)return void s++;try{let n=await w(t.host,t.prev,{deadline:e});if(!n)return void s++;await A(t,n),r++}catch(e){n.push(`${t.name}: ${(0,a.safeError)(e)}`)}}),{checked:r,skipped:s,failed:n}}e.s(["h",0,T,"Z",0,S],584820)},486118,e=>{let t;var r,s,n=e.i(547963),i=e.i(804308),a=e.i(515683),o=e.i(25734),l=e.i(27626),c=e.i(64858),u=e.i(248744),h=e.i(379593),d=e.i(423660),p=e.i(717799),f=e.i(336763),m=e.i(396918),g=e.i(406212),b=e.i(530298),y=e.i(503313),w=e.i(595262),v=e.i(638809),k=e.i(732077),_=e.i(908223),S=e.i(328586),x=e.i(406197),A=e.i(964964),T=e.i(958948),R=e.i(348657),E=e.i(198552),I=e.i(205746),O=e.i(760859),j=e.i(518581),C=e.i(633075),$=e.i(108621),P=e.i(809303);async function N(e){let t=Date.now();try{let r=await fetch(e,{redirect:"manual",signal:AbortSignal.timeout(A.w),cache:"no-store",headers:{"User-Agent":"Watchbell smoke test"}}),s=401===r.status||403===r.status?(await r.text().catch(()=>"")).slice(0,8192):"";return{status:r.status,ms:Date.now()-t,authWall:(0,A.S)(r.status,s,r.headers)}}catch{return{status:null,ms:Date.now()-t,authWall:!1}}}async function D(t,r){let{extensions:s}=await e.A(27505);return await s.runner?.lockfileJobActive(t,r).catch(()=>!1)??!1}let U={rows:async()=>await (0,g.db)().select({id:b.dependencyPrs.id,repoId:b.dependencyPrs.repoId,appId:b.dependencyPrs.appId,proposalId:b.dependencyPrs.proposalId,number:b.dependencyPrs.number,branch:b.dependencyPrs.branch,baseBranch:b.dependencyPrs.baseBranch,headSha:b.dependencyPrs.headSha,title:b.dependencyPrs.title,packages:b.dependencyPrs.packages,auto:b.dependencyPrs.auto,stage:b.dependencyPrs.stage,smokeMode:b.dependencyPrs.smokeMode,previewReadyAt:b.dependencyPrs.previewReadyAt,openedAt:b.dependencyPrs.openedAt,fullName:b.githubRepos.fullName,appName:b.resources.name}).from(b.dependencyPrs).innerJoin(b.githubRepos,(0,f.eq)(b.githubRepos.id,b.dependencyPrs.repoId)).leftJoin(b.resources,(0,f.eq)(b.resources.id,b.dependencyPrs.appId)).where((0,f.inArray)(b.dependencyPrs.stage,[...A.X])).orderBy((0,m.asc)(b.dependencyPrs.openedAt)).limit(10),security:P.X,rollback:P.K,writeToken:async()=>{let e=await (0,_.G)();return e&&"unreadable"!==e?e.token:null},readToken:async e=>{let t=await (0,S.l)(e);return t.ok?t.token:null},vercel:async e=>{let t=await (0,x.p)(e,"app"),r=t?.resource.meta.teamId;return t&&"string"==typeof r&&t.resource.externalId?{token:t.token,teamId:r,projectId:t.resource.externalId}:null},monitorUrls:async e=>(await (0,g.db)().select({url:b.monitors.url}).from(b.monitors).where((0,f.and)((0,f.eq)(b.monitors.resourceId,e),(0,f.eq)(b.monitors.kind,"http"))).limit(10)).map(e=>e.url),pull:R.b,checks:R.s,runs:T.L,previews:E.C,probe:N,errorLogs:async(e,t,r,s)=>{let n=await (0,I.f)(e.token,e.teamId,e.projectId,{since:r,until:s,now:s,deploymentId:t,levels:["error","fatal"],maxRows:20,timeoutMs:8e3});return n.ok?n.lines.length:null},merge:R.C,save:async(e,t,r,s)=>{await (0,g.db)().update(b.dependencyPrs).set({...t,stageText:s,checkedAt:new Date}).where((0,f.eq)(b.dependencyPrs.id,e)),r&&await (0,g.db)().update(j.O).set({result:s}).where((0,f.eq)(j.O.id,r)).catch(()=>void 0)},notify:e=>(0,$.y)(e),lockfileBusy:async(e,t,r)=>await D(e,t)||await (0,k.W)(r,t),audit:(e,t)=>(0,w.f)({kind:"ok",message:e,resourceId:t,actorUserId:null}),book:()=>(0,y.f)()};async function L(e,t,r=U){let s={watched:0,merged:0,stopped:0},n=()=>t-Date.now(),i=await r.rows();if(!i.length)return s;let[a,o,l]=await Promise.all([r.security().catch(()=>null),r.rollback().catch(()=>null),r.writeToken().catch(()=>null)]);if(!l)return s;let c=await r.book().catch(()=>O.a);for(let t of i){if(15e3>n())break;if(t.auto||a?.enabled)try{let n=await q(t,e,l,o?.enabled===!0,r);if(!n)continue;s.watched++;let i=t.appName?(0,O.r)(c,t.appName):"app";await M(t,n,i,o?.windowMin??30,e,l,r,s)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}return s}async function q(e,t,r,s,n){let i=await n.pull(r,e.fullName,e.number);if(!i.ok)return null;let a=await n.checks(r,e.fullName,i.data.headSha),o=null;if(a.ok&&null===a.data.checkRuns&&e.appId){let t=await n.readToken(e.appId),r=t?await n.runs(t,e.fullName,i.data.headSha):null;o=r?.ok?r.data:null}a.ok||(a={ok:!0,data:{checkRuns:[{status:"queued",conclusion:null}],combined:null}});let l=(0,A.j)({...a.data,actionRuns:o}),c={state:null,readyAt:null},u=null,h=e.appId?await n.vercel(e.appId):null;if(h&&"success"===l&&i.data.headSha===e.headSha){let r=await n.previews(h.token,h.teamId,h.projectId,i.data.headSha),s=r.ok?r.data.find(e=>"preview"===e.target)??r.data[0]??null:null;if(s&&(c={state:s.state,readyAt:s.readyAt??("ready"===s.state?t:null)},"ready"===s.state&&s.url)){let r=e.previewReadyAt??c.readyAt??t;if("logs"!==e.smokeMode){let t=(0,A.E)(e.appId?await n.monitorUrls(e.appId):[]),r=await Promise.all(t.map(async e=>({path:e,...await n.probe(`https://${s.url}${e}`)})));u=(0,A.L)(r)}u||(u=(0,A.n)(r,t,await n.errorLogs(h,s.id,r,t).catch(()=>null))),c.readyAt=r}}return{step:(0,A.M)({now:t,openedAt:e.openedAt,pr:{state:i.data.state,merged:i.data.merged,mergeable:i.data.mergeable,headSha:i.data.headSha},recordedSha:e.headSha,checks:l,preview:c,smoke:u,autoRollbackOn:s}),smoke:u,previewReadyAt:c.readyAt,headSha:i.data.headSha}}async function M(e,t,r,s,n,i,a,o){let{step:l}=t,c=t.smoke?{smokeMode:t.smoke.mode}:{},u=t.previewReadyAt?{previewReadyAt:t.previewReadyAt}:{},h={app:r,number:e.number,packages:e.packages};if("wait"===l.kind)return void await a.save(e.id,{stage:l.stage,...c,...u,...l.resetSha?{headSha:l.resetSha,previewReadyAt:null,smokeMode:null}:{}},e.proposalId,(0,A.m)(e.number,l.stage,l.reason));if("done"===l.kind)return void await a.save(e.id,{stage:l.stage,finishedAt:n},e.proposalId,(0,A.m)(e.number,l.stage));if("stop"===l.kind&&("CI gagal"===l.reason||"CI failed"===l.reason)&&await a.lockfileBusy?.(e.repoId,e.branch,e.fullName).catch(()=>!1))return void await a.save(e.id,{stage:"checks"},e.proposalId,(0,A.m)(e.number,"checks","waiting for the lockfile from the runner"));if("stop"===l.kind){await a.save(e.id,{stage:l.stage,finishedAt:n,...c},e.proposalId,(0,A.m)(e.number,l.stage,"ready-manual"===l.stage?null:l.reason)),o.stopped++,await a.notify({...h,kind:"ready-manual"===l.stage?"ready-manual":"stopped",reason:l.reason}).catch(()=>void 0);return}await a.save(e.id,{stage:"merging",...c,...u},e.proposalId,(0,A.m)(e.number,"merging"));let d=await a.merge(i,e.fullName,e.number,e.branch,e.baseBranch,e.headSha,e.title);if(d.ok){await a.save(e.id,{stage:"merged",mergedSha:d.data.sha,finishedAt:n},e.proposalId,(0,A.m)(e.number,"merged")),o.merged++,await a.audit(`${C.v}PR #${e.number} merged \xb7 ${e.packages.join(", ")}`.slice(0,200),e.appId).catch(()=>void 0),await a.notify({...h,kind:"merged",windowMin:s}).catch(()=>void 0);return}if(409===d.status)return void await a.save(e.id,{stage:"checks"},e.proposalId,(0,A.m)(e.number,"checks","new commit on the PR branch, checking again"));let p=405===d.status?"GitHub refused the merge (cannot be merged)":`merge failed: ${d.error}`.slice(0,150);await a.save(e.id,{stage:"failed",finishedAt:n},e.proposalId,(0,A.m)(e.number,"failed",p)),o.stopped++,await a.notify({...h,kind:"stopped",reason:p}).catch(()=>void 0)}let B=null;async function z(e,t,r=v.I){if((0,A.f)(e,B)&&!