watchbell 1.1.0 → 1.2.1

package/server/.next/server/chunks/src_lib_16y1secb8t9fj._.js

@@ -0,0 +1,6 @@
+(()=>{"use strict";module.exports=[658266,618127,211256,e=>{var t=e.i(278619),n=e.i(959408),r=e.i(867274),a=e.i(413230),s=e.i(7494),i=e.i(250474),o=e.i(90801),l=e.i(32391);let u=["next","eslint-config-next"],d={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",LOW:"low",UNKNOWN:"unknown"};function c(e,t){if(!e||!(0,l.C)(e))return null;let n=t.map(e=>e.fixed).filter(t=>!!t&&(0,l.C)(t)&&(0,i.f)(t,e)>0);if(!n.length)return null;let r=n.filter(t=>(0,o.J)(e,t));return(r.length?r:n).reduce((e,t)=>(0,i.f)(t,e)>0?t:e)}function p(e,t){let n=c(e,t),r=n?t.map(e=>e.fixed).filter(e=>!!e&&(0,l.C)(e)&&(0,i.f)(e,n)>0):[],a=r.reduce((e,t)=>null===e||(0,i.f)(t,e)>0?t:e,null),o=a?` (${1===r.length?"one fix needs":"some fixes need"} Next.js ${a.split(".")[0]})`:"";return`Next.js ${e??"(unknown version)"} has ${(0,s.q)(t.length)} (${(0,s.N)(t).toLowerCase()}), ${n?`fixed in ${n}${o}`:"no fix yet"}.`}e.s(["P",0,p,"p",0,function(e){if(!e||"vulnerable"!==e.status||!e.findings.length||!e.version)return null;let t=c(e.version,e.findings);if(!t)return null;let n=d[(0,s.N)(e.findings)],r=[...new Set(e.findings.map(e=>e.id))],a=[...new Set(e.findings.flatMap(e=>e.cve?[e.cve]:[]))];return{from:e.version,to:t,upgrades:[{package:"next",to:t,vulnIds:r,cves:a,severity:n},{package:"eslint-config-next",to:t,vulnIds:[],cves:[],severity:n,companionOf:"next"}],installed:new Map(u.map(t=>[t,e.version]))}},"F",0,function(e){let t=e.find(e=>"next"===e.package&&!e.companionOf);return!t||e.some(e=>"eslint-config-next"===e.package)?e:[...e,{package:"eslint-config-next",to:t.to,vulnIds:[],cves:[],severity:t.severity,companionOf:"next"}]}],618127);let f=e=>Math.round(e).toLocaleString("en-US"),m=(e,t)=>Math.floor((e.getTime()-t.getTime())/864e5),h=(e,t)=>`${e} ${t}${1===e?"":"s"}`,g=e=>{try{let t=new URL(e);return`${t.host}${t.pathname}`}catch{return e}},y=e=>{try{return new URL(e).host}catch{return e}},k=e=>{try{return new URL(e).pathname}catch{return"/"}},v="Down · ",w=(e,t,n)=>({rule:e,subject:t,status:"unknown",resourceId:null,accountId:null,title:t,message:"",provider:null,sampleAt:null,...n}),b=e=>"firestore"===e.provider?"firebase":"d1"===e.provider?"cloudflare":e.provider,$=new Set(["turso","upstash","d1"]),A={MonitorDown:(e,t)=>e.monitors.map(e=>{let r=w("MonitorDown",e.id,{resourceId:e.appId,title:`${e.appName} ${"heartbeat"===e.kind?e.url:k(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt}),a=t??3;if("heartbeat"===e.kind){let t;return{...r,status:"err"===e.state?"firing":"ok"===e.state?"ok":"unknown",message:`${e.appName} \xb7 ${e.url}: ${t=e.lastError,t?.startsWith(v)?t.slice(v.length):"no ping in time"}.`}}return e.movedTo?{...r,status:"ok",message:`${y(e.url)} moved to ${e.movedTo}; MonitorDomainMoved takes over.`}:e.failStreak>=a?{...r,status:"firing",message:(0,n.H)(e)?`${g(e.url)} failed its check (${(0,n.H)(e)}) on ${a} consecutive checks.`:`${g(e.url)} returned ${e.lastStatus?`HTTP ${e.lastStatus}`:"no answer"} on ${a} consecutive checks.`}:{...r,status:0===e.failStreak&&e.lastCheckedAt?"ok":"unknown",message:`${g(e.url)} answers again.`}}),MonitorDomainMoved:e=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let t=w("MonitorDomainMoved",e.id,{resourceId:e.appId,title:`${e.appName} ${k(e.url)}`,provider:"vercel"});return e.movedTo?{...t,status:"firing",message:`${y(e.url)} is no longer a domain of ${e.appName}; production is on ${e.movedTo}.`}:{...t,status:"ok",message:`The monitor checks ${y(e.url)}, a domain of ${e.appName}.`}}),CollectorStale:(e,t)=>{let n=e.lastMinuteRunAt;return[w("CollectorStale","collector",{status:!n||e.now.getTime()-n.getTime()>(t??5)*6e4?"firing":"ok",title:"collector",message:n?`The last minute run finished ${f((e.now.getTime()-n.getTime())/6e4)} min ago.`:"The collector hasn't finished a run yet."})]},HighLatency:(e,t)=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let n=w("HighLatency",e.id,{resourceId:e.appId,title:`${e.appName} ${k(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt});if(e.checksLast10<5||null===e.p95Last10)return n;let r=t??1500;return{...n,status:e.p95Last10>r?"firing":"ok",message:`p95 ${f(e.p95Last10)} ms over the last 10 minutes (limit ${f(r)} ms).`}}),DeploymentFailed:e=>e.apps.map(e=>{let t=w("DeploymentFailed",e.id,{resourceId:e.id,title:e.name,provider:"vercel"}),n=e.latestProduction;return n?"error"===n.state?{...t,status:"firing",message:`Production deployment ${n.sha?n.sha.slice(0,7):"(no commit)"} failed.`}:{...t,status:"building"===n.state?"unknown":"ok"}:{...t,status:"ok"}}),DatabasePaused:e=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(e=>w("DatabasePaused",e.id,{resourceId:e.id,title:e.name,provider:"supabase",status:"unknown"===e.state?"unknown":"paused"===e.state?"firing":"ok",message:`Supabase project ${e.name} is paused.`})),CertExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("CertExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.tlsNotAfter)return r;let a=m(n.tlsNotAfter,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:`The TLS certificate of ${n.name} expires in ${h(a,"day")}.`}}),DomainExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("DomainExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.expiresAt)return r;let a=m(n.expiresAt,e.now);return{...r,status:a<(t??30)?"firing":"ok",message:`${n.name} expires in ${h(a,"day")}.`}}),StorageAlmostFull:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"!==e.provider).map(e=>{let n=w("StorageAlmostFull",e.id,{resourceId:e.id,title:e.name,provider:b(e)});if(null===e.sizeBytes||!e.sizeLimitBytes)return n;let r=e.sizeBytes/e.sizeLimitBytes*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} uses ${f(e.sizeBytes/1e6)} MB of ${f(e.sizeLimitBytes/1e6)} MB (${f(r)}%).`}}),NeonComputeHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"neon"===e.provider).map(e=>{let n=w("NeonComputeHigh",e.id,{resourceId:e.id,title:e.name,provider:"neon"});return null===e.cuHours?n:{...n,status:e.cuHours>(t??80)?"firing":"ok",message:`${e.name} used ${f(e.cuHours)} of ${f(e.cuLimit??100)} CU-hours this month.`}}),FirestoreQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"===e.provider).map(e=>{let n=w("FirestoreQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:"firebase"});if(e.quotaExhausted)return{...n,status:"firing",message:`${e.name} hit a Firestore quota (RESOURCE_EXHAUSTED).`};if(null===e.readsToday||!e.readsLimit)return!1===e.quotaExhausted?{...n,status:"ok"}:n;let r=e.readsToday/e.readsLimit*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} read ${f(e.readsToday)} of ${f(e.readsLimit)} documents today (${f(r)}%).`}}),AutoPauseRisk:(e,t)=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(n=>{let r=w("AutoPauseRisk",n.id,{resourceId:n.id,title:n.name,provider:"supabase"});if("paused"===n.state)return{...r,status:"ok"};if(!n.lastApiAt)return r;let a=Math.floor((e.now.getTime()-n.lastApiAt.getTime())/864e5);return{...r,status:a>=(t??4)?"firing":"ok",message:`No API traffic for ${h(a,"day")}. Supabase pauses free projects after about 7 days.`}}),DnsProxiedToVercel:e=>e.dns&&e.dns.map(e=>w("DnsProxiedToVercel",e.id,{resourceId:e.resourceId,title:e.name,provider:"cloudflare",status:e.proxied&&e.pointsToVercel?"firing":"ok",message:`${e.name} points to Vercel through the Cloudflare proxy. Vercel recommends DNS only.`})),DbQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>$.has(e.provider)).map(e=>{let n=w("DbQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:b(e)});return null==e.quotaPct?n:{...n,status:e.quotaPct>(t??80)?"firing":"ok",message:`${e.name}: ${e.quotaLabel??"usage"} at ${f(e.quotaPct)}% of the free plan.`}}),ComputeHigh:(e,t)=>e.compute?e.compute.map(n=>{let a=w("ComputeHigh",n.id,{resourceId:n.id,title:n.name,provider:"supabase",sampleAt:n.latest?new Date(n.latest.at):null}),s=(0,r.B)(n.latest,(0,r.V)(t),e.now);return null===s?a:{...a,status:s.length?"firing":"ok",message:s.length?`${n.name}: ${s.join(", ")}.`:`${n.name} compute is back under the limits.`}}):null,CredentialExpiring:(e,t)=>e.accounts.map(n=>{let r=w("CredentialExpiring",n.id,{accountId:n.id,title:`${n.provider} \xb7 ${n.label}`,provider:n.provider});if("drive"===n.provider&&"error"===n.status&&n.lastError?.includes("invalid_grant"))return{...r,status:"firing",message:"Google Drive access was removed (invalid_grant). Reconnect it."};if(!n.expiresAt)return{...r,status:"ok"};let a=m(n.expiresAt,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:a<0?`The ${n.provider} credential ${n.label} has expired.`:`The ${n.provider} credential ${n.label} expires in ${h(a,"day")}.`}}),VulnerableDependency:e=>e.deps?e.deps.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("VulnerableDependency",t.appId,{resourceId:t.appId,title:n.name,provider:"github"});if(t.error)return[r];let s=(0,a.g)(t.vulns);return s?[{...r,status:"firing",message:(0,a.L)(t.vulns),..."critical"===s?{severity:"critical"}:{}}]:[{...r,status:"ok",message:`${n.name} has no moderate, high or critical dependency advisories.`}]}):null,FrameworkVulnerable:e=>e.frameworks?e.frameworks.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("FrameworkVulnerable",t.appId,{resourceId:t.appId,title:n.name});return"ok"===t.status?[{...r,status:"ok",message:`${n.name} runs Next.js ${t.version??"(unknown version)"} with no known advisories.`}]:"vulnerable"===t.status&&t.findings.length?[{...r,status:"firing",message:p(t.version,t.findings),..."CRITICAL"===(0,s.N)(t.findings)?{severity:"critical"}:{}}]:[r]}):null};e.s(["f",0,function(e,n,r){let a=[],s=new Set;for(let i of n){if(!i.enabled||r&&!r.includes(i.key)||!t._[i.key])continue;let n=A[i.key](e,i.threshold);n&&(s.add(i.key),a.push(...n))}return{observations:a,evaluated:s}}],658266);let I=["MonitorDown","HighLatency"],S=["telegram","discord"],x=e=>e.channels.some(e=>S.includes(e));function V(e,t){return t.collectorStale&&"CollectorStale"!==e.rule?"CollectorStale":e.resourceId&&I.includes(e.rule)?t.mutedApps.get(e.resourceId)??null:null}let _=(e,t)=>"critical"===t&&"warning"===e?"critical":e,D=(e,t)=>e.silencedUntilResolved||null!==e.silencedUntil&&e.silencedUntil.getTime()>t.getTime(),R=(e,t)=>`${e}|${t}`;e.s(["f",0,function(e,n,r,a,s){let i={open:[],touch:[],resolve:[]},o=new Map(a.map(e=>[e.key,e])),l=new Map(n.map(e=>[R(e.rule,e.subject),e])),u=new Set(e.map(e=>R(e.ruleKey,e.subject))),d=e=>i.resolve.push({id:e.id,pending:e.notifiedOpen?"resolve":null});for(let n of e){let e=o.get(n.ruleKey),a=l.get(R(n.ruleKey,n.subject));if(!e||!e.enabled){i.resolve.push({id:n.id,pending:null});continue}if(!r.has(n.ruleKey))continue;if(!a){i.resolve.push({id:n.id,pending:null});continue}if("unknown"===a.status)continue;let u=a.provider?s.incidents.get(a.provider)??null:null;if("firing"===a.status){let t=V(a,s),r=n.notifiedOpen&&null!==n.lastNotifiedAt&&s.now.getTime()-n.lastNotifiedAt.getTime()>=216e5,o={id:n.id,okStreak:0,lastSampleAt:a.sampleAt??n.lastSampleAt,lastSeenAt:s.now,message:a.message,causedBy:t,providerIncident:u},l=!n.notifiedOpen&&(!n.pendingSince||s.now.getTime()-n.pendingSince.getTime()>=216e5);(r||l)&&!D(n,s.now)&&!t&&null===n.pending&&x(e)&&(o.pending=r?"repeat":"open"),i.touch.push(o);continue}if(!t._[n.ruleKey].sampled||null===a.sampleAt){d(n);continue}if(!(null===n.lastSampleAt||a.sampleAt.getTime()>n.lastSampleAt.getTime()))continue;let c=n.okStreak+1;c>=2?d(n):i.touch.push({id:n.id,okStreak:c,lastSampleAt:a.sampleAt})}for(let e of n){if("firing"!==e.status||u.has(R(e.rule,e.subject))||s.maintenance.has(e.subject)||e.resourceId&&s.maintenance.has(e.resourceId))continue;let t=o.get(e.rule);if(!t)continue;let n=V(e,s);i.open.push({ruleKey:e.rule,subject:e.subject,resourceId:e.resourceId,accountId:e.accountId,severity:_(t.severity,e.severity),title:e.title,message:e.message,startedAt:s.now,lastSeenAt:s.now,lastSampleAt:e.sampleAt,causedBy:n,providerIncident:e.provider?s.incidents.get(e.provider)??null:null,pending:n||!x(t)?null:"open"})}return i}],211256)},582748,e=>{var t=e.i(89491),n=e.i(960063),r=e.i(800366),a=e.i(326003),s=e.i(843448),i=e.i(647006),o=e.i(328203);e.s(["d",0,function(e,i){let l={id:e.id,name:e.name,state:e.state,sizeBytes:null,sizeLimitBytes:null,lastApiAt:null,cuHours:null,cuLimit:null,readsToday:null,readsLimit:null,quotaExhausted:null};if("supabase_project"===e.kind){let t=(0,a.k)(a.B,e.data),n=(0,o.Z)(t.lastTrafficAt),r=(0,o.Z)(t.trafficAt),i=n??(r&&!t.trafficError?new Date(r.getTime()-6048e5):null);return{...l,provider:"supabase",sizeBytes:t.sizeBytes??null,sizeLimitBytes:s.R,lastApiAt:i}}if("neon_project"===e.kind){let t=(0,a.k)(a.s,e.data),n=(t.branches??[]).map(e=>e.logicalSize).filter(e=>"number"==typeof e);return{...l,provider:"neon",cuHours:null==t.computeSeconds?null:t.computeSeconds/3600,cuLimit:r.a.cuHours,sizeBytes:n.length?n.reduce((e,t)=>e+t,0):null,sizeLimitBytes:r.a.storageBytes}}if("firestore"===e.kind){let t=(0,a.k)(a.w,e.data),r=(0,o.Z)(t.opsAt),s=null!=t.reads&&r&&r.getTime()>=(0,n.a)(i).getTime()?t.reads:null,u=null!=t.latencyMs||null!=t.pingError;return{...l,provider:"firestore",readsToday:s,readsLimit:n.T.reads,quotaExhausted:u?"RESOURCE_EXHAUSTED"===t.pingReason:null}}if("turso_database"===e.kind){let n=(0,a.k)(a.N,e.data),r=(0,t.u)((0,t.G)(n,i));return{...l,provider:"turso",sizeBytes:n.orgStorageBytes??null,sizeLimitBytes:t.g.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("upstash_redis"===e.kind){let n=(0,a.k)(a.e,e.data),r=(0,t.u)((0,t.$)(n,i));return{...l,provider:"upstash",sizeBytes:n.storageBytes??null,sizeLimitBytes:t.W.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("d1_database"===e.kind){let n=(0,a.k)(a.x,e.data),r=(0,t.u)((0,t.I)(n,i));return{...l,provider:"d1",sizeBytes:n.sizeBytes??null,sizeLimitBytes:t.M.dbBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}return null},"S",0,function(e,t){let n=e.filter(e=>Array.isArray(e.data.records));if(!n.length)return null;let r=e.map(e=>e.name),a=[];for(let e of n){let n=t.filter(t=>(0,o.J)(t.name,r)===e.name.toLowerCase().replace(/\.$/,"")),s=[...new Set(n.flatMap(e=>(0,i.q)(e.data).vercel?.recommendedIps??[]))];for(let t of(0,i.q)(e.data).records){if(!(0,o.l)(t,s))continue;let r=t.name.toLowerCase().replace(/\.$/,""),i=n.find(e=>e.name.toLowerCase().replace(/\.$/,"")===r);a.push({id:`${e.id}:${t.id}`,resourceId:i?.id??e.id,name:t.name,proxied:t.proxied,pointsToVercel:!0})}}return a},"r",0,function(e,t){return e.length||t.length?[...e.map(e=>({id:e.id,name:e.name,tlsNotAfter:null,expiresAt:(0,o.Z)((0,i.q)(e.data).rdap?.expiresAt)})),...t.map(e=>({id:e.id,name:e.name,tlsNotAfter:(0,o.Z)((0,i.q)(e.data).tls?.notAfter),expiresAt:null}))]:null}])},485647,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),a=e.i(924924),s=e.i(618916),i=e.i(582748),o=e.i(794713),l=e.i(662860),u=e.i(764766),d=e.i(433609),c=e.i(800523);async function p(){return(0,a.f)().select({appId:s.links.fromResourceId,dbId:s.links.toResourceId}).from(s.links).where((0,t.u)(s.links.kind,"uses_db")).limit(500)}async function f(e){let f=(0,t.b)((0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt)),[m,h,g,y,k]=await Promise.all([(0,o.d)(),(0,o.D)(),(0,a.f)().select({m:s.monitors,appName:s.resources.name,appMeta:s.resources.meta}).from(s.monitors).innerJoin(s.resources,(0,t.u)(s.resources.id,s.monitors.resourceId)).where((0,t.b)(f,(0,t.u)(s.monitors.paused,!1),(0,t.u)(s.monitors.ownerPaused,!1))),(0,a.f)().select({id:s.resources.id,name:s.resources.name,meta:s.resources.meta}).from(s.resources).where((0,t.b)(f,(0,t.u)(s.resources.kind,"app"))),(0,a.f)().select({id:s.accounts.id,provider:s.accounts.provider,label:s.accounts.label,expiresAt:s.accounts.expiresAt,status:s.accounts.status,lastError:s.accounts.lastError}).from(s.accounts)]),v=g.map(e=>e.m.id),w=v.length?await (0,a.f)().select({id:s.checks.monitorId,n:r.B`count(*)::int`,p95:r.B`percentile_cont(0.95) within group (order by ${s.checks.latencyMs})::float8`}).from(s.checks).where((0,t.b)((0,t.y)(s.checks.monitorId,v),(0,t.B)(s.checks.at,new Date(e.getTime()-6e5)),(0,t.u)(s.checks.inMaintenance,!1))).groupBy(s.checks.monitorId):[],b=y.map(e=>e.id),$=b.length?await (0,a.f)().selectDistinctOn([s.deployments.resourceId],{appId:s.deployments.resourceId,state:s.deployments.state,sha:s.deployments.commitSha,createdAt:s.deployments.createdAtProvider}).from(s.deployments).where((0,t.b)((0,t.y)(s.deployments.resourceId,b),(0,t.u)(s.deployments.target,"production"))).orderBy(s.deployments.resourceId,(0,n.A)(s.deployments.createdAtProvider)):[],A=await (0,a.f)().select({id:s.resources.id,name:s.resources.name,kind:s.resources.kind,state:s.snapshots.state,data:s.snapshots.data}).from(s.resources).innerJoin(s.snapshots,(0,t.u)(s.snapshots.resourceId,s.resources.id)).where((0,t.b)(f,(0,t.y)(s.resources.kind,["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"]))),I=e=>A.filter(t=>t.kind===e),S=A.filter(e=>["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"].includes(e.kind)),x=I("zone"),V=I("domain"),_=await p(),D=await (0,l.Y)().catch(()=>null),R=b.length?await (0,d.a)(b).catch(()=>null):null,M=b.length?await (0,c.F)(b).catch(()=>null):null;return{now:e,lastMinuteRunAt:m,lastAnyRunAt:h,monitors:g.map(({m:e,appName:t,appMeta:n})=>{let r=w.find(t=>t.id===e.id),a="heartbeat"===e.kind;return{id:e.id,appId:e.resourceId,appName:t,url:a?e.name??"heartbeat":e.url,kind:a?"heartbeat":"http",state:e.state,failStreak:e.failStreak,lastStatus:e.lastStatus,lastError:e.lastError,lastCheckedAt:e.lastCheckedAt,p95Last10:r?.p95??null,checksLast10:r?.n??0,movedTo:a?null:(0,u.u)(e.url,{name:t,meta:n},y.filter(t=>t.id!==e.resourceId),{lastError:e.lastError})?.to??null}}),apps:y.map(e=>{let t=$.find(t=>t.appId===e.id);return{id:e.id,name:e.name,latestProduction:t?{state:t.state,sha:t.sha,createdAt:t.createdAt}:null}}),accounts:k,dbs:S.length?S.map(t=>(0,i.d)(t,e)).filter(e=>null!==e):null,domains:(0,i.r)(x,V),dns:(0,i.S)(x,V),links:_,compute:D,deps:R&&R.length?R:null,frameworks:M&&M.length?M:null}}e.s(["f",0,f])},532148,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),a=e.i(924924),s=e.i(618916),i=e.i(278619),o=e.i(658266),l=e.i(211256),u=e.i(275426),d=e.i(154491),c=e.i(485647),p=e.i(739886),f=e.i(111970);let m={vercel:"Vercel",supabase:"Supabase",neon:"Neon",cloudflare:"Cloudflare",firebase:"Firebase",gcp:"Google Cloud"};async function h(){return(await (0,a.f)().select().from(s.alertRules)).filter(e=>(0,i.h)(e.key)).map(e=>({key:e.key,severity:e.severity,threshold:e.threshold,enabled:e.enabled,channels:e.channels}))}async function g(e,n={}){let[r,y,k,v,w,b]=await Promise.all([(0,c.f)(e),h(),(0,a.f)().select().from(s.alerts).where((0,t.M)(s.alerts.resolvedAt)),(0,a.f)().select({provider:s.providerStatus.provider,state:s.providerStatus.state}).from(s.providerStatus),(0,p.f)(),(0,f.I)()]),$=new Map(r.accounts.map(e=>[e.id,e.provider])),A=k.filter(e=>!(0,d.O)(b,e.ruleKey,e.accountId?$.get(e.accountId):null)),I=(0,o.f)(r,y,n.only),S=I.evaluated,x=I.observations.filter(e=>!(0,d.O)(b,e.rule,e.provider)),V=y.find(e=>"CollectorStale"===e.key),_=void 0===r.lastAnyRunAt?r.lastMinuteRunAt:r.lastAnyRunAt,D=!!V?.enabled&&(!_||e.getTime()-_.getTime()>(V.threshold??5)*6e4),R=new Map((r.dbs??[]).filter(e=>"paused"===e.state).map(e=>[e.id,e.name])),M=new Map(r.links.filter(e=>R.has(e.dbId)).map(e=>[e.appId,`DatabasePaused \xb7 ${R.get(e.dbId)}`])),B=new Map(v.filter(e=>"warn"===e.state||"err"===e.state).map(e=>["gcp"===e.provider?"firebase":e.provider,m[e.provider]??e.provider])),T=(0,u.u)(w,r.monitors.map(e=>({id:e.id,appId:e.appId})),e,r.apps.map(e=>e.id)),z=A.filter(e=>(0,i.h)(e.ruleKey)).map(e=>({id:e.id,ruleKey:e.ruleKey,subject:e.subject,okStreak:e.okStreak,lastSampleAt:e.lastSampleAt,silencedUntil:e.silencedUntil,silencedUntilResolved:e.silencedUntilResolved,notifiedOpen:e.notifiedOpen,lastNotifiedAt:e.lastNotifiedAt,pending:e.pending,pendingSince:e.pendingSince})),C=(0,l.f)(z,x,S,y,{now:e,collectorStale:D,mutedApps:M,incidents:B,maintenance:T});return C.open.length||C.touch.length||C.resolve.length?(await (0,a.f)().transaction(async n=>{for(let t of C.open)await n.insert(s.alerts).values({...t,pendingSince:t.pending?e:null}).onConflictDoNothing();for(let r of C.touch){let{id:a,pending:i,...o}=r;await n.update(s.alerts).set({...o,...i?{pending:i,pendingSince:e}:{}}).where((0,t.b)((0,t.u)(s.alerts.id,a),(0,t.M)(s.alerts.resolvedAt)))}for(let r of C.resolve)await n.update(s.alerts).set({resolvedAt:e,pending:r.pending,pendingSince:r.pending?e:null}).where((0,t.b)((0,t.u)(s.alerts.id,r.id),(0,t.M)(s.alerts.resolvedAt)))}),{opened:C.open.length,resolved:C.resolve.length}):{opened:0,resolved:0}}let y=r.B`case ${s.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`;async function k(e=new Set){return(await (0,a.f)().select({a:s.alerts,name:s.resources.name,kind:s.resources.kind}).from(s.alerts).leftJoin(s.resources,(0,t.u)(s.resources.id,s.alerts.resourceId)).where((0,t.b)((0,t.M)(s.alerts.resolvedAt),(0,f.s)(e))).orderBy(y,(0,n.A)(s.alerts.startedAt)).limit(200)).map(({a:e,name:t,kind:n})=>({...e,resourceName:t??null,resourceKind:n??null}))}async function v(){return k(await (0,f.I)())}async function w(e){return(await (0,a.f)().select({id:s.alerts.id,ruleKey:s.alerts.ruleKey,severity:s.alerts.severity,title:s.alerts.title,resourceId:s.alerts.resourceId,startedAt:s.alerts.startedAt,resolvedAt:s.alerts.resolvedAt}).from(s.alerts).where((0,t.b)((0,t.E)(s.alerts.resolvedAt),(0,t.B)(s.alerts.resolvedAt,new Date(e.getTime()-6048e5)))).orderBy((0,n.A)(s.alerts.resolvedAt)).limit(50)).flatMap(e=>e.resolvedAt?[{...e,resolvedAt:e.resolvedAt}]:[])}e.s(["$",0,g,"q",0,k,"I",0,w,"i",0,v])},433609,455037,502240,751762,970465,800523,e=>{var t=e.i(90801),n=e.i(875225),r=e.i(349129),a=e.i(518899),s=e.i(924924),i=e.i(618916),o=e.i(921991),l=e.i(547499),u=e.i(479301),d=e.i(32391),c=e.i(804581),p=e.i(891262),f=e.i(581321),m=e.i(413230),h=e.i(455744),g=e.i(971724),y=e.i(105954),k=e.i(206033),v=e.i(180473);let w=e=>/^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/.test(e)&&!e.includes(".."),b=e=>e.split("/").map(encodeURIComponent).join("/");async function $(e,t,n,r="application/vnd.github+json"){let a,s=n.timeoutMs??5e3;try{a=await (n.fetch??fetch)(`https://api.github.com${e}`,{headers:{Authorization:`Bearer ${t}`,Accept:r,"X-GitHub-Api-Version":"2022-11-28","User-Agent":"Watchbell"},signal:AbortSignal.timeout(s),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`GitHub didn't answer within ${Math.round(s/1e3)} seconds.`:"Couldn't reach GitHub."}}let i=await a.text().catch(()=>"");if(a.ok){let e=null;if(r.endsWith("+json")&&!r.includes(".raw"))try{e=JSON.parse(i)}catch{e=null}return{ok:!0,data:e,text:i,headers:a.headers}}let o=a.status;if(401===o)return{ok:!1,kind:"auth",status:o,error:"GitHub rejected this token (401). It may have expired or been revoked."};if((403===o||429===o)&&("0"===a.headers.get("x-ratelimit-remaining")||429===o)){let e=Number(a.headers.get("x-ratelimit-reset"));return{ok:!1,kind:"transient",status:o,retryAfterS:Number.isFinite(e)&&e>0?Math.max(1,e-Math.floor(Date.now()/1e3)):60,error:"GitHub's rate limit is used up for now. The next run tries again."}}return 403===o?{ok:!1,kind:"scope",status:o,error:"This token can't read that (403). It needs Metadata, Contents and Actions read on the repository."}:404===o?{ok:!1,kind:"missing",status:o,error:"GitHub doesn't show this to the token (404)."}:{ok:!1,kind:"transient",status:o,error:`GitHub returned an error (${o}).`}}let A=g.z.object({id:k.z.number(),name:y.z.string(),full_name:y.z.string(),owner:g.z.object({login:y.z.string()}),default_branch:y.z.string().nullish(),private:v.z.boolean(),archived:v.z.boolean().optional(),html_url:y.z.string().nullish(),pushed_at:y.z.string().nullish()}),I=e=>({ok:!1,kind:"format",error:`GitHub answered ${e} in a format the console doesn't recognise.`});async function S(e,t={}){let n=await $("/user",e,t);return n.ok?g.z.object({login:y.z.string()}).safeParse(n.data).success?{ok:!0,data:{expiresAt:function(e){let t=e.get("github-authentication-token-expiration")?.trim();if(!t)return null;let n=/^(\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})\s*(UTC|Z|[+-]\d{2}:?\d{2})?$/.exec(t);if(!n)return null;let r=n[3]&&"UTC"!==n[3]&&"Z"!