(await r()).has("devops")){B=e.getTime();try{let r=await L(e,t?.deadline??e.getTime()+5e4);r.watched&&console.log(`deps/watch: ${r.watched} PR, ${r.merged} merged, ${r.stopped} stopped`)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}}var F=e.i(653587),W=e.i(452475);let H={nav:[{section:"manage",after:"settings",items:[{key:"ai",label:"AI Gateway",href:"/ai",icon:"route",stage:5,ownerOnly:!0},{key:"api-docs",label:"API explorer",href:"/api-docs",icon:"api",stage:5,ownerOnly:!0}]}],palette:[{label:"AI Gateway",href:"/ai",keywords:["ai","gateway","overview"]},{label:"API keys",href:"/ai/keys",keywords:["key","token","wb_","wp_"]},{label:"Agents",href:"/ai/agents",keywords:["agent","client","mcp"]},{label:"Connect an agent",href:"/ai/connect",keywords:["mcp",...n.I.palette.connectKeywords,"gemini cli","quick start"]},{label:"Bring your own key",href:"/ai/providers",keywords:["provider","byok","cloudflare","groq","openrouter","gemini"]},{label:"Quota",href:"/ai/quota",keywords:["limit","usage","rate"]},{label:"AI logs",href:"/ai/logs",keywords:["logs","requests","usage"]},{label:"Models",href:"/ai/models",keywords:["model","llm"]},{label:"Playground",href:"/ai/playground",keywords:["chat","try","prompt"]},{label:"API explorer",href:"/api-docs",keywords:["openapi","swagger","api","v1"]}]},G={dailySteps:[{name:"ai-usage-retention",run:a.$}]},K={WhyAiSlot:h.f,RecSummarySlot:u.f,AiNotesSlot:c.f,dailySteps:[{name:"advisor-summary",run:l.f}],minuteSteps:[{name:"advisor-notes",run:o.f}]},J={dailySteps:[{name:"ai-notes-retention",run:d.v}]},V={nav:[{section:"manage",after:"alerts",items:[{key:"auto-actions",label:"Auto-actions",href:"/auto-actions",icon:"bolt",stage:9,ownerOnly:!0}]}],palette:[{label:"Auto-actions",href:"/auto-actions",keywords:["proposal","approve","reject","auto-run","rollback"]}],dailySteps:[{name:"auto-actions-retention",run:F.t}],minuteSteps:[{name:"auto-actions",run:F.Z},{name:"deps-pr-watch",run:z}],settingsTabs:[{key:"office-auto-run",label:"Auto-actions",Tab:p.f}]},Y={telegramCallback:W.proposalCallback},X=function(...e){let t={nav:[],palette:[]};for(let r of e){for(let e of r.nav??[]){let r=t.nav.find(t=>t.section===e.section&&t.after===e.after);r?r.items=[...r.items,...e.items]:t.nav.push({...e,items:[...e.items]})}t.palette.push(...r.palette??[]),r.dailySteps?.length&&(t.dailySteps=[...t.dailySteps??[],...r.dailySteps]),r.minuteSteps?.length&&(t.minuteSteps=[...t.minuteSteps??[],...r.minuteSteps]),r.WhyAiSlot&&(t.WhyAiSlot=r.WhyAiSlot),r.RecSummarySlot&&(t.RecSummarySlot=r.RecSummarySlot),r.AiNotesSlot&&(t.AiNotesSlot=r.AiNotesSlot),r.DevNotesSlot&&(t.DevNotesSlot=r.DevNotesSlot),r.office&&(t.office=r.office),r.settingsTabs?.length&&(t.settingsTabs=[...t.settingsTabs??[],...r.settingsTabs]),r.telegramCallback&&(t.telegramCallback=r.telegramCallback),r.runner&&(t.runner=r.runner),r.RepoPreviewSlot&&(t.RepoPreviewSlot=r.RepoPreviewSlot)}return t}({...H,palette:(r=H.palette??[],s={label:"Ask AI",href:"/ai/ask",keywords:["ask","question","answer"]},(t=r.findIndex(e=>"/ai"===e.href))<0?[...r,s]:[...r.slice(0,t+1),s,...r.slice(t+1)])},{dailySteps:[{name:"ai-agents-prune",run:()=>(0,i.f)()}]},G,{},{},J,V,K,Y);e.s(["extensions",0,X],486118)},178233,e=>{let t=e=>"number"==typeof e&&Number.isFinite(e)&&e>=0?e:null;e.s(["G",0,function(e){let r=e&&"object"==typeof e?e.pageviews:null;if(!r||"object"!=typeof r)return null;let s="string"==typeof r.readAt?Date.parse(r.readAt):0/0;if(Number.isNaN(s)||"boolean"!=typeof r.enabled)return null;if(!r.enabled)return{enabled:!1,readAt:new Date(s)};let n=t(r.total24h),i=null===r.visitors24h?null:t(r.visitors24h);if(null===n||null===i&&null!==r.visitors24h)return null;let a=36e5*Math.floor(s/36e5),o=new Map;for(let e of Array.isArray(r.hourly)?r.hourly:[]){if(!Array.isArray(e))continue;let r="string"==typeof e[0]?Date.parse(e[0]):0/0,s=t(e[1]);if(Number.isNaN(r)||null===s)continue;let n=36e5*Math.floor(r/36e5);o.set(n,(o.get(n)??0)+s)}return{enabled:!0,total:n,visitors:i,hours:Array.from({length:24},(e,t)=>{let r=a-(23-t)*36e5;return{at:new Date(r),views:o.get(r)??0}}),readAt:new Date(s)}},"R",0,function(e){return!e.gone&&e.teamId&&e.accountOk?e.hasProductionDeploy?null:"Not read: this app has no production deployment yet.":"Not read: this app isn't in a connected Vercel account."},"Z",0,function(e,t){return e.enabled?{enabled:!0,total24h:e.total,visitors24h:e.visitors,readAt:t.toISOString(),hourly:e.hourly.slice(-24).map(e=>[e.at.toISOString(),e.views])}:{enabled:!1,readAt:t.toISOString()}}])},530831,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoRollbackForm() from the server but AutoRollbackForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-rollback-form.tsx","AutoRollbackForm");e.s(["AutoRollbackForm",0,t])},657753,e=>{var t=e.i(530831);e.n(t)},842941,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoRunForm() from the server but AutoRunForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-run-form.tsx","AutoRunForm");e.s(["AutoRunForm",0,t])},27295,e=>{var t=e.i(842941);e.n(t)},699286,e=>{let t=(0,e.i(310086).registerClientReference)(function(){throw Error("Attempted to call AutoSecurityForm() from the server but AutoSecurityForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-security-form.tsx","AutoSecurityForm");e.s(["AutoSecurityForm",0,t])},783671,e=>{var t=e.i(699286);e.n(t)},804308,515683,585585,e=>{var t=e.i(533102),r=e.i(406212);e.i(333407);var s=e.i(518581);async function n(){await (0,r.db)().execute(t.sql`
     delete from ops.ai_agents where id in (select id from ops.ai_agents order by last_seen_at desc offset ${2e3})
   `)}e.s(["f",0,n],804308);var i=e.i(885298);let a={name:"watchpost-console",version:"5c",via:"console",userAgent:"Watchbell console"},o=t.sql.raw("'00000000-0000-0000-0000-000000000000'::uuid");async function l(e,s){let n=e.client,i=e.tool??e.model,a=e.tokensIn??0,l=e.tokensOut??0,c=JSON.stringify(s.map(e=>({provider_id:e.providerId,scope:e.scope.slice(0,100),metric:e.metric.slice(0,40),used:e.used,limit:e.limit,remaining:e.remaining,reset_at:e.resetAt?.toISOString()??null,source:e.source}))),u=e.at.toISOString();await (0,r.db)().execute(t.sql`
     with agent as (

package/server/.next/server/chunks/_1g_prqb_u33e3._.js

@@ -1,4 +1,4 @@
-module.exports=[[871198,(e,t,r)=>{function o(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,r=new WeakMap;return(o=function(e){return e?r:t})(e)}r._=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e||"object"!=typeof e&&"function"!=typeof e)return{default:e};var r=o(t);if(r&&r.has(e))return r.get(e);var a={__proto__:null},n=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var s in e)if("default"!==s&&Object.prototype.hasOwnProperty.call(e,s)){var i=n?Object.getOwnPropertyDescriptor(e,s):null;i&&(i.get||i.set)?Object.defineProperty(a,s,i):a[s]=e[s]}return a.default=e,r&&r.set(e,a),a}},963679,e=>{var t=e.i(845656);e.n(t)},287568,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0});var o={default:function(){return l},useLinkStatus:function(){return i.useLinkStatus}};for(var a in o)Object.defineProperty(r,a,{enumerable:!0,get:o[a]});let n=e.r(871198),s=e.r(222260),i=n._(e.r(963679));function l(e){let t=e.legacyBehavior,r="string"==typeof e.children||"number"==typeof e.children||"string"==typeof e.children?.type,o=e.children?.type?.$$typeof===Symbol.for("react.client.reference");return!t||r||o||(e.children?.type?.$$typeof===Symbol.for("react.lazy")?console.error("Using a Lazy Component as a direct child of `<Link legacyBehavior>` from a Server Component is not supported. If you need legacyBehavior, wrap your Lazy Component in a Client Component that renders the Link's `<a>` tag."):console.error("Using a Server Component as a direct child of `<Link legacyBehavior>` is not supported. If you need legacyBehavior, wrap your Server Component in a Client Component that renders the Link's `<a>` tag.")),(0,s.jsx)(i.default,{...e})}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},222260,(e,t,r)=>{t.exports=e.r(442315).vendored["react-rsc"].ReactJsxRuntime},997953,(e,t,r)=>{t.exports=e.r(442315).vendored["react-rsc"].ReactServerDOMTurbopackServer},595935,e=>{var t=e.i(997953);(0,t.registerClientReference)(function(){throw Error("Attempted to call AliasProvider() from the server but AliasProvider is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","AliasProvider"),(0,t.registerClientReference)(function(){throw Error("Attempted to call DbName() from the server but DbName is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","DbName"),(0,t.registerClientReference)(function(){throw Error("Attempted to call Masked() from the server but Masked is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Masked");let r=(0,t.registerClientReference)(function(){throw Error("Attempted to call MaskedText() from the server but MaskedText is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","MaskedText");(0,t.registerClientReference)(function(){throw Error("Attempted to call Reveal() from the server but Reveal is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Reveal"),(0,t.registerClientReference)(function(){throw Error("Attempted to call maskedValue() from the server but maskedValue is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","maskedValue"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useAliasBook() from the server but useAliasBook is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useAliasBook"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useMask() from the server but useMask is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useMask"),(0,t.registerClientReference)(function(){throw Error("Attempted to call usePrivacy() from the server but usePrivacy is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","usePrivacy"),e.s(["MaskedText",0,r])},646822,e=>{var t=e.i(595935);e.n(t)},13733,e=>{var t=e.i(875225),r=e.i(349129),o=e.i(924924),a=e.i(618916),n=e.i(390775),s=e.i(921991),i=e.i(547499);let l=e=>e.trim().toLowerCase();var d=e.i(479301),c=e.i(455037);async function p(e){let l=e?(0,t.b)((0,t.u)(a.accounts.id,e),(0,t.u)(a.accounts.provider,"github")):(0,t.u)(a.accounts.provider,"github"),[d]=await (0,o.f)().select().from(a.accounts).where(l).orderBy((0,r.M)(a.accounts.createdAt)).limit(1);if(!d)return null;let c=(0,s.V)({ciphertext:d.credentialCiphertext,iv:d.credentialIv},(0,i.f)().OPS_ENCRYPTION_KEY);return{account:d,token:c,problem:(0,n.A)(c)}}async function u(e,t,r){let o=0;for(let a=0;a<e.length&&!(Date.now()>t);a+=5){let t=e.slice(a,a+5);o+=t.length,await Promise.allSettled(t.map(r))}return o}async function m(e,r,s={}){var i,d;let h,b,g=await p(e);if(!g)return{ok:!1,error:"GitHub isn't connected."};let{account:w,token:y,problem:k}=g;if(k||!y)return{ok:!1,error:k??"The credential can't be read."};let v=await (0,c.o)(y,s);if(!v.ok){let e=(0,n.E)({ok:!1,kind:"scope"===v.kind?"auth":"missing"===v.kind?"transient":v.kind,error:v.error});return e&&await (0,o.f)().update(a.accounts).set({...e,updatedAt:new Date}).where((0,t.u)(a.accounts.id,w.id)),{ok:!1,error:v.error}}let x=new Date,A=(i=await (0,o.f)().select({id:a.githubRepos.id,externalId:a.githubRepos.externalId,goneAt:a.githubRepos.goneAt}).from(a.githubRepos).where((0,t.u)(a.githubRepos.accountId,w.id)).limit(1e3),d=v.data.repos,h=new Map(i.map(e=>[e.externalId,e])),b=new Set(d.map(e=>e.id)),{insert:d.filter(e=>!h.has(e.id)),update:d.filter(e=>h.has(e.id)).map(e=>({id:h.get(e.id).id,repo:e})),gone:i.filter(e=>!b.has(e.externalId)&&!e.goneAt).map(e=>e.id)}),j=e=>({owner:e.owner,name:e.name,fullName:e.fullName,defaultBranch:e.defaultBranch,private:e.private,archived:e.archived,htmlUrl:e.htmlUrl,pushedAt:e.pushedAt});await (0,o.f)().transaction(async e=>{for(let r of A.update)await e.update(a.githubRepos).set({...j(r.repo),lastSeenAt:x,goneAt:null,updatedAt:x}).where((0,t.u)(a.githubRepos.id,r.id));A.insert.length&&await e.insert(a.githubRepos).values(A.insert.map(e=>({accountId:w.id,externalId:e.id,...j(e)}))).onConflictDoNothing({target:[a.githubRepos.accountId,a.githubRepos.externalId]}),A.gone.length&&await e.update(a.githubRepos).set({goneAt:x,updatedAt:x}).where((0,t.b)((0,t.y)(a.githubRepos.id,A.gone),(0,t.M)(a.githubRepos.goneAt)))});let I=await (0,o.f)().select().from(a.githubRepos).where((0,t.u)(a.githubRepos.accountId,w.id)).limit(1e3),R=[];v.data.truncated&&R.push("Only the 300 most recently pushed repositories are listed.");let C=!1;await u(I.filter(e=>!e.archived&&!e.goneAt&&(!e.packageCheckedAt||null!==e.pushedAt&&e.pushedAt>e.packageCheckedAt)).sort((e,t)=>(t.pushedAt?.getTime()??0)-(e.pushedAt?.getTime()??0)).slice(0,10),r,async e=>{let r=await (0,c.q)(y,e.fullName,s);r.ok?await (0,o.f)().update(a.githubRepos).set({packageName:r.data,packageCheckedAt:new Date,updatedAt:new Date}).where((0,t.u)(a.githubRepos.id,e.id)):"scope"===r.kind&&(C=!0)}),C&&R.push("Some package.json files can't be read: give the token Contents read on those repositories.");let S=await (0,o.f)().select({id:a.resources.id,name:a.resources.name,meta:a.resources.meta}).from(a.resources).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.M)(a.resources.goneAt))).limit(500),N=await (0,o.f)().select({appId:a.appRepos.appId,repoId:a.appRepos.repoId,source:a.appRepos.source}).from(a.appRepos).limit(500),M=e=>"string"==typeof e&&e?e:null,z=function(e,t,r){let o=new Map(t.filter(e=>!e.goneAt).map(e=>[l(e.fullName),e.id])),a=new Map(r.map(e=>[e.appId,e])),n=[];for(let t of e){if("github"!==t.repoType||!t.repo)continue;let e=o.get(l(t.repo));if(!e)continue;let r=a.get(t.id);r?.source!=="manual"&&r?.repoId!==e&&n.push({appId:t.id,repoId:e})}return n}(S.map(e=>({id:e.id,name:e.name,repo:M(e.meta.repo),repoType:M(e.meta.repoType)})),I,N);for(let e of z)await (0,o.f)().insert(a.appRepos).values({appId:e.appId,repoId:e.repoId,source:"vercel"}).onConflictDoUpdate({target:a.appRepos.appId,set:{repoId:e.repoId,source:"vercel",updatedAt:new Date},setWhere:(0,t.c)(a.appRepos.source,"manual")});let P=await (0,o.f)().selectDistinct({id:a.githubRepos.id,fullName:a.githubRepos.fullName,defaultBranch:a.githubRepos.defaultBranch}).from(a.appRepos).innerJoin(a.githubRepos,(0,t.u)(a.githubRepos.id,a.appRepos.repoId)).where((0,t.b)((0,t.u)(a.githubRepos.accountId,w.id),(0,t.M)(a.githubRepos.goneAt))).limit(500),O=!1,$=await u(P,r,async e=>{let t=await (0,c.W)(y,e.fullName,e.defaultBranch,s);t.ok?await f(e.id,t.data):"scope"===t.kind&&(O=!0)});O&&R.push("Some Actions runs can't be read: give the token Actions read on those repositories."),$<P.length&&R.push(`${P.length-$} Actions status${P.length-$==1?"":"es"} left for the next run, time budget used.