==n[3]?n[3].includes(":")?n[3]:`${n[3].slice(0,3)}:${n[3].slice(3)}`:"Z",a=new Date(`${n[1]}T${n[2]}${r}`);return Number.isNaN(a.getTime())?null:a}(n.headers)}}:I("the token check"):n}async function x(e,t={}){let n=[];for(let r=1;r<=3;r++){let a=await $(`/user/repos?per_page=100&page=${r}&sort=pushed&affiliation=owner,collaborator,organization_member`,e,t);if(!a.ok)return a;let s=h.z.array(A).safeParse(a.data);if(!s.success)return I("the repository list");for(let e of s.data){if(!w(e.full_name))continue;let t=e.pushed_at?new Date(e.pushed_at):null;n.push({id:String(e.id),owner:e.owner.login,name:e.name,fullName:e.full_name,defaultBranch:e.default_branch??null,private:e.private,archived:e.archived??!1,htmlUrl:e.html_url??null,pushedAt:t&&!Number.isNaN(t.getTime())?t:null})}if(s.data.length<100)return{ok:!0,data:{repos:n,truncated:!1}}}return{ok:!0,data:{repos:n,truncated:!0}}}async function V(e,t,n={}){if(!w(t))return{ok:!0,data:null};let r=await $(`/repos/${b(t)}/contents/package.json`,e,n,"application/vnd.github.raw+json");if(!r.ok)return"missing"===r.kind?{ok:!0,data:null}:r;if(r.text.length>262144)return{ok:!0,data:null};try{let e=JSON.parse(r.text).name;return{ok:!0,data:"string"==typeof e&&e.trim()&&e.length<=214?e.trim():null}}catch{return{ok:!0,data:null}}}let _=g.z.object({total_count:k.z.number(),workflow_runs:h.z.array(g.z.object({status:y.z.string().nullish(),conclusion:y.z.string().nullish(),name:y.z.string().nullish(),display_title:y.z.string().nullish(),head_branch:y.z.string().nullish(),head_sha:y.z.string().nullish(),html_url:y.z.string().nullish(),run_number:k.z.number().nullish(),updated_at:y.z.string().nullish(),created_at:y.z.string().nullish()}))});async function D(e,t,n,r={}){if(!w(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let a=new URLSearchParams({per_page:"1",exclude_pull_requests:"true",...n?{branch:n}:{}}),s=await $(`/repos/${b(t)}/actions/runs?${a}`,e,r);if(!s.ok)return s;let i=_.safeParse(s.data);if(!i.success)return I("the Actions runs");let o=i.data.workflow_runs[0];return o?{ok:!0,data:{status:o.status??"unknown",conclusion:o.conclusion??null,name:o.name??o.display_title??null,branch:o.head_branch??null,sha:o.head_sha??null,url:o.html_url?.startsWith("https://github.com/")?o.html_url:null,at:o.updated_at??o.created_at??null,runNumber:o.run_number??null}}:{ok:!0,data:{none:!0}}}let R=e=>/^[A-Za-z0-9._\/-]{1,200}$/.test(e)&&!e.includes("..")&&!e.startsWith("/")&&!e.endsWith("/");async function M(e,t,n,r,a,s={}){if(!w(t)||!R(r)||!n||n.split("/").includes("..")||n.startsWith("/"))return{ok:!1,kind:"format",error:"That isn't a file in a repository."};let i=n.split("/").map(encodeURIComponent).join("/"),o=await $(`/repos/${b(t)}/contents/${i}?ref=${encodeURIComponent(r)}`,e,s,"application/vnd.github.raw+json");return o.ok?Buffer.byteLength(o.text,"utf8")>a||o.text.includes("\0")||(o.text.match(/�/g)?.length??0)>8?{ok:!0,data:null}:{ok:!0,data:o.text}:o}async function B(e,t,n,r={}){if(!w(t)||!/^[0-9a-f]{40}$/.test(n))return{ok:!1,kind:"format",error:"That isn't a repository or commit."};let a=await $(`/repos/${b(t)}/actions/runs?head_sha=${n}&per_page=50`,e,r);if(!a.ok)return a;let s=g.z.object({workflow_runs:h.z.array(g.z.object({status:y.z.string().nullish(),conclusion:y.z.string().nullish()}))}).safeParse(a.data);return s.success?{ok:!0,data:s.data.workflow_runs.map(e=>({status:e.status??"queued",conclusion:e.conclusion??null}))}:I("the Actions runs")}g.z.object({sha:y.z.string().optional(),truncated:v.z.boolean().optional(),tree:h.z.array(g.z.object({path:y.z.string(),type:y.z.string(),size:k.z.number().optional()}))}),e.s(["$",0,262144,"V",0,M,"j",0,$,"k",0,S,"M",0,w,"c",0,R,"W",0,D,"o",0,x,"q",0,V,"f",0,b,"L",0,B],455037);let T=h.z.array(g.z.object({name:y.z.string(),type:y.z.string(),sha:y.z.string(),size:k.z.number().optional()}));async function z(e,t,n,r={},a=null){if(!w(t)||!R(n))return{ok:!1,kind:"format",error:"That isn't a repository name or ref."};if(null!==a&&(0,f.Q)(a)!==a)return{ok:!1,kind:"format",error:"That isn't a folder in a repository."};let s=a?a.split("/").map(encodeURIComponent).join("/"):"",i=await $(`/repos/${b(t)}/contents/${s}?ref=${encodeURIComponent(n)}`,e,r);if(!i.ok)return i;let o=T.safeParse(i.data);return o.success?{ok:!0,data:o.data.filter(e=>"file"===e.type&&/^[0-9a-f]{40}$/.test(e.sha)).map(e=>({name:e.name,sha:e.sha,size:e.size??0}))}:{ok:!1,kind:"format",error:"GitHub answered the file list in a format the console doesn't recognise."}}async function C(e,t,n,r={}){if(!w(t)||!R(n))return{ok:!1,kind:"format",error:"That isn't a repository name or branch."};let a=await $(`/repos/${b(t)}/git/ref/heads/${n.split("/").map(encodeURIComponent).join("/")}`,e,r);return a.ok?{ok:!0,data:!0}:"missing"===a.kind?{ok:!0,data:!1}:a}function j(e,t,n,r,a,s={}){return M(e,t,n,r,a,s)}async function N(e,t,n={}){if(!w(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let r=await $(`/repos/${b(t)}/dependabot/alerts?state=open&ecosystem=npm&per_page=100`,e,n);if(!r.ok)return"scope"===r.kind||"missing"===r.kind?{ok:!0,data:{denied:!0}}:r;let a=(0,m.E)(r.data);return a?{ok:!0,data:{alerts:a}}:{ok:!1,kind:"format",error:"GitHub answered the Dependabot alerts in a format the console doesn't recognise."}}function E(e,t){return"string"==typeof e&&e!==t&&R(e)?e:null}async function O(){let[e]=await (0,s.f)().select().from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).orderBy((0,r.M)(i.accounts.createdAt)).limit(1);if(!e)return{error:"GitHub isn't connected."};let t=(0,o.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,l.f)().OPS_ENCRYPTION_KEY);return t?{token:t,accountId:e.id}:{error:"Can't read the stored GitHub credential. Replace it on Connections."}}async function L(){let[e]=await (0,s.f)().select({value:i.settings.value}).from(i.settings).where((0,n.u)(i.settings.key,"deps.scanAll")).limit(1);return e?.value===!0}e.s(["f",0,E],502240);let P=e=>({dir:(0,f.Q)((e??{}).rootDirectory),unsupported:(0,f.l)((e??{}).rootDirectoryUnsupported),branch:E((e??{}).productionBranch,null)});async function H(e){let t=[...new Set(e.filter(u.f))],r=new Map;if(!t.length)return r;let a=await (0,s.f)().select({repoId:i.appRepos.repoId,name:i.resources.name,monitored:i.resources.monitored,meta:i.resources.meta}).from(i.appRepos).innerJoin(i.resources,(0,n.u)(i.resources.id,i.appRepos.appId)).where((0,n.b)((0,n.y)(i.appRepos.repoId,t),(0,n.M)(i.resources.goneAt))).limit(1e3);for(let e of(a.sort((e,t)=>Number(!!t.monitored)-Number(!!e.monitored)||(e.name<t.name?-1:+(e.name>t.name))),a))r.has(e.repoId)||r.set(e.repoId,P(e.meta));return r}async function U(){let e={id:i.githubRepos.id,fullName:i.githubRepos.fullName,defaultBranch:i.githubRepos.defaultBranch,scannedAt:i.dependencyScans.scannedAt},t=(0,n.b)((0,n.M)(i.githubRepos.goneAt),(0,n.u)(i.githubRepos.archived,!1)),r=await L()?await (0,s.f)().select(e).from(i.githubRepos).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500):await (0,s.f)().selectDistinct(e).from(i.appRepos).innerJoin(i.githubRepos,(0,n.u)(i.githubRepos.id,i.appRepos.repoId)).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500),a=r.length?await H(r.map(e=>e.id)):new Map;return(0,m.M)(r.map(e=>({...e,rootDir:a.get(e.id)?.dir??null,rootDirUnsupported:a.get(e.id)?.unsupported??null,prodBranch:a.get(e.id)?.branch??null})))}let q=(e,t)=>e.length>t?`${e.slice(0,t-1)}…`:e;async function W(e,t){let n=new Date;await (0,s.f)().insert(i.dependencyScans).values({repoId:e,...t,updatedAt:n}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{...t,updatedAt:n}})}async function F(e){return(0,s.f)().select({id:i.dependencyVulns.id,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,vulnId:i.dependencyVulns.vulnId,severity:i.dependencyVulns.severity,fixedVersion:i.dependencyVulns.fixedVersion,summary:i.dependencyVulns.summary,aliases:i.dependencyVulns.aliases,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct,source:i.dependencyVulns.source}).from(i.dependencyVulns).where((0,n.b)((0,n.u)(i.dependencyVulns.repoId,e),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(2e3)}function Z(e,t){for(let n of d.a){let r=e.find(e=>e.name===n.path);if(r)return{path:(0,f.H)(t,n.path),kind:n.kind,sha:r.sha}}return null}async function K(e,r,a,o={}){let l=()=>({...o,timeoutMs:Math.max(1e3,Math.min(a-Date.now(),1e4))}),u=async e=>(await W(r.id,{error:q(e,300),scannedAt:new Date}).catch(()=>void 0),{status:"failed",error:e}),h=r.defaultBranch??"HEAD",g=E(r.prodBranch,r.defaultBranch),y=!1;if(g){let t=await C(e,r.fullName,g,l());if(!t.ok)return u(t.error);t.data&&(h=g,y=!0)}let k=y?`Scanned ${g}, the branch Vercel deploys to production.`:null,v=(0,f.Q)(r.rootDir),w=v?null:(0,f.l)(r.rootDirUnsupported),b=w?`The Vercel Root Directory "${w}" couldn't be used (Watchbell reads plain folder names, at most 4 deep); scanned the repository root.`:null,$=await z(e,r.fullName,h,l(),v);if(!$.ok)return u(v&&"missing"===$.kind?`The folder ${(0,f.x)(v)} isn't in ${r.fullName} on ${h}.`:$.error);let A=Z($.data,v),I=$.data.find(e=>"package.json"===e.name)??null,S=!1,x=null;if(v&&I&&!A){let t=await z(e,r.fullName,h,l());if(!t.ok)return u(t.error);S=null!==(A=Z(x=t.data,null))}let V=A?A.sha:I?`pkg:${I.sha}`:null,_=V&&v?`${v}:${V}${S&&I?`+${I.sha}`:""}`:V&&w?`odd:${V}`:V,D=_&&y?`br:${g}:${_}`:_,[R]=await (0,s.f)().select().from(i.dependencyScans).where((0,n.u)(i.dependencyScans.repoId,r.id)).limit(1),M=new Date;if(!(0,m.U)(R??null,D,M,o.force))return{status:"unchanged"};if(!D){let e=await F(r.id);return e.length&&await (0,s.f)().update(i.dependencyVulns).set({resolvedAt:M}).where((0,n.y)(i.dependencyVulns.id,e.map(e=>e.id))),await W(r.id,{lockfilePath:null,lockfileSha:null,packageCount:0,scannedAt:M,queriedAt:M,error:null,note:q([k,b,`No package.json or lockfile ${v?"in":"at"} ${(0,f.x)(v)}.`].filter(Boolean).join(" "),300)}),{status:"scanned",vulns:0,packages:0,note:"no package.json"}}let B=(0,f.H)(v,"package.json"),T=I?await j(e,r.fullName,B,h,262144,l()):null;if(T&&!T.ok)return u(T.error);let O=T?.ok&&T.data?(0,d.b)(T.data):null,L=null,P="package-json",H=S&&A?`Scanned ${(0,f.x)(v)} with the repository root's ${A.path} (workspaces).`:null;if(A){if(2e3>a-Date.now())return u("Time budget used before the lockfile was read; the next run tries again.");let t=await j(e,r.fullName,A.path,h,0xf00000,{...o,timeoutMs:Math.max(1e3,Math.min(a-Date.now(),2e4))});if(!t.ok)return u(t.error);let n=!0;if(S&&v&&t.data&&!(0,f.p)(A.kind,t.data,v)){let t=x?.some(e=>"package.json"===e.name)?await j(e,r.fullName,"package.json",h,262144,l()):null;if(t&&!t.ok)return u(t.error);n=(0,f.F)(t?.data??null,v)}n?(L=t.data?(0,d.D)(A.kind,t.data):null,P=A.kind,L||(H=[H,`${A.path} couldn't be read; the versions come from package.json ranges (approximate).`].filter(Boolean).join(" "))):(H=`The repository root's ${A.path} isn't a workspace that includes ${v}, so the versions come from ${B} ranges (approximate).`,A=null)}if(L){let e=(0,t.m)(L,O);L=e.deps,e.stale.length&&(H=[H,(0,t.M)(e.stale)].filter(Boolean).join(" "))}else L=O?(0,d.e)(O):[],P="package-json",H??=A?null:"No lockfile: the versions come from package.json ranges (approximate).";let U=await F(r.id),G=[];if(L.length){let e=await (0,p.K)(L,{fetch:o.fetch,deadline:a});if(!e.ok)return u(e.error);let t=(0,m.A)(U,!0===o.force),n=await (0,p.J)((0,m.z)(L,e.ids,t),{fetch:o.fetch,deadline:a});if(!n.ok)return u(n.error);G=(0,c.i)(L,e.ids,n.map,t)}if(a-Date.now()>1500){let t=await N(e,r.fullName,l());t.ok&&"alerts"in t.data?G=(0,m.R)(G,t.data.alerts,L):t.ok&&(H=[H,"Dependabot alerts aren't readable with this token (optional: Dependabot alerts: Read)."].filter(Boolean).join(" "))}let J=(0,m.h)(U,G,(0,d.K)(O));H=[k,b,H].filter(Boolean).join(" ")||null;let Y=new Date;return await (0,s.f)().transaction(async e=>{for(let t of(J.insert.length&&await e.insert(i.dependencyVulns).values(J.insert.map(e=>({repoId:r.id,package:e.package,installedVersion:e.installedVersion,vulnId:e.vulnId,aliases:e.aliases,severity:e.severity,fixedVersion:e.fixedVersion,summary:e.summary,direct:e.direct,dev:e.dev,source:e.source,firstSeenAt:Y,lastSeenAt:Y}))).onConflictDoNothing(),J.update))await e.update(i.dependencyVulns).set({severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,aliases:t.aliases,dev:t.dev,direct:t.direct,lastSeenAt:Y}).where((0,n.u)(i.dependencyVulns.id,t.id));J.resolve.length&&await e.update(i.dependencyVulns).set({resolvedAt:Y}).where((0,n.b)((0,n.y)(i.dependencyVulns.id,J.resolve),(0,n.M)(i.dependencyVulns.resolvedAt))),await e.insert(i.dependencyScans).values({repoId:r.id,lockfilePath:A?.path??(I?B:null),lockfileSha:D,packageCount:L.length,scannedAt:Y,queriedAt:Y,error:null,note:H?q(H,300):null,updatedAt:Y}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{lockfilePath:A?.path??(I?B:null),lockfileSha:D,packageCount:L.length,scannedAt:Y,queriedAt:Y,error:null,note:H?q(H,300):null,updatedAt:Y}})}),{status:"scanned",vulns:J.insert.length+J.update.length,packages:L.length,note:"package-json"===P?H:null}}async function G(e,t={}){var r,a;let o,l,u,d,c=await O();if("error"in c)return{error:c.error};let{first:p,only:f,skip:m,...h}=t,g=(r=await U(),o=(a={first:p,only:f,skip:m}).only?new Set(a.only):null,l=new Set(a.skip??[]),u=(o?r.filter(e=>o.has(e.id)):r).filter(e=>!l.has(e.id)),d=new Set(a.first??[]),[...u.filter(e=>d.has(e.id)),...u.filter(e=>!d.has(e.id))]),y={scanned:0,unchanged:0,failed:[],left:0,done:[],listed:g.map(e=>e.id)};for(let[t,n]of g.entries()){if(e-Date.now()<4e3){y.left=g.length-t;break}y.done.push(n.id);try{let t=await K(c.token,n,e,h);"scanned"===t.status?y.scanned++:"unchanged"===t.status?y.unchanged++:y.failed.push(`${n.fullName}: ${t.error}`)}catch(e){y.failed.push(`${n.fullName}: ${e instanceof Error?e.name:"error"}`)}}return await (0,s.f)().delete(i.dependencyVulns).where((0,n.b)((0,n.E)(i.dependencyVulns.resolvedAt),(0,n.S)(i.dependencyVulns.resolvedAt,new Date(Date.now()-7776e6)))).catch(()=>void 0),y}let J=async()=>(await (0,s.f)().select({id:i.accounts.id}).from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).limit(1)).length>0;function Y(e){let t=e.failed.filter(e=>!/didn't answer in time|no time left|time budget|rate limit/i.test(e)),n=e.failed.length-t.length+(e.left??0);n&&console.info(`deps: ${n} repositor${1===n?"y":"ies"} wait for the next run`);let r=t.slice(0,3);return t.length>3&&r.push(`+${t.length-3} more`),r.length?r.join("; "):null}async function Q(e){if(!await J())return null;if(e-Date.now()<4e3)return console.info("deps: no time left today; the scan resumes tomorrow"),null;let t=await G(e);if("error"in t){let e;return(e=t.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:t.error}return Y(t)}async function X(e,t,r={}){let{marked:a,onlyMarked:o}=t;if(!await J())return{problem:null,settled:[...a],done:[],complete:!0};let l=a.filter(u.f),d=l.length?await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,l)).limit(5*l.length):[],c=[...new Set(d.map(e=>e.repoId))],p=e=>d.filter(t=>t.appId===e).map(e=>e.repoId),f=a.filter(e=>!p(e).length);if(o&&!c.length)return{problem:null,settled:[...a],done:[],complete:!0};if(e-Date.now()<4e3)return{problem:null,settled:f,done:[],complete:!1};let m=(t.skip??[]).filter(e=>!c.includes(e)),h=await G(e,{...r,first:c,...o?{only:c}:{skip:m}});if("error"in h){let e;return{problem:(e=h.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:h.error,settled:[...a],done:[],complete:!0}}let g=new Set([...h.done,...c.filter(e=>!h.listed.includes(e))]);return{problem:Y(h),settled:a.filter(e=>p(e).every(e=>g.has(e))),done:h.done,complete:0===h.left}}async function ee(e){let t=e.filter(u.f);if(!t.length)return[];let r=await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId,error:i.dependencyScans.error}).from(i.appRepos).innerJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.appRepos.repoId)).where((0,n.b)((0,n.y)(i.appRepos.appId,t),(0,n.E)(i.dependencyScans.scannedAt)));if(!r.length)return[];let a=await (0,s.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,severity:i.dependencyVulns.severity,summary:i.dependencyVulns.summary,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(r.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(1e4);return r.map(e=>({appId:e.appId,repoId:e.repoId,error:e.error,vulns:a.filter(t=>t.repoId===e.repoId).map(e=>({package:e.package,installedVersion:e.installedVersion,fixedVersion:e.fixedVersion,severity:e.severity,summary:e.summary,dev:e.dev,direct:e.direct}))}))}async function et(e,t=new Set){let r=e.filter(u.f),o=new Map;if(!r.length)return o;let l=await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,r));if(!l.length)return o;let d=await (0,s.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,vulnId:i.dependencyVulns.vulnId,aliases:i.dependencyVulns.aliases,severity:i.dependencyVulns.severity,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(l.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt),(0,n.u)(i.dependencyVulns.direct,!0),(0,n.E)(i.dependencyVulns.fixedVersion))).limit(2e3),c=d.some(e=>"next"===e.package)?new Set((await (0,s.f)().selectDistinct({appId:i.dependencyPrs.appId}).from(i.dependencyPrs).where((0,n.b)((0,n.y)(i.dependencyPrs.appId,r),(0,n.$)(i.dependencyPrs.stage,["merged","closed"]),(0,n.B)(i.dependencyPrs.openedAt,new Date(Date.now()-12096e5)),a.B`${i.dependencyPrs.packages} @> '["next"]'::jsonb`)).limit(r.length)).map(e=>e.appId)):new Set;for(let e of l){let n=t.has(e.appId)||c.has(e.appId);(0,m.B)(d.filter(t=>t.repoId===e.repoId&&!(n&&"next"===t.package))).length&&o.set(e.appId,e.repoId)}return o}e.s(["R",0,4e4,"o",0,12e3,"d",0,4e3,"e",0,Q,"O",0,X,"C",0,et,"a",0,ee],433609);var en=e.i(442473);function er(e){let t=e instanceof Error&&e.cause instanceof Error?e.cause:e,n=(t instanceof Error?t.message:"").split("\n")[0].replace(/Bearer\s+\S+/gi,"Bearer [hidden]").trim()||"failed";return n.length>200?`${n.slice(0,200)}…`:n}e.s(["f",0,er],751762);var ea=e.i(656083);let es=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,ei="[\"'`]";function eo(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let el={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},eu=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>el[e]??el[e.toLowerCase()]??e),ed=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${ei}(${es})${ei}`,"g"),ec=RegExp(String.raw`version\s*:\s*${ei}(${es})${ei}\s*,\s*appDir\s*:`,"g"),ep=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${ei}(${es})${ei}`,"g"),ef=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,em=e=>e.replace(/[$]/g,"\\$");var eh=e.i(267485);async function eg(e,t,n={}){let r=n.deadline??1/0,a=n.now??(()=>new Date),s=e=>Math.floor(Math.min(e,r)-Date.now()),i=Date.now()+15e3;if(0>=s(i))return null;let o=(e,n)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:n,checkedAt:a()}),l=(e,t)=>(0,en.K)(e,{maxBytes:3145728,timeoutMs:s(i),lookup:n.lookup,fetch:n.fetch,userAgent:"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)",sameOrigin:t}),u=await l(`https://${e}/`,"www");if(!u.ok&&u.error===en.l)return o("unknown","the site redirects to another host");if(!u.ok||200!==u.status)return Date.now()>=r?null:o("error",`Couldn't load the site: ${u.ok?`HTTP ${u.status}`:u.error}`);let d=(function(e,t){let n;try{n=new URL(t)}catch{return[]}let r=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(eu(t[2].trim()),n)}catch{continue}if("https:"===e.protocol&&e.origin===n.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!r.has(e.href))){var s;r.add(e.href),a.push({href:e.href,rank:(s=e.pathname,/\/main-app[-.]/.test(s)?0:/\/(main|app-index)[-.]/.test(s)?1:/\/(webpack|polyfills|framework)[-.]/.test(s)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(u.body,u.url).slice(0,12);if(0===d.length)return o("unknown",u.body.includes("/_next/")?"version not exposed":"not a Next.js site");let c=null,p=0,f=!1;for(let e of d){if(0>=s(i)){f=!0;break}let t=await l(e,!0);if(t.ok&&200===t.status&&(p++,c=function(e){for(let t of e.matchAll(ed))if(eo(t[1]))return t[1];for(let t of[ec,ep])for(let n of e.matchAll(t))if(eo(n[1]))return n[1];for(let t of e.matchAll(ef)){let n=t[1]??"version",r=RegExp(String.raw`(?:^|[^\w$.])${em(n)}\s*=\s*${ei}(${es})${ei}`,"g"),a=null;for(let n of e.matchAll(r)){if((n.index??0)>=(t.index??0))break;a=n[1]}if(a&&eo(a))return a}return null}(t.body)))break}if(!c)return Date.now()>=r?null:f||0>=s(i)?o("error","Reading the site's scripts took longer than 15 s"):0===p?o("error","Couldn't load the site's scripts"):o("unknown","version not exposed");let m=s(Date.now()+1e4);if(m<=0)return null;let h=await (0,eh.y)(c,{timeoutMs:m,fetch:n.fetch});return h.ok?{version:c,status:h.findings.length?"vulnerable":"ok",findings:h.findings,reason:null,checkedAt:a()}:Date.now()>=r?null:o("error",h.error)}e.s(["y",0,35e3,"P",0,eg,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var ey=e.i(7494),ek=e.i(764766),ev=e.i(195191),ew=e.i(146394);function eb(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function e$(e={}){let t=e.only;if(t&&!t.length)return[];let r=e.first??[],o=e.skip??[],l=await (0,s.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta,sec:i.appSecurity}).from(i.resources).leftJoin(i.appSecurity,(0,n.u)(i.appSecurity.resourceId,i.resources.id)).where((0,n.b)((0,n.u)(i.resources.kind,"app"),(0,n.u)(i.resources.monitored,!0),(0,n.M)(i.resources.goneAt),t?(0,n.y)(i.resources.id,t):void 0,o.length?(0,n.$)(i.resources.id,[...o]):void 0)).orderBy(...r.length?[a.B`case when ${(0,n.y)(i.resources.id,r)} then 0 else 1 end`]:[],a.B`${i.appSecurity.checkedAt} asc nulls first`,i.resources.name).limit(ew.O.apps);if(!l.length)return[];r.length&&l.sort((e,t)=>Number(!r.includes(e.id))-Number(!r.includes(t.id)));let u=await (0,s.f)().select({resourceId:i.monitors.resourceId,url:i.monitors.url}).from(i.monitors).where((0,n.y)(i.monitors.resourceId,l.map(e=>e.id))).orderBy(i.monitors.createdAt).limit(ew.O.monitors);return l.map(e=>({id:e.id,name:e.name,prev:e.sec?eb(e.sec):null,host:(0,ek.Y)(e.meta)?.primaryDomain??(0,ev.m)(e.name,u.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function eA(e,t){await (0,s.f)().transaction(async r=>{await r.execute(a.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[s]=await r.select().from(i.appSecurity).where((0,n.u)(i.appSecurity.resourceId,e.id)).limit(1),o=s?eb(s):null;if(o&&o.checkedAt.getTime()>=t.checkedAt.getTime())return;let l="unknown"===t.status||"error"===t.status?{...t,version:o?o.version:t.version,findings:o?o.findings:t.findings}:t,u={framework:"next",version:l.version,status:l.status,findings:l.findings,reason:l.reason,checkedAt:l.checkedAt};await r.insert(i.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:i.appSecurity.resourceId,set:u,setWhere:a.B`${i.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,ey.t)(e.name,o,l);d&&await (0,ea.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:l.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],r)})}async function eI(e,t={}){let n=await e$(t),r=0,a=0,s=[],i=[],o=[];return await (0,en.P)(n,3,async t=>{if(e-Date.now()<3e3)return void a++;o.push(t.id);try{let n=await eg(t.host,t.prev,{deadline:e});if(!n)return void a++;await eA(t,n),r++,i.push(t.id)}catch(e){s.push(`${t.name}: ${er(e)}`),i.push(t.id)}}),{checked:r,skipped:a,failed:s,done:i,listed:n.map(e=>e.id),started:o}}async function eS(e){let t=e.filter(u.f);return t.length?(await (0,s.f)().select().from(i.appSecurity).where((0,n.y)(i.appSecurity.resourceId,t)).limit(t.length)).map(e=>{let t=eb(e);return{appId:e.resourceId,version:t.version,status:t.status,findings:t.findings}}):[]}e.s(["F",0,eS,"h",0,eI,"Z",0,eb],800523)},111970,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(347540),a=e.i(924924),s=e.i(473283),i=e.i(618916),o=e.i(659846),l=e.i(154491),u=e.i(960049);let d=["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"],c=e=>{if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}},p=(0,r.cache)(async()=>{let e=n.B.join(d.map(e=>n.B`${e}`),n.B`, `),t=await (0,a.f)().execute(n.B`select
+    (select coalesce(jsonb_agg(distinct ${i.accounts.provider}::text), '[]'::jsonb) from ${i.accounts}) as providers,
+    exists(select 1 from ${i.resources} where ${i.resources.kind}::text in (${e}) and ${i.resources.goneAt} is null) as databases,