`);let T=await (0,c.k)(y,s);return await (0,o.f)().update(a.accounts).set({lastSyncAt:x,status:"ok",lastError:null,updatedAt:x,...T.ok?{expiresAt:T.data.expiresAt}:{}}).where((0,t.u)(a.accounts.id,w.id)),{ok:!0,repos:I.filter(e=>!e.goneAt).length,linked:P.length,newLinks:z.length,notes:R}}async function f(e,r){await (0,o.f)().update(a.githubRepos).set({actions:r,actionsCheckedAt:new Date,updatedAt:new Date}).where((0,t.u)(a.githubRepos.id,e))}async function h(e){let[r]=await (0,o.f)().select({id:a.accounts.id}).from(a.accounts).where((0,t.u)(a.accounts.provider,"github")).limit(1);if(!r)return null;if(Date.now()>e)return"left for the next run, time budget used";let n=await m(r.id,e);return n.ok?null:n.error}async function b(e){if(!(0,d.f)(e))return{ok:!1,reason:"no-repo",error:"That app no longer exists."};let[r]=await (0,o.f)().select({r:a.githubRepos}).from(a.appRepos).innerJoin(a.githubRepos,(0,t.u)(a.githubRepos.id,a.appRepos.repoId)).where((0,t.b)((0,t.u)(a.appRepos.appId,e),(0,t.M)(a.githubRepos.goneAt))).limit(1);if(!r)return{ok:!1,reason:"no-repo",error:"This app isn't linked to a GitHub repository yet."};let n=await p(r.r.accountId);return n?.token?{ok:!0,fullName:r.r.fullName,defaultBranch:r.r.defaultBranch,token:n.token}:{ok:!1,reason:"no-token",error:"The GitHub token can't be read; check the GitHub connection."}}e.s(["D",0,h,"l",0,b],13733)},310603,e=>{let t;var r,o,a=e.i(313931),n=e.i(597420),s=e.i(121232),i=e.i(613394),l=e.i(486400),d=e.i(643801),c=e.i(972857),p=e.i(316957),u=e.i(778504),m=e.i(130078),f=e.i(875225),h=e.i(349129),b=e.i(924924),g=e.i(618916),w=e.i(209576),y=e.i(407602),k=e.i(825895),v=e.i(582931),x=e.i(13733),A=e.i(472832),j=e.i(256662),I=e.i(455037),R=e.i(267841),C=e.i(177706),S=e.i(36995),N=e.i(298397),M=e.i(291029),z=e.i(377489),P=e.i(442565),O=e.i(570191);async function $(e){let t=Date.now();try{let r=await fetch(e,{redirect:"manual",signal:AbortSignal.timeout(j.w),cache:"no-store",headers:{"User-Agent":"Watchbell smoke test"}}),o=401===r.status||403===r.status?(await r.text().catch(()=>"")).slice(0,8192):"";return{status:r.status,ms:Date.now()-t,authWall:(0,j.S)(r.status,o,r.headers)}}catch{return{status:null,ms:Date.now()-t,authWall:!1}}}async function T(t,r){let{extensions:o}=await e.A(774810);return await o.runner?.lockfileJobActive(t,r).catch(()=>!1)??!1}let D={rows:async()=>await (0,b.f)().select({id:g.dependencyPrs.id,repoId:g.dependencyPrs.repoId,appId:g.dependencyPrs.appId,proposalId:g.dependencyPrs.proposalId,number:g.dependencyPrs.number,branch:g.dependencyPrs.branch,baseBranch:g.dependencyPrs.baseBranch,headSha:g.dependencyPrs.headSha,title:g.dependencyPrs.title,packages:g.dependencyPrs.packages,auto:g.dependencyPrs.auto,stage:g.dependencyPrs.stage,smokeMode:g.dependencyPrs.smokeMode,previewReadyAt:g.dependencyPrs.previewReadyAt,openedAt:g.dependencyPrs.openedAt,fullName:g.githubRepos.fullName,appName:g.resources.name}).from(g.dependencyPrs).innerJoin(g.githubRepos,(0,f.u)(g.githubRepos.id,g.dependencyPrs.repoId)).leftJoin(g.resources,(0,f.u)(g.resources.id,g.dependencyPrs.appId)).where((0,f.y)(g.dependencyPrs.stage,[...j.X])).orderBy((0,h.M)(g.dependencyPrs.openedAt)).limit(10),security:O.X,rollback:O.K,writeToken:async()=>{let e=await (0,v.G)();return e&&"unreadable"!==e?e.token:null},readToken:async e=>{let t=await (0,x.l)(e);return t.ok?t.token:null},vercel:async e=>{let t=await (0,A.p)(e,"app"),r=t?.resource.meta.teamId;return t&&"string"==typeof r&&t.resource.externalId?{token:t.token,teamId:r,projectId:t.resource.externalId}:null},monitorUrls:async e=>(await (0,b.f)().select({url:g.monitors.url}).from(g.monitors).where((0,f.b)((0,f.u)(g.monitors.resourceId,e),(0,f.u)(g.monitors.kind,"http"))).limit(10)).map(e=>e.url),pull:R.b,checks:R.s,runs:I.L,previews:C.C,probe:$,errorLogs:async(e,t,r,o)=>{let a=await (0,S.f)(e.token,e.teamId,e.projectId,{since:r,until:o,now:o,deploymentId:t,levels:["error","fatal"],maxRows:20,timeoutMs:8e3});return a.ok?a.lines.length:null},merge:R.C,save:async(e,t,r,o)=>{await (0,b.f)().update(g.dependencyPrs).set({...t,stageText:o,checkedAt:new Date}).where((0,f.u)(g.dependencyPrs.id,e)),r&&await (0,b.f)().update(M.O).set({result:o}).where((0,f.u)(M.O.id,r)).catch(()=>void 0)},notify:e=>(0,P.y)(e),lockfileBusy:async(e,t,r)=>await T(e,t)||await (0,k.W)(r,t),audit:(e,t)=>(0,y.f)({kind:"ok",message:e,resourceId:t,actorUserId:null}),book:()=>(0,w.f)()};async function B(e,t,r=D){let o={watched:0,merged:0,stopped:0},a=()=>t-Date.now(),n=await r.rows();if(!n.length)return o;let[s,i,l]=await Promise.all([r.security().catch(()=>null),r.rollback().catch(()=>null),r.writeToken().catch(()=>null)]);if(!l)return o;let d=await r.book().catch(()=>N.a);for(let t of n){if(15e3>a())break;if(t.auto||s?.enabled)try{let a=await W(t,e,l,i?.enabled===!0,r);if(!a)continue;o.watched++;let n=t.appName?(0,N.r)(d,t.appName):"app";await _(t,a,n,i?.windowMin??30,e,l,r,o)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}return o}async function W(e,t,r,o,a){let n=await a.pull(r,e.fullName,e.number);if(!n.ok)return null;let s=await a.checks(r,e.fullName,n.data.headSha),i=null;if(s.ok&&null===s.data.checkRuns&&e.appId){let t=await a.readToken(e.appId),r=t?await a.runs(t,e.fullName,n.data.headSha):null;i=r?.ok?r.data:null}s.ok||(s={ok:!0,data:{checkRuns:[{status:"queued",conclusion:null}],combined:null}});let l=(0,j.j)({...s.data,actionRuns:i}),d={state:null,readyAt:null},c=null,p=e.appId?await a.vercel(e.appId):null;if(p&&"success"===l&&n.data.headSha===e.headSha){let r=await a.previews(p.token,p.teamId,p.projectId,n.data.headSha),o=r.ok?r.data.find(e=>"preview"===e.target)??r.data[0]??null:null;if(o&&(d={state:o.state,readyAt:o.readyAt??("ready"===o.state?t:null)},"ready"===o.state&&o.url)){let r=e.previewReadyAt??d.readyAt??t;if("logs"!==e.smokeMode){let t=(0,j.E)(e.appId?await a.monitorUrls(e.appId):[]),r=await Promise.all(t.map(async e=>({path:e,...await a.probe(`https://${o.url}${e}`)})));c=(0,j.L)(r)}c||(c=(0,j.n)(r,t,await a.errorLogs(p,o.id,r,t).catch(()=>null))),d.readyAt=r}}return{step:(0,j.M)({now:t,openedAt:e.openedAt,pr:{state:n.data.state,merged:n.data.merged,mergeable:n.data.mergeable,headSha:n.data.headSha},recordedSha:e.headSha,checks:l,preview:d,smoke:c,autoRollbackOn:o}),smoke:c,previewReadyAt:d.readyAt,headSha:n.data.headSha}}async function _(e,t,r,o,a,n,s,i){let{step:l}=t,d=t.smoke?{smokeMode:t.smoke.mode}:{},c=t.previewReadyAt?{previewReadyAt:t.previewReadyAt}:{},p={app:r,number:e.number,packages:e.packages};if("wait"===l.kind)return void await s.save(e.id,{stage:l.stage,...d,...c,...l.resetSha?{headSha:l.resetSha,previewReadyAt:null,smokeMode:null}:{}},e.proposalId,(0,j.m)(e.number,l.stage,l.reason));if("done"===l.kind)return void await s.save(e.id,{stage:l.stage,finishedAt:a},e.proposalId,(0,j.m)(e.number,l.stage));if("stop"===l.kind&&("CI gagal"===l.reason||"CI failed"===l.reason)&&await s.lockfileBusy?.(e.repoId,e.branch,e.fullName).catch(()=>!1))return void await s.save(e.id,{stage:"checks"},e.proposalId,(0,j.m)(e.number,"checks","waiting for the lockfile from the runner"));if("stop"===l.kind){await s.save(e.id,{stage:l.stage,finishedAt:a,...d},e.proposalId,(0,j.m)(e.number,l.stage,"ready-manual"===l.stage?null:l.reason)),i.stopped++,await s.notify({...p,kind:"ready-manual"===l.stage?"ready-manual":"stopped",reason:l.reason}).catch(()=>void 0);return}await s.save(e.id,{stage:"merging",...d,...c},e.proposalId,(0,j.m)(e.number,"merging"));let u=await s.merge(n,e.fullName,e.number,e.branch,e.baseBranch,e.headSha,e.title);if(u.ok){await s.save(e.id,{stage:"merged",mergedSha:u.data.sha,finishedAt:a},e.proposalId,(0,j.m)(e.number,"merged")),i.merged++,await s.audit(`${z.v}PR #${e.number} merged \xb7 ${e.packages.join(", ")}`.slice(0,200),e.appId).catch(()=>void 0),await s.notify({...p,kind:"merged",windowMin:o}).catch(()=>void 0);return}if(409===u.status)return void await s.save(e.id,{stage:"checks"},e.proposalId,(0,j.m)(e.number,"checks","new commit on the PR branch, checking again"));let m=405===u.status?"GitHub refused the merge (cannot be merged)":`merge failed: ${u.error}`.slice(0,150);await s.save(e.id,{stage:"failed",finishedAt:a},e.proposalId,(0,j.m)(e.number,"failed",m)),i.stopped++,await s.notify({...p,kind:"stopped",reason:m}).catch(()=>void 0)}let E=null;async function L(e,t){if((0,j.f)(e,E)){E=e.getTime();try{let r=await B(e,t?.deadline??e.getTime()+5e4);r.watched&&console.log(`deps/watch: ${r.watched} PR, ${r.merged} merged, ${r.stopped} stopped`)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}}var G=e.i(447933),F=e.i(610514);let q={nav:[{group:"AI & API",after:"Observe",items:[{key:"ai",label:"AI Gateway",href:"/ai",icon:"route",stage:5,ownerOnly:!0},{key:"api-docs",label:"API explorer",href:"/api-docs",icon:"api",stage:5,ownerOnly:!0}]}],palette:[{label:"AI Gateway",href:"/ai",keywords:["ai","gateway","overview"]},{label:"API keys",href:"/ai/keys",keywords:["key","token","wb_","wp_"]},{label:"Agents",href:"/ai/agents",keywords:["agent","client","mcp"]},{label:"Connect an agent",href:"/ai/connect",keywords:["mcp",...a.I.palette.connectKeywords,"gemini cli","quick start"]},{label:"Bring your own key",href:"/ai/providers",keywords:["provider","byok","cloudflare","groq","openrouter","gemini"]},{label:"Quota",href:"/ai/quota",keywords:["limit","usage","rate"]},{label:"AI logs",href:"/ai/logs",keywords:["logs","requests","usage"]},{label:"Models",href:"/ai/models",keywords:["model","llm"]},{label:"Playground",href:"/ai/playground",keywords:["chat","try","prompt"]},{label:"API explorer",href:"/api-docs",keywords:["openapi","swagger","api","v1"]}]},H={dailySteps:[{name:"ai-usage-retention",run:s.$}]},U={WhyAiSlot:p.f,RecSummarySlot:c.f,AiNotesSlot:d.f,dailySteps:[{name:"advisor-summary",run:l.f}],minuteSteps:[{name:"advisor-notes",run:i.f}]},J={dailySteps:[{name:"ai-notes-retention",run:u.v}]},V={nav:[{group:"Automation",after:"Observe",items:[{key:"auto-actions",label:"Auto-actions",href:"/auto-actions",icon:"bolt",stage:9,ownerOnly:!0}]}],palette:[{label:"Auto-actions",href:"/auto-actions",keywords:["proposal","approve","reject","auto-run","rollback"]}],dailySteps:[{name:"auto-actions-retention",run:G.t}],minuteSteps:[{name:"auto-actions",run:G.Z},{name:"deps-pr-watch",run:L}],settingsTabs:[{key:"office-auto-run",label:"Auto-actions",Tab:m.f}]},K={telegramCallback:F.proposalCallback},X=function(...e){let t={nav:[],palette:[]};for(let r of e){for(let e of r.nav??[]){let r=t.nav.find(t=>t.group===e.group);r?r.items=[...r.items,...e.items]:t.nav.push({...e,items:[...e.items]})}t.palette.push(...r.palette??[]),r.dailySteps?.length&&(t.dailySteps=[...t.dailySteps??[],...r.dailySteps]),r.minuteSteps?.length&&(t.minuteSteps=[...t.minuteSteps??[],...r.minuteSteps]),r.WhyAiSlot&&(t.WhyAiSlot=r.WhyAiSlot),r.RecSummarySlot&&(t.RecSummarySlot=r.RecSummarySlot),r.AiNotesSlot&&(t.AiNotesSlot=r.AiNotesSlot),r.DevNotesSlot&&(t.DevNotesSlot=r.DevNotesSlot),r.office&&(t.office=r.office),r.settingsTabs?.length&&(t.settingsTabs=[...t.settingsTabs??[],...r.settingsTabs]),r.telegramCallback&&(t.telegramCallback=r.telegramCallback),r.runner&&(t.runner=r.runner),r.RepoPreviewSlot&&(t.RepoPreviewSlot=r.RepoPreviewSlot)}return t}({...q,palette:(r=q.palette??[],o={label:"Ask AI",href:"/ai/ask",keywords:["ask","question","answer"]},(t=r.findIndex(e=>"/ai"===e.href))<0?[...r,o]:[...r.slice(0,t+1),o,...r.slice(t+1)])},{dailySteps:[{name:"ai-agents-prune",run:()=>(0,n.f)()}]},H,{},{},J,V,U,K);e.s(["extensions",0,X],310603)},627925,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoRollbackForm() from the server but AutoRollbackForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-rollback-form.tsx","AutoRollbackForm");e.s(["AutoRollbackForm",0,t])},909743,e=>{var t=e.i(627925);e.n(t)},336799,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoRunForm() from the server but AutoRunForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-run-form.tsx","AutoRunForm");e.s(["AutoRunForm",0,t])},482272,e=>{var t=e.i(336799);e.n(t)},405692,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoSecurityForm() from the server but AutoSecurityForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-security-form.tsx","AutoSecurityForm");e.s(["AutoSecurityForm",0,t])},979898,e=>{var t=e.i(405692);e.n(t)},597420,613394,486400,643801,972857,316957,130078,e=>{let t,r,o,a,n;var s,i=e.i(518899),l=e.i(924924);e.i(656083);var d=e.i(291029);async function c(){await (0,l.f)().execute(i.B`
+module.exports=[[871198,(e,t,r)=>{function o(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,r=new WeakMap;return(o=function(e){return e?r:t})(e)}r._=function(e,t){if(!t&&e&&e.__esModule)return e;if(null===e||"object"!=typeof e&&"function"!=typeof e)return{default:e};var r=o(t);if(r&&r.has(e))return r.get(e);var a={__proto__:null},n=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var s in e)if("default"!==s&&Object.prototype.hasOwnProperty.call(e,s)){var i=n?Object.getOwnPropertyDescriptor(e,s):null;i&&(i.get||i.set)?Object.defineProperty(a,s,i):a[s]=e[s]}return a.default=e,r&&r.set(e,a),a}},963679,e=>{var t=e.i(845656);e.n(t)},287568,(e,t,r)=>{Object.defineProperty(r,"__esModule",{value:!0});var o={default:function(){return l},useLinkStatus:function(){return i.useLinkStatus}};for(var a in o)Object.defineProperty(r,a,{enumerable:!0,get:o[a]});let n=e.r(871198),s=e.r(222260),i=n._(e.r(963679));function l(e){let t=e.legacyBehavior,r="string"==typeof e.children||"number"==typeof e.children||"string"==typeof e.children?.type,o=e.children?.type?.$$typeof===Symbol.for("react.client.reference");return!t||r||o||(e.children?.type?.