+    ${(0,u.W)()} as off`),[r]=(0,s.f)(t),p=c(r?.providers);return{providers:(Array.isArray(p)?p:[]).filter(e=>o.f.includes(e)),databases:r?.databases===!0||r?.databases==="t",off:(0,l.N)(c(r?.off))}});async function f(){try{return(0,l.I)((await p()).off)}catch{return new Set}}e.s(["s",0,function(e){let r=function(e){if(!e.size)return;let{ruleKeys:r,providers:a}=(0,l.s)(e),s=[];if(r.length&&s.push(n.B`${i.alerts.ruleKey} in (${n.B.join(r.map(e=>n.B`${e}`),n.B`, `)})`),a.length){let e=n.B.join(a.map(e=>n.B`${e}`),n.B`, `);s.push(n.B`(${i.alerts.ruleKey} = 'CredentialExpiring' and ${i.alerts.accountId} in (select ${i.accounts.id} from ${i.accounts} where ${i.accounts.provider}::text in (${e})))`)}return s.length?(0,t.F)(...s):void 0}(e);return r?(0,t.R)(r):void 0},"I",0,f])},960049,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(924924),a=e.i(618916);e.i(154491);var s=e.i(273083);let i={checks:[3,7,14],rollupsHourly:[60,90,180],storedLogs:[3,7,14],deployments:[30,45,60,90],events:[60,90,180],alerts:[60,90,180],collectorRuns:[7,14,30],recommendationDismissals:[30,90,180]},o=Object.keys(i),l=(e,t)=>"number"==typeof t&&i[e].includes(t);async function u(e){let[n]=await (0,r.f)().select({value:a.settings.value}).from(a.settings).where((0,t.u)(a.settings.key,e)).limit(1);return n?.value??null}let d=async()=>(function(e){let t={...s.f};if(!e||"object"!=typeof e)return t;for(let n of o){let r=e[n];l(n,r)&&(t[n]=r)}return t})(await u("retention.days"));e.s(["l",0,()=>u("notify.language"),"J",0,d,"W",0,()=>n.B`(select ${a.settings.value} from ${a.settings} where ${a.settings.key} = ${"sections.off"})`],960049)},662860,e=>{var t=e.i(875225),n=e.i(924924),r=e.i(755776),a=e.i(618916),s=e.i(921991),i=e.i(867274),o=e.i(547499);let l="Supabase Metrics API",u=null,d={fetchMetrics:async function e(t,n,r={}){let a;if(!("string"==typeof t&&/^[a-z0-9]{8,40}$/.test(t)))return{ok:!1,kind:"format",error:"That isn't a Supabase project ref."};let s=r.timeoutMs??8e3;try{a=await (r.fetch??fetch)(`https://${t}.supabase.co/customer/v1/privileged/metrics`,{headers:{Authorization:`Basic ${Buffer.from(`service_role:${n}`).toString("base64")}`,Accept:"text/plain"},signal:AbortSignal.timeout(s),cache:"no-store",redirect:"manual"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`${l} didn't answer within ${Math.round(s/1e3)} seconds.`:`Couldn't reach the ${l}.`}}if(401===a.status||403===a.status)return{ok:!1,kind:"auth",status:a.status,error:`Supabase rejected the metrics key (${a.status}). Replace it with a current Secret API key.`};if(404===a.status)return{ok:!1,kind:"missing",status:404,error:"Supabase has no metrics endpoint for this project (404)."};if(429===a.status)return{ok:!1,kind:"transient",status:429,retryAfterS:60,error:`${l} says there were too many requests.`};if(!a.ok)return{ok:!1,kind:"transient",status:a.status,error:`${l} returned an error (${a.status}).`};let i=await a.text().catch(()=>null);return null===i||i.length>4e6||!/^(#|[A-Za-z_:])/m.test(i)?{ok:!1,kind:"format",error:`${l} answered in a format the console doesn't recognise.`}:{ok:!0,data:i}},key:()=>(0,o.f)().OPS_ENCRYPTION_KEY},c=e=>e instanceof Error?e.name:"unknown";async function p(e,s,o=d){if(!(0,i.T)(e,u))return null;u=e.getTime();let l=0,f=0;try{for(let{k:i,ref:u,state:d}of(await (0,n.f)().select({k:r.A,ref:a.resources.externalId,state:a.snapshots.state}).from(r.A).innerJoin(a.resources,(0,t.u)(a.resources.id,r.A.resourceId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"supabase_project"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt))).limit(20))){let t=s-Date.now()-500;if(t<1e3)break;try{await m(i,u,d,e,Math.min(8e3,t),o)?l++:f++}catch(e){f++,console.warn("supabase-metrics: one project failed:",c(e))}}await (0,n.f)().delete(r.l).where((0,t.S)(r.l.hour,new Date(e.getTime()-24*i.x*36e5)))}catch(e){console.warn("supabase-metrics failed:",c(e))}return{scraped:l,failed:f}}async function f(e,a,s){return await (0,n.f)().update(r.A).set({lastTryAt:a,lastError:s.slice(0,300)}).where((0,t.u)(r.A.resourceId,e)),!1}async function m(e,a,o,l,u,d){if("paused"===o)return f(e.resourceId,l,"The project is paused.");let c=(0,s.V)({ciphertext:e.keyCiphertext,iv:e.keyIv},d.key());if(!c)return f(e.resourceId,l,"The stored key can't be read. Add it again.");let p=await d.fetchMetrics(a,c,{timeoutMs:u});if(!p.ok)return f(e.resourceId,l,p.error);let m=(0,i.E)(e.latest??null,(0,i.c)((0,i.a)(p.data),a),l);await (0,n.f)().update(r.A).set({latest:m,lastTryAt:l,lastOkAt:l,lastError:null}).where((0,t.u)(r.A.resourceId,e.resourceId));let h=(0,i.b)(l),[g]=await (0,n.f)().select().from(r.l).where((0,t.b)((0,t.u)(r.l.resourceId,e.resourceId),(0,t.u)(r.l.hour,h))).limit(1),y=(0,i.n)(g??null,m);return await (0,n.f)().insert(r.l).values({resourceId:e.resourceId,hour:h,...y}).onConflictDoUpdate({target:[r.l.resourceId,r.l.hour],set:y}),!0}async function h(){let e=await (0,n.f)().select({id:a.resources.id,name:a.resources.name,latest:r.A.latest}).from(r.A).innerJoin(a.resources,(0,t.u)(a.resources.id,r.A.resourceId)).where((0,t.b)((0,t.u)(a.resources.kind,"supabase_project"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt))).limit(20);return e.length?e.map(e=>({id:e.id,name:e.name,latest:e.latest??null})):null}e.s(["Y",0,h,"E",0,p],662860)},89491,e=>{let t={databases:100,storageBytes:0x140000000,rowsRead:5e8,rowsWritten:1e7},n={storageBytes:262144e3,monthlyCommands:5e5,monthlyBandwidthBytes:0x280000000},r={databases:10,dbBytes:524288e3,accountBytes:0x140000000,rowsReadPerDay:5e6,rowsWrittenPerDay:1e5},a=(e,t)=>Math.round(e/t*1e3)/10,s=(e,t)=>!!e&&e.slice(0,7)===t.toISOString().slice(0,7);e.s(["M",0,r,"g",0,t,"W",0,n,"I",0,function(e,t){let n=e.usageDay===t.toISOString().slice(0,10);return[...n&&null!=e.accountRowsRead?[{label:"Rows read today",pct:a(e.accountRowsRead,r.rowsReadPerDay),text:"of 5M (account)",kind:"quota"}]:[],...n&&null!=e.accountRowsWritten?[{label:"Rows written today",pct:a(e.accountRowsWritten,r.rowsWrittenPerDay),text:"of 100k (account)",kind:"quota"}]:[],...null!=e.sizeBytes?[{label:"Size",pct:a(e.sizeBytes,r.dbBytes),text:"of 500 MB",kind:"storage"}]:[]]},"c",0,function(e){return(e.accountRowsRead??0)>=r.rowsReadPerDay?{state:"err",label:"Daily rows-read limit reached"}:(e.accountRowsWritten??0)>=r.rowsWrittenPerDay?{state:"err",label:"Daily rows-written limit reached"}:{state:"ok",label:"Available"}},"u",0,function(e){return e.filter(e=>"quota"===e.kind&&null!==e.pct).sort((e,t)=>(t.pct??0)-(e.pct??0))[0]??null},"G",0,function(e,n){return s(e.usageAt,n)?[...null!=e.orgRowsRead?[{label:"Rows read",pct:a(e.orgRowsRead,t.rowsRead),text:"of 500M this month (org)",kind:"quota"}]:[],...null!=e.orgRowsWritten?[{label:"Rows written",pct:a(e.orgRowsWritten,t.rowsWritten),text:"of 10M this month (org)",kind:"quota"}]:[],...null!=e.orgStorageBytes?[{label:"Storage",pct:a(e.orgStorageBytes,t.storageBytes),text:"of 5 GB (org)",kind:"storage"}]:[]]:[]},"h",0,function(e){return e.blockReads||e.orgBlockedReads?{state:"err",label:"Reads blocked"}:e.blockWrites||e.orgBlockedWrites?{state:"err",label:"Writes blocked"}:{state:"ok",label:"Available"}},"$",0,function(e,t){let r=s(e.statsAt,t);return[...r&&null!=e.monthlyRequests?[{label:"Commands",pct:a(e.monthlyRequests,n.monthlyCommands),text:"of 500k this month",kind:"quota"}]:[],...r&&null!=e.monthlyBandwidthBytes?[{label:"Bandwidth",pct:a(e.monthlyBandwidthBytes,n.monthlyBandwidthBytes),text:"of 10 GB this month",kind:"quota"}]:[],...null!=e.storageBytes?[{label:"Data size",pct:a(e.storageBytes,n.storageBytes),text:"of 250 MB",kind:"storage"}]:[]]},"t",0,function(e){let t=(e??"").toLowerCase();return"active"===t?{state:"ok",label:"Active"}:t.includes("suspend")||t.includes("block")||t.includes("disabled")?{state:"err",label:"Suspended"}:t.includes("delet")?{state:"off",label:"Deleting"}:{state:"unknown",label:e?`State: ${e}`:"Unknown"}}])},960063,e=>{e.s(["T",0,{reads:5e4,writes:2e4,deletes:2e4},"g",0,function(e){var t;if(e.ok)return e.data.noDatabase?{state:"off",label:"No Firestore database"}:{state:"ok",label:`Reachable \xb7 ${e.data.latencyMs} ms`};return"RESOURCE_EXHAUSTED"===(t=e).reason?{state:"err",label:"Daily quota used up"}:"SERVICE_DISABLED"===t.reason?{state:"err",label:"Firestore API is off in this project"}:"scope"===t.kind||"PERMISSION_DENIED"===t.reason||"scope"===t.reason?{state:"err",label:"No access: needs datastore.viewer"}:{state:"unknown",label:"Unknown"}},"a",0,function(e){let t=new Intl.DateTimeFormat("en-US",{timeZone:"America/Los_Angeles",hour:"numeric",minute:"numeric",second:"numeric",hourCycle:"h23"}).formatToParts(e),n=e=>Number(t.find(t=>t.type===e)?.value??0),r=(3600*n("hour")+60*n("minute")+n("second"))*1e3+e.getUTCMilliseconds();return new Date(e.getTime()-r)}])},90801,e=>{var t=e.i(250474),n=e.i(32391);let r=/^v?(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;function a(e,n){let a=r.exec(e.trim()),s=r.exec(n.trim());return!!a&&!!s&&a[1]===s[1]&&("0"!==a[1]||a[2]===s[2])&&(0,t.f)(n,e)>=0}let s=/^Watch(?:bell|post): update (?:\S+ (?:to|ke) \S+|\d+ vulnerable packages) in ((?:[A-Za-z0-9._-]+\/){0,3}[A-Za-z0-9._-]+) \(/,i=e=>s.exec(e)?.[1]??null;e.s(["M",0,e=>`Lockfile tertinggal — jalankan npm install (${e.slice(0,5).join(", ")}${e.length>5?`, +${e.length-5}`:""}).`,"a",0,function(e,t,n){if(!e.length)return{ok:!1,why:"nothing"};let r=e.filter(e=>n.includes(e.severity)&&!("moderate"===e.severity&&e.dev));if(!r.length)return{ok:!1,why:"severity"};for(let e of r){let n=t.get(e.package);if(!n||!a(n,e.to))return{ok:!1,why:"major"}}return{ok:!0,upgrades:r}},"m",0,function(e,r){if(!r)return{deps:e,stale:[]};let a=[...Object.entries(r.dependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.optionalDependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.devDependencies).map(([e,t])=>[e,t,!0])],s=[...e],i=[];for(let[e,r,o]of a){let a=(0,n.Y)(r);if(!a||!(0,n.C)(a))continue;let l=s.filter(t=>t.name===e);!l.length||l.some(e=>(0,t.f)(e.version,a)>=0)||((s=s.filter(t=>t.name!==e)).push({name:e,version:a,dev:l.every(e=>e.dev)&&o}),i.push(e))}return{deps:s,stale:i}},"D",0,function(e){let n=new Map;for(let r of e){if(!r.direct)continue;let e=n.get(r.package);(!e||0>(0,t.f)(r.installedVersion,e))&&n.set(r.package,r.installedVersion)}return n},"U",0,function(e,t,n=null){for(let r of t){if(i(r.title)!==n)continue;let t=function(e){if(e.packages?.length)return e.packages;let t=/^Watch(?:bell|post): update (\S+) (?:to|ke) /.exec(e.title);return t?[t[1]]:"all"}(r);if("all"===t||e.some(e=>t.includes(e)))return r}return null},"J",0,a])},891262,267485,e=>{var t=e.i(442473),n=e.i(7494),r=e.i(250474);let a=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],s=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),i=e=>Array.isArray(e)?e:[],o=e=>"string"==typeof e&&e?e:null,l=e=>s(e.package)&&"next"===e.package.name&&"npm"===e.package.ecosystem,u="OSV.dev sent an answer we couldn't read";async function d(e,f={}){let m=f.timeoutMs??1e4,h=f.maxBytes??2097152,g=AbortSignal.timeout(m),y=(0,t.X)(g),k=`OSV.dev didn't answer within ${p(m)}`,v=[],w=null;for(let n=0;n<3;n++){var b;let n,r;try{n=await (f.fetch??fetch)("https://api.osv.dev/v1/query",{method:"POST",headers:{"content-type":"application/json","user-agent":"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)"},body:JSON.stringify({package:{name:"next",ecosystem:"npm"},version:e,...w?{page_token:w}:{}}),redirect:"error",cache:"no-store",signal:g})}catch(e){return{ok:!1,error:c(e)?k:"Couldn't reach OSV.dev"}}if(!n.ok)return await n.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${n.status}`};try{let{bytes:e,truncated:a}=await (0,t.z)(n,h,y);if(a)return{ok:!1,error:"OSV.dev sent too large an answer"};r=JSON.parse(new TextDecoder().decode(e))}catch(e){return{ok:!1,error:c(e)?k:u}}let a=s(b=r)?void 0===b.vulns?[]:Array.isArray(b.vulns)?b.vulns:null:null;if(null===a)return{ok:!1,error:u};if(v.push(...a),!(w=s(r)?o(r.next_page_token):null))break}let $=function(e,t){let u=[],d=0;for(let n of e){if(!s(n))continue;let e=o(n.id);e&&(d++,n.withdrawn||u.push({id:e.slice(0,64),cve:i(n.aliases).map(o).find(e=>!!e&&/^CVE-\d{4}-\d+$/.test(e))??null,summary:(o(n.summary)??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=s(e.database_specific)?o(e.database_specific.severity)?.toUpperCase():void 0;return"MEDIUM"===t?"MODERATE":a.includes(t??"")?t:"UNKNOWN"}(n),fixed:function(e,t){let n=null;for(let a of i(e))if(s(a)&&l(a))for(let e of i(a.ranges)){if(!s(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let a=null;for(let l of i(e.events)){if(!s(l))continue;let e=o(l.introduced),i=o(l.fixed);e?a=e:i&&null!==a?((0,r.f)(t,a)>=0&&0>(0,r.f)(t,i)&&(null===n||0>(0,r.f)(i,n))&&(n=i),a=null):(o(l.last_affected)||o(l.limit))&&(a=null)}}return n}(n.affected,t)}))}return e.length>0&&0===d?null:(0,n.I)(u).slice(0,50)}(v,e);return null===$?{ok:!1,error:u}:{ok:!0,findings:$}}let c=e=>e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name),p=e=>e<1e3?`${e} ms`:`${Math.round(e/1e3)} s`;e.s(["y",0,d,"t",0,c],267485);var f=e.i(804581);let m="OpsConsole-Deps/1.0 (+https://watchbell.west-solutions.web.id)";async function h(e,t,n,r){let a=r.deadline-Date.now();if(a<500)return{ok:!1,error:"No time left for OSV.dev"};let s=AbortSignal.timeout(a);return y(e,{method:"POST",headers:{"content-type":"application/json","user-agent":m},body:JSON.stringify(t),signal:s},n,s,r)}async function g(e,t,n){let r=n.deadline-Date.now();if(r<500)return{ok:!1,error:"No time left for OSV.dev"};let a=AbortSignal.timeout(Math.min(r,8e3));return y(e,{method:"GET",headers:{"user-agent":m},signal:a},t,a,n)}async function y(e,n,r,a,s){let i;try{i=await (s.fetch??fetch)(e,{...n,redirect:"error",cache:"no-store"})}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"Couldn't reach OSV.dev"}}if(!i.ok)return await i.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${i.status}`};try{let{bytes:e,truncated:n}=await (0,t.z)(i,r,(0,t.X)(a));if(n)return{ok:!1,error:"OSV.dev sent too large an answer"};return{ok:!0,body:JSON.parse(new TextDecoder().decode(e))}}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"OSV.dev sent an answer we couldn't read"}}}async function k(e,t){let n=[];for(let r of(0,f.f)(e)){let e=await h(f.n,r,4194304,t);if(!e.ok)return e;let a=(0,f.j)(e.body,r.queries.length);if(!a)return{ok:!1,error:"OSV.dev sent an answer we couldn't read"};n.push(...a)}return{ok:!0,ids:n}}async function v(e,t){let n=[...new Set(e)].filter(f.G);if(n.length>300)return{ok:!1,error:`Too many advisories to read in one scan (${n.length})`};let r=new Map,a=null;for(let e=0;e<n.length&&!a;e+=8)await Promise.all(n.slice(e,e+8).map(async e=>{let n=await g(`${f.W}${encodeURIComponent(e)}`,1048576,t),s=n.ok?(0,f.O)(n.body):null;s?r.set(e,s):a??=n.ok?"OSV.dev sent an advisory we couldn't read":n.error}));return a?{ok:!1,error:a}:{ok:!0,map:r}}e.s(["J",0,v,"K",0,k],891262)},804581,e=>{var t=e.i(250474);let n=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),r=e=>Array.isArray(e)?e:[],a=e=>"string"==typeof e&&e?e:null,s=e=>/^[A-Za-z0-9][A-Za-z0-9._:-]{1,63}$/.test(e),i={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",MEDIUM:"moderate",LOW:"low"},o=e=>e>=9?"critical":e>=7?"high":e>=4?"moderate":e>0?"low":"unknown",l=(e,t)=>n(e.package)&&e.package.name===t&&"npm"===e.package.ecosystem;e.s(["S",0,20,"n",0,"https://api.osv.dev/v1/querybatch","W",0,"https://api.osv.dev/v1/vulns/","h",0,200,"f",0,function(e){let t=[];for(let n=0;n<e.length;n+=1e3)t.push({queries:e.slice(n,n+1e3).map(e=>({package:{name:e.name,ecosystem:"npm"},version:e.version}))});return t},"i",0,function(e,s,i,o=new Map){let u=[];return e.forEach((e,d)=>{for(let c of s[d]??[]){let s=o.get(`${e.name}@${e.version}|${c}`);if(s){u.push({...s,dev:e.dev});continue}let d=i.get(c);d&&!d.withdrawn&&u.push({package:e.name,installedVersion:e.version,vulnId:d.id,aliases:d.aliases,severity:d.severity,fixedVersion:function(e,s,i){let o=null;for(let u of r(e))if(n(u)&&l(u,s))for(let e of r(u.ranges)){if(!n(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let s=null;for(let l of r(e.events)){if(!n(l))continue;let e=a(l.introduced),r=a(l.fixed);e?s=e:r&&null!==s?((0,t.f)(i,s)>=0&&0>(0,t.f)(i,r)&&(null===o||0>(0,t.f)(r,o))&&(o=r),s=null):(a(l.last_affected)||a(l.limit))&&(s=null)}}return o}(d.affected,e.name,e.version),summary:d.summary,dev:e.dev,source:"osv"})}}),u},"G",0,s,"O",0,function(e){if(!n(e))return null;let t=a(e.id);return t&&s(t)?{id:t,aliases:[...new Set(r(e.aliases).map(a).filter(e=>!!e&&s(e)))].slice(0,20),summary:(a(e.summary)??a(e.details)?.split(/\n/)[0]??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=n(e.database_specific)?a(e.database_specific.severity)?.toUpperCase():null;if(t&&i[t])return i[t];for(let t of r(e.severity)){if(!n(t)||"CVSS_V3"!==t.type&&"CVSS_V31"!==t.type)continue;let e=a(t.score)?function(e){let t,n=/^CVSS:3\.[01]\/(.+)$/.exec(e.trim());if(!n)return null;let r={};for(let e of n[1].split("/")){let[t,n]=e.split(":");t&&n&&(r[t]=n)}let a={N:.85,A:.62,L:.55,P:.2},s={L:.77,H:.44},i={N:.85,R:.62},o={H:.56,L:.22,N:0},l="C"===r.S,u=l?{N:.85,L:.68,H:.5}:{N:.85,L:.62,H:.27};if(![a[r.AV],s[r.AC],u[r.PR],i[r.UI],o[r.C],o[r.I],o[r.A]].every(e=>"number"==typeof e)||"U"!==r.S&&"C"!==r.S)return null;let d=1-(1-o[r.C])*(1-o[r.I])*(1-o[r.A]),c=l?7.52*(d-.029)-3.25*(d-.02)**15:6.42*d,p=8.22*a[r.AV]*s[r.AC]*u[r.PR]*i[r.UI];return c<=0?0:(t=Math.round(1e5*Math.min(l?1.08*(c+p):c+p,10)))%1e4==0?t/1e5:(Math.floor(t/1e4)+1)/10}(a(t.score)):null;if(null!==e)return o(e)}return(a(e.id)??"").startsWith("MAL-")?"critical":"unknown"}(e),withdrawn:!!a(e.withdrawn),affected:e.affected}:null},"j",0,function(e,t){return n(e)&&Array.isArray(e.results)&&e.results.length===t?e.results.map(e=>n(e)?r(e.vulns).map(e=>n(e)?a(e.id):null).filter(e=>!!e&&s(e)):[]):null}])},413230,e=>{var t=e.i(250474),n=e.i(32391),r=e.i(804581);let a=["critical","high","moderate","low","unknown"],s=e=>a.indexOf(e),i=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),o=e=>"string"==typeof e&&e?e:null,l={critical:"critical",high:"high",medium:"moderate",moderate:"moderate",low:"low"},u=e=>`${e.package}@${e.installedVersion}|${e.vulnId}`,d=e=>{let t;return!e.dev&&(s(e.severity)<=s("high")||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))||"moderate"===e.severity&&!0===e.direct)};e.s(["g",0,function(e){let t=e.filter(d);return t.some(e=>{let t;return"critical"===e.severity||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))})?"critical":t.length?"warning":null},"L",0,function(e){let t=e.filter(d),n=[...t].sort((e,t)=>s(e.severity)-s(t.severity)||(e.package<t.package?-1:1)),r=[];for(let e of n){let t=`${e.package} ${e.installedVersion}${e.fixedVersion?` → ${e.fixedVersion}`:" (no fix yet)"}`;r.includes(t)||r.push(t)}let a=new Set(t.map(e=>e.package)).size,i=function(e){let t={critical:0,high:0,moderate:0,low:0,unknown:0};for(let n of e)t[n.severity]++;return t}(t),o=["critical","high","moderate","low","unknown"].filter(e=>i[e]>0).map(e=>`${i[e]} ${e}`).join(", "),l=`${a} vulnerable package${1===a?"":"s"} (${o}): ${r.slice(0,4).join(", ")}${r.length>4?`, +${r.length-4} more`:""}.`;return l.length>300?`${l.slice(0,299)}…`:l},"z",0,function(e,t,n){let r=new Set;return e.forEach((e,a)=>{for(let s of t[a]??[])n.has(`${e.name}@${e.version}|${s}`)||r.add(s)}),[...r]},"A",0,function(e,t){let n=new Map;if(t)return n;for(let t of e)t.fixedVersion&&"dependabot"!==t.source&&n.set(u(t),{package:t.package,installedVersion:t.installedVersion,vulnId:t.vulnId,aliases:t.aliases,severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,dev:t.dev,source:"osv"});return n},"R",0,function(e,n,r){let a=[...e];for(let e of n)if(!a.some(t=>t.package===e.package&&(t.vulnId===e.ghsaId||t.aliases.includes(e.ghsaId)||null!==e.cveId&&t.aliases.includes(e.cveId)))&&e.range)for(let n of r)n.name===e.package&&function(e,n){let r=n.split(",").map(e=>e.trim()).filter(Boolean);return!!r.length&&r.every(n=>{let r=/^(<=|>=|<|>|=)\s*v?(\S+)$/.exec(n);if(!r)return!1;let a=(0,t.f)(e,r[2]);return"<"===r[1]?a<0:"<="===r[1]?a<=0:">"===r[1]?a>0:">="===r[1]?a>=0:0===a})}(n.version,e.range)&&a.push({package:e.package,installedVersion:n.version,vulnId:e.ghsaId,aliases:e.cveId?[e.cveId]:[],severity:e.severity,fixedVersion:e.fixed,summary:e.summary,dev:e.dev||n.dev,source:"dependabot"});return a},"E",0,function(e){if(!Array.isArray(e))return null;let t=[];for(let a of e){if(!i(a)||"open"!==a.state||!i(a.dependency)||!i(a.security_advisory))continue;let e=i(a.dependency.package)&&"npm"===a.dependency.package.ecosystem?o(a.dependency.package.name):null,s=o(a.security_advisory.ghsa_id);if(!e||!(0,n.L)(e)||!s||!(0,r.G)(s))continue;let u=i(a.security_vulnerability)?a.security_vulnerability:{},d=i(u.first_patched_version)?o(u.first_patched_version.identifier):null,c=o(a.security_advisory.cve_id);t.push({package:e,ghsaId:s,cveId:c&&/^CVE-\d{4}-\d+$/.test(c)?c:null,summary:(o(a.security_advisory.summary)??"").replace(/\s+/g," ").trim().slice(0,r.h),severity:l[(o(u.severity)??o(a.security_advisory.severity)??"").toLowerCase()]??"unknown",range:o(u.vulnerable_version_range),fixed:d&&d.length<=100?d:null,dev:"development"===a.dependency.scope})}return t},"h",0,function(e,t,n){let a=new Map(e.map(e=>[u(e),e])),s=new Set,i={insert:[],update:[],resolve:[]};for(let e of t){let t=u(e);if(s.has(t))continue;s.add(t);let o={...e,aliases:e.aliases.slice(0,r.S),summary:e.summary.slice(0,r.h),direct:n.has(e.package)},l=a.get(t);l?i.update.push({id:l.id,severity:o.severity,fixedVersion:o.fixedVersion,summary:o.summary,aliases:o.aliases,dev:o.dev,direct:o.direct}):i.insert.push(o)}return i.resolve=e.filter(e=>!s.has(u(e))).map(e=>e.id),i},"U",0,function(e,t,n,r=!1){return!!r||!e||!e.scannedAt||(e.error?n.getTime()-e.scannedAt.getTime()>=72e6||e.lockfileSha!==t:e.lockfileSha!==t||!e.queriedAt||n.getTime()-e.queriedAt.getTime()>=6048e5)},"M",0,function(e){return[...e].sort((e,t)=>(e.scannedAt?.getTime()??-1)-(t.scannedAt?.getTime()??-1)||(e.id<t.id?-1:1))},"B",0,function(e){let n=new Map,r=new Set;for(let a of e){if(!a.direct||!a.fixedVersion||0>=(0,t.f)(a.fixedVersion,a.installedVersion))continue;!0!==a.dev&&r.add(a.package);let e=n.get(a.package)??{package:a.package,to:a.fixedVersion,vulnIds:[],cves:[],severity:a.severity};for(let n of((0,t.f)(a.fixedVersion,e.to)>0&&(e.to=a.fixedVersion),e.vulnIds.includes(a.vulnId)||e.vulnIds.push(a.vulnId),a.aliases))/^CVE-/.test(n)&&!e.cves.includes(n)&&e.cves.push(n);s(a.severity)<s(e.severity)&&(e.severity=a.severity),n.set(a.package,e)}for(let e of n.values())r.has(e.package)||(e.dev=!0);return[...n.values()].sort((e,t)=>s(e.severity)-s(t.severity)||(e.package<t.package?-1:1))}])},479301,e=>{let t=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;e.s(["f",0,e=>"string"==typeof e&&t.test(e)])},911191,e=>{let t=[[/(?:\b|(?<=%2F))hb(?:_|%5F)[0-9a-f]{32}\b/gi,"hb_[hidden]"],[/(\/api(?:\/|%2F)ping(?:\/|%2F))(?!hb_\[hidden\])[^/?#\s]+/gi,"$1[hidden]"],[/\b(postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|rediss):\/\/\S+/gi,"$1://[hidden]"],[/\b(https?):\/\/[^\s/@:]+:[^\s/@]+@/gi,"$1://[hidden]@"],[/\b(Bearer|Basic)\s+[^\s"',;]+/gi,"$1 [hidden]"],[/\b((?:access_|refresh_|id_)?token|secret|password|passwd|pwd|api[_-]?key|apikey|authorization|cookie|session|private_key)(["']?\s*[:=]\s*["']?)(?!Bearer\b|Basic\b)([^\s"'&,;}]+)/gi,"$1$2[hidden]"],[/\beyJ[\w-]{8,}\.[\w-]{8,}\.[\w-]{8,}/g,"[jwt]"],[/\b[\w.+-]+@[\w-]+(?:\.[\w-]+)+\b/g,"[email]"],[/\b[A-Fa-f0-9]{40,}\b/g,"[redacted]"],[/\b(?=[A-Za-z0-9_-]*\d)(?=[A-Za-z0-9_-]*[A-Za-z])[A-Za-z0-9_-]{40,}\b/g,"[redacted]"]];function n(e,t){return e.length>t?`${e.slice(0,t-1)}…`:e}e.s(["l",0,n,"n",0,function(e){return null===e?null:n(e.split(/[?#]/)[0]||"/",512)},"h",0,function(e){return t.reduce((e,[t,n])=>e.replace(t,n),e)}])},659846,e=>{e.s(["f",0,["vercel","supabase","neon","firebase","turso","upstash","cloudflare","github","github_write"]],659846)},154491,e=>{let t=["home","hosting","database","devops","manage"],n=["hosting","database","devops"],r={vercel:"hosting",cloudflare:"hosting",supabase:"database",neon:"database",firebase:"database",turso:"database",upstash:"database",github:"devops",github_write:"devops"};function a(e){return Array.isArray(e)?t.filter(r=>"string"==typeof r&&t.includes(r)&&n.includes(r)&&e.includes(r)):[]}let s={MonitorDown:"hosting",HighLatency:"hosting",DeploymentFailed:"hosting",CertExpiringSoon:"hosting",DomainExpiringSoon:"hosting",DnsProxiedToVercel:"hosting",DatabasePaused:"database",StorageAlmostFull:"database",NeonComputeHigh:"database",FirestoreQuotaHigh:"database",AutoPauseRisk:"database",ComputeHigh:"database",DbQuotaHigh:"database",VulnerableDependency:"devops",FrameworkVulnerable:"hosting",MonitorDomainMoved:"hosting",CredentialExpiring:"account",CollectorStale:null},i=/^Log/;e.s(["D",0,r,"O",0,(e,t,n)=>{let a;if(!e.size)return!1;let o="account"===(a=s[t])?n?r[n]??null:null:void 0!