$$typeof===Symbol.for("react.lazy")?console.error("Using a Lazy Component as a direct child of `<Link legacyBehavior>` from a Server Component is not supported. If you need legacyBehavior, wrap your Lazy Component in a Client Component that renders the Link's `<a>` tag."):console.error("Using a Server Component as a direct child of `<Link legacyBehavior>` is not supported. If you need legacyBehavior, wrap your Server Component in a Client Component that renders the Link's `<a>` tag.")),(0,s.jsx)(i.default,{...e})}("function"==typeof r.default||"object"==typeof r.default&&null!==r.default)&&void 0===r.default.__esModule&&(Object.defineProperty(r.default,"__esModule",{value:!0}),Object.assign(r.default,r),t.exports=r.default)},222260,(e,t,r)=>{t.exports=e.r(442315).vendored["react-rsc"].ReactJsxRuntime},997953,(e,t,r)=>{t.exports=e.r(442315).vendored["react-rsc"].ReactServerDOMTurbopackServer},595935,e=>{var t=e.i(997953);(0,t.registerClientReference)(function(){throw Error("Attempted to call AliasProvider() from the server but AliasProvider is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","AliasProvider"),(0,t.registerClientReference)(function(){throw Error("Attempted to call DbName() from the server but DbName is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","DbName"),(0,t.registerClientReference)(function(){throw Error("Attempted to call Masked() from the server but Masked is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Masked");let r=(0,t.registerClientReference)(function(){throw Error("Attempted to call MaskedText() from the server but MaskedText is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","MaskedText");(0,t.registerClientReference)(function(){throw Error("Attempted to call Reveal() from the server but Reveal is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","Reveal"),(0,t.registerClientReference)(function(){throw Error("Attempted to call maskedValue() from the server but maskedValue is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","maskedValue"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useAliasBook() from the server but useAliasBook is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useAliasBook"),(0,t.registerClientReference)(function(){throw Error("Attempted to call useMask() from the server but useMask is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","useMask"),(0,t.registerClientReference)(function(){throw Error("Attempted to call usePrivacy() from the server but usePrivacy is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/components/alias.tsx","usePrivacy"),e.s(["MaskedText",0,r])},646822,e=>{var t=e.i(595935);e.n(t)},13733,e=>{var t=e.i(875225),r=e.i(349129),o=e.i(924924),a=e.i(618916),n=e.i(390775),s=e.i(921991),i=e.i(547499);let l=e=>e.trim().toLowerCase();var d=e.i(479301),c=e.i(455037);async function p(e){let l=e?(0,t.b)((0,t.u)(a.accounts.id,e),(0,t.u)(a.accounts.provider,"github")):(0,t.u)(a.accounts.provider,"github"),[d]=await (0,o.f)().select().from(a.accounts).where(l).orderBy((0,r.M)(a.accounts.createdAt)).limit(1);if(!d)return null;let c=(0,s.V)({ciphertext:d.credentialCiphertext,iv:d.credentialIv},(0,i.f)().OPS_ENCRYPTION_KEY);return{account:d,token:c,problem:(0,n.A)(c)}}async function u(e,t,r){let o=0;for(let a=0;a<e.length&&!(Date.now()>t);a+=5){let t=e.slice(a,a+5);o+=t.length,await Promise.allSettled(t.map(r))}return o}async function m(e,r,s={}){var i,d;let h,b,g=await p(e);if(!g)return{ok:!1,error:"GitHub isn't connected."};let{account:w,token:y,problem:k}=g;if(k||!y)return{ok:!1,error:k??"The credential can't be read."};let v=await (0,c.o)(y,s);if(!v.ok){let e=(0,n.E)({ok:!1,kind:"scope"===v.kind?"auth":"missing"===v.kind?"transient":v.kind,error:v.error});return e&&await (0,o.f)().update(a.accounts).set({...e,updatedAt:new Date}).where((0,t.u)(a.accounts.id,w.id)),{ok:!1,error:v.error}}let x=new Date,A=(i=await (0,o.f)().select({id:a.githubRepos.id,externalId:a.githubRepos.externalId,goneAt:a.githubRepos.goneAt}).from(a.githubRepos).where((0,t.u)(a.githubRepos.accountId,w.id)).limit(1e3),d=v.data.repos,h=new Map(i.map(e=>[e.externalId,e])),b=new Set(d.map(e=>e.id)),{insert:d.filter(e=>!h.has(e.id)),update:d.filter(e=>h.has(e.id)).map(e=>({id:h.get(e.id).id,repo:e})),gone:i.filter(e=>!b.has(e.externalId)&&!e.goneAt).map(e=>e.id)}),j=e=>({owner:e.owner,name:e.name,fullName:e.fullName,defaultBranch:e.defaultBranch,private:e.private,archived:e.archived,htmlUrl:e.htmlUrl,pushedAt:e.pushedAt});await (0,o.f)().transaction(async e=>{for(let r of A.update)await e.update(a.githubRepos).set({...j(r.repo),lastSeenAt:x,goneAt:null,updatedAt:x}).where((0,t.u)(a.githubRepos.id,r.id));A.insert.length&&await e.insert(a.githubRepos).values(A.insert.map(e=>({accountId:w.id,externalId:e.id,...j(e)}))).onConflictDoNothing({target:[a.githubRepos.accountId,a.githubRepos.externalId]}),A.gone.length&&await e.update(a.githubRepos).set({goneAt:x,updatedAt:x}).where((0,t.b)((0,t.y)(a.githubRepos.id,A.gone),(0,t.M)(a.githubRepos.goneAt)))});let I=await (0,o.f)().select().from(a.githubRepos).where((0,t.u)(a.githubRepos.accountId,w.id)).limit(1e3),R=[];v.data.truncated&&R.push("Only the 300 most recently pushed repositories are listed.");let C=!1;await u(I.filter(e=>!e.archived&&!e.goneAt&&(!e.packageCheckedAt||null!==e.pushedAt&&e.pushedAt>e.packageCheckedAt)).sort((e,t)=>(t.pushedAt?.getTime()??0)-(e.pushedAt?.getTime()??0)).slice(0,10),r,async e=>{let r=await (0,c.q)(y,e.fullName,s);r.ok?await (0,o.f)().update(a.githubRepos).set({packageName:r.data,packageCheckedAt:new Date,updatedAt:new Date}).where((0,t.u)(a.githubRepos.id,e.id)):"scope"===r.kind&&(C=!0)}),C&&R.push("Some package.json files can't be read: give the token Contents read on those repositories.");let S=await (0,o.f)().select({id:a.resources.id,name:a.resources.name,meta:a.resources.meta}).from(a.resources).where((0,t.b)((0,t.u)(a.resources.kind,"app"),(0,t.M)(a.resources.goneAt))).limit(500),N=await (0,o.f)().select({appId:a.appRepos.appId,repoId:a.appRepos.repoId,source:a.appRepos.source}).from(a.appRepos).limit(500),M=e=>"string"==typeof e&&e?e:null,z=function(e,t,r){let o=new Map(t.filter(e=>!e.goneAt).map(e=>[l(e.fullName),e.id])),a=new Map(r.map(e=>[e.appId,e])),n=[];for(let t of e){if("github"!==t.repoType||!t.repo)continue;let e=o.get(l(t.repo));if(!e)continue;let r=a.get(t.id);r?.source!=="manual"&&r?.repoId!==e&&n.push({appId:t.id,repoId:e})}return n}(S.map(e=>({id:e.id,name:e.name,repo:M(e.meta.repo),repoType:M(e.meta.repoType)})),I,N);for(let e of z)await (0,o.f)().insert(a.appRepos).values({appId:e.appId,repoId:e.repoId,source:"vercel"}).onConflictDoUpdate({target:a.appRepos.appId,set:{repoId:e.repoId,source:"vercel",updatedAt:new Date},setWhere:(0,t.c)(a.appRepos.source,"manual")});let P=await (0,o.f)().selectDistinct({id:a.githubRepos.id,fullName:a.githubRepos.fullName,defaultBranch:a.githubRepos.defaultBranch}).from(a.appRepos).innerJoin(a.githubRepos,(0,t.u)(a.githubRepos.id,a.appRepos.repoId)).where((0,t.b)((0,t.u)(a.githubRepos.accountId,w.id),(0,t.M)(a.githubRepos.goneAt))).limit(500),O=!1,$=await u(P,r,async e=>{let t=await (0,c.W)(y,e.fullName,e.defaultBranch,s);t.ok?await f(e.id,t.data):"scope"===t.kind&&(O=!0)});O&&R.push("Some Actions runs can't be read: give the token Actions read on those repositories."),$<P.length&&R.push(`${P.length-$} Actions status${P.length-$==1?"":"es"} left for the next run, time budget used.