==a?a:i.test(t)?"hosting":null;return null!==o&&e.has(o)},"N",0,a,"s",0,function(e){return{ruleKeys:Object.entries(s).filter(([,t])=>null!==t&&"account"!==t&&e.has(t)).map(([e])=>e),providers:Object.entries(r).filter(([,t])=>e.has(t)).map(([e])=>e)}},"I",0,e=>new Set(a(e))])},7494,e=>{let t={CRITICAL:4,HIGH:3,MODERATE:2,LOW:1,UNKNOWN:0};function n(e){return e.reduce((e,n)=>t[n.severity]>t[e]?n.severity:e,"UNKNOWN")}let r=e=>`${e} known vulnerabilit${1===e?"y":"ies"}`;e.s(["t",0,function(e,a,s){let i=new Set((a?.findings??[]).map(e=>e.id));if("vulnerable"===s.status&&s.findings.length>0){if(s.findings.every(e=>i.has(e.id)))return null;let a=n(s.findings);return{kind:t[a]>=t.HIGH?"err":"warn",message:`${e} runs Next.js ${s.version} with ${r(s.findings.length)} (${a.toLowerCase()})`,detail:s.findings.map(e=>e.id).join(", ").slice(0,1e3)}}return"ok"===s.status&&i.size>0?{kind:"ok",message:`${e} no longer has known Next.js vulnerabilities (now ${s.version})`,detail:null}:null},"I",0,function(e){return[...e].sort((e,n)=>t[n.severity]-t[e.severity]||(e.id<n.id?-1:+(e.id>n.id)))},"q",0,r,"N",0,n])},250474,32391,e=>{function t(e){let[t,...n]=e.trim().split("-"),r=t.split(".").map(e=>Number.parseInt(e,10)||0);return{nums:[r[0]??0,r[1]??0,r[2]??0],pre:n.length?n.join("-").split("."):[]}}e.s(["f",0,function(e,n){let r=t(e),a=t(n);for(let e=0;e<3;e++)if(r.nums[e]!==a.nums[e])return r.nums[e]-a.nums[e];return function(e,t){if(!e.length||!t.length)return e.length?-1:+!!t.length;for(let n=0;n<Math.max(e.length,t.length);n++){if(void 0===e[n])return -1;if(void 0===t[n])return 1;let r=/^\d+$/.test(e[n])?Number(e[n]):null,a=/^\d+$/.test(t[n])?Number(t[n]):null;if(null!==r&&null!==a){if(r!==a)return r-a}else if(null!==r||null!==a)return null!==r?-1:1;else if(e[n]!==t[n])return e[n]<t[n]?-1:1}return 0}(r.pre,a.pre)}],250474);let n=/^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9._~-][a-z0-9._~-]*$/i,r=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,a=e=>e.length<=214&&n.test(e),s=e=>e.length<=100&&r.test(e),i=e=>"object"==typeof e&&null!==e&&!Array.isArray(e);function o(e){let t=new Map;for(let n of e){if(!a(n.name)||!s(n.version))continue;let e=`${n.name}@${n.version}`,r=t.get(e);if(r?r.dev=r.dev&&n.dev:t.set(e,{...n}),t.size>=1e4)break}return[...t.values()].sort((e,t)=>e.name===t.name?e.version<t.version?-1:1:e.name<t.name?-1:1)}function l(e){try{return JSON.parse(e)}catch{return null}}let u=e=>{let t=e.lastIndexOf("node_modules/");return t<0?null:e.slice(t+13)||null},d=e=>e.trim().replace(/^['"]|['"]$/g,""),c=e=>i(e)?Object.fromEntries(Object.entries(e).filter(e=>"string"==typeof e[1])):{};function p(e){let t=/^\s*(?:\^|~|>=|=|v)?\s*v?(\d+)(?:\.(\d+|x|\*))?(?:\.(\d+|x|\*))?(-[0-9A-Za-z.-]+)?\s*$/.exec(e);if(!t)return null;let n=e=>e&&/^\d+$/.test(e)?e:"0";return`${t[1]}.${n(t[2])}.${n(t[3])}${t[4]??""}`}e.s(["a",0,[{path:"package-lock.json",kind:"npm"},{path:"npm-shrinkwrap.json",kind:"npm"},{path:"pnpm-lock.yaml",kind:"pnpm"},{path:"yarn.lock",kind:"yarn"},{path:"bun.lock",kind:"bun"}],"e",0,function(e){let t=[],n=(e,n)=>{for(let[r,a]of Object.entries(e)){let e=p(a);e&&t.push({name:r,version:e,dev:n})}};return n(e.dependencies,!1),n(e.optionalDependencies,!1),n(e.devDependencies,!0),o(t)},"K",0,function(e){return e?new Set([...Object.keys(e.dependencies),...Object.keys(e.devDependencies),...Object.keys(e.optionalDependencies)]):new Set},"L",0,a,"C",0,s,"Y",0,p,"D",0,function(e,t){switch(e){case"npm":let n=l(t);if(!i(n))return null;let r=[];if(i(n.packages)){for(let[e,t]of Object.entries(n.packages)){if(!e||!i(t)||!0===t.link||"string"!=typeof t.version)continue;let n="string"==typeof t.name&&e.includes("node_modules/")?t.name:u(e);n&&r.push({name:n,version:t.version,dev:!0===t.dev})}return o(r)}if(i(n.dependencies)){let e=(t,n)=>{if(!(n>40))for(let[a,s]of Object.entries(t))i(s)&&("string"==typeof s.version&&r.push({name:a,version:s.version,dev:!0===s.dev}),i(s.dependencies)&&e(s.dependencies,n+1))};return e(n.dependencies,0),o(r)}return null;case"pnpm":return function(e){let t=e.split(/\r?\n/);if(!t.some(e=>/^lockfileVersion:/.test(e)))return null;let n=[],r=!1,s=null;for(let e of t){if(/^\S/.test(e)){r=/^packages:\s*$/.test(e),s=null;continue}if(!r)continue;let t=/^ {2}(\S.*?):\s*$/.exec(e);if(t){let e=function(e){let t=d(e).replace(/^\//,""),n=t.indexOf("(");n>0&&(t=t.slice(0,n));let r=t.lastIndexOf("@");if(r>0&&!t.slice(r+1).includes("/")&&a(t.slice(0,r)))return{name:t.slice(0,r),version:t.slice(r+1).split("_")[0]};let s=t.lastIndexOf("/");return s<=0?null:{name:t.slice(0,s),version:t.slice(s+1).split("_")[0]}}(t[1]);(s=e?{...e,dev:!1}:null)&&n.push(s);continue}s&&/^ {4}dev: true\s*$/.test(e)&&(s.dev=!0)}return o(n)}(t);case"yarn":return function(e){let t=e.split(/\r?\n/),n=[],r=null,a=!1;for(let e of t){if(!e.trim()||e.trimStart().startsWith("#"))continue;if(/^\S/.test(e)){let t=e.replace(/:\s*$/,"");r=t.startsWith("__metadata")||/@(?:workspace|link|portal|file):/.test(t)?null:function(e){let t=d(e),n=t.indexOf("@",+!!t.startsWith("@"));return n>0?t.slice(0,n):null}(t.split(/,\s*/)[0]),a=!0;continue}let t=/^ {2}version:?\s+"?([^"\s]+)"?\s*$/.exec(e);t&&r&&(n.push({name:r,version:t[1],dev:!1}),r=null)}return a?o(n):null}(t);case"bun":let s=l(t.replace(/,(\s*[}\]])/g,"$1"));if(!i(s)||!i(s.packages))return null;let c=[];for(let e of Object.values(s.packages)){if(!Array.isArray(e)||"string"!=typeof e[0])continue;let t=e[0],n=t.lastIndexOf("@");n<=0||c.push({name:t.slice(0,n),version:t.slice(n+1),dev:!1})}return o(c)}},"b",0,function(e){let t=l(e);return i(t)?{dependencies:c(t.dependencies),devDependencies:c(t.devDependencies),optionalDependencies:c(t.optionalDependencies)}:null}],32391)}]})();
+
+//# sourceMappingURL=src_lib_16y1secb8t9fj._.js.map

package/server/.next/server/chunks/src_lib_18wgdeemqm6gg._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[648338,634815,e=>{e.s(["f",0,function(e){let t=e instanceof Error&&e.cause instanceof Error?e.cause:e,n=(t instanceof Error?t.message:"").split("\n")[0].replace(/Bearer\s+\S+/gi,"Bearer [hidden]").trim()||"failed";return n.length>200?`${n.slice(0,200)}…`:n}],648338);let t=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,n="[\"'`]";function r(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let i={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},s=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>i[e]??i[e.toLowerCase()]??e),o=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${n}(${t})${n}`,"g"),a=RegExp(String.raw`version\s*:\s*${n}(${t})${n}\s*,\s*appDir\s*:`,"g"),l=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${n}(${t})${n}`,"g"),u=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,c=e=>e.replace(/[$]/g,"\\$");e.s(["O",0,function(e){for(let t of e.matchAll(o))if(r(t[1]))return t[1];for(let t of[a,l])for(let n of e.matchAll(t))if(r(n[1]))return n[1];for(let i of e.matchAll(u)){let s=i[1]??"version",o=RegExp(String.raw`(?:^|[^\w$.])${c(s)}\s*=\s*${n}(${t})${n}`,"g"),a=null;for(let t of e.matchAll(o)){if((t.index??0)>=(i.index??0))break;a=t[1]}if(a&&r(a))return a}return null},"V",0,function(e,t){let n;try{n=new URL(t)}catch{return[]}let r=new Set,i=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(s(t[2].trim()),n)}catch{continue}if("https:"===e.protocol&&e.origin===n.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!r.has(e.href))){var o;r.add(e.href),i.push({href:e.href,rank:(o=e.pathname,/\/main-app[-.]/.test(o)?0:/\/(main|app-index)[-.]/.test(o)?1:/\/(webpack|polyfills|framework)[-.]/.test(o)?3:2),i:i.length})}}return i.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)}],634815)},242605,e=>{var t=e.i(93321),n=e.i(351674),r=e.i(548734),i=e.i(837137),s=e.i(33135),o=e.i(648338),a=e.i(601219),l=e.i(46126),u=e.i(84979),c=e.i(683439),d=e.i(436357),f=e.i(469762),h=e.i(182357),p=e.i(910697);function g(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function m(e={}){let s=e.only;if(s&&!s.length)return[];let o=e.first??[],a=e.skip??[],l=await (0,r.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta,sec:i.appSecurity}).from(i.resources).leftJoin(i.appSecurity,(0,t.u)(i.appSecurity.resourceId,i.resources.id)).where((0,t.b)((0,t.u)(i.resources.kind,"app"),(0,t.u)(i.resources.monitored,!0),(0,t.M)(i.resources.goneAt),s?(0,t.y)(i.resources.id,s):void 0,a.length?(0,t.$)(i.resources.id,[...a]):void 0)).orderBy(...o.length?[n.B`case when ${(0,t.y)(i.resources.id,o)} then 0 else 1 end`]:[],n.B`${i.appSecurity.checkedAt} asc nulls first`,i.resources.name).limit(p.O.apps);if(!l.length)return[];o.length&&l.sort((e,t)=>Number(!o.includes(e.id))-Number(!o.includes(t.id)));let u=await (0,r.f)().select({resourceId:i.monitors.resourceId,url:i.monitors.url}).from(i.monitors).where((0,t.y)(i.monitors.resourceId,l.map(e=>e.id))).orderBy(i.monitors.createdAt).limit(p.O.monitors);return l.map(e=>({id:e.id,name:e.name,prev:e.sec?g(e.sec):null,host:(0,d.Y)(e.meta)?.primaryDomain??(0,f.m)(e.name,u.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function w(e,s){await (0,r.f)().transaction(async r=>{await r.execute(n.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[o]=await r.select().from(i.appSecurity).where((0,t.u)(i.appSecurity.resourceId,e.id)).limit(1),l=o?g(o):null;if(l&&l.checkedAt.getTime()>=s.checkedAt.getTime())return;let c="unknown"===s.status||"error"===s.status?{...s,version:l?l.version:s.version,findings:l?l.findings:s.findings}:s,d={framework:"next",version:c.version,status:c.status,findings:c.findings,reason:c.reason,checkedAt:c.checkedAt};await r.insert(i.appSecurity).values({resourceId:e.id,...d}).onConflictDoUpdate({target:i.appSecurity.resourceId,set:d,setWhere:n.B`${i.appSecurity.checkedAt} < excluded.checked_at`});let f=(0,u.t)(e.name,l,c);f&&await (0,a.f)([{type:"system",kind:f.kind,message:f.message,detail:f.detail,resourceId:e.id,at:c.checkedAt,reason:"ok"===f.kind?"NextClean":"NextVulnerable"}],r)})}async function y(e,t={}){let n=await m(t),r=0,i=0,a=[],u=[],c=[];return await (0,s.P)(n,3,async t=>{if(e-Date.now()<3e3)return void i++;c.push(t.id);try{let n=await (0,l.P)(t.host,t.prev,{deadline:e});if(!n)return void i++;await w(t,n),r++,u.push(t.id)}catch(e){a.push(`${t.name}: ${(0,o.f)(e)}`),u.push(t.id)}}),{checked:r,skipped:i,failed:a,done:u,listed:n.map(e=>e.id),started:c}}async function k(e,t=2e4){let[n]=await m({only:[e]});if(!n)return{ok:!1,error:"That app is no longer in the console."};let r=await (0,l.P)(n.host,n.prev,{deadline:Date.now()+t});return r?(await w(n,r),{ok:!0,message:(0,h.I)(n.name,r),passed:"ok"===r.status||"vulnerable"===r.status,vulnerable:r.findings.length>0,audit:{message:`Security check: ${n.name}`,resourceId:n.id}}):{ok:!1,error:"The check took too long. Try again in a minute."}}async function v(e){let n=e.filter(c.f);return n.length?(await (0,r.f)().select().from(i.appSecurity).where((0,t.y)(i.appSecurity.resourceId,n)).limit(n.length)).map(e=>{let t=g(e);return{appId:e.resourceId,version:t.version,status:t.status,findings:t.findings}}):[]}e.s(["d",0,k,"F",0,v,"h",0,y,"Z",0,g])},46126,e=>{var t=e.i(33135),n=e.i(634815),r=e.i(533957);async function i(e,s,o={}){let a=o.deadline??1/0,l=o.now??(()=>new Date),u=e=>Math.floor(Math.min(e,a)-Date.now()),c=Date.now()+15e3;if(0>=u(c))return null;let d=(e,t)=>({version:s?.version??null,status:e,findings:s?.findings??[],reason:t,checkedAt:l()}),f=(e,n)=>(0,t.K)(e,{maxBytes:3145728,timeoutMs:u(c),lookup:o.lookup,fetch:o.fetch,userAgent:"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)",sameOrigin:n}),h=await f(`https://${e}/`,"www");if(!h.ok&&h.error===t.l)return d("unknown","the site redirects to another host");if(!h.ok||200!==h.status)return Date.now()>=a?null:d("error",`Couldn't load the site: ${h.ok?`HTTP ${h.status}`:h.error}`);let p=(0,n.V)(h.body,h.url).slice(0,12);if(0===p.length)return d("unknown",h.body.includes("/_next/")?"version not exposed":"not a Next.js site");let g=null,m=0,w=!1;for(let e of p){if(0>=u(c)){w=!0;break}let t=await f(e,!0);if(t.ok&&200===t.status&&(m++,g=(0,n.O)(t.body)))break}if(!g)return Date.now()>=a?null:w||0>=u(c)?d("error","Reading the site's scripts took longer than 15 s"):0===m?d("error","Couldn't load the site's scripts"):d("unknown","version not exposed");let y=u(Date.now()+1e4);if(y<=0)return null;let k=await (0,r.y)(g,{timeoutMs:y,fetch:o.fetch});return k.ok?{version:g,status:k.findings.length?"vulnerable":"ok",findings:k.findings,reason:null,checkedAt:l()}:Date.now()>=a?null:d("error",k.error)}e.s(["y",0,35e3,"P",0,i])},533957,e=>{var t=e.i(33135),n=e.i(84979),r=e.i(84877);let i=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],s=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),o=e=>Array.isArray(e)?e:[],a=e=>"string"==typeof e&&e?e:null,l=e=>s(e.package)&&"next"===e.package.name&&"npm"===e.package.ecosystem,u="OSV.dev sent an answer we couldn't read";async function c(e,h={}){let p=h.timeoutMs??1e4,g=h.maxBytes??2097152,m=AbortSignal.timeout(p),w=(0,t.X)(m),y=`OSV.dev didn't answer within ${f(p)}`,k=[],v=null;for(let n=0;n<3;n++){var $;let n,r;try{n=await (h.fetch??fetch)("https://api.osv.dev/v1/query",{method:"POST",headers:{"content-type":"application/json","user-agent":"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)"},body:JSON.stringify({package:{name:"next",ecosystem:"npm"},version:e,...v?{page_token:v}:{}}),redirect:"error",cache:"no-store",signal:m})}catch(e){return{ok:!1,error:d(e)?y:"Couldn't reach OSV.dev"}}if(!n.ok)return await n.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${n.status}`};try{let{bytes:e,truncated:i}=await (0,t.z)(n,g,w);if(i)return{ok:!1,error:"OSV.dev sent too large an answer"};r=JSON.parse(new TextDecoder().decode(e))}catch(e){return{ok:!1,error:d(e)?y:u}}let i=s($=r)?void 0===$.vulns?[]:Array.isArray($.vulns)?$.vulns:null:null;if(null===i)return{ok:!1,error:u};if(k.push(...i),!(v=s(r)?a(r.next_page_token):null))break}let x=function(e,t){let u=[],c=0;for(let n of e){if(!s(n))continue;let e=a(n.id);e&&(c++,n.withdrawn||u.push({id:e.slice(0,64),cve:o(n.aliases).map(a).find(e=>!!e&&/^CVE-\d{4}-\d+$/.test(e))??null,summary:(a(n.summary)??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=s(e.database_specific)?a(e.database_specific.severity)?.toUpperCase():void 0;return"MEDIUM"===t?"MODERATE":i.includes(t??"")?t:"UNKNOWN"}(n),fixed:function(e,t){let n=null;for(let i of o(e))if(s(i)&&l(i))for(let e of o(i.ranges)){if(!s(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let i=null;for(let l of o(e.events)){if(!s(l))continue;let e=a(l.introduced),o=a(l.fixed);e?i=e:o&&null!==i?((0,r.f)(t,i)>=0&&0>(0,r.f)(t,o)&&(null===n||0>(0,r.f)(o,n))&&(n=o),i=null):(a(l.last_affected)||a(l.limit))&&(i=null)}}return n}(n.affected,t)}))}return e.length>0&&0===c?null:(0,n.I)(u).slice(0,50)}(k,e);return null===x?{ok:!1,error:u}:{ok:!0,findings:x}}let d=e=>e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name),f=e=>e<1e3?`${e} ms`:`${Math.round(e/1e3)} s`;e.s(["y",0,c,"t",0,d],533957)},84979,e=>{var t=e.i(84877);let n={CRITICAL:4,HIGH:3,MODERATE:2,LOW:1,UNKNOWN:0};function r(e){return e.reduce((e,t)=>n[t.severity]>n[e]?t.severity:e,"UNKNOWN")}let i=e=>n[e]>=n.HIGH,s=e=>`${e} known vulnerabilit${1===e?"y":"ies"}`;e.s(["r",0,function(e){return e.reduce((e,n)=>n.fixed&&(null===e||(0,t.f)(n.fixed,e)>0)?n.fixed:e,null)},"o",0,i,"t",0,function(e,t,n){let o=new Set((t?.findings??[]).map(e=>e.id));if("vulnerable"===n.status&&n.findings.length>0){if(n.findings.every(e=>o.has(e.id)))return null;let t=r(n.findings);return{kind:i(t)?"err":"warn",message:`${e} runs Next.js ${n.version} with ${s(n.findings.length)} (${t.toLowerCase()})`,detail:n.findings.map(e=>e.id).join(", ").slice(0,1e3)}}return"ok"===n.status&&o.size>0?{kind:"ok",message:`${e} no longer has known Next.js vulnerabilities (now ${n.version})`,detail:null}:null},"I",0,function(e){return[...e].sort((e,t)=>n[t.severity]-n[e.severity]||(e.id<t.id?-1:+(e.id>t.id)))},"q",0,s,"N",0,r])},182357,e=>{var t=e.i(84979),n=e.i(245710);let r=e=>!!e&&e.findings.length>0,i=e=>/[.!?]$/.test(e)?e:`${e}.`;e.s(["y",0,{CRITICAL:"Critical",HIGH:"High",MODERATE:"Moderate",LOW:"Low",UNKNOWN:"Unknown"},"I",0,function(e,n){return"vulnerable"===n.status?`${e} runs Next.js ${n.version} with ${(0,t.q)(n.findings.length)}.`:"ok"===n.status?`No known vulnerabilities for Next.js ${n.version}.`:"unknown"===n.status?`Couldn't read the Next.js version: ${i(n.reason??"no reason given")}`:`The check failed: ${i(n.reason??"no reason given")}`},"f",0,function(e){if(!r(e))return null;let n=(0,t.N)(e.findings);return{label:"CVE",severe:(0,t.o)(n),title:`Next.js ${e.version}: ${(0,t.q)(e.findings.length)}, worst ${n.toLowerCase()}`}},"X",0,r,"v",0,function(e){let n=[];for(let i of e){if(i.gone||!r(i.security))continue;let e=i.security,s=(0,t.N)(e.findings),o=(0,t.r)(e.findings);n.push({key:`sec-${i.id}`,tone:(0,t.o)(s)?"danger":"warning",title:`${i.name} runs a vulnerable Next.js (${e.version??"unknown version"})`,body:`${(0,t.q)(e.findings.length)}, worst ${s.toLowerCase()}.${o?` Fixed in ${o}.`:""}`,action:{label:"Open app",href:`/apps/${i.id}`}})}return[...n.filter(e=>"danger"===e.tone),...n.filter(e=>"warning"===e.tone)]},"g",0,function(e){if(!e)return{state:"unknown",text:`Not checked yet. The daily job checks at ${(0,n.G)()}.`};if("ok"===e.status)return{state:"ok",text:`No known vulnerabilities for Next.js ${e.version}.`};let t=null!==e.version||e.findings.length>0?" Showing the result from before.":"";return"unknown"===e.status?{state:"unknown",text:`Couldn't read the Next.js version: ${i(e.reason??"no reason given")}${t}`}:"error"===e.status?{state:"warn",text:`The last check failed: ${i(e.reason??"no reason given")}${t}`}:null}])}]})();
+
+//# sourceMappingURL=src_lib_18wgdeemqm6gg._.js.map

package/server/.next/server/chunks/src_lib_1en6omqx66g9d._.js

@@ -0,0 +1,15 @@
+(()=>{"use strict";module.exports=[220642,765359,e=>{var t=e.i(218331);let a=e=>`${e} hari`,r=(e,t)=>0>Number(e)?`${t} udah habis.`:`${t} habis dalam ${a(e)}.`,i={"the job reported a failure":"job-nya lapor gagal","started but didn't finish":"udah mulai tapi nggak selesai","never pinged":"belum pernah ping","no ping in time":"nggak ada ping tepat waktu"},n={critical:"kritis",high:"tinggi",moderate:"sedang",low:"rendah",unknown:"nggak diketahui"},s={MonitorDown:[[/^(.+): no ping for (\d+ (?:min|h|days?))\.$/,(e,t,a)=>`${t}: nggak ada ping selama ${a.replace(/^(\d+) min$/,"$1 menit").replace(/^(\d+) h$/,"$1 jam").replace(/^(\d+) days?$/,"$1 hari")}.`],[/^(.+): (the job reported a failure|started but didn't finish|never pinged|no ping in time)\.$/,(e,t,a)=>`${t}: ${i[a]}.`],[/^(.+) failed its check \((.*)\) on (\d+) consecutive checks\.$/,(e,t,a,r)=>`${t}: ${r} cek gagal berturut-turut (${a}).`],[/^(.+) returned no answer on (\d+) consecutive checks\.$/,(e,t,a)=>`${t}: ${a} cek gagal berturut-turut (nggak ada jawaban).`],[/^(.+) returned (HTTP \d+) on (\d+) consecutive checks\.$/,(e,t,a,r)=>`${t}: ${r} cek gagal berturut-turut (${a}).`],[/^(.+) answers again\.$/,(e,t)=>`${t} udah jawab lagi.`],[/^(\S+) moved to (\S+); MonitorDomainMoved takes over\.$/,(e,t,a)=>`${t} pindah ke ${a}; MonitorDomainMoved yang ambil alih.`]],MonitorDomainMoved:[[/^(\S+) is no longer a domain of (.+); production is on (\S+)\.$/,(e,t,a,r)=>`${t} udah bukan domain ${a}; production sekarang di ${r}.`],[/^The monitor checks (\S+), a domain of (.+)\.$/,(e,t,a)=>`Monitor ngecek ${t}, domain ${a}.`]],CollectorStale:[[/^The collector hasn't finished a run yet\.$/,()=>"Collector belum pernah selesai jalan."],[/^The last minute run finished ([\d,]+) min ago\.$/,(e,t)=>`Collector terakhir selesai jalan ${t} menit lalu.`]],HighLatency:[[/^p95 ([\d,]+) ms over the last 10 minutes \(limit ([\d,]+) ms\)\.$/,(e,t,a)=>`p95 ${t} ms selama 10 menit terakhir (batas ${a} ms).`]],DeploymentFailed:[[/^Production deployment \(no commit\) failed\.$/,()=>"Deploy production (tanpa commit) gagal."],[/^Production deployment (\S+) failed\.$/,(e,t)=>`Deploy production ${t} gagal.`]],DatabasePaused:[[/^Supabase project (.+) is paused\.$/,(e,t)=>`Project Supabase ${t} lagi di-pause.`]],CertExpiringSoon:[[/^The TLS certificate of (.+) expires in (-?\d+) days?\.$/,(e,t,a)=>r(a,`Sertifikat TLS ${t}`)]],DomainExpiringSoon:[[/^(.+) expires in (-?\d+) days?\.$/,(e,t,a)=>r(a,t)]],StorageAlmostFull:[[/^(.+) uses ([\d,]+) MB of ([\d,]+) MB \(([\d,]+)%\)\.$/,(e,t,a,r,i)=>`${t} pakai ${a} MB dari ${r} MB (${i}%).`]],NeonComputeHigh:[[/^(.+) used ([\d,]+) of ([\d,]+) CU-hours this month\.$/,(e,t,a,r)=>`${t} udah pakai ${a} dari ${r} CU-hours bulan ini.`]],FirestoreQuotaHigh:[[/^(.+) hit a Firestore quota \(RESOURCE_EXHAUSTED\)\.$/,(e,t)=>`${t} kena kuota Firestore (RESOURCE_EXHAUSTED).`],[/^(.+) read ([\d,]+) of ([\d,]+) documents today \(([\d,]+)%\)\.$/,(e,t,a,r,i)=>`${t} udah baca ${a} dari ${r} dokumen hari ini (${i}%).`]],AutoPauseRisk:[[/^No API traffic for (\d+) days?\. Supabase pauses free projects after about 7 days\.$/,(e,t)=>`Nggak ada traffic API selama ${a(t)}. Supabase nge-pause project free setelah sekitar 7 hari.`]],DnsProxiedToVercel:[[/^(.+) points to Vercel through the Cloudflare proxy\. Vercel recommends DNS only\.$/,(e,t)=>`${t} ngarah ke Vercel lewat proxy Cloudflare. Vercel nyaranin DNS only.`]],DbQuotaHigh:[[/^(.+): (.+) at ([\d,]+)% of the free plan\.$/,(e,t,a,r)=>`${t}: ${a.replace(/^Rows read/,"baris dibaca").replace(/^Rows written/,"baris ditulis").replace(/^Commands/,"command").replace(/^usage$/,"pemakaian").replace(/ today\b/," hari ini").replace(/\bof ([^ ]+(?: [A-Z]+)?)\b/,"dari $1").replace(/ this month\b/," bulan ini").replace(/\(account\)/,"(akun)")} udah ${r}% dari kuota gratis.`]],ComputeHigh:[[/^(.+) compute is back under the limits\.$/,(e,t)=>`Compute ${t} udah balik di bawah batas.`],[/^(.+): ((?:CPU|RAM|disk|connections) .+)\.$/,(e,t,a)=>`${t}: ${a.replace(/ for (\d+) min/g," selama $1 menit").replace(/\(limit /g,"(batas ").replace(/\bconnections (\d+) of (\d+)/g,"koneksi $1 dari $2")}.`]],CredentialExpiring:[[/^Google Drive access was removed \(invalid_grant\)\. Reconnect it\.$/,()=>"Akses Google Drive dicabut (invalid_grant). Sambungin lagi ya."],[/^The (\S+) credential (.+) has expired\.$/,(e,t,a)=>`Credential ${t} ${a} udah kedaluwarsa.`],[/^The (\S+) credential (.+) expires in (-?\d+) days?\.$/,(e,t,a,i)=>r(i,`Credential ${t} ${a}`)]],VulnerableDependency:[[/^(.+) has no moderate, high or critical dependency advisories\.$/,(e,t)=>`${t} nggak punya advisory dependency sedang, tinggi atau kritis.`],[/^(.+) has no high or critical dependency advisories\.$/,(e,t)=>`${t} nggak punya advisory dependency tinggi atau kritis.`],[/^(\d+) vulnerable packages? \(([^)]*)\): (.*)$/,(e,t,a,r)=>`${t} paket rentan (${a.replace(/\b(critical|high|moderate|low|unknown)\b/g,e=>n[e])}): ${r.replace(/ \(no fix yet\)/g," (belum ada fix)").replace(/, \+(\d+) more\.$/,", +$1 lagi.")}`]],FrameworkVulnerable:[[/^(.+) runs Next\.js (.+) with no known advisories\.$/,(e,t,a)=>`${t} pakai Next.js ${a} tanpa advisory yang diketahui.`],[/^Next\.js (.+) has (\d+) known vulnerabilit(?:y|ies) \((critical|high|moderate|low|unknown)\), (?:fixed in (\S+)(?: \((one fix needs|some fixes need) Next\.js (\d+)\))?|no fix yet)\.$/,(e,t,a,r,i,s,o)=>`Next.js ${t} punya ${a} kerentanan yang diketahui (${n[r]}), ${i?`udah di-fix di ${i}${s?` (${"one fix needs"===s?"satu fix":"sebagian fix"} butuh Next.js ${o})`:""}`:"belum ada fix"}.`]]};function o(e,t){for(let[a,r]of Object.hasOwn(s,e)?s[e]:[]){let e=a.exec(t);if(e)return r(...e)}return t}e.s(["f",0,o],765359);let l={en:{open:"FIRING",repeat:"REPEAT",resolve:"RESOLVED"},id:{open:"MUNCUL",repeat:"ULANG",resolve:"PULIH"}},d={en:{critical:"critical",warning:"warning",info:"info"},id:{critical:"kritis",warning:"peringatan",info:"info"}},c={en:{firing:"firing",resolved:"resolved",since:"since",open:"Open alerts",more:"more on the Alerts page",causedBy:"caused by",incident:"reports an incident",step:"Next step"},id:{firing:"aktif",resolved:"pulih",since:"sejak",open:"Buka Alerts",more:"lagi di halaman Alerts",causedBy:"gara-gara",incident:"lagi ada insiden",step:"Langkah"}},u=e=>e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;"),p={critical:0,warning:1,info:2};function g(e,t){let a=e.filter(e=>"resolve"!==e.kind).length,r=e.length-a;return[a?`${a} ${c[t].firing}`:"",r?`${r} ${c[t].resolved}`:""].filter(Boolean).join(", ")}function f(e,t,a,r,i,n){let s=[...e].sort((e,t)=>("resolve"===e.kind)-("resolve"===t.kind)||p[e.severity]-p[t.severity]),o=[r],l=r.length+i.length+40;for(let e=0;e<s.length;e++){let r=a(s[e]);if(l+r.length+1>t){o.push(n(s.length-e));break}o.push(r),l+=r.length+1}return o.push(i),o.join("\n").slice(0,t)}let h={en:{CollectorStale:"the watchdog already runs the collector itself every 5 minutes. Check the job on cron-job.org and the latest Vercel deploy.",DomainExpiringSoon:"renew the domain at its registrar; Watchbell can't pay for it.",StorageAlmostFull:"delete old data or shorten retention in that database; the free tier can't add storage.",NeonComputeHigh:"cut queries or make Neon auto-suspend sooner; the quota resets at the start of the month.",FirestoreQuotaHigh:"cut Firestore reads (cache in the app); the quota resets daily.",DbQuotaHigh:"cut queries to that database until its quota resets.",ComputeHigh:"check the Pool card on the Supabase page (idle connections close automatically at 10 of 15); for CPU or disk, look for heavy queries.",DnsProxiedToVercel:"turn off the proxy (orange cloud) for that record in Cloudflare; Vercel needs DNS only.",CredentialExpiring:"create a new token and replace it in Settings → Connections before it expires.",FrameworkVulnerable:"if the app's GitHub repository isn't linked yet, link it on the app page to get an update PR from the office; or update next yourself.",MonitorDomainMoved:"press Update monitor on the Uptime page (or approve the proposal) so the monitor checks the new domain; the app itself is fine."},id:{CollectorStale:"watchdog udah jalanin collector sendiri tiap 5 menit. Cek job di cron-job.org dan deploy terakhir di Vercel.",DomainExpiringSoon:"perpanjang domain di registrar-nya, Watchbell nggak bisa bayar.",StorageAlmostFull:"hapus data lama atau pendekin retensi di database itu, free tier nggak bisa nambah storage.",NeonComputeHigh:"kurangin query atau percepat auto-suspend Neon, kuota reset awal bulan.",FirestoreQuotaHigh:"kurangin read Firestore (cache di app), kuota reset tiap hari.",DbQuotaHigh:"kurangin query ke database itu sampai kuotanya reset.",ComputeHigh:"cek kartu Pool di halaman Supabase (koneksi nganggur ditutup otomatis di 10 dari 15), kalau CPU/disk cari query yang berat.",DnsProxiedToVercel:"matiin proxy (awan oranye) record itu di Cloudflare, Vercel butuh DNS only.",CredentialExpiring:"bikin token baru dan ganti di Settings → Connections sebelum habis.",FrameworkVulnerable:"kalau repo GitHub app-nya belum di-link, link di halaman app biar office bikinin PR update; atau update next sendiri.",MonitorDomainMoved:"pencet Update monitor di halaman Uptime (atau approve usulannya) biar monitor ngecek domain baru; app-nya sendiri aman."}};e.s(["Z",0,d,"l",0,function(e,a,r,i="en"){let n=`${r.replace(/\/+$/,"")}/alerts`,s=c[i],p=e=>`${l[i][e.kind]} \xb7 ${d[i][e.severity]} \xb7 `,m=e=>"id"===i?o(e.ruleKey,e.message):e.message,k=e=>"resolve"===e.kind?null:((e,t="en")=>{let a=Object.hasOwn(h[t],e)?h[t][e]:void 0;return a?`${c[t].step}: ${a}`:null})(e.ruleKey,i),$=e=>[e.causedBy?`${s.causedBy} ${e.causedBy}`:"",e.provider?`${e.provider} ${s.incident}`:""].filter(Boolean).join(" · "),y=e=>`
++${e} ${s.more}`;return{telegram:f(e,4096,e=>`
+<b>${p(e)}${u(e.ruleKey)} \xb7 ${u(e.title)}</b>
+${u(m(e))}${$(e)?`
+<i>${u($(e))}</i>`:""}${k(e)?`
+👉 ${u(k(e))}`:""}
+${s.since} ${(0,t.U)(e.startedAt)} ${(0,t.J)(e.startedAt)}`,`<b>Watchbell</b>: ${g(e,i)} \xb7 ${(0,t.U)(a)} ${(0,t.J)(a)}`,`
+<a href="${u(n)}">${s.open}</a>`,y),discord:f(e,2e3,e=>`
+**${p(e)}${e.ruleKey} \xb7 ${e.title.replace(/[*_`~|\[\]<>]/g,"")}**
+${m(e).replace(/[*_`~|\[\]<>]/g,"")}${$(e)?`
+_${$(e)}_`:""}${k(e)?`
+👉 ${k(e)}`:""}`,`**Watchbell**: ${g(e,i)} \xb7 ${(0,t.U)(a)} ${(0,t.J)(a)}`,`
+${n}`,y)}},"H",0,u],220642)},895625,e=>{var t=e.i(971724),a=e.i(105954),r=e.i(140561),i=e.i(600205),n=e.i(77193);let s=t.z.object({COLLECTOR_SECRET:a.z.string().min(32),CRON_SECRET:a.z.string().min(16),QSTASH_CURRENT_SIGNING_KEY:a.z.string().min(10),QSTASH_NEXT_SIGNING_KEY:a.z.string().min(10)}),o=s.extend({QSTASH_CURRENT_SIGNING_KEY:r.z.union([i.z.literal(""),a.z.string().min(10)]).default(""),QSTASH_NEXT_SIGNING_KEY:r.z.union([i.z.literal(""),a.z.string().min(10)]).default("")}),l=!1;e.s(["f",0,function(){try{var e=process.env;let t=("selfhost"===(0,n.c)(e)?o:s).safeParse(e);if(!t.success)throw Error(`Missing or invalid scheduler settings: ${t.error.issues.map(e=>e.path.join(".")).join(", ")}`);return t.data}catch(e){return l||(l=!0,console.warn(e instanceof Error?e.message:"Missing or invalid scheduler settings")),null}}])},629955,11827,e=>{var t=e.i(875225),a=e.i(349129),r=e.i(924924),i=e.i(618916),n=e.i(921991),s=e.i(656083),o=e.i(472832);let l="Pause requested · ";function d(e,t){if(!e.keep||"ACTIVE_HEALTHY"!==e.status)return!1;let a=e.lastTraffic??e.trackedSince;return t.getTime()-a.getTime()>=432e6}function c(e,t){return e.autoRestore?"INACTIVE"!==e.status?{act:!1,reason:"not-paused"}:e.accessDenied?{act:!1,reason:"denied"}:e.lastAutoRestoreAt&&t.getTime()-e.lastAutoRestoreAt.getTime()<216e5?{act:!1,reason:"too-soon"}:e.slotsLeft<=0?{act:!1,reason:"no-slot"}:{act:!0}:{act:!1,reason:"off"}}e.s(["B",0,l,"F",0,c,"v",0,d],11827);var u=e.i(326003),p=e.i(843448),g=e.i(547499),f=e.i(628448),h=e.i(342833);async function m(e){let a=await (0,r.f)().select({data:i.snapshots.data}).from(i.resources).innerJoin(i.snapshots,(0,t.u)(i.snapshots.resourceId,i.resources.id)).where((0,t.b)((0,t.u)(i.resources.accountId,e),(0,t.u)(i.resources.kind,"supabase_project"))),n=new Map;for(let{data:e}of a){let t=(0,u.k)(u.B,e);t.orgSlug&&void 0!==t.freeOrg&&n.set(t.orgSlug,t.freeOrg)}return n}let k=e=>`${e} day${1===e?"":"s"}`,$=e=>e instanceof Error?e.name:"unknown";async function y(e,a,n){try{let s=await (0,r.f)().select({k:i.keepActive,r:i.resources,s:i.snapshots,a:i.accounts}).from(i.keepActive).innerJoin(i.resources,(0,t.u)(i.resources.id,i.keepActive.resourceId)).innerJoin(i.accounts,(0,t.u)(i.accounts.id,i.resources.accountId)).leftJoin(i.snapshots,(0,t.u)(i.snapshots.resourceId,i.resources.id)).where((0,t.b)((0,t.u)(i.keepActive.keep,!0),(0,t.u)(i.resources.kind,"supabase_project"),(0,t.u)(i.resources.monitored,!0),(0,t.M)(i.resources.goneAt),(0,t.u)(i.accounts.status,"ok"))).limit(100),o=(0,g.f)().OPS_ENCRYPTION_KEY;for(let[t,{k:r,r:i,s:l,a:d}]of s.entries()){let c=a-Date.now()-500;if(c<250)return void n.push(`keep-active: ${s.length-t} left for the next run, time budget used`);if(!(r.lastKeepAliveAt&&e.getTime()-r.lastKeepAliveAt.getTime()<72e6))try{await w(i,l,d,e,o,c,n)}catch(e){console.warn("keep-active failed:",$(e)),n.push(`keep-active/${i.name}: ${$(e)}`)}}}catch(e){console.warn("keep-active failed:",$(e)),n.push(`keep-active: ${$(e)}`)}}async function w(e,a,o,l,c,g,m){let $=(0,u.k)(u.B,a?.data),y=$.lastTrafficAt?new Date($.lastTrafficAt):$.trafficAt?new Date(new Date($.trafficAt).getTime()-6048e5):null;if(!d({status:$.status??"",keep:!0,lastTraffic:y,trackedSince:e.firstSeenAt},l))return;let w=Math.floor((l.getTime()-(y??e.firstSeenAt).getTime())/864e5),v=(0,n.V)({ciphertext:o.credentialCiphertext,iv:o.credentialIv},c);if(!v)return void m.push(`keep-active/${o.label}: credential can't be read`);let b=await (0,h.i)(v,e.externalId,{timeoutMs:Math.min(5e3,g)});if(b.ok)await (0,r.f)().update(i.keepActive).set({lastKeepAliveAt:l}).where((0,t.u)(i.keepActive.resourceId,e.id)),await (0,s.f)([{at:l,type:"action",kind:"ok",resourceId:e.id,actorUserId:null,message:`Keep-alive: sent to ${e.name} (no API traffic for ${k(w)})`,detail:null}]);else{let t=Math.max(1,p.e-w);await (0,s.f)([{at:l,type:"action",kind:"warn",resourceId:e.id,actorUserId:null,reason:"KeepAliveFailed",message:`Keep-alive failed for ${e.name}; it may pause in about ${k(t)}`,detail:"scope"===b.kind?"This token can't run the read-only query (Database read).":(0,f.S)(b.error)}]),m.push(`keep-active/${e.name}: ${b.error}`)}}async function v(e){let[n]=await (0,r.f)().select({at:i.events.at}).from(i.events).where((0,t.b)((0,t.u)(i.events.reason,"Action"),(0,t.u)(i.events.resourceId,e),(0,t.u)(i.events.type,"action"),(0,t.y)(i.events.kind,["ok","err"]),(0,t.E)(i.events.actorUserId),(0,t.D)(i.events.message,`${l}%`))).orderBy((0,a.A)(i.events.at)).limit(1);return n?.at??null}async function b(){return(await (0,r.f)().select({id:i.keepActive.resourceId}).from(i.keepActive).where((0,t.u)(i.keepActive.autoRestore,!0)).limit(1)).length>0}async function A(e,a,l=1/0){let d=a.filter(e=>!!e.resourceId&&"INACTIVE"===e.status),u=()=>l-Date.now()-500;if(!d.length||250>u())return;let k=await (0,r.f)().select({k:i.keepActive,id:i.resources.id,name:i.resources.name,ref:i.resources.externalId,accountId:i.resources.accountId,label:i.accounts.label,lastTestAt:i.accounts.lastTestAt,ciphertext:i.accounts.credentialCiphertext,iv:i.accounts.credentialIv}).from(i.keepActive).innerJoin(i.resources,(0,t.u)(i.resources.id,i.keepActive.resourceId)).innerJoin(i.accounts,(0,t.u)(i.accounts.id,i.resources.accountId)).where((0,t.b)((0,t.u)(i.keepActive.autoRestore,!0),(0,t.y)(i.keepActive.resourceId,d.map(e=>e.resourceId)),(0,t.u)(i.resources.kind,"supabase_project"),(0,t.M)(i.resources.goneAt)));if(!k.length)return;let y=await (0,o.f)([...new Set(k.map(e=>e.accountId))]),w=new Map,b=new Map;for(let l of k)try{let d=a.filter(e=>e.accountId===l.accountId),k=d.find(e=>e.resourceId===l.id)?.orgSlug??"";if(!w.has(l.accountId)){let e=await m(l.accountId);w.set(l.accountId,e),b.set(l.accountId,(0,p._)(d.map(t=>({status:t.status,freeOrg:e.get(t.orgSlug??"")??null}))).left)}let $=!1===w.get(l.accountId).get(k),A=$?1/0:b.get(l.accountId),I=y.get(l.accountId),S=Math.max(l.k.updatedAt.getTime(),l.lastTestAt?.getTime()??0),T=I?.write==="denied"&&new Date(I.at).getTime()>S,x=c({status:"INACTIVE",autoRestore:!0,lastAutoRestoreAt:l.k.lastAutoRestoreAt,slotsLeft:A,accessDenied:T},e);if(!x.act){"no-slot"===x.reason&&await (0,s.f)([{at:e,type:"action",kind:"info",resourceId:l.id,actorUserId:null,reason:"AutoRestoreWaits",message:`Auto-restore: ${l.name} waits, account ${l.label} has no free slot`,detail:"Pause another project in this account, or restore it by hand once a slot is free."}]);continue}let D=await v(l.id);if(D&&D.getTime()>l.k.updatedAt.getTime())continue;let C=u();if(C<250)return;await (0,r.f)().update(i.keepActive).set({lastAutoRestoreAt:e}).where((0,t.u)(i.keepActive.resourceId,l.id));let E=(0,n.V)({ciphertext:l.ciphertext,iv:l.iv},(0,g.f)().OPS_ENCRYPTION_KEY);if(!E)continue;let j=await (0,h.G)(E,l.ref,{timeoutMs:Math.min(5e3,C)});j.ok?($||b.set(l.accountId,b.get(l.accountId)-1),await (0,o.y)(l.accountId,"ok"),await (0,s.f)([{at:e,type:"action",kind:"ok",resourceId:l.id,actorUserId:null,message:`Auto-restore: restoring ${l.name}`,detail:null}])):("scope"===j.kind&&await (0,o.y)(l.accountId,"denied"),await (0,s.f)([{at:e,type:"action",kind:"err",resourceId:l.id,actorUserId:null,message:`Auto-restore: ${l.name} couldn't be restored`,detail:"scope"===j.kind?`${(0,f.b)("supabase",{})} Auto-restore stops until then.`:(0,f.S)(j.error)}]))}catch(e){console.warn("auto-restore failed:",$(e))}}async function I(e,a,n=o.W,s=new Date){let l=await (0,o.q)(e.id,"keep-alive",a);if(l)return{ok:!1,error:l};let d=await (0,o.p)(a,"supabase_project");if(!d)return{ok:!1,error:"This project isn't watched any more, or its credential can't be read."};let[c]=await (0,r.f)().select({last:i.keepActive.lastKeepAliveAt}).from(i.keepActive).where((0,t.u)(i.keepActive.resourceId,a)).limit(1);if(c?.last&&s.getTime()-c.last.getTime()<72e6)return n({done:!1,message:"A keep-alive was already sent in the last 20 hours."},e,d.account.id);let u=d.resource.name,p=await (0,h.i)(d.token,d.resource.externalId,{timeoutMs:5e3});return p.ok&&await (0,r.f)().insert(i.keepActive).values({resourceId:a,lastKeepAliveAt:s}).onConflictDoUpdate({target:i.keepActive.resourceId,set:{lastKeepAliveAt:s}}),n(p.ok?{done:!0,message:`Keep-alive sent to ${u}.`,audit:{message:`Keep-alive sent \xb7 ${u}`,resourceId:a}}:{done:!1,failed:{ok:!1,kind:p.kind,error:"scope"===p.kind?"This token can't run the read-only query (Database read).":p.error,...p.status?{status:p.status}:{}},audit:{message:`Keep-alive failed \xb7 ${u}`,resourceId:a}},e,d.account.id)}e.s(["m",0,m,"z",0,A,"g",0,b,"v",0,I,"V",0,y,"G",0,function(e,t,a){return!1===t.get(a)?1/0:(0,p._)(e.map(e=>({status:e.status,freeOrg:t.get(e.orgSlug)??null}))).left}],629955)},483100,e=>{var t=e.i(875225),a=e.i(349129),r=e.i(518899),i=e.i(924924),n=e.i(618916),s=e.i(220642),o=e.i(921991),l=e.i(656083),d=e.i(209576),c=e.i(111970),u=e.i(762504),p=e.i(547499),g=e.i(224382),f=e.i(600273),h=e.i(968068),m=e.i(695811),k=e.i(633974),$=e.i(76012),y=e.i(298397),w=e.i(218331),v=e.i(146394);let b="digest.lastSentDay",A="digest.state";async function I(e){let[a]=await (0,i.f)().select().from(n.channels).where((0,t.u)(n.channels.kind,e)).limit(1);if(!a)return null;try{return{row:a,config:JSON.parse((0,o.K)({ciphertext:a.configCiphertext,iv:a.configIv},(0,p.f)().OPS_ENCRYPTION_KEY))}}catch{return null}}async function S(){let e=(0,h.f)(),[t,a]=await Promise.all([I("telegram"),I("discord")]),r=new Set;return e.telegramToken&&t?.row.enabled&&t.config?.chatId&&r.add("telegram"),a?.row.enabled&&a.config?.url&&r.add("discord"),{send:(r,i)=>"telegram"===r?(0,$.I)(e.telegramToken,t.config.chatId,i):(0,g.f)(a.config.url,i),configured:r}}async function T(){let e=(0,h.f)().telegramToken;if(!e)return null;let t=await I("telegram");return t?.row.enabled&&t.config?.chatId?{token:e,chatId:t.config.chatId}:null}async function x(){let e=await I("discord");return e?.row.enabled&&e.config?.url?{url:e.config.url}:null}let D=()=>(0,d.f)().catch(()=>y.a);async function C(e,o,l={}){var d;if(o-Date.now()<6e3)return{sent:0,dropped:0};let u=await (0,c.I)(),g=await (0,i.f)().select({a:n.alerts,channels:n.alertRules.channels}).from(n.alerts).innerJoin(n.alertRules,(0,t.u)(n.alertRules.key,n.alerts.ruleKey)).where((0,t.b)((0,t.E)(n.alerts.pending),r.B`(${n.alerts.pending} = 'resolve') = (${n.alerts.resolvedAt} is not null)`,(0,c.s)(u))).orderBy((0,a.M)(n.alerts.pendingSince)).limit(50);if(!g.length)return{sent:0,dropped:0};let f=new Set((await (0,i.f)().update(n.alerts).set({claimedAt:e}).where((d=g.map(e=>e.a.id),(0,t.b)((0,t.y)(n.alerts.id,d),(0,t.E)(n.alerts.pending),(0,t.F)((0,t.M)(n.alerts.claimedAt),(0,t.S)(n.alerts.claimedAt,new Date(e.getTime()-12e4)))))).returning({id:n.alerts.id})).map(e=>e.id)),h=g.filter(e=>f.has(e.a.id));if(!h.length)return{sent:0,dropped:0};let{send:k,configured:$}=l.sender??await S(),w=new Set(h.filter(({a:t})=>"resolve"!==t.pending&&(t.silencedUntilResolved||null!==t.silencedUntil&&t.silencedUntil.getTime()>e.getTime())).map(({a:e})=>e.id)),[v,b]=await Promise.all([D(),(0,m.B)()]),A=new Set;for(let a of["telegram","discord"]){if(!$.has(a))continue;let r=h.filter(e=>e.channels.includes(a)&&!w.has(e.a.id));if(!r.length)continue;let o=r.map(({a:e})=>{let t=(0,y.o)(e,v);return{kind:e.pending,ruleKey:e.ruleKey,severity:e.severity,title:t.title,message:t.message,startedAt:e.startedAt,causedBy:t.causedBy,provider:e.providerIncident}}),l=(0,s.l)(o,e,(0,p.f)().SITE_URL,b[a]),d=await k(a,(0,y.G)("telegram"===a?l.telegram:l.discord));await (0,i.f)().update(n.channels).set(d.ok?{lastSentAt:e,lastError:null}:{lastError:d.error}).where((0,t.u)(n.channels.kind,a)),d.ok&&r.forEach(({a:e})=>A.add(e.id))}let I=0,T=0,x=[];for(let{a,channels:r}of h){let s=r.some(e=>$.has(e)),o=null!==a.pendingSince&&e.getTime()-a.pendingSince.getTime()>18e5;A.has(a.id)?(I++,await (0,i.f)().update(n.alerts).set({pending:null,pendingSince:null,lastNotifiedAt:e,claimedAt:null,..."open"===a.pending?{notifiedOpen:!0}:{}}).where((0,t.u)(n.alerts.id,a.id))):w.has(a.id)||!s||o?(T++,await (0,i.f)().update(n.alerts).set({pending:null,claimedAt:null}).where((0,t.u)(n.alerts.id,a.id))):x.push(a.id)}return x.length&&await (0,i.f)().update(n.alerts).set({claimedAt:null}).where((0,t.y)(n.alerts.id,x)),{sent:I,dropped:T}}async function E(e){let s=new Date(e.getTime()-864e5),o=await (0,c.I)(),l=r.B`case ${n.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`,[d,p,g,f,h]=await Promise.all([(0,i.f)().select({ruleKey:n.alerts.ruleKey,severity:n.alerts.severity,title:n.alerts.title,message:n.alerts.message,resourceId:n.alerts.resourceId,startedAt:n.alerts.startedAt}).from(n.alerts).where((0,t.b)((0,t.M)(n.alerts.resolvedAt),(0,c.s)(o))).orderBy(l,(0,a.A)(n.alerts.startedAt)).limit(50),(0,i.f)().select({n:r.B`count(*)::int`}).from(n.alerts).where((0,t.B)(n.alerts.startedAt,s)),(0,i.f)().select({ruleKey:n.alerts.ruleKey,title:n.alerts.title,resourceId:n.alerts.resourceId,startedAt:n.alerts.startedAt,resolvedAt:n.alerts.resolvedAt}).from(n.alerts).where((0,t.b)((0,t.E)(n.alerts.resolvedAt),(0,t.B)(n.alerts.resolvedAt,s))).orderBy((0,a.A)(n.alerts.resolvedAt)).limit(20),(0,i.f)().select({id:n.resources.id,name:n.resources.name}).from(n.resources).where((0,t.b)((0,t.u)(n.resources.kind,"app"),(0,t.u)(n.resources.monitored,!0),(0,t.M)(n.resources.goneAt))).orderBy(n.resources.name).limit(v.O.apps),(0,u.h)(e)]),m=f.map(e=>e.id),[k,$]=m.length?await Promise.all([(0,i.f)().select({id:n.monitors.resourceId,total:r.B`count(*)::int`,bad:r.B`(count(*) filter (where not ${n.checks.ok}))::int`}).from(n.checks).innerJoin(n.monitors,(0,t.u)(n.monitors.id,n.checks.monitorId)).where((0,t.b)((0,t.y)(n.monitors.resourceId,m),(0,t.B)(n.checks.at,s),(0,t.u)(n.checks.inMaintenance,!1))).groupBy(n.monitors.resourceId),(0,i.f)().select({id:n.storedLogs.resourceId,n:r.B`count(*)::int`}).from(n.storedLogs).where((0,t.b)((0,t.y)(n.storedLogs.resourceId,m),(0,t.B)(n.storedLogs.at,s))).groupBy(n.storedLogs.resourceId)]):[[],[]],w=new Map(k.map(e=>[e.id,e])),b=new Map($.map(e=>[e.id,e.n])),A=await D();return{now:e,opened:p[0]?.n??0,firing:d.map(({resourceId:e,...t})=>{let a=(0,y.o)({...t,resourceId:e,causedBy:null},A);return{...t,title:a.title,message:a.message}}),resolved:g.flatMap(e=>e.resolvedAt?[{ruleKey:e.ruleKey,title:(0,y.o)({title:e.title,message:"",causedBy:null,resourceId:e.resourceId},A).title,took:function(e,t){let a=Math.max(1,Math.round((t.getTime()-e.getTime())/6e4));if(a<60)return`${a} min`;let r=Math.floor(a/60);return r<24?`${r} h ${a%60} min`:`${Math.floor(r/24)} d ${r%24} h`}(e.startedAt,e.resolvedAt)}]:[]),apps:f.map(e=>{let t=w.get(e.id);return{name:e.name,uptime:t&&t.total>0?(t.total-t.bad)/t.total*100:null,errors:b.get(e.id)??0}}),providers:h.filter(e=>"ok"!==e.state).map(e=>({label:e.label,text:e.text}))}}async function j(e,a,r){await (0,i.f)().update(n.channels).set(a.ok?{lastSentAt:r,lastError:null}:{lastError:a.error}).where((0,t.u)(n.channels.kind,e))}async function N(e){let[t,a]=await Promise.all([E(e),(0,m.H)("email")]);return(0,f.J)({...t,siteUrl:(0,p.f)().SITE_URL},a)}async function M(e,a={}){let r=await (0,i.f)().select().from(n.settings).where((0,t.y)(n.settings.key,[b,A])),s=r.find(e=>e.key===b)?.value,o="string"==typeof s?s:null;if(!(0,f.A)(e,o))return;let d=(0,h.f)(),c=await I("email_digest");if(!d.resendKey||!d.digestFrom||!c?.row.enabled||!c.config?.to)return;let{resendKey:u,digestFrom:p}=d,g=c.config.to,m=(0,w.x)(e),$=await (0,f.K)(e,{lastSentDay:o,state:r.find(e=>e.key===A)?.value??null,build:a.build??(()=>N(e)),send:a.send??(e=>(0,k.f)(u,{from:p,to:g,...e,idempotencyKey:`digest-${m}`}))});$.acted&&($.result&&await j("email_digest",$.result,e),$.state?await (0,i.f)().insert(n.settings).values({key:A,value:$.state}).onConflictDoUpdate({target:n.settings.key,set:{value:$.state,updatedAt:e}}):await (0,i.f)().delete(n.settings).where((0,t.u)(n.settings.key,A)),$.sentDay&&await (0,i.f)().insert(n.settings).values({key:b,value:$.sentDay}).onConflictDoUpdate({target:n.settings.key,set:{value:$.sentDay,updatedAt:e}}),$.event&&await (0,l.f)([{type:"system",kind:"warn",message:$.event.message,detail:$.event.detail,resourceId:null,reason:"DigestFailed",at:e}]))}e.s(["q",0,C,"G",0,x,"P",0,j,"J",0,M,"Q",0,T],483100)},472832,628448,e=>{var t=e.i(875225),a=e.i(665044),r=e.i(924924),i=e.i(618916),n=e.i(921991),s=e.i(407602),o=e.i(547499),l=e.i(479301),d=e.i(189104);function c(e,t){return"member"===e?`Too many actions. Try again in ${(0,d.H)(t)}.`:"That was just done. Wait a minute before trying again."}function u(e){let t=e.replace(/\s+/g," ").trim();return t.length>200?`${t.slice(0,199)}…`:t}e.s(["G",0,"This changed since you opened it. Reload and try again.","z",0,c,"b",0,function(e,t){return"supabase"===e?"This token is read-only; replace it with one that has Project admin write.":"cloudflare"===e?'This Cloudflare token can\'t edit DNS; add "Zone → DNS → Edit" to it, or replace it with a token that has it.':"vercel"===e?`This token can't change projects in team ${t.team||"this team"}; replace it with one whose scope includes that team.`:`This API key can't manage project ${t.project||"this project"}; replace it with a personal or organization key, or a key for this project.`},"S",0,u],628448);var p=e.i(593111);let g="access.";async function f(e,a){if(!(0,l.f)(e))return null;let[s]=await (0,r.f)().select({r:i.resources,a:i.accounts}).from(i.resources).innerJoin(i.accounts,(0,t.u)(i.accounts.id,i.resources.accountId)).where((0,t.b)((0,t.u)(i.resources.id,e),(0,t.u)(i.resources.kind,a),(0,t.M)(i.resources.goneAt))).limit(1);if(!s)return null;let d=(0,n.V)({ciphertext:s.a.credentialCiphertext,iv:s.a.credentialIv},(0,o.f)().OPS_ENCRYPTION_KEY);return d?{resource:s.r,account:{id:s.a.id,label:s.a.label,provider:s.a.provider,scopeNote:s.a.scopeNote},token:d}:null}async function h(e,t,a){let r=await (0,p.f)(d.t.providerAction,e);if(!r.allowed)return c("member",r.retryAfter);let i=await (0,p.f)(d.t.actionTarget,`${t}:${a}`);return i.allowed?null:c("target",i.retryAfter)}async function m(e,t,a){let n={write:t,at:new Date().toISOString(),...a?{scope:a}:{}};await (0,r.f)().insert(i.settings).values({key:`${g}${e}`,value:n}).onConflictDoUpdate({target:i.settings.key,set:{value:n,updatedAt:new Date}})}async function k(e){let a=new Map,n=e.filter(l.f);if(0===n.length)return a;for(let e of(await (0,r.f)().select().from(i.settings).where((0,t.y)(i.settings.key,n.map(e=>`${g}${e}`))))){let t=e.value;t&&("ok"===t.write||"denied"===t.write)&&"string"==typeof t.at&&a.set(e.key.slice(g.length),{write:t.write,at:t.at,..."string"==typeof t.scope?{scope:t.scope}:{}})}return a}async function $(e,t,r,i={}){if(!("audit"in e))return{ok:!1,error:e.message};let n="failed"in e?e.failed:null,o="failed"in e?"":e.message,l=n?n.error:"failed"in e?void 0:e.audit.detail;try{await (0,s.f)({kind:n?"err":"ok",message:`${i.auditPrefix??""}${e.audit.message}`,resourceId:e.audit.resourceId,actorUserId:t.userId,...l?{detail:u(l)}:{}})}catch{console.warn("audit event failed")}if(!n||"scope"===n.kind)try{await m(r,n?"denied":"ok")}catch{console.warn("access write failed")}return!1!==i.refresh&&(0,a.refresh)(),n?{ok:!1,error:n.error}:{ok:!0,message:o}}e.s(["W",0,$,"p",0,f,"y",0,m,"q",0,h,"f",0,k],472832)},224382,600273,e=>{var t=e.i(425498),a=e.i(77193);let r=/^https:\/\/(?:(?:canary|ptb)\.)?discord(?:app)?\.com\/api\/webhooks\/\d{5,25}\/[\w-]{20,}$/;async function i(e,n,s={}){let o;if((0,a.W)())return{ok:!1,kind:"config",error:t.Y};if(r.test(e.trim())?null:"Paste the whole webhook URL from Discord.")return{ok:!1,kind:"config",error:"The saved Discord webhook URL isn't valid."};try{o=await (s.fetch??fetch)(e,{method:"POST",headers:{"Content-Type":"application/json"},signal:AbortSignal.timeout(s.timeoutMs??5e3),cache:"no-store",body:JSON.stringify({content:n.slice(0,2e3),username:"Watchbell",allowed_mentions:{parse:[]}})})}catch{return{ok:!1,kind:"transient",error:"Discord didn't answer."}}if(204===o.status||o.ok)return{ok:!0};if(429===o.status){let e=await o.json().catch(()=>null),t=Math.ceil(e?.retry_after??5);return{ok:!1,kind:"transient",retryAfterS:t,error:`Discord asked us to wait ${t} s.`}}return 404===o.status||401===o.status?{ok:!1,kind:"config",error:"Discord says this webhook no longer exists."}:{ok:!1,kind:o.status>=500?"transient":"config",error:`Discord returned an error (${o.status}).