`);let T=await (0,c.k)(y,s);return await (0,o.f)().update(a.accounts).set({lastSyncAt:x,status:"ok",lastError:null,updatedAt:x,...T.ok?{expiresAt:T.data.expiresAt}:{}}).where((0,t.u)(a.accounts.id,w.id)),{ok:!0,repos:I.filter(e=>!e.goneAt).length,linked:P.length,newLinks:z.length,notes:R}}async function f(e,r){await (0,o.f)().update(a.githubRepos).set({actions:r,actionsCheckedAt:new Date,updatedAt:new Date}).where((0,t.u)(a.githubRepos.id,e))}async function h(e){let[r]=await (0,o.f)().select({id:a.accounts.id}).from(a.accounts).where((0,t.u)(a.accounts.provider,"github")).limit(1);if(!r)return null;if(Date.now()>e)return"left for the next run, time budget used";let n=await m(r.id,e);return n.ok?null:n.error}async function b(e){if(!(0,d.f)(e))return{ok:!1,reason:"no-repo",error:"That app no longer exists."};let[r]=await (0,o.f)().select({r:a.githubRepos}).from(a.appRepos).innerJoin(a.githubRepos,(0,t.u)(a.githubRepos.id,a.appRepos.repoId)).where((0,t.b)((0,t.u)(a.appRepos.appId,e),(0,t.M)(a.githubRepos.goneAt))).limit(1);if(!r)return{ok:!1,reason:"no-repo",error:"This app isn't linked to a GitHub repository yet."};let n=await p(r.r.accountId);return n?.token?{ok:!0,fullName:r.r.fullName,defaultBranch:r.r.defaultBranch,token:n.token}:{ok:!1,reason:"no-token",error:"The GitHub token can't be read; check the GitHub connection."}}e.s(["D",0,h,"l",0,b],13733)},310603,e=>{let t;var r,o,a=e.i(313931),n=e.i(597420),s=e.i(121232),i=e.i(613394),l=e.i(486400),d=e.i(643801),c=e.i(972857),p=e.i(316957),u=e.i(778504),m=e.i(130078),f=e.i(875225),h=e.i(349129),b=e.i(924924),g=e.i(618916),w=e.i(209576),y=e.i(407602),k=e.i(111970),v=e.i(825895),x=e.i(582931),A=e.i(13733),j=e.i(472832),I=e.i(256662),R=e.i(455037),C=e.i(267841),S=e.i(177706),N=e.i(36995),M=e.i(298397),z=e.i(291029),P=e.i(377489),O=e.i(442565),$=e.i(570191);async function T(e){let t=Date.now();try{let r=await fetch(e,{redirect:"manual",signal:AbortSignal.timeout(I.w),cache:"no-store",headers:{"User-Agent":"Watchbell smoke test"}}),o=401===r.status||403===r.status?(await r.text().catch(()=>"")).slice(0,8192):"";return{status:r.status,ms:Date.now()-t,authWall:(0,I.S)(r.status,o,r.headers)}}catch{return{status:null,ms:Date.now()-t,authWall:!1}}}async function D(t,r){let{extensions:o}=await e.A(774810);return await o.runner?.lockfileJobActive(t,r).catch(()=>!1)??!1}let B={rows:async()=>await (0,b.f)().select({id:g.dependencyPrs.id,repoId:g.dependencyPrs.repoId,appId:g.dependencyPrs.appId,proposalId:g.dependencyPrs.proposalId,number:g.dependencyPrs.number,branch:g.dependencyPrs.branch,baseBranch:g.dependencyPrs.baseBranch,headSha:g.dependencyPrs.headSha,title:g.dependencyPrs.title,packages:g.dependencyPrs.packages,auto:g.dependencyPrs.auto,stage:g.dependencyPrs.stage,smokeMode:g.dependencyPrs.smokeMode,previewReadyAt:g.dependencyPrs.previewReadyAt,openedAt:g.dependencyPrs.openedAt,fullName:g.githubRepos.fullName,appName:g.resources.name}).from(g.dependencyPrs).innerJoin(g.githubRepos,(0,f.u)(g.githubRepos.id,g.dependencyPrs.repoId)).leftJoin(g.resources,(0,f.u)(g.resources.id,g.dependencyPrs.appId)).where((0,f.y)(g.dependencyPrs.stage,[...I.X])).orderBy((0,h.M)(g.dependencyPrs.openedAt)).limit(10),security:$.X,rollback:$.K,writeToken:async()=>{let e=await (0,x.G)();return e&&"unreadable"!==e?e.token:null},readToken:async e=>{let t=await (0,A.l)(e);return t.ok?t.token:null},vercel:async e=>{let t=await (0,j.p)(e,"app"),r=t?.resource.meta.teamId;return t&&"string"==typeof r&&t.resource.externalId?{token:t.token,teamId:r,projectId:t.resource.externalId}:null},monitorUrls:async e=>(await (0,b.f)().select({url:g.monitors.url}).from(g.monitors).where((0,f.b)((0,f.u)(g.monitors.resourceId,e),(0,f.u)(g.monitors.kind,"http"))).limit(10)).map(e=>e.url),pull:C.b,checks:C.s,runs:R.L,previews:S.C,probe:T,errorLogs:async(e,t,r,o)=>{let a=await (0,N.f)(e.token,e.teamId,e.projectId,{since:r,until:o,now:o,deploymentId:t,levels:["error","fatal"],maxRows:20,timeoutMs:8e3});return a.ok?a.lines.length:null},merge:C.C,save:async(e,t,r,o)=>{await (0,b.f)().update(g.dependencyPrs).set({...t,stageText:o,checkedAt:new Date}).where((0,f.u)(g.dependencyPrs.id,e)),r&&await (0,b.f)().update(z.O).set({result:o}).where((0,f.u)(z.O.id,r)).catch(()=>void 0)},notify:e=>(0,O.y)(e),lockfileBusy:async(e,t,r)=>await D(e,t)||await (0,v.W)(r,t),audit:(e,t)=>(0,y.f)({kind:"ok",message:e,resourceId:t,actorUserId:null}),book:()=>(0,w.f)()};async function W(e,t,r=B){let o={watched:0,merged:0,stopped:0},a=()=>t-Date.now(),n=await r.rows();if(!n.length)return o;let[s,i,l]=await Promise.all([r.security().catch(()=>null),r.rollback().catch(()=>null),r.writeToken().catch(()=>null)]);if(!l)return o;let d=await r.book().catch(()=>M.a);for(let t of n){if(15e3>a())break;if(t.auto||s?.enabled)try{let a=await _(t,e,l,i?.enabled===!0,r);if(!a)continue;o.watched++;let n=t.appName?(0,M.r)(d,t.appName):"app";await E(t,a,n,i?.windowMin??30,e,l,r,o)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}return o}async function _(e,t,r,o,a){let n=await a.pull(r,e.fullName,e.number);if(!n.ok)return null;let s=await a.checks(r,e.fullName,n.data.headSha),i=null;if(s.ok&&null===s.data.checkRuns&&e.appId){let t=await a.readToken(e.appId),r=t?await a.runs(t,e.fullName,n.data.headSha):null;i=r?.ok?r.data:null}s.ok||(s={ok:!0,data:{checkRuns:[{status:"queued",conclusion:null}],combined:null}});let l=(0,I.j)({...s.data,actionRuns:i}),d={state:null,readyAt:null},c=null,p=e.appId?await a.vercel(e.appId):null;if(p&&"success"===l&&n.data.headSha===e.headSha){let r=await a.previews(p.token,p.teamId,p.projectId,n.data.headSha),o=r.ok?r.data.find(e=>"preview"===e.target)??r.data[0]??null:null;if(o&&(d={state:o.state,readyAt:o.readyAt??("ready"===o.state?t:null)},"ready"===o.state&&o.url)){let r=e.previewReadyAt??d.readyAt??t;if("logs"!==e.smokeMode){let t=(0,I.E)(e.appId?await a.monitorUrls(e.appId):[]),r=await Promise.all(t.map(async e=>({path:e,...await a.probe(`https://${o.url}${e}`)})));c=(0,I.L)(r)}c||(c=(0,I.n)(r,t,await a.errorLogs(p,o.id,r,t).catch(()=>null))),d.readyAt=r}}return{step:(0,I.M)({now:t,openedAt:e.openedAt,pr:{state:n.data.state,merged:n.data.merged,mergeable:n.data.mergeable,headSha:n.data.headSha},recordedSha:e.headSha,checks:l,preview:d,smoke:c,autoRollbackOn:o}),smoke:c,previewReadyAt:d.readyAt,headSha:n.data.headSha}}async function E(e,t,r,o,a,n,s,i){let{step:l}=t,d=t.smoke?{smokeMode:t.smoke.mode}:{},c=t.previewReadyAt?{previewReadyAt:t.previewReadyAt}:{},p={app:r,number:e.number,packages:e.packages};if("wait"===l.kind)return void await s.save(e.id,{stage:l.stage,...d,...c,...l.resetSha?{headSha:l.resetSha,previewReadyAt:null,smokeMode:null}:{}},e.proposalId,(0,I.m)(e.number,l.stage,l.reason));if("done"===l.kind)return void await s.save(e.id,{stage:l.stage,finishedAt:a},e.proposalId,(0,I.m)(e.number,l.stage));if("stop"===l.kind&&("CI gagal"===l.reason||"CI failed"===l.reason)&&await s.lockfileBusy?.