`}}e.s(["f",0,i],224382);var n=e.i(220642),s=e.i(765359),o=e.i(218331),l=e.i(195191),d=e.i(298397);function c(e,t){return(0,o.M)(e,t)&&(0,o.z)(e).hour>=7}let u={en:{firing:"firing",opened:"opened",resolved:"resolved",last24:"in the last 24 hours.",stillHead:"Still firing",noFiring:"Nothing is firing.",resolvedHead:"Resolved",noResolved:"Nothing resolved.",appsHead:"Applications (24 h)",providersHead:"Providers",open:"Open alerts",after:"after",up:"up",took:e=>e,noChecks:"no checks",errors:e=>`${e} stored error${1===e?"":"s"}`},id:{firing:"aktif",opened:"baru",resolved:"pulih",last24:"dalam 24 jam terakhir.",stillHead:"Masih aktif",noFiring:"Nggak ada yang aktif.",resolvedHead:"Pulih",noResolved:"Nggak ada yang pulih.",appsHead:"Aplikasi (24 jam)",providersHead:"Provider",open:"Buka Alerts",after:"setelah",up:"aktif",took:e=>e.replace(/\b(\d+) min\b/g,"$1 menit").replace(/\b(\d+) h\b/g,"$1 jam").replace(/\b(\d+) d\b/g,"$1 hari"),noChecks:"belum ada cek",errors:e=>`${e} error tersimpan`}},p={May:"Mei",Aug:"Agu",Oct:"Okt",Dec:"Des"},g=[5,15,30,60];async function f(e,t){let a={acted:!1,state:t.state,sentDay:null,event:null,result:null};if(!c(e,t.lastSentDay))return a;let r=(0,o.x)(e),i=t.state&&t.state.day===r?t.state:null;if(i?.stopped)return{...a,state:i};if(i&&i.attempts>0){let t=(g[i.attempts-1]??g[g.length-1])*6e4;if(i.lastAttemptAt&&e.getTime()-new Date(i.lastAttemptAt).getTime()<t)return{...a,state:i}}i??={day:r,...await t.build(),attempts:0,lastAttemptAt:null,stopped:!1,lastError:null};let n=await t.send({subject:i.subject,html:i.html,text:i.text});if(n.ok)return{acted:!0,state:null,sentDay:r,event:null,result:n};let s=i.attempts+1,l="config"===n.kind||s>=5,d="config"===n.kind?`${n.error}. Fix it and the next digest goes out tomorrow.`:`${n.error} Gave up after ${s} attempts today.`;return{acted:!0,sentDay:null,result:n,state:{...i,attempts:s,lastAttemptAt:e.toISOString(),stopped:l,lastError:n.error},event:l?{message:"Daily digest not sent",detail:d}:null}}e.s(["J",0,function(e,t="en"){let a=u[t],r=`${e.siteUrl.replace(/\/+$/,"")}/alerts`,i=((e,t)=>{let{day:a,month:r}=(0,o.e)(e);return`${a} ${"id"===t?p[r]??r:r}`})(e.now,t),c=`${e.firing.length} ${a.firing}, ${e.opened} ${a.opened}, ${e.resolved.length} ${a.resolved}`,g=`Watchbell \xb7 ${i} \xb7 ${c}`,f=[...e.apps].sort((e,t)=>(e.uptime??101)-(t.uptime??101)||t.errors-e.errors||e.name.localeCompare(t.name)),h=e.firing.map(e=>`${n.Z[t][e.severity]} \xb7 ${e.ruleKey} \xb7 ${e.title}: ${"id"===t?(0,s.f)(e.ruleKey,e.message):e.message}`),m=e.resolved.map(e=>`${e.ruleKey} \xb7 ${e.title} (${a.after} ${a.took(e.took)})`),k=f.map(e=>`${e.name}: ${null===e.uptime?a.noChecks:`${(0,l.C)(e.uptime)} ${a.up}`}, ${a.errors(e.errors)}`),$=e.providers.map(e=>`${e.label}: ${e.text}`),y=[`Watchbell \xb7 ${i}`,`${c} ${a.last24}`,"",a.stillHead,...h.length?h.map(e=>`- ${e}`):[a.noFiring],"",a.resolvedHead,...m.length?m.map(e=>`- ${e}`):[a.noResolved],...k.length?["",a.appsHead,...k.map(e=>`- ${e}`)]:[],...$.length?["",a.providersHead,...$.map(e=>`- ${e}`)]:[],"",`${a.open}: ${r}`].join("\n"),w=e=>`<h3 style="font:600 14px system-ui,sans-serif;margin:18px 0 6px">${(0,n.H)(e)}</h3>`,v=(e,t)=>e.length?`<ul style="margin:0;padding-left:18px">${e.map(e=>`<li style="margin:2px 0">${(0,n.H)(e)}</li>`).join("")}</ul>`:`<p style="margin:0;color:#596170">${(0,n.H)(t)}</p>`,b=['<div style="font:14px/1.5 system-ui,sans-serif;color:#14171f;max-width:560px">',`<h2 style="font:600 16px system-ui,sans-serif;margin:0 0 4px">Watchbell \xb7 ${(0,n.H)(i)}</h2>`,`<p style="margin:0;color:#596170">${(0,n.H)(`${c} ${a.last24}`)}</p>`,w(a.stillHead),v(h,a.noFiring),w(a.resolvedHead),v(m,a.noResolved),...k.length?[w(a.appsHead),v(k,"")]:[],...$.length?[w(a.providersHead),v($,"")]:[],`<p style="margin:18px 0 0"><a href="${(0,n.H)(r).replace(/"/g,"&quot;")}" style="color:#1f45c9">${(0,n.H)(a.open)}</a></p>`,"</div>"].join("");return{subject:(0,d.G)(g),html:(0,d.G)(b),text:(0,d.G)(y)}},"A",0,c,"K",0,f],600273)},968068,e=>{e.s(["f",0,function(e=process.env){let t=e.TELEGRAM_BOT_TOKEN?.trim()??"",a=e.RESEND_API_KEY?.trim()??"",r=e.DIGEST_FROM?.trim()??"";return{telegramToken:/^\d+:[\w-]{20,}$/.test(t)?t:null,resendKey:a.startsWith("re_")?a:null,digestFrom:/<?[^\s<>@]+@[^\s<>@]+\.[^\s<>@]+>?$/.test(r)?r:null}}])},695811,e=>{var t=e.i(960049);function a(e){let t=e&&"object"==typeof e?e:null,a=t?t.lang:e,r=e=>{var r;return"string"==typeof(r=t&&e in t?t[e]:a)&&"id"===r.trim().toLowerCase()?"id":"en"};return{telegram:r("telegram"),discord:r("discord"),email:r("email")}}async function r(){try{return a(await (0,t.l)())}catch{return a(null)}}async function i(e="telegram"){return(await r())[e]}e.s(["H",0,i,"B",0,r,"t",0,function(e,t,a){return e[t][a]}])},633974,e=>{var t=e.i(425498),a=e.i(77193);async function r(e,i,n={}){let s;if((0,a.W)())return{ok:!1,kind:"config",error:t.Y};try{s=await (n.fetch??fetch)("https://api.resend.com/emails",{method:"POST",signal:AbortSignal.timeout(5e3),cache:"no-store",headers:{Authorization:`Bearer ${e}`,"Content-Type":"application/json","User-Agent":"OpsConsole/1.0","Idempotency-Key":i.idempotencyKey},body:JSON.stringify({from:i.from,to:[i.to],subject:i.subject,html:i.html,text:i.text})})}catch{return{ok:!1,kind:"transient",error:"Resend didn't answer."}}if(s.ok)return{ok:!0};let o=await s.json().catch(()=>null);return 429===s.status||s.status>=500?{ok:!1,kind:"transient",error:`Resend returned an error (${s.status}).`}:{ok:!1,kind:"config",error:`Resend: ${String(o?.message??s.status).slice(0,200)}`}}e.s(["f",0,r])},76012,e=>{var t=e.i(425498),a=e.i(77193);async function r(e,i,n,s,o=5e3){let l;if((0,a.W)())return{ok:!1,code:null,description:t.Y,retryAfter:null};try{l=await s(`https://api.telegram.org/bot${e}/${i}`,{...n,signal:AbortSignal.timeout(o),cache:"no-store"})}catch{return{ok:!1,code:null,description:"Telegram didn't answer.",retryAfter:null}}let d=await l.json().catch(()=>null);return d?.ok?{ok:!0,result:d.result}:{ok:!1,code:d?.error_code??l.status,description:String(d?.description??`HTTP ${l.status}`).slice(0,200),retryAfter:d?.parameters?.retry_after??null}}async function i(e,t,a,n={}){let s=await r(e,"sendMessage",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({chat_id:t,text:a,parse_mode:"HTML",link_preview_options:{is_disabled:!0},...n.replyMarkup?{reply_markup:n.replyMarkup}:{}})},n.fetch??fetch);return s.ok?{ok:!0}:429===s.code?{ok:!1,kind:"transient",retryAfterS:s.retryAfter??30,error:`Telegram asked us to wait ${s.retryAfter??30} s.`}:null===s.code||s.code>=500?{ok:!1,kind:"transient",error:null===s.code?s.description:`Telegram returned an error (${s.code}).`}:{ok:!1,kind:"config",error:`Telegram: ${s.description}`}}e.s(["I",0,i,"z",0,r])}]})();
+
+//# sourceMappingURL=src_lib_1en6omqx66g9d._.js.map

package/server/.next/server/chunks/src_lib_1iwyh213u9xts._.js

@@ -0,0 +1,6 @@
+(()=>{"use strict";module.exports=[658266,618127,211256,e=>{var t=e.i(278619),n=e.i(959408),r=e.i(867274),a=e.i(413230),s=e.i(7494),i=e.i(250474),o=e.i(90801),l=e.i(32391);let u=["next","eslint-config-next"],d={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",LOW:"low",UNKNOWN:"unknown"};function c(e,t){if(!e||!(0,l.C)(e))return null;let n=t.map(e=>e.fixed).filter(t=>!!t&&(0,l.C)(t)&&(0,i.f)(t,e)>0);if(!n.length)return null;let r=n.filter(t=>(0,o.J)(e,t));return(r.length?r:n).reduce((e,t)=>(0,i.f)(t,e)>0?t:e)}function p(e,t){let n=c(e,t),r=n?t.map(e=>e.fixed).filter(e=>!!e&&(0,l.C)(e)&&(0,i.f)(e,n)>0):[],a=r.reduce((e,t)=>null===e||(0,i.f)(t,e)>0?t:e,null),o=a?` (${1===r.length?"one fix needs":"some fixes need"} Next.js ${a.split(".")[0]})`:"";return`Next.js ${e??"(unknown version)"} has ${(0,s.q)(t.length)} (${(0,s.N)(t).toLowerCase()}), ${n?`fixed in ${n}${o}`:"no fix yet"}.`}e.s(["P",0,p,"p",0,function(e){if(!e||"vulnerable"!==e.status||!e.findings.length||!e.version)return null;let t=c(e.version,e.findings);if(!t)return null;let n=d[(0,s.N)(e.findings)],r=[...new Set(e.findings.map(e=>e.id))],a=[...new Set(e.findings.flatMap(e=>e.cve?[e.cve]:[]))];return{from:e.version,to:t,upgrades:[{package:"next",to:t,vulnIds:r,cves:a,severity:n},{package:"eslint-config-next",to:t,vulnIds:[],cves:[],severity:n,companionOf:"next"}],installed:new Map(u.map(t=>[t,e.version]))}},"F",0,function(e){let t=e.find(e=>"next"===e.package&&!e.companionOf);return!t||e.some(e=>"eslint-config-next"===e.package)?e:[...e,{package:"eslint-config-next",to:t.to,vulnIds:[],cves:[],severity:t.severity,companionOf:"next"}]}],618127);let f=e=>Math.round(e).toLocaleString("en-US"),m=(e,t)=>Math.floor((e.getTime()-t.getTime())/864e5),h=(e,t)=>`${e} ${t}${1===e?"":"s"}`,g=e=>{try{let t=new URL(e);return`${t.host}${t.pathname}`}catch{return e}},y=e=>{try{return new URL(e).host}catch{return e}},k=e=>{try{return new URL(e).pathname}catch{return"/"}},v="Down · ",w=(e,t,n)=>({rule:e,subject:t,status:"unknown",resourceId:null,accountId:null,title:t,message:"",provider:null,sampleAt:null,...n}),b=e=>"firestore"===e.provider?"firebase":"d1"===e.provider?"cloudflare":e.provider,$=new Set(["turso","upstash","d1"]),A={MonitorDown:(e,t)=>e.monitors.map(e=>{let r=w("MonitorDown",e.id,{resourceId:e.appId,title:`${e.appName} ${"heartbeat"===e.kind?e.url:k(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt}),a=t??3;if("heartbeat"===e.kind){let t;return{...r,status:"err"===e.state?"firing":"ok"===e.state?"ok":"unknown",message:`${e.appName} \xb7 ${e.url}: ${t=e.lastError,t?.startsWith(v)?t.slice(v.length):"no ping in time"}.`}}return e.movedTo?{...r,status:"ok",message:`${y(e.url)} moved to ${e.movedTo}; MonitorDomainMoved takes over.`}:e.failStreak>=a?{...r,status:"firing",message:(0,n.H)(e)?`${g(e.url)} failed its check (${(0,n.H)(e)}) on ${a} consecutive checks.`:`${g(e.url)} returned ${e.lastStatus?`HTTP ${e.lastStatus}`:"no answer"} on ${a} consecutive checks.`}:{...r,status:0===e.failStreak&&e.lastCheckedAt?"ok":"unknown",message:`${g(e.url)} answers again.`}}),MonitorDomainMoved:e=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let t=w("MonitorDomainMoved",e.id,{resourceId:e.appId,title:`${e.appName} ${k(e.url)}`,provider:"vercel"});return e.movedTo?{...t,status:"firing",message:`${y(e.url)} is no longer a domain of ${e.appName}; production is on ${e.movedTo}.`}:{...t,status:"ok",message:`The monitor checks ${y(e.url)}, a domain of ${e.appName}.`}}),CollectorStale:(e,t)=>{let n=e.lastMinuteRunAt;return[w("CollectorStale","collector",{status:!n||e.now.getTime()-n.getTime()>(t??5)*6e4?"firing":"ok",title:"collector",message:n?`The last minute run finished ${f((e.now.getTime()-n.getTime())/6e4)} min ago.`:"The collector hasn't finished a run yet."})]},HighLatency:(e,t)=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let n=w("HighLatency",e.id,{resourceId:e.appId,title:`${e.appName} ${k(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt});if(e.checksLast10<5||null===e.p95Last10)return n;let r=t??1500;return{...n,status:e.p95Last10>r?"firing":"ok",message:`p95 ${f(e.p95Last10)} ms over the last 10 minutes (limit ${f(r)} ms).`}}),DeploymentFailed:e=>e.apps.map(e=>{let t=w("DeploymentFailed",e.id,{resourceId:e.id,title:e.name,provider:"vercel"}),n=e.latestProduction;return n?"error"===n.state?{...t,status:"firing",message:`Production deployment ${n.sha?n.sha.slice(0,7):"(no commit)"} failed.`}:{...t,status:"building"===n.state?"unknown":"ok"}:{...t,status:"ok"}}),DatabasePaused:e=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(e=>w("DatabasePaused",e.id,{resourceId:e.id,title:e.name,provider:"supabase",status:"unknown"===e.state?"unknown":"paused"===e.state?"firing":"ok",message:`Supabase project ${e.name} is paused.`})),CertExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("CertExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.tlsNotAfter)return r;let a=m(n.tlsNotAfter,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:`The TLS certificate of ${n.name} expires in ${h(a,"day")}.`}}),DomainExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("DomainExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.expiresAt)return r;let a=m(n.expiresAt,e.now);return{...r,status:a<(t??30)?"firing":"ok",message:`${n.name} expires in ${h(a,"day")}.`}}),StorageAlmostFull:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"!==e.provider).map(e=>{let n=w("StorageAlmostFull",e.id,{resourceId:e.id,title:e.name,provider:b(e)});if(null===e.sizeBytes||!e.sizeLimitBytes)return n;let r=e.sizeBytes/e.sizeLimitBytes*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} uses ${f(e.sizeBytes/1e6)} MB of ${f(e.sizeLimitBytes/1e6)} MB (${f(r)}%).`}}),NeonComputeHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"neon"===e.provider).map(e=>{let n=w("NeonComputeHigh",e.id,{resourceId:e.id,title:e.name,provider:"neon"});return null===e.cuHours?n:{...n,status:e.cuHours>(t??80)?"firing":"ok",message:`${e.name} used ${f(e.cuHours)} of ${f(e.cuLimit??100)} CU-hours this month.`}}),FirestoreQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"===e.provider).map(e=>{let n=w("FirestoreQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:"firebase"});if(e.quotaExhausted)return{...n,status:"firing",message:`${e.name} hit a Firestore quota (RESOURCE_EXHAUSTED).`};if(null===e.readsToday||!e.readsLimit)return!1===e.quotaExhausted?{...n,status:"ok"}:n;let r=e.readsToday/e.readsLimit*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} read ${f(e.readsToday)} of ${f(e.readsLimit)} documents today (${f(r)}%).`}}),AutoPauseRisk:(e,t)=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(n=>{let r=w("AutoPauseRisk",n.id,{resourceId:n.id,title:n.name,provider:"supabase"});if("paused"===n.state)return{...r,status:"ok"};if(!n.lastApiAt)return r;let a=Math.floor((e.now.getTime()-n.lastApiAt.getTime())/864e5);return{...r,status:a>=(t??4)?"firing":"ok",message:`No API traffic for ${h(a,"day")}. Supabase pauses free projects after about 7 days.`}}),DnsProxiedToVercel:e=>e.dns&&e.dns.map(e=>w("DnsProxiedToVercel",e.id,{resourceId:e.resourceId,title:e.name,provider:"cloudflare",status:e.proxied&&e.pointsToVercel?"firing":"ok",message:`${e.name} points to Vercel through the Cloudflare proxy. Vercel recommends DNS only.`})),DbQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>$.has(e.provider)).map(e=>{let n=w("DbQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:b(e)});return null==e.quotaPct?n:{...n,status:e.quotaPct>(t??80)?"firing":"ok",message:`${e.name}: ${e.quotaLabel??"usage"} at ${f(e.quotaPct)}% of the free plan.`}}),ComputeHigh:(e,t)=>e.compute?e.compute.map(n=>{let a=w("ComputeHigh",n.id,{resourceId:n.id,title:n.name,provider:"supabase",sampleAt:n.latest?new Date(n.latest.at):null}),s=(0,r.B)(n.latest,(0,r.V)(t),e.now);return null===s?a:{...a,status:s.length?"firing":"ok",message:s.length?`${n.name}: ${s.join(", ")}.`:`${n.name} compute is back under the limits.`}}):null,CredentialExpiring:(e,t)=>e.accounts.map(n=>{let r=w("CredentialExpiring",n.id,{accountId:n.id,title:`${n.provider} \xb7 ${n.label}`,provider:n.provider});if("drive"===n.provider&&"error"===n.status&&n.lastError?.includes("invalid_grant"))return{...r,status:"firing",message:"Google Drive access was removed (invalid_grant). Reconnect it."};if(!n.expiresAt)return{...r,status:"ok"};let a=m(n.expiresAt,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:a<0?`The ${n.provider} credential ${n.label} has expired.`:`The ${n.provider} credential ${n.label} expires in ${h(a,"day")}.`}}),VulnerableDependency:e=>e.deps?e.deps.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("VulnerableDependency",t.appId,{resourceId:t.appId,title:n.name,provider:"github"});if(t.error)return[r];let s=(0,a.g)(t.vulns);return s?[{...r,status:"firing",message:(0,a.L)(t.vulns),..."critical"===s?{severity:"critical"}:{}}]:[{...r,status:"ok",message:`${n.name} has no moderate, high or critical dependency advisories.`}]}):null,FrameworkVulnerable:e=>e.frameworks?e.frameworks.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("FrameworkVulnerable",t.appId,{resourceId:t.appId,title:n.name});return"ok"===t.status?[{...r,status:"ok",message:`${n.name} runs Next.js ${t.version??"(unknown version)"} with no known advisories.`}]:"vulnerable"===t.status&&t.findings.length?[{...r,status:"firing",message:p(t.version,t.findings),..."CRITICAL"===(0,s.N)(t.findings)?{severity:"critical"}:{}}]:[r]}):null};e.s(["f",0,function(e,n,r){let a=[],s=new Set;for(let i of n){if(!i.enabled||r&&!r.includes(i.key)||!t._[i.key])continue;let n=A[i.key](e,i.threshold);n&&(s.add(i.key),a.push(...n))}return{observations:a,evaluated:s}}],658266);let I=["MonitorDown","HighLatency"],S=["telegram","discord"],x=e=>e.channels.some(e=>S.includes(e));function V(e,t){return t.collectorStale&&"CollectorStale"!==e.rule?"CollectorStale":e.resourceId&&I.includes(e.rule)?t.mutedApps.get(e.resourceId)??null:null}let _=(e,t)=>"critical"===t&&"warning"===e?"critical":e,D=(e,t)=>e.silencedUntilResolved||null!==e.silencedUntil&&e.silencedUntil.getTime()>t.getTime(),R=(e,t)=>`${e}|${t}`;e.s(["f",0,function(e,n,r,a,s){let i={open:[],touch:[],resolve:[]},o=new Map(a.map(e=>[e.key,e])),l=new Map(n.map(e=>[R(e.rule,e.subject),e])),u=new Set(e.map(e=>R(e.ruleKey,e.subject))),d=e=>i.resolve.push({id:e.id,pending:e.notifiedOpen?"resolve":null});for(let n of e){let e=o.get(n.ruleKey),a=l.get(R(n.ruleKey,n.subject));if(!e||!e.enabled){i.resolve.push({id:n.id,pending:null});continue}if(!r.has(n.ruleKey))continue;if(!a){i.resolve.push({id:n.id,pending:null});continue}if("unknown"===a.status)continue;let u=a.provider?s.incidents.get(a.provider)??null:null;if("firing"===a.status){let t=V(a,s),r=n.notifiedOpen&&null!==n.lastNotifiedAt&&s.now.getTime()-n.lastNotifiedAt.getTime()>=216e5,o={id:n.id,okStreak:0,lastSampleAt:a.sampleAt??n.lastSampleAt,lastSeenAt:s.now,message:a.message,causedBy:t,providerIncident:u},l=!n.notifiedOpen&&(!n.pendingSince||s.now.getTime()-n.pendingSince.getTime()>=216e5);(r||l)&&!D(n,s.now)&&!t&&null===n.pending&&x(e)&&(o.pending=r?"repeat":"open"),i.touch.push(o);continue}if(!t._[n.ruleKey].sampled||null===a.sampleAt){d(n);continue}if(!(null===n.lastSampleAt||a.sampleAt.getTime()>n.lastSampleAt.getTime()))continue;let c=n.okStreak+1;c>=2?d(n):i.touch.push({id:n.id,okStreak:c,lastSampleAt:a.sampleAt})}for(let e of n){if("firing"!==e.status||u.has(R(e.rule,e.subject))||s.maintenance.has(e.subject)||e.resourceId&&s.maintenance.has(e.resourceId))continue;let t=o.get(e.rule);if(!t)continue;let n=V(e,s);i.open.push({ruleKey:e.rule,subject:e.subject,resourceId:e.resourceId,accountId:e.accountId,severity:_(t.severity,e.severity),title:e.title,message:e.message,startedAt:s.now,lastSeenAt:s.now,lastSampleAt:e.sampleAt,causedBy:n,providerIncident:e.provider?s.incidents.get(e.provider)??null:null,pending:n||!x(t)?null:"open"})}return i}],211256)},582748,e=>{var t=e.i(89491),n=e.i(960063),r=e.i(800366),a=e.i(326003),s=e.i(843448),i=e.i(647006),o=e.i(328203);e.s(["d",0,function(e,i){let l={id:e.id,name:e.name,state:e.state,sizeBytes:null,sizeLimitBytes:null,lastApiAt:null,cuHours:null,cuLimit:null,readsToday:null,readsLimit:null,quotaExhausted:null};if("supabase_project"===e.kind){let t=(0,a.k)(a.B,e.data),n=(0,o.Z)(t.lastTrafficAt),r=(0,o.Z)(t.trafficAt),i=n??(r&&!t.trafficError?new Date(r.getTime()-6048e5):null);return{...l,provider:"supabase",sizeBytes:t.sizeBytes??null,sizeLimitBytes:s.R,lastApiAt:i}}if("neon_project"===e.kind){let t=(0,a.k)(a.s,e.data),n=(t.branches??[]).map(e=>e.logicalSize).filter(e=>"number"==typeof e);return{...l,provider:"neon",cuHours:null==t.computeSeconds?null:t.computeSeconds/3600,cuLimit:r.a.cuHours,sizeBytes:n.length?n.reduce((e,t)=>e+t,0):null,sizeLimitBytes:r.a.storageBytes}}if("firestore"===e.kind){let t=(0,a.k)(a.w,e.data),r=(0,o.Z)(t.opsAt),s=null!=t.reads&&r&&r.getTime()>=(0,n.a)(i).getTime()?t.reads:null,u=null!=t.latencyMs||null!=t.pingError;return{...l,provider:"firestore",readsToday:s,readsLimit:n.T.reads,quotaExhausted:u?"RESOURCE_EXHAUSTED"===t.pingReason:null}}if("turso_database"===e.kind){let n=(0,a.k)(a.N,e.data),r=(0,t.u)((0,t.G)(n,i));return{...l,provider:"turso",sizeBytes:n.orgStorageBytes??null,sizeLimitBytes:t.g.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("upstash_redis"===e.kind){let n=(0,a.k)(a.e,e.data),r=(0,t.u)((0,t.$)(n,i));return{...l,provider:"upstash",sizeBytes:n.storageBytes??null,sizeLimitBytes:t.W.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("d1_database"===e.kind){let n=(0,a.k)(a.x,e.data),r=(0,t.u)((0,t.I)(n,i));return{...l,provider:"d1",sizeBytes:n.sizeBytes??null,sizeLimitBytes:t.M.dbBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}return null},"S",0,function(e,t){let n=e.filter(e=>Array.isArray(e.data.records));if(!n.length)return null;let r=e.map(e=>e.name),a=[];for(let e of n){let n=t.filter(t=>(0,o.J)(t.name,r)===e.name.toLowerCase().replace(/\.$/,"")),s=[...new Set(n.flatMap(e=>(0,i.q)(e.data).vercel?.recommendedIps??[]))];for(let t of(0,i.q)(e.data).records){if(!(0,o.l)(t,s))continue;let r=t.name.toLowerCase().replace(/\.$/,""),i=n.find(e=>e.name.toLowerCase().replace(/\.$/,"")===r);a.push({id:`${e.id}:${t.id}`,resourceId:i?.id??e.id,name:t.name,proxied:t.proxied,pointsToVercel:!0})}}return a},"r",0,function(e,t){return e.length||t.length?[...e.map(e=>({id:e.id,name:e.name,tlsNotAfter:null,expiresAt:(0,o.Z)((0,i.q)(e.data).rdap?.expiresAt)})),...t.map(e=>({id:e.id,name:e.name,tlsNotAfter:(0,o.Z)((0,i.q)(e.data).tls?.notAfter),expiresAt:null}))]:null}])},485647,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),a=e.i(924924),s=e.i(618916),i=e.i(582748),o=e.i(794713),l=e.i(662860),u=e.i(764766),d=e.i(433609),c=e.i(800523);async function p(){return(0,a.f)().select({appId:s.links.fromResourceId,dbId:s.links.toResourceId}).from(s.links).where((0,t.u)(s.links.kind,"uses_db")).limit(500)}async function f(e){let f=(0,t.b)((0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt)),[m,h,g,y,k]=await Promise.all([(0,o.d)(),(0,o.D)(),(0,a.f)().select({m:s.monitors,appName:s.resources.name,appMeta:s.resources.meta}).from(s.monitors).innerJoin(s.resources,(0,t.u)(s.resources.id,s.monitors.resourceId)).where((0,t.b)(f,(0,t.u)(s.monitors.paused,!1),(0,t.u)(s.monitors.ownerPaused,!1))),(0,a.f)().select({id:s.resources.id,name:s.resources.name,meta:s.resources.meta}).from(s.resources).where((0,t.b)(f,(0,t.u)(s.resources.kind,"app"))),(0,a.f)().select({id:s.accounts.id,provider:s.accounts.provider,label:s.accounts.label,expiresAt:s.accounts.expiresAt,status:s.accounts.status,lastError:s.accounts.lastError}).from(s.accounts)]),v=g.map(e=>e.m.id),w=v.length?await (0,a.f)().select({id:s.checks.monitorId,n:r.B`count(*)::int`,p95:r.B`percentile_cont(0.95) within group (order by ${s.checks.latencyMs})::float8`}).from(s.checks).where((0,t.b)((0,t.y)(s.checks.monitorId,v),(0,t.B)(s.checks.at,new Date(e.getTime()-6e5)),(0,t.u)(s.checks.inMaintenance,!1))).groupBy(s.checks.monitorId):[],b=y.map(e=>e.id),$=b.length?await (0,a.f)().selectDistinctOn([s.deployments.resourceId],{appId:s.deployments.resourceId,state:s.deployments.state,sha:s.deployments.commitSha,createdAt:s.deployments.createdAtProvider}).from(s.deployments).where((0,t.b)((0,t.y)(s.deployments.resourceId,b),(0,t.u)(s.deployments.target,"production"))).orderBy(s.deployments.resourceId,(0,n.A)(s.deployments.createdAtProvider)):[],A=await (0,a.f)().select({id:s.resources.id,name:s.resources.name,kind:s.resources.kind,state:s.snapshots.state,data:s.snapshots.data}).from(s.resources).innerJoin(s.snapshots,(0,t.u)(s.snapshots.resourceId,s.resources.id)).where((0,t.b)(f,(0,t.y)(s.resources.kind,["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"]))),I=e=>A.filter(t=>t.kind===e),S=A.filter(e=>["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"].includes(e.kind)),x=I("zone"),V=I("domain"),_=await p(),D=await (0,l.Y)().catch(()=>null),R=b.length?await (0,d.a)(b).catch(()=>null):null,M=b.length?await (0,c.F)(b).catch(()=>null):null;return{now:e,lastMinuteRunAt:m,lastAnyRunAt:h,monitors:g.map(({m:e,appName:t,appMeta:n})=>{let r=w.find(t=>t.id===e.id),a="heartbeat"===e.kind;return{id:e.id,appId:e.resourceId,appName:t,url:a?e.name??"heartbeat":e.url,kind:a?"heartbeat":"http",state:e.state,failStreak:e.failStreak,lastStatus:e.lastStatus,lastError:e.lastError,lastCheckedAt:e.lastCheckedAt,p95Last10:r?.p95??null,checksLast10:r?.n??0,movedTo:a?null:(0,u.u)(e.url,{name:t,meta:n},y.filter(t=>t.id!==e.resourceId),{lastError:e.lastError})?.to??null}}),apps:y.map(e=>{let t=$.find(t=>t.appId===e.id);return{id:e.id,name:e.name,latestProduction:t?{state:t.state,sha:t.sha,createdAt:t.createdAt}:null}}),accounts:k,dbs:S.length?S.map(t=>(0,i.d)(t,e)).filter(e=>null!==e):null,domains:(0,i.r)(x,V),dns:(0,i.S)(x,V),links:_,compute:D,deps:R&&R.length?R:null,frameworks:M&&M.length?M:null}}e.s(["f",0,f])},532148,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),a=e.i(924924),s=e.i(618916),i=e.i(278619),o=e.i(658266),l=e.i(211256),u=e.i(275426),d=e.i(154491),c=e.i(485647),p=e.i(739886),f=e.i(111970);let m={vercel:"Vercel",supabase:"Supabase",neon:"Neon",cloudflare:"Cloudflare",firebase:"Firebase",gcp:"Google Cloud"};async function h(){return(await (0,a.f)().select().from(s.alertRules)).filter(e=>(0,i.h)(e.key)).map(e=>({key:e.key,severity:e.severity,threshold:e.threshold,enabled:e.enabled,channels:e.channels}))}async function g(e,n={}){let[r,y,k,v,w,b]=await Promise.all([(0,c.f)(e),h(),(0,a.f)().select().from(s.alerts).where((0,t.M)(s.alerts.resolvedAt)),(0,a.f)().select({provider:s.providerStatus.provider,state:s.providerStatus.state}).from(s.providerStatus),(0,p.f)(),(0,f.I)()]),$=new Map(r.accounts.map(e=>[e.id,e.provider])),A=k.filter(e=>!(0,d.O)(b,e.ruleKey,e.accountId?$.get(e.accountId):null)),I=(0,o.f)(r,y,n.only),S=I.evaluated,x=I.observations.filter(e=>!(0,d.O)(b,e.rule,e.provider)),V=y.find(e=>"CollectorStale"===e.key),_=void 0===r.lastAnyRunAt?r.lastMinuteRunAt:r.lastAnyRunAt,D=!!V?.enabled&&(!_||e.getTime()-_.getTime()>(V.threshold??5)*6e4),R=new Map((r.dbs??[]).filter(e=>"paused"===e.state).map(e=>[e.id,e.name])),M=new Map(r.links.filter(e=>R.has(e.dbId)).map(e=>[e.appId,`DatabasePaused \xb7 ${R.get(e.dbId)}`])),B=new Map(v.filter(e=>"warn"===e.state||"err"===e.state).map(e=>["gcp"===e.provider?"firebase":e.provider,m[e.provider]??e.provider])),T=(0,u.u)(w,r.monitors.map(e=>({id:e.id,appId:e.appId})),e,r.apps.map(e=>e.id)),z=A.filter(e=>(0,i.h)(e.ruleKey)).map(e=>({id:e.id,ruleKey:e.ruleKey,subject:e.subject,okStreak:e.okStreak,lastSampleAt:e.lastSampleAt,silencedUntil:e.silencedUntil,silencedUntilResolved:e.silencedUntilResolved,notifiedOpen:e.notifiedOpen,lastNotifiedAt:e.lastNotifiedAt,pending:e.pending,pendingSince:e.pendingSince})),C=(0,l.f)(z,x,S,y,{now:e,collectorStale:D,mutedApps:M,incidents:B,maintenance:T});return C.open.length||C.touch.length||C.resolve.length?(await (0,a.f)().transaction(async n=>{for(let t of C.open)await n.insert(s.alerts).values({...t,pendingSince:t.pending?e:null}).onConflictDoNothing();for(let r of C.touch){let{id:a,pending:i,...o}=r;await n.update(s.alerts).set({...o,...i?{pending:i,pendingSince:e}:{}}).where((0,t.b)((0,t.u)(s.alerts.id,a),(0,t.M)(s.alerts.resolvedAt)))}for(let r of C.resolve)await n.update(s.alerts).set({resolvedAt:e,pending:r.pending,pendingSince:r.pending?e:null}).where((0,t.b)((0,t.u)(s.alerts.id,r.id),(0,t.M)(s.alerts.resolvedAt)))}),{opened:C.open.length,resolved:C.resolve.length}):{opened:0,resolved:0}}let y=r.B`case ${s.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`;async function k(e=new Set){return(await (0,a.f)().select({a:s.alerts,name:s.resources.name,kind:s.resources.kind}).from(s.alerts).leftJoin(s.resources,(0,t.u)(s.resources.id,s.alerts.resourceId)).where((0,t.b)((0,t.M)(s.alerts.resolvedAt),(0,f.s)(e))).orderBy(y,(0,n.A)(s.alerts.startedAt)).limit(200)).map(({a:e,name:t,kind:n})=>({...e,resourceName:t??null,resourceKind:n??null}))}async function v(){return k(await (0,f.I)())}async function w(e){return(await (0,a.f)().select({id:s.alerts.id,ruleKey:s.alerts.ruleKey,severity:s.alerts.severity,title:s.alerts.title,resourceId:s.alerts.resourceId,startedAt:s.alerts.startedAt,resolvedAt:s.alerts.resolvedAt}).from(s.alerts).where((0,t.b)((0,t.E)(s.alerts.resolvedAt),(0,t.B)(s.alerts.resolvedAt,new Date(e.getTime()-6048e5)))).orderBy((0,n.A)(s.alerts.resolvedAt)).limit(50)).flatMap(e=>e.resolvedAt?[{...e,resolvedAt:e.resolvedAt}]:[])}e.s(["$",0,g,"q",0,k,"I",0,w,"i",0,v])},433609,455037,502240,751762,970465,800523,e=>{var t=e.i(90801),n=e.i(875225),r=e.i(349129),a=e.i(518899),s=e.i(924924),i=e.i(618916),o=e.i(921991),l=e.i(547499),u=e.i(479301),d=e.i(32391),c=e.i(804581),p=e.i(891262),f=e.i(581321),m=e.i(413230),h=e.i(455744),g=e.i(971724),y=e.i(105954),k=e.i(206033),v=e.i(180473);let w=e=>/^[A-Za-z0-9_.-]{1,100}\/[A-Za-z0-9_.-]{1,100}$/.test(e)&&!e.includes(".."),b=e=>e.split("/").map(encodeURIComponent).join("/");async function $(e,t,n,r="application/vnd.github+json"){let a,s=n.timeoutMs??5e3;try{a=await (n.fetch??fetch)(`https://api.github.com${e}`,{headers:{Authorization:`Bearer ${t}`,Accept:r,"X-GitHub-Api-Version":"2022-11-28","User-Agent":"Watchbell"},signal:AbortSignal.timeout(s),cache:"no-store"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`GitHub didn't answer within ${Math.round(s/1e3)} seconds.`:"Couldn't reach GitHub."}}let i=await a.text().catch(()=>"");if(a.ok){let e=null;if(r.endsWith("+json")&&!r.includes(".raw"))try{e=JSON.parse(i)}catch{e=null}return{ok:!0,data:e,text:i,headers:a.headers}}let o=a.status;if(401===o)return{ok:!1,kind:"auth",status:o,error:"GitHub rejected this token (401). It may have expired or been revoked."};if((403===o||429===o)&&("0"===a.headers.get("x-ratelimit-remaining")||429===o)){let e=Number(a.headers.get("x-ratelimit-reset"));return{ok:!1,kind:"transient",status:o,retryAfterS:Number.isFinite(e)&&e>0?Math.max(1,e-Math.floor(Date.now()/1e3)):60,error:"GitHub's rate limit is used up for now. The next run tries again."}}return 403===o?{ok:!1,kind:"scope",status:o,error:"This token can't read that (403). It needs Metadata, Contents and Actions read on the repository."}:404===o?{ok:!1,kind:"missing",status:o,error:"GitHub doesn't show this to the token (404)."}:{ok:!1,kind:"transient",status:o,error:`GitHub returned an error (${o}).`}}let A=g.z.object({id:k.z.number(),name:y.z.string(),full_name:y.z.string(),owner:g.z.object({login:y.z.string()}),default_branch:y.z.string().nullish(),private:v.z.boolean(),archived:v.z.boolean().optional(),html_url:y.z.string().nullish(),pushed_at:y.z.string().nullish()}),I=e=>({ok:!1,kind:"format",error:`GitHub answered ${e} in a format the console doesn't recognise.`});async function S(e,t={}){let n=await $("/user",e,t);return n.ok?g.z.object({login:y.z.string()}).safeParse(n.data).success?{ok:!0,data:{expiresAt:function(e){let t=e.get("github-authentication-token-expiration")?.trim();if(!t)return null;let n=/^(\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})\s*(UTC|Z|[+-]\d{2}:?\d{2})?$/.exec(t);if(!n)return null;let r=n[3]&&"UTC"!==n[3]&&"Z"!==n[3]?n[3].includes(":")?n[3]:`${n[3].slice(0,3)}:${n[3].slice(3)}`:"Z",a=new Date(`${n[1]}T${n[2]}${r}`);return Number.isNaN(a.getTime())?null:a}(n.headers)}}:I("the token check"):n}async function x(e,t={}){let n=[];for(let r=1;r<=3;r++){let a=await $(`/user/repos?per_page=100&page=${r}&sort=pushed&affiliation=owner,collaborator,organization_member`,e,t);if(!a.ok)return a;let s=h.z.array(A).safeParse(a.data);if(!s.success)return I("the repository list");for(let e of s.data){if(!w(e.full_name))continue;let t=e.pushed_at?new Date(e.pushed_at):null;n.push({id:String(e.id),owner:e.owner.login,name:e.name,fullName:e.full_name,defaultBranch:e.default_branch??null,private:e.private,archived:e.archived??!1,htmlUrl:e.html_url??null,pushedAt:t&&!Number.isNaN(t.getTime())?t:null})}if(s.data.length<100)return{ok:!0,data:{repos:n,truncated:!1}}}return{ok:!0,data:{repos:n,truncated:!0}}}async function V(e,t,n={}){if(!w(t))return{ok:!0,data:null};let r=await $(`/repos/${b(t)}/contents/package.json`,e,n,"application/vnd.github.raw+json");if(!r.ok)return"missing"===r.kind?{ok:!0,data:null}:r;if(r.text.length>262144)return{ok:!0,data:null};try{let e=JSON.parse(r.text).name;return{ok:!0,data:"string"==typeof e&&e.trim()&&e.length<=214?e.trim():null}}catch{return{ok:!0,data:null}}}let _=g.z.object({total_count:k.z.number(),workflow_runs:h.z.array(g.z.object({status:y.z.string().nullish(),conclusion:y.z.string().nullish(),name:y.z.string().nullish(),display_title:y.z.string().nullish(),head_branch:y.z.string().nullish(),head_sha:y.z.string().nullish(),html_url:y.z.string().nullish(),run_number:k.z.number().nullish(),updated_at:y.z.string().nullish(),created_at:y.z.string().nullish()}))});async function D(e,t,n,r={}){if(!w(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let a=new URLSearchParams({per_page:"1",exclude_pull_requests:"true",...n?{branch:n}:{}}),s=await $(`/repos/${b(t)}/actions/runs?${a}`,e,r);if(!s.ok)return s;let i=_.safeParse(s.data);if(!i.success)return I("the Actions runs");let o=i.data.workflow_runs[0];return o?{ok:!0,data:{status:o.status??"unknown",conclusion:o.conclusion??null,name:o.name??o.display_title??null,branch:o.head_branch??null,sha:o.head_sha??null,url:o.html_url?.startsWith("https://github.com/")?o.html_url:null,at:o.updated_at??o.created_at??null,runNumber:o.run_number??null}}:{ok:!0,data:{none:!0}}}let R=e=>/^[A-Za-z0-9._\/-]{1,200}$/.test(e)&&!e.includes("..")&&!e.startsWith("/")&&!e.endsWith("/");async function M(e,t,n,r,a,s={}){if(!w(t)||!R(r)||!n||n.split("/").includes("..")||n.startsWith("/"))return{ok:!1,kind:"format",error:"That isn't a file in a repository."};let i=n.split("/").map(encodeURIComponent).join("/"),o=await $(`/repos/${b(t)}/contents/${i}?ref=${encodeURIComponent(r)}`,e,s,"application/vnd.github.raw+json");return o.ok?Buffer.byteLength(o.text,"utf8")>a||o.text.includes("\0")||(o.text.match(/�/g)?.length??0)>8?{ok:!0,data:null}:{ok:!0,data:o.text}:o}async function B(e,t,n,r={}){if(!w(t)||!/^[0-9a-f]{40}$/.test(n))return{ok:!1,kind:"format",error:"That isn't a repository or commit."};let a=await $(`/repos/${b(t)}/actions/runs?head_sha=${n}&per_page=50`,e,r);if(!a.ok)return a;let s=g.z.object({workflow_runs:h.z.array(g.z.object({status:y.z.string().nullish(),conclusion:y.z.string().nullish()}))}).safeParse(a.data);return s.success?{ok:!0,data:s.data.workflow_runs.map(e=>({status:e.status??"queued",conclusion:e.conclusion??null}))}:I("the Actions runs")}g.z.object({sha:y.z.string().optional(),truncated:v.z.boolean().optional(),tree:h.z.array(g.z.object({path:y.z.string(),type:y.z.string(),size:k.z.number().optional()}))}),e.s(["$",0,262144,"V",0,M,"j",0,$,"k",0,S,"M",0,w,"c",0,R,"W",0,D,"o",0,x,"q",0,V,"f",0,b,"L",0,B],455037);let T=h.z.array(g.z.object({name:y.z.string(),type:y.z.string(),sha:y.z.string(),size:k.z.number().optional()}));async function z(e,t,n,r={},a=null){if(!w(t)||!R(n))return{ok:!1,kind:"format",error:"That isn't a repository name or ref."};if(null!==a&&(0,f.Q)(a)!==a)return{ok:!1,kind:"format",error:"That isn't a folder in a repository."};let s=a?a.split("/").map(encodeURIComponent).join("/"):"",i=await $(`/repos/${b(t)}/contents/${s}?ref=${encodeURIComponent(n)}`,e,r);if(!i.ok)return i;let o=T.safeParse(i.data);return o.success?{ok:!0,data:o.data.filter(e=>"file"===e.type&&/^[0-9a-f]{40}$/.test(e.sha)).map(e=>({name:e.name,sha:e.sha,size:e.size??0}))}:{ok:!1,kind:"format",error:"GitHub answered the file list in a format the console doesn't recognise."}}async function C(e,t,n,r={}){if(!w(t)||!R(n))return{ok:!1,kind:"format",error:"That isn't a repository name or branch."};let a=await $(`/repos/${b(t)}/git/ref/heads/${n.split("/").map(encodeURIComponent).join("/")}`,e,r);return a.ok?{ok:!0,data:!0}:"missing"===a.kind?{ok:!0,data:!1}:a}function j(e,t,n,r,a,s={}){return M(e,t,n,r,a,s)}async function N(e,t,n={}){if(!w(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let r=await $(`/repos/${b(t)}/dependabot/alerts?state=open&ecosystem=npm&per_page=100`,e,n);if(!r.ok)return"scope"===r.kind||"missing"===r.kind?{ok:!0,data:{denied:!0}}:r;let a=(0,m.E)(r.data);return a?{ok:!0,data:{alerts:a}}:{ok:!1,kind:"format",error:"GitHub answered the Dependabot alerts in a format the console doesn't recognise."}}function E(e,t){return"string"==typeof e&&e!==t&&R(e)?e:null}async function O(){let[e]=await (0,s.f)().select().from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).orderBy((0,r.M)(i.accounts.createdAt)).limit(1);if(!e)return{error:"GitHub isn't connected."};let t=(0,o.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,l.f)().OPS_ENCRYPTION_KEY);return t?{token:t,accountId:e.id}:{error:"Can't read the stored GitHub credential. Replace it on Connections."}}async function L(){let[e]=await (0,s.f)().select({value:i.settings.value}).from(i.settings).where((0,n.u)(i.settings.key,"deps.scanAll")).limit(1);return e?.value===!0}e.s(["f",0,E],502240);let P=e=>({dir:(0,f.Q)((e??{}).rootDirectory),unsupported:(0,f.l)((e??{}).rootDirectoryUnsupported),branch:E((e??{}).productionBranch,null)});async function H(e){let t=[...new Set(e.filter(u.f))],r=new Map;if(!t.length)return r;let a=await (0,s.f)().select({repoId:i.appRepos.repoId,name:i.resources.name,monitored:i.resources.monitored,meta:i.resources.meta}).from(i.appRepos).innerJoin(i.resources,(0,n.u)(i.resources.id,i.appRepos.appId)).where((0,n.b)((0,n.y)(i.appRepos.repoId,t),(0,n.M)(i.resources.goneAt))).limit(1e3);for(let e of(a.sort((e,t)=>Number(!!t.monitored)-Number(!!e.monitored)||(e.name<t.name?-1:+(e.name>t.name))),a))r.has(e.repoId)||r.set(e.repoId,P(e.meta));return r}async function U(){let e={id:i.githubRepos.id,fullName:i.githubRepos.fullName,defaultBranch:i.githubRepos.defaultBranch,scannedAt:i.dependencyScans.scannedAt},t=(0,n.b)((0,n.M)(i.githubRepos.goneAt),(0,n.u)(i.githubRepos.archived,!1)),r=await L()?await (0,s.f)().select(e).from(i.githubRepos).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500):await (0,s.f)().selectDistinct(e).from(i.appRepos).innerJoin(i.githubRepos,(0,n.u)(i.githubRepos.id,i.appRepos.repoId)).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500),a=r.length?await H(r.map(e=>e.id)):new Map;return(0,m.M)(r.map(e=>({...e,rootDir:a.get(e.id)?.dir??null,rootDirUnsupported:a.get(e.id)?.unsupported??null,prodBranch:a.get(e.id)?.branch??null})))}let q=(e,t)=>e.length>t?`${e.slice(0,t-1)}…`:e;async function W(e,t){let n=new Date;await (0,s.f)().insert(i.dependencyScans).values({repoId:e,...t,updatedAt:n}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{...t,updatedAt:n}})}async function F(e){return(0,s.f)().select({id:i.dependencyVulns.id,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,vulnId:i.dependencyVulns.vulnId,severity:i.dependencyVulns.severity,fixedVersion:i.dependencyVulns.fixedVersion,summary:i.dependencyVulns.summary,aliases:i.dependencyVulns.aliases,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct,source:i.dependencyVulns.source}).from(i.dependencyVulns).where((0,n.b)((0,n.u)(i.dependencyVulns.repoId,e),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(2e3)}function Z(e,t){for(let n of d.a){let r=e.find(e=>e.name===n.path);if(r)return{path:(0,f.H)(t,n.path),kind:n.kind,sha:r.sha}}return null}async function K(e,r,a,o={}){let l=()=>({...o,timeoutMs:Math.max(1e3,Math.min(a-Date.now(),1e4))}),u=async e=>(await W(r.id,{error:q(e,300),scannedAt:new Date}).catch(()=>void 0),{status:"failed",error:e}),h=r.defaultBranch??"HEAD",g=E(r.prodBranch,r.defaultBranch),y=!1;if(g){let t=await C(e,r.fullName,g,l());if(!t.ok)return u(t.error);t.data&&(h=g,y=!0)}let k=y?`Scanned ${g}, the branch Vercel deploys to production.`:null,v=(0,f.Q)(r.rootDir),w=v?null:(0,f.l)(r.rootDirUnsupported),b=w?`The Vercel Root Directory "${w}" couldn't be used (Watchbell reads plain folder names, at most 4 deep); scanned the repository root.`:null,$=await z(e,r.fullName,h,l(),v);if(!$.ok)return u(v&&"missing"===$.kind?`The folder ${(0,f.x)(v)} isn't in ${r.fullName} on ${h}.`:$.error);let A=Z($.data,v),I=$.data.find(e=>"package.json"===e.name)??null,S=!1,x=null;if(v&&I&&!A){let t=await z(e,r.fullName,h,l());if(!t.ok)return u(t.error);S=null!==(A=Z(x=t.data,null))}let V=A?A.sha:I?`pkg:${I.sha}`:null,_=V&&v?`${v}:${V}${S&&I?`+${I.sha}`:""}`:V&&w?`odd:${V}`:V,D=_&&y?`br:${g}:${_}`:_,[R]=await (0,s.f)().select().from(i.dependencyScans).where((0,n.u)(i.dependencyScans.repoId,r.id)).limit(1),M=new Date;if(!(0,m.U)(R??null,D,M,o.force))return{status:"unchanged"};if(!D){let e=await F(r.id);return e.length&&await (0,s.f)().update(i.dependencyVulns).set({resolvedAt:M}).where((0,n.y)(i.dependencyVulns.id,e.map(e=>e.id))),await W(r.id,{lockfilePath:null,lockfileSha:null,packageCount:0,scannedAt:M,queriedAt:M,error:null,note:q([k,b,`No package.json or lockfile ${v?"in":"at"} ${(0,f.x)(v)}.`].filter(Boolean).join(" "),300)}),{status:"scanned",vulns:0,packages:0,note:"no package.json"}}let B=(0,f.H)(v,"package.json"),T=I?await j(e,r.fullName,B,h,262144,l()):null;if(T&&!T.ok)return u(T.error);let O=T?.ok&&T.data?(0,d.b)(T.data):null,L=null,P="package-json",H=S&&A?`Scanned ${(0,f.x)(v)} with the repository root's ${A.path} (workspaces).`:null;if(A){if(2e3>a-Date.now())return u("Time budget used before the lockfile was read; the next run tries again.");let t=await j(e,r.fullName,A.path,h,0xf00000,{...o,timeoutMs:Math.max(1e3,Math.min(a-Date.now(),2e4))});if(!t.ok)return u(t.error);let n=!0;if(S&&v&&t.data&&!(0,f.p)(A.kind,t.data,v)){let t=x?.some(e=>"package.json"===e.name)?await j(e,r.fullName,"package.json",h,262144,l()):null;if(t&&!t.ok)return u(t.error);n=(0,f.F)(t?.data??null,v)}n?(L=t.data?(0,d.D)(A.kind,t.data):null,P=A.kind,L||(H=[H,`${A.path} couldn't be read; the versions come from package.json ranges (approximate).`].filter(Boolean).join(" "))):(H=`The repository root's ${A.path} isn't a workspace that includes ${v}, so the versions come from ${B} ranges (approximate).`,A=null)}if(L){let e=(0,t.m)(L,O);L=e.deps,e.stale.length&&(H=[H,(0,t.M)(e.stale)].filter(Boolean).join(" "))}else L=O?(0,d.e)(O):[],P="package-json",H??=A?null:"No lockfile: the versions come from package.json ranges (approximate).";let U=await F(r.id),G=[];if(L.length){let e=await (0,p.K)(L,{fetch:o.fetch,deadline:a});if(!e.ok)return u(e.error);let t=(0,m.A)(U,!0===o.force),n=await (0,p.J)((0,m.z)(L,e.ids,t),{fetch:o.fetch,deadline:a});if(!n.ok)return u(n.error);G=(0,c.i)(L,e.ids,n.map,t)}if(a-Date.now()>1500){let t=await N(e,r.fullName,l());t.ok&&"alerts"in t.data?G=(0,m.R)(G,t.data.alerts,L):t.ok&&(H=[H,"Dependabot alerts aren't readable with this token (optional: Dependabot alerts: Read)."].filter(Boolean).join(" "))}let J=(0,m.h)(U,G,(0,d.K)(O));H=[k,b,H].filter(Boolean).join(" ")||null;let Y=new Date;return await (0,s.f)().transaction(async e=>{for(let t of(J.insert.length&&await e.insert(i.dependencyVulns).values(J.insert.map(e=>({repoId:r.id,package:e.package,installedVersion:e.installedVersion,vulnId:e.vulnId,aliases:e.aliases,severity:e.severity,fixedVersion:e.fixedVersion,summary:e.summary,direct:e.direct,dev:e.dev,source:e.source,firstSeenAt:Y,lastSeenAt:Y}))).onConflictDoNothing(),J.update))await e.update(i.dependencyVulns).set({severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,aliases:t.aliases,dev:t.dev,direct:t.direct,lastSeenAt:Y}).where((0,n.u)(i.dependencyVulns.id,t.id));J.resolve.length&&await e.update(i.dependencyVulns).set({resolvedAt:Y}).where((0,n.b)((0,n.y)(i.dependencyVulns.id,J.resolve),(0,n.M)(i.dependencyVulns.resolvedAt))),await e.insert(i.dependencyScans).values({repoId:r.id,lockfilePath:A?.path??(I?B:null),lockfileSha:D,packageCount:L.length,scannedAt:Y,queriedAt:Y,error:null,note:H?q(H,300):null,updatedAt:Y}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{lockfilePath:A?.path??(I?B:null),lockfileSha:D,packageCount:L.length,scannedAt:Y,queriedAt:Y,error:null,note:H?q(H,300):null,updatedAt:Y}})}),{status:"scanned",vulns:J.insert.length+J.update.length,packages:L.length,note:"package-json"===P?H:null}}async function G(e,t={}){var r,a;let o,l,u,d,c=await O();if("error"in c)return{error:c.error};let{first:p,only:f,skip:m,...h}=t,g=(r=await U(),o=(a={first:p,only:f,skip:m}).only?new Set(a.only):null,l=new Set(a.skip??[]),u=(o?r.filter(e=>o.has(e.id)):r).filter(e=>!l.has(e.id)),d=new Set(a.first??[]),[...u.filter(e=>d.has(e.id)),...u.filter(e=>!d.has(e.id))]),y={scanned:0,unchanged:0,failed:[],left:0,done:[],listed:g.map(e=>e.id)};for(let[t,n]of g.entries()){if(e-Date.now()<4e3){y.left=g.length-t;break}y.done.push(n.id);try{let t=await K(c.token,n,e,h);"scanned"===t.status?y.scanned++:"unchanged"===t.status?y.unchanged++:y.failed.push(`${n.fullName}: ${t.error}`)}catch(e){y.failed.push(`${n.fullName}: ${e instanceof Error?e.name:"error"}`)}}return await (0,s.f)().delete(i.dependencyVulns).where((0,n.b)((0,n.E)(i.dependencyVulns.resolvedAt),(0,n.S)(i.dependencyVulns.resolvedAt,new Date(Date.now()-7776e6)))).catch(()=>void 0),y}let J=async()=>(await (0,s.f)().select({id:i.accounts.id}).from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).limit(1)).length>0;function Y(e){let t=e.failed.filter(e=>!/didn't answer in time|no time left|time budget|rate limit/i.test(e)),n=e.failed.length-t.length+(e.left??0);n&&console.info(`deps: ${n} repositor${1===n?"y":"ies"} wait for the next run`);let r=t.slice(0,3);return t.length>3&&r.push(`+${t.length-3} more`),r.length?r.join("; "):null}async function Q(e){if(!await J())return null;if(e-Date.now()<4e3)return console.info("deps: no time left today; the scan resumes tomorrow"),null;let t=await G(e);if("error"in t){let e;return(e=t.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:t.error}return Y(t)}async function X(e,t,r={}){let{marked:a,onlyMarked:o}=t;if(!await J())return{problem:null,settled:[...a],done:[],complete:!0};let l=a.filter(u.f),d=l.length?await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,l)).limit(5*l.length):[],c=[...new Set(d.map(e=>e.repoId))],p=e=>d.filter(t=>t.appId===e).map(e=>e.repoId),f=a.filter(e=>!p(e).length);if(o&&!c.length)return{problem:null,settled:[...a],done:[],complete:!0};if(e-Date.now()<4e3)return{problem:null,settled:f,done:[],complete:!1};let m=(t.skip??[]).filter(e=>!c.includes(e)),h=await G(e,{...r,first:c,...o?{only:c}:{skip:m}});if("error"in h){let e;return{problem:(e=h.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:h.error,settled:[...a],done:[],complete:!0}}let g=new Set([...h.done,...c.filter(e=>!h.listed.includes(e))]);return{problem:Y(h),settled:a.filter(e=>p(e).every(e=>g.has(e))),done:h.done,complete:0===h.left}}async function ee(e){let t=e.filter(u.f);if(!t.length)return[];let r=await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId,error:i.dependencyScans.error}).from(i.appRepos).innerJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.appRepos.repoId)).where((0,n.b)((0,n.y)(i.appRepos.appId,t),(0,n.E)(i.dependencyScans.scannedAt)));if(!r.length)return[];let a=await (0,s.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,severity:i.dependencyVulns.severity,summary:i.dependencyVulns.summary,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(r.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(1e4);return r.map(e=>({appId:e.appId,repoId:e.repoId,error:e.error,vulns:a.filter(t=>t.repoId===e.repoId).map(e=>({package:e.package,installedVersion:e.installedVersion,fixedVersion:e.fixedVersion,severity:e.severity,summary:e.summary,dev:e.dev,direct:e.direct}))}))}async function et(e,t=new Set){let r=e.filter(u.f),o=new Map;if(!r.length)return o;let l=await (0,s.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,r));if(!l.length)return o;let d=await (0,s.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,vulnId:i.dependencyVulns.vulnId,aliases:i.dependencyVulns.aliases,severity:i.dependencyVulns.severity,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(l.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt),(0,n.u)(i.dependencyVulns.direct,!0),(0,n.E)(i.dependencyVulns.fixedVersion))).limit(2e3),c=d.some(e=>"next"===e.package)?new Set((await (0,s.f)().selectDistinct({appId:i.dependencyPrs.appId}).from(i.dependencyPrs).where((0,n.b)((0,n.y)(i.dependencyPrs.appId,r),(0,n.$)(i.dependencyPrs.stage,["merged","closed"]),(0,n.B)(i.dependencyPrs.openedAt,new Date(Date.now()-12096e5)),a.B`${i.dependencyPrs.packages} @> '["next"]'::jsonb`)).limit(r.length)).map(e=>e.appId)):new Set;for(let e of l){let n=t.has(e.appId)||c.has(e.appId);(0,m.B)(d.filter(t=>t.repoId===e.repoId&&!(n&&"next"===t.package))).length&&o.set(e.appId,e.repoId)}return o}e.s(["R",0,4e4,"o",0,12e3,"d",0,4e3,"e",0,Q,"O",0,X,"C",0,et,"a",0,ee],433609);var en=e.i(442473);function er(e){let t=e instanceof Error&&e.cause instanceof Error?e.cause:e,n=(t instanceof Error?t.message:"").split("\n")[0].replace(/Bearer\s+\S+/gi,"Bearer [hidden]").trim()||"failed";return n.length>200?`${n.slice(0,200)}…`:n}e.s(["f",0,er],751762);var ea=e.i(656083);let es=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,ei="[\"'`]";function eo(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let el={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},eu=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>el[e]??el[e.toLowerCase()]??e),ed=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${ei}(${es})${ei}`,"g"),ec=RegExp(String.raw`version\s*:\s*${ei}(${es})${ei}\s*,\s*appDir\s*:`,"g"),ep=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${ei}(${es})${ei}`,"g"),ef=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,em=e=>e.replace(/[$]/g,"\\$");var eh=e.i(267485);async function eg(e,t,n={}){let r=n.deadline??1/0,a=n.now??