(e.repoId,e.branch,e.fullName).catch(()=>!1))return void await s.save(e.id,{stage:"checks"},e.proposalId,(0,I.m)(e.number,"checks","waiting for the lockfile from the runner"));if("stop"===l.kind){await s.save(e.id,{stage:l.stage,finishedAt:a,...d},e.proposalId,(0,I.m)(e.number,l.stage,"ready-manual"===l.stage?null:l.reason)),i.stopped++,await s.notify({...p,kind:"ready-manual"===l.stage?"ready-manual":"stopped",reason:l.reason}).catch(()=>void 0);return}await s.save(e.id,{stage:"merging",...d,...c},e.proposalId,(0,I.m)(e.number,"merging"));let u=await s.merge(n,e.fullName,e.number,e.branch,e.baseBranch,e.headSha,e.title);if(u.ok){await s.save(e.id,{stage:"merged",mergedSha:u.data.sha,finishedAt:a},e.proposalId,(0,I.m)(e.number,"merged")),i.merged++,await s.audit(`${P.v}PR #${e.number} merged \xb7 ${e.packages.join(", ")}`.slice(0,200),e.appId).catch(()=>void 0),await s.notify({...p,kind:"merged",windowMin:o}).catch(()=>void 0);return}if(409===u.status)return void await s.save(e.id,{stage:"checks"},e.proposalId,(0,I.m)(e.number,"checks","new commit on the PR branch, checking again"));let m=405===u.status?"GitHub refused the merge (cannot be merged)":`merge failed: ${u.error}`.slice(0,150);await s.save(e.id,{stage:"failed",finishedAt:a},e.proposalId,(0,I.m)(e.number,"failed",m)),i.stopped++,await s.notify({...p,kind:"stopped",reason:m}).catch(()=>void 0)}let L=null;async function G(e,t,r=k.I){if((0,I.f)(e,L)&&!(await r()).has("devops")){L=e.getTime();try{let r=await W(e,t?.deadline??e.getTime()+5e4);r.watched&&console.log(`deps/watch: ${r.watched} PR, ${r.merged} merged, ${r.stopped} stopped`)}catch(e){console.warn("deps/watch failed:",e instanceof Error?e.name:"error")}}}var F=e.i(447933),q=e.i(610514);let H={nav:[{section:"manage",after:"settings",items:[{key:"ai",label:"AI Gateway",href:"/ai",icon:"route",stage:5,ownerOnly:!0},{key:"api-docs",label:"API explorer",href:"/api-docs",icon:"api",stage:5,ownerOnly:!0}]}],palette:[{label:"AI Gateway",href:"/ai",keywords:["ai","gateway","overview"]},{label:"API keys",href:"/ai/keys",keywords:["key","token","wb_","wp_"]},{label:"Agents",href:"/ai/agents",keywords:["agent","client","mcp"]},{label:"Connect an agent",href:"/ai/connect",keywords:["mcp",...a.I.palette.connectKeywords,"gemini cli","quick start"]},{label:"Bring your own key",href:"/ai/providers",keywords:["provider","byok","cloudflare","groq","openrouter","gemini"]},{label:"Quota",href:"/ai/quota",keywords:["limit","usage","rate"]},{label:"AI logs",href:"/ai/logs",keywords:["logs","requests","usage"]},{label:"Models",href:"/ai/models",keywords:["model","llm"]},{label:"Playground",href:"/ai/playground",keywords:["chat","try","prompt"]},{label:"API explorer",href:"/api-docs",keywords:["openapi","swagger","api","v1"]}]},U={dailySteps:[{name:"ai-usage-retention",run:s.$}]},J={WhyAiSlot:p.f,RecSummarySlot:c.f,AiNotesSlot:d.f,dailySteps:[{name:"advisor-summary",run:l.f}],minuteSteps:[{name:"advisor-notes",run:i.f}]},V={dailySteps:[{name:"ai-notes-retention",run:u.v}]},K={nav:[{section:"manage",after:"alerts",items:[{key:"auto-actions",label:"Auto-actions",href:"/auto-actions",icon:"bolt",stage:9,ownerOnly:!0}]}],palette:[{label:"Auto-actions",href:"/auto-actions",keywords:["proposal","approve","reject","auto-run","rollback"]}],dailySteps:[{name:"auto-actions-retention",run:F.t}],minuteSteps:[{name:"auto-actions",run:F.Z},{name:"deps-pr-watch",run:G}],settingsTabs:[{key:"office-auto-run",label:"Auto-actions",Tab:m.f}]},X={telegramCallback:q.proposalCallback},Y=function(...e){let t={nav:[],palette:[]};for(let r of e){for(let e of r.nav??[]){let r=t.nav.find(t=>t.section===e.section&&t.after===e.after);r?r.items=[...r.items,...e.items]:t.nav.push({...e,items:[...e.items]})}t.palette.push(...r.palette??[]),r.dailySteps?.length&&(t.dailySteps=[...t.dailySteps??[],...r.dailySteps]),r.minuteSteps?.length&&(t.minuteSteps=[...t.minuteSteps??[],...r.minuteSteps]),r.WhyAiSlot&&(t.WhyAiSlot=r.WhyAiSlot),r.RecSummarySlot&&(t.RecSummarySlot=r.RecSummarySlot),r.AiNotesSlot&&(t.AiNotesSlot=r.AiNotesSlot),r.DevNotesSlot&&(t.DevNotesSlot=r.DevNotesSlot),r.office&&(t.office=r.office),r.settingsTabs?.length&&(t.settingsTabs=[...t.settingsTabs??[],...r.settingsTabs]),r.telegramCallback&&(t.telegramCallback=r.telegramCallback),r.runner&&(t.runner=r.runner),r.RepoPreviewSlot&&(t.RepoPreviewSlot=r.RepoPreviewSlot)}return t}({...H,palette:(r=H.palette??[],o={label:"Ask AI",href:"/ai/ask",keywords:["ask","question","answer"]},(t=r.findIndex(e=>"/ai"===e.href))<0?[...r,o]:[...r.slice(0,t+1),o,...r.slice(t+1)])},{dailySteps:[{name:"ai-agents-prune",run:()=>(0,n.f)()}]},U,{},{},V,K,J,X);e.s(["extensions",0,Y],310603)},627925,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoRollbackForm() from the server but AutoRollbackForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-rollback-form.tsx","AutoRollbackForm");e.s(["AutoRollbackForm",0,t])},909743,e=>{var t=e.i(627925);e.n(t)},336799,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoRunForm() from the server but AutoRunForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-run-form.tsx","AutoRunForm");e.s(["AutoRunForm",0,t])},482272,e=>{var t=e.i(336799);e.n(t)},405692,e=>{let t=(0,e.i(997953).registerClientReference)(function(){throw Error("Attempted to call AutoSecurityForm() from the server but AutoSecurityForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/private/actions/auto-security-form.tsx","AutoSecurityForm");e.s(["AutoSecurityForm",0,t])},979898,e=>{var t=e.i(405692);e.n(t)},597420,613394,486400,643801,972857,316957,130078,e=>{let t,r,o,a,n;var s,i=e.i(518899),l=e.i(924924);e.i(656083);var d=e.i(291029);async function c(){await (0,l.f)().execute(i.B`
     delete from ops.ai_agents where id in (select id from ops.ai_agents order by last_seen_at desc offset ${2e3})
   `)}e.s(["f",0,c],597420);var p=e.i(875225),u=e.i(473283),m=e.i(618916),f=e.i(185284),h=e.i(477660),b=e.i(28357),g=e.i(778504),w=e.i(971724),y=e.i(105954),k=e.i(604147),v=e.i(218331),x=e.i(76482);let A={enabled:!0,model:null};function j(e){let{hour:t,minute:r}=(0,v.z)(e);return 7!==t&&19!==t||r>=15?null:`${(0,v.x)(e)}T${String(t).padStart(2,"0")}`}let I=e=>"string"==typeof e?e.toLowerCase():"",R=w.z.object({app:y.z.string().trim().min(1).max(80),severity:k.z.enum(["info","warn","crit"]),title:y.z.string().trim().min(3).max(79),body:y.z.string().trim().min(10).max(600)}),C=/\b(?:[a-z0-9-]+\.)+(?:com|net|org|io|app|dev|id|co|xyz|cloud|site|me|ai)\b/i,S=e=>e.split(/(?<=[.!?])\s+/).filter(e=>e.trim().length>0).length,N="watchpost";async function M(){let[e]=await (0,l.f)().select({value:m.settings.value}).from(m.settings).where((0,p.u)(m.settings.key,"ai.advisorNotes")).limit(1);var t=e?.value;if(!t||"object"!=typeof t||Array.isArray(t))return A;let r="string"==typeof t.model&&t.model.trim()&&t.model.length<=200?t.model.trim():null;return{enabled:!1!==t.enabled,model:r}}async function z(e,t){let r=t.toISOString(),o=await (0,l.f)().execute(i.B`
     insert into ops.settings (key, value, created_at, updated_at)