(()=>new Date),s=e=>Math.floor(Math.min(e,r)-Date.now()),i=Date.now()+15e3;if(0>=s(i))return null;let o=(e,n)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:n,checkedAt:a()}),l=(e,t)=>(0,en.K)(e,{maxBytes:3145728,timeoutMs:s(i),lookup:n.lookup,fetch:n.fetch,userAgent:"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)",sameOrigin:t}),u=await l(`https://${e}/`,"www");if(!u.ok&&u.error===en.l)return o("unknown","the site redirects to another host");if(!u.ok||200!==u.status)return Date.now()>=r?null:o("error",`Couldn't load the site: ${u.ok?`HTTP ${u.status}`:u.error}`);let d=(function(e,t){let n;try{n=new URL(t)}catch{return[]}let r=new Set,a=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(eu(t[2].trim()),n)}catch{continue}if("https:"===e.protocol&&e.origin===n.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!r.has(e.href))){var s;r.add(e.href),a.push({href:e.href,rank:(s=e.pathname,/\/main-app[-.]/.test(s)?0:/\/(main|app-index)[-.]/.test(s)?1:/\/(webpack|polyfills|framework)[-.]/.test(s)?3:2),i:a.length})}}return a.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(u.body,u.url).slice(0,12);if(0===d.length)return o("unknown",u.body.includes("/_next/")?"version not exposed":"not a Next.js site");let c=null,p=0,f=!1;for(let e of d){if(0>=s(i)){f=!0;break}let t=await l(e,!0);if(t.ok&&200===t.status&&(p++,c=function(e){for(let t of e.matchAll(ed))if(eo(t[1]))return t[1];for(let t of[ec,ep])for(let n of e.matchAll(t))if(eo(n[1]))return n[1];for(let t of e.matchAll(ef)){let n=t[1]??"version",r=RegExp(String.raw`(?:^|[^\w$.])${em(n)}\s*=\s*${ei}(${es})${ei}`,"g"),a=null;for(let n of e.matchAll(r)){if((n.index??0)>=(t.index??0))break;a=n[1]}if(a&&eo(a))return a}return null}(t.body)))break}if(!c)return Date.now()>=r?null:f||0>=s(i)?o("error","Reading the site's scripts took longer than 15 s"):0===p?o("error","Couldn't load the site's scripts"):o("unknown","version not exposed");let m=s(Date.now()+1e4);if(m<=0)return null;let h=await (0,eh.y)(c,{timeoutMs:m,fetch:n.fetch});return h.ok?{version:c,status:h.findings.length?"vulnerable":"ok",findings:h.findings,reason:null,checkedAt:a()}:Date.now()>=r?null:o("error",h.error)}e.s(["y",0,35e3,"P",0,eg,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var ey=e.i(7494),ek=e.i(764766),ev=e.i(195191),ew=e.i(146394);function eb(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function e$(e={}){let t=e.only;if(t&&!t.length)return[];let r=e.first??[],o=e.skip??[],l=await (0,s.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta,sec:i.appSecurity}).from(i.resources).leftJoin(i.appSecurity,(0,n.u)(i.appSecurity.resourceId,i.resources.id)).where((0,n.b)((0,n.u)(i.resources.kind,"app"),(0,n.u)(i.resources.monitored,!0),(0,n.M)(i.resources.goneAt),t?(0,n.y)(i.resources.id,t):void 0,o.length?(0,n.$)(i.resources.id,[...o]):void 0)).orderBy(...r.length?[a.B`case when ${(0,n.y)(i.resources.id,r)} then 0 else 1 end`]:[],a.B`${i.appSecurity.checkedAt} asc nulls first`,i.resources.name).limit(ew.O.apps);if(!l.length)return[];r.length&&l.sort((e,t)=>Number(!r.includes(e.id))-Number(!r.includes(t.id)));let u=await (0,s.f)().select({resourceId:i.monitors.resourceId,url:i.monitors.url}).from(i.monitors).where((0,n.y)(i.monitors.resourceId,l.map(e=>e.id))).orderBy(i.monitors.createdAt).limit(ew.O.monitors);return l.map(e=>({id:e.id,name:e.name,prev:e.sec?eb(e.sec):null,host:(0,ek.Y)(e.meta)?.primaryDomain??(0,ev.m)(e.name,u.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function eA(e,t){await (0,s.f)().transaction(async r=>{await r.execute(a.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[s]=await r.select().from(i.appSecurity).where((0,n.u)(i.appSecurity.resourceId,e.id)).limit(1),o=s?eb(s):null;if(o&&o.checkedAt.getTime()>=t.checkedAt.getTime())return;let l="unknown"===t.status||"error"===t.status?{...t,version:o?o.version:t.version,findings:o?o.findings:t.findings}:t,u={framework:"next",version:l.version,status:l.status,findings:l.findings,reason:l.reason,checkedAt:l.checkedAt};await r.insert(i.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:i.appSecurity.resourceId,set:u,setWhere:a.B`${i.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,ey.t)(e.name,o,l);d&&await (0,ea.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:l.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],r)})}async function eI(e,t={}){let n=await e$(t),r=0,a=0,s=[],i=[],o=[];return await (0,en.P)(n,3,async t=>{if(e-Date.now()<3e3)return void a++;o.push(t.id);try{let n=await eg(t.host,t.prev,{deadline:e});if(!n)return void a++;await eA(t,n),r++,i.push(t.id)}catch(e){s.push(`${t.name}: ${er(e)}`),i.push(t.id)}}),{checked:r,skipped:a,failed:s,done:i,listed:n.map(e=>e.id),started:o}}async function eS(e){let t=e.filter(u.f);return t.length?(await (0,s.f)().select().from(i.appSecurity).where((0,n.y)(i.appSecurity.resourceId,t)).limit(t.length)).map(e=>{let t=eb(e);return{appId:e.resourceId,version:t.version,status:t.status,findings:t.findings}}):[]}e.s(["F",0,eS,"h",0,eI,"Z",0,eb],800523)},111970,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(347540),a=e.i(924924),s=e.i(473283),i=e.i(618916),o=e.i(659846),l=e.i(154491),u=e.i(960049);let d=["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"],c=e=>{if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}},p=(0,r.cache)(async()=>{let e=n.B.join(d.map(e=>n.B`${e}`),n.B`, `),t=await (0,a.f)().execute(n.B`select
+    (select coalesce(jsonb_agg(distinct ${i.accounts.provider}::text), '[]'::jsonb) from ${i.accounts}) as providers,
+    exists(select 1 from ${i.resources} where ${i.resources.kind}::text in (${e}) and ${i.resources.goneAt} is null) as databases,
+    ${(0,u.W)()} as off`),[r]=(0,s.f)(t),p=c(r?.providers);return{providers:(Array.isArray(p)?p:[]).filter(e=>o.f.includes(e)),databases:r?.databases===!0||r?.databases==="t",off:(0,l.N)(c(r?.off))}});async function f(){try{return(0,l.I)((await p()).off)}catch{return new Set}}e.s(["s",0,function(e){let r=function(e){if(!e.size)return;let{ruleKeys:r,providers:a}=(0,l.s)(e),s=[];if(r.length&&s.push(n.B`${i.alerts.ruleKey} in (${n.B.join(r.map(e=>n.B`${e}`),n.B`, `)})`),a.length){let e=n.B.join(a.map(e=>n.B`${e}`),n.B`, `);s.push(n.B`(${i.alerts.ruleKey} = 'CredentialExpiring' and ${i.alerts.accountId} in (select ${i.accounts.id} from ${i.accounts} where ${i.accounts.provider}::text in (${e})))`)}return s.length?(0,t.F)(...s):void 0}(e);return r?(0,t.R)(r):void 0},"I",0,f])},960049,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(924924),a=e.i(618916);e.i(154491);var s=e.i(273083);let i={checks:[3,7,14],rollupsHourly:[60,90,180],storedLogs:[3,7,14],deployments:[30,45,60,90],events:[60,90,180],alerts:[60,90,180],collectorRuns:[7,14,30],recommendationDismissals:[30,90,180]},o=Object.keys(i),l=(e,t)=>"number"==typeof t&&i[e].includes(t);async function u(e){let[n]=await (0,r.f)().select({value:a.settings.value}).from(a.settings).where((0,t.u)(a.settings.key,e)).limit(1);return n?.value??null}let d=async()=>(function(e){let t={...s.f};if(!e||"object"!=typeof e)return t;for(let n of o){let r=e[n];l(n,r)&&(t[n]=r)}return t})(await u("retention.days"));e.s(["l",0,()=>u("notify.language"),"J",0,d,"W",0,()=>n.B`(select ${a.settings.value} from ${a.settings} where ${a.settings.key} = ${"sections.off"})`],960049)},662860,e=>{var t=e.i(875225),n=e.i(924924),r=e.i(755776),a=e.i(618916),s=e.i(921991),i=e.i(867274),o=e.i(547499);let l="Supabase Metrics API",u=null,d={fetchMetrics:async function e(t,n,r={}){let a;if(!("string"==typeof t&&/^[a-z0-9]{8,40}$/.test(t)))return{ok:!1,kind:"format",error:"That isn't a Supabase project ref."};let s=r.timeoutMs??8e3;try{a=await (r.fetch??fetch)(`https://${t}.supabase.co/customer/v1/privileged/metrics`,{headers:{Authorization:`Basic ${Buffer.from(`service_role:${n}`).toString("base64")}`,Accept:"text/plain"},signal:AbortSignal.timeout(s),cache:"no-store",redirect:"manual"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`${l} didn't answer within ${Math.round(s/1e3)} seconds.`:`Couldn't reach the ${l}.`}}if(401===a.status||403===a.status)return{ok:!1,kind:"auth",status:a.status,error:`Supabase rejected the metrics key (${a.status}). Replace it with a current Secret API key.`};if(404===a.status)return{ok:!1,kind:"missing",status:404,error:"Supabase has no metrics endpoint for this project (404)."};if(429===a.status)return{ok:!1,kind:"transient",status:429,retryAfterS:60,error:`${l} says there were too many requests.`};if(!a.ok)return{ok:!1,kind:"transient",status:a.status,error:`${l} returned an error (${a.status}).`};let i=await a.text().catch(()=>null);return null===i||i.length>4e6||!/^(#|[A-Za-z_:])/m.test(i)?{ok:!1,kind:"format",error:`${l} answered in a format the console doesn't recognise.`}:{ok:!0,data:i}},key:()=>(0,o.f)().OPS_ENCRYPTION_KEY},c=e=>e instanceof Error?e.name:"unknown";async function p(e,s,o=d){if(!(0,i.T)(e,u))return null;u=e.getTime();let l=0,f=0;try{for(let{k:i,ref:u,state:d}of(await (0,n.f)().select({k:r.A,ref:a.resources.externalId,state:a.snapshots.state}).from(r.A).innerJoin(a.resources,(0,t.u)(a.resources.id,r.A.resourceId)).leftJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).where((0,t.b)((0,t.u)(a.resources.kind,"supabase_project"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt))).limit(20))){let t=s-Date.now()-500;if(t<1e3)break;try{await m(i,u,d,e,Math.min(8e3,t),o)?l++:f++}catch(e){f++,console.warn("supabase-metrics: one project failed:",c(e))}}await (0,n.f)().delete(r.l).where((0,t.S)(r.l.hour,new Date(e.getTime()-24*i.x*36e5)))}catch(e){console.warn("supabase-metrics failed:",c(e))}return{scraped:l,failed:f}}async function f(e,a,s){return await (0,n.f)().update(r.A).set({lastTryAt:a,lastError:s.slice(0,300)}).where((0,t.u)(r.A.resourceId,e)),!1}async function m(e,a,o,l,u,d){if("paused"===o)return f(e.resourceId,l,"The project is paused.");let c=(0,s.V)({ciphertext:e.keyCiphertext,iv:e.keyIv},d.key());if(!c)return f(e.resourceId,l,"The stored key can't be read. Add it again.");let p=await d.fetchMetrics(a,c,{timeoutMs:u});if(!p.ok)return f(e.resourceId,l,p.error);let m=(0,i.E)(e.latest??null,(0,i.c)((0,i.a)(p.data),a),l);await (0,n.f)().update(r.A).set({latest:m,lastTryAt:l,lastOkAt:l,lastError:null}).where((0,t.u)(r.A.resourceId,e.resourceId));let h=(0,i.b)(l),[g]=await (0,n.f)().select().from(r.l).where((0,t.b)((0,t.u)(r.l.resourceId,e.resourceId),(0,t.u)(r.l.hour,h))).limit(1),y=(0,i.n)(g??null,m);return await (0,n.f)().insert(r.l).values({resourceId:e.resourceId,hour:h,...y}).onConflictDoUpdate({target:[r.l.resourceId,r.l.hour],set:y}),!0}async function h(){let e=await (0,n.f)().select({id:a.resources.id,name:a.resources.name,latest:r.A.latest}).from(r.A).innerJoin(a.resources,(0,t.u)(a.resources.id,r.A.resourceId)).where((0,t.b)((0,t.u)(a.resources.kind,"supabase_project"),(0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt))).limit(20);return e.length?e.map(e=>({id:e.id,name:e.name,latest:e.latest??null})):null}e.s(["Y",0,h,"E",0,p],662860)},89491,e=>{let t={databases:100,storageBytes:0x140000000,rowsRead:5e8,rowsWritten:1e7},n={storageBytes:262144e3,monthlyCommands:5e5,monthlyBandwidthBytes:0x280000000},r={databases:10,dbBytes:524288e3,accountBytes:0x140000000,rowsReadPerDay:5e6,rowsWrittenPerDay:1e5},a=(e,t)=>Math.round(e/t*1e3)/10,s=(e,t)=>!!e&&e.slice(0,7)===t.toISOString().slice(0,7);e.s(["M",0,r,"g",0,t,"W",0,n,"I",0,function(e,t){let n=e.usageDay===t.toISOString().slice(0,10);return[...n&&null!=e.accountRowsRead?[{label:"Rows read today",pct:a(e.accountRowsRead,r.rowsReadPerDay),text:"of 5M (account)",kind:"quota"}]:[],...n&&null!=e.accountRowsWritten?[{label:"Rows written today",pct:a(e.accountRowsWritten,r.rowsWrittenPerDay),text:"of 100k (account)",kind:"quota"}]:[],...null!=e.sizeBytes?[{label:"Size",pct:a(e.sizeBytes,r.dbBytes),text:"of 500 MB",kind:"storage"}]:[]]},"c",0,function(e){return(e.accountRowsRead??0)>=r.rowsReadPerDay?{state:"err",label:"Daily rows-read limit reached"}:(e.accountRowsWritten??0)>=r.rowsWrittenPerDay?{state:"err",label:"Daily rows-written limit reached"}:{state:"ok",label:"Available"}},"u",0,function(e){return e.filter(e=>"quota"===e.kind&&null!==e.pct).sort((e,t)=>(t.pct??0)-(e.pct??0))[0]??null},"G",0,function(e,n){return s(e.usageAt,n)?[...null!=e.orgRowsRead?[{label:"Rows read",pct:a(e.orgRowsRead,t.rowsRead),text:"of 500M this month (org)",kind:"quota"}]:[],...null!=e.orgRowsWritten?[{label:"Rows written",pct:a(e.orgRowsWritten,t.rowsWritten),text:"of 10M this month (org)",kind:"quota"}]:[],...null!=e.orgStorageBytes?[{label:"Storage",pct:a(e.orgStorageBytes,t.storageBytes),text:"of 5 GB (org)",kind:"storage"}]:[]]:[]},"h",0,function(e){return e.blockReads||e.orgBlockedReads?{state:"err",label:"Reads blocked"}:e.blockWrites||e.orgBlockedWrites?{state:"err",label:"Writes blocked"}:{state:"ok",label:"Available"}},"$",0,function(e,t){let r=s(e.statsAt,t);return[...r&&null!=e.monthlyRequests?[{label:"Commands",pct:a(e.monthlyRequests,n.monthlyCommands),text:"of 500k this month",kind:"quota"}]:[],...r&&null!=e.monthlyBandwidthBytes?[{label:"Bandwidth",pct:a(e.monthlyBandwidthBytes,n.monthlyBandwidthBytes),text:"of 10 GB this month",kind:"quota"}]:[],...null!=e.storageBytes?[{label:"Data size",pct:a(e.storageBytes,n.storageBytes),text:"of 250 MB",kind:"storage"}]:[]]},"t",0,function(e){let t=(e??"").toLowerCase();return"active"===t?{state:"ok",label:"Active"}:t.includes("suspend")||t.includes("block")||t.includes("disabled")?{state:"err",label:"Suspended"}:t.includes("delet")?{state:"off",label:"Deleting"}:{state:"unknown",label:e?`State: ${e}`:"Unknown"}}])},960063,e=>{e.s(["T",0,{reads:5e4,writes:2e4,deletes:2e4},"g",0,function(e){var t;if(e.ok)return e.data.noDatabase?{state:"off",label:"No Firestore database"}:{state:"ok",label:`Reachable \xb7 ${e.data.latencyMs} ms`};return"RESOURCE_EXHAUSTED"===(t=e).reason?{state:"err",label:"Daily quota used up"}:"SERVICE_DISABLED"===t.reason?{state:"err",label:"Firestore API is off in this project"}:"scope"===t.kind||"PERMISSION_DENIED"===t.reason||"scope"===t.reason?{state:"err",label:"No access: needs datastore.viewer"}:{state:"unknown",label:"Unknown"}},"a",0,function(e){let t=new Intl.DateTimeFormat("en-US",{timeZone:"America/Los_Angeles",hour:"numeric",minute:"numeric",second:"numeric",hourCycle:"h23"}).formatToParts(e),n=e=>Number(t.find(t=>t.type===e)?.value??0),r=(3600*n("hour")+60*n("minute")+n("second"))*1e3+e.getUTCMilliseconds();return new Date(e.getTime()-r)}])},90801,e=>{var t=e.i(250474),n=e.i(32391);let r=/^v?(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;function a(e,n){let a=r.exec(e.trim()),s=r.exec(n.trim());return!!a&&!!s&&a[1]===s[1]&&("0"!==a[1]||a[2]===s[2])&&(0,t.f)(n,e)>=0}let s=/^Watch(?:bell|post): update (?:\S+ (?:to|ke) \S+|\d+ vulnerable packages) in ((?:[A-Za-z0-9._-]+\/){0,3}[A-Za-z0-9._-]+) \(/,i=e=>s.exec(e)?.[1]??null;e.s(["M",0,e=>`Lockfile tertinggal — jalankan npm install (${e.slice(0,5).join(", ")}${e.length>5?`, +${e.length-5}`:""}).`,"a",0,function(e,t,n){if(!e.length)return{ok:!1,why:"nothing"};let r=e.filter(e=>n.includes(e.severity)&&!("moderate"===e.severity&&e.dev));if(!r.length)return{ok:!1,why:"severity"};for(let e of r){let n=t.get(e.package);if(!n||!a(n,e.to))return{ok:!1,why:"major"}}return{ok:!0,upgrades:r}},"m",0,function(e,r){if(!r)return{deps:e,stale:[]};let a=[...Object.entries(r.dependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.optionalDependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.devDependencies).map(([e,t])=>[e,t,!0])],s=[...e],i=[];for(let[e,r,o]of a){let a=(0,n.Y)(r);if(!a||!(0,n.C)(a))continue;let l=s.filter(t=>t.name===e);!l.length||l.some(e=>(0,t.f)(e.version,a)>=0)||((s=s.filter(t=>t.name!==e)).push({name:e,version:a,dev:l.every(e=>e.dev)&&o}),i.push(e))}return{deps:s,stale:i}},"D",0,function(e){let n=new Map;for(let r of e){if(!r.direct)continue;let e=n.get(r.package);(!e||0>(0,t.f)(r.installedVersion,e))&&n.set(r.package,r.installedVersion)}return n},"U",0,function(e,t,n=null){for(let r of t){if(i(r.title)!==n)continue;let t=function(e){if(e.packages?.length)return e.packages;let t=/^Watch(?:bell|post): update (\S+) (?:to|ke) /.exec(e.title);return t?[t[1]]:"all"}(r);if("all"===t||e.some(e=>t.includes(e)))return r}return null},"J",0,a])},891262,267485,e=>{var t=e.i(442473),n=e.i(7494),r=e.i(250474);let a=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],s=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),i=e=>Array.isArray(e)?e:[],o=e=>"string"==typeof e&&e?e:null,l=e=>s(e.package)&&"next"===e.package.name&&"npm"===e.package.ecosystem,u="OSV.dev sent an answer we couldn't read";async function d(e,f={}){let m=f.timeoutMs??1e4,h=f.maxBytes??2097152,g=AbortSignal.timeout(m),y=(0,t.X)(g),k=`OSV.dev didn't answer within ${p(m)}`,v=[],w=null;for(let n=0;n<3;n++){var b;let n,r;try{n=await (f.fetch??fetch)("https://api.osv.dev/v1/query",{method:"POST",headers:{"content-type":"application/json","user-agent":"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)"},body:JSON.stringify({package:{name:"next",ecosystem:"npm"},version:e,...w?{page_token:w}:{}}),redirect:"error",cache:"no-store",signal:g})}catch(e){return{ok:!1,error:c(e)?k:"Couldn't reach OSV.dev"}}if(!n.ok)return await n.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${n.status}`};try{let{bytes:e,truncated:a}=await (0,t.z)(n,h,y);if(a)return{ok:!1,error:"OSV.dev sent too large an answer"};r=JSON.parse(new TextDecoder().decode(e))}catch(e){return{ok:!1,error:c(e)?k:u}}let a=s(b=r)?void 0===b.vulns?[]:Array.isArray(b.vulns)?b.vulns:null:null;if(null===a)return{ok:!1,error:u};if(v.push(...a),!(w=s(r)?o(r.next_page_token):null))break}let $=function(e,t){let u=[],d=0;for(let n of e){if(!s(n))continue;let e=o(n.id);e&&(d++,n.withdrawn||u.push({id:e.slice(0,64),cve:i(n.aliases).map(o).find(e=>!!e&&/^CVE-\d{4}-\d+$/.test(e))??null,summary:(o(n.summary)??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=s(e.database_specific)?o(e.database_specific.severity)?.toUpperCase():void 0;return"MEDIUM"===t?"MODERATE":a.includes(t??"")?t:"UNKNOWN"}(n),fixed:function(e,t){let n=null;for(let a of i(e))if(s(a)&&l(a))for(let e of i(a.ranges)){if(!s(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let a=null;for(let l of i(e.events)){if(!s(l))continue;let e=o(l.introduced),i=o(l.fixed);e?a=e:i&&null!==a?((0,r.f)(t,a)>=0&&0>(0,r.f)(t,i)&&(null===n||0>(0,r.f)(i,n))&&(n=i),a=null):(o(l.last_affected)||o(l.limit))&&(a=null)}}return n}(n.affected,t)}))}return e.length>0&&0===d?null:(0,n.I)(u).slice(0,50)}(v,e);return null===$?{ok:!1,error:u}:{ok:!0,findings:$}}let c=e=>e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name),p=e=>e<1e3?`${e} ms`:`${Math.round(e/1e3)} s`;e.s(["y",0,d,"t",0,c],267485);var f=e.i(804581);let m="OpsConsole-Deps/1.0 (+https://watchbell.west-solutions.web.id)";async function h(e,t,n,r){let a=r.deadline-Date.now();if(a<500)return{ok:!1,error:"No time left for OSV.dev"};let s=AbortSignal.timeout(a);return y(e,{method:"POST",headers:{"content-type":"application/json","user-agent":m},body:JSON.stringify(t),signal:s},n,s,r)}async function g(e,t,n){let r=n.deadline-Date.now();if(r<500)return{ok:!1,error:"No time left for OSV.dev"};let a=AbortSignal.timeout(Math.min(r,8e3));return y(e,{method:"GET",headers:{"user-agent":m},signal:a},t,a,n)}async function y(e,n,r,a,s){let i;try{i=await (s.fetch??fetch)(e,{...n,redirect:"error",cache:"no-store"})}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"Couldn't reach OSV.dev"}}if(!i.ok)return await i.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${i.status}`};try{let{bytes:e,truncated:n}=await (0,t.z)(i,r,(0,t.X)(a));if(n)return{ok:!1,error:"OSV.dev sent too large an answer"};return{ok:!0,body:JSON.parse(new TextDecoder().decode(e))}}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"OSV.dev sent an answer we couldn't read"}}}async function k(e,t){let n=[];for(let r of(0,f.f)(e)){let e=await h(f.n,r,4194304,t);if(!e.ok)return e;let a=(0,f.j)(e.body,r.queries.length);if(!a)return{ok:!1,error:"OSV.dev sent an answer we couldn't read"};n.push(...a)}return{ok:!0,ids:n}}async function v(e,t){let n=[...new Set(e)].filter(f.G);if(n.length>300)return{ok:!1,error:`Too many advisories to read in one scan (${n.length})`};let r=new Map,a=null;for(let e=0;e<n.length&&!a;e+=8)await Promise.all(n.slice(e,e+8).map(async e=>{let n=await g(`${f.W}${encodeURIComponent(e)}`,1048576,t),s=n.ok?(0,f.O)(n.body):null;s?r.set(e,s):a??=n.ok?"OSV.dev sent an advisory we couldn't read":n.error}));return a?{ok:!1,error:a}:{ok:!0,map:r}}e.s(["J",0,v,"K",0,k],891262)},804581,e=>{var t=e.i(250474);let n=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),r=e=>Array.isArray(e)?e:[],a=e=>"string"==typeof e&&e?e:null,s=e=>/^[A-Za-z0-9][A-Za-z0-9._:-]{1,63}$/.test(e),i={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",MEDIUM:"moderate",LOW:"low"},o=e=>e>=9?"critical":e>=7?"high":e>=4?"moderate":e>0?"low":"unknown",l=(e,t)=>n(e.package)&&e.package.name===t&&"npm"===e.package.ecosystem;e.s(["S",0,20,"n",0,"https://api.osv.dev/v1/querybatch","W",0,"https://api.osv.dev/v1/vulns/","h",0,200,"f",0,function(e){let t=[];for(let n=0;n<e.length;n+=1e3)t.push({queries:e.slice(n,n+1e3).map(e=>({package:{name:e.name,ecosystem:"npm"},version:e.version}))});return t},"i",0,function(e,s,i,o=new Map){let u=[];return e.forEach((e,d)=>{for(let c of s[d]??[]){let s=o.get(`${e.name}@${e.version}|${c}`);if(s){u.push({...s,dev:e.dev});continue}let d=i.get(c);d&&!d.withdrawn&&u.push({package:e.name,installedVersion:e.version,vulnId:d.id,aliases:d.aliases,severity:d.severity,fixedVersion:function(e,s,i){let o=null;for(let u of r(e))if(n(u)&&l(u,s))for(let e of r(u.ranges)){if(!n(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let s=null;for(let l of r(e.events)){if(!n(l))continue;let e=a(l.introduced),r=a(l.fixed);e?s=e:r&&null!==s?((0,t.f)(i,s)>=0&&0>(0,t.f)(i,r)&&(null===o||0>(0,t.f)(r,o))&&(o=r),s=null):(a(l.last_affected)||a(l.limit))&&(s=null)}}return o}(d.affected,e.name,e.version),summary:d.summary,dev:e.dev,source:"osv"})}}),u},"G",0,s,"O",0,function(e){if(!n(e))return null;let t=a(e.id);return t&&s(t)?{id:t,aliases:[...new Set(r(e.aliases).map(a).filter(e=>!!e&&s(e)))].slice(0,20),summary:(a(e.summary)??a(e.details)?.split(/\n/)[0]??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=n(e.database_specific)?a(e.database_specific.severity)?.toUpperCase():null;if(t&&i[t])return i[t];for(let t of r(e.severity)){if(!n(t)||"CVSS_V3"!==t.type&&"CVSS_V31"!==t.type)continue;let e=a(t.score)?function(e){let t,n=/^CVSS:3\.[01]\/(.+)$/.exec(e.trim());if(!n)return null;let r={};for(let e of n[1].split("/")){let[t,n]=e.split(":");t&&n&&(r[t]=n)}let a={N:.85,A:.62,L:.55,P:.2},s={L:.77,H:.44},i={N:.85,R:.62},o={H:.56,L:.22,N:0},l="C"===r.S,u=l?{N:.85,L:.68,H:.5}:{N:.85,L:.62,H:.27};if(![a[r.AV],s[r.AC],u[r.PR],i[r.UI],o[r.C],o[r.I],o[r.A]].every(e=>"number"==typeof e)||"U"!==r.S&&"C"!==r.S)return null;let d=1-(1-o[r.C])*(1-o[r.I])*(1-o[r.A]),c=l?7.52*(d-.029)-3.25*(d-.02)**15:6.42*d,p=8.22*a[r.AV]*s[r.AC]*u[r.PR]*i[r.UI];return c<=0?0:(t=Math.round(1e5*Math.min(l?1.08*(c+p):c+p,10)))%1e4==0?t/1e5:(Math.floor(t/1e4)+1)/10}(a(t.score)):null;if(null!==e)return o(e)}return(a(e.id)??"").startsWith("MAL-")?"critical":"unknown"}(e),withdrawn:!!a(e.withdrawn),affected:e.affected}:null},"j",0,function(e,t){return n(e)&&Array.isArray(e.results)&&e.results.length===t?e.results.map(e=>n(e)?r(e.vulns).map(e=>n(e)?a(e.id):null).filter(e=>!!e&&s(e)):[]):null}])},413230,e=>{var t=e.i(250474),n=e.i(32391),r=e.i(804581);let a=["critical","high","moderate","low","unknown"],s=e=>a.indexOf(e),i=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),o=e=>"string"==typeof e&&e?e:null,l={critical:"critical",high:"high",medium:"moderate",moderate:"moderate",low:"low"},u=e=>`${e.package}@${e.installedVersion}|${e.vulnId}`,d=e=>{let t;return!e.dev&&(s(e.severity)<=s("high")||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))||"moderate"===e.severity&&!0===e.direct)};e.s(["g",0,function(e){let t=e.filter(d);return t.some(e=>{let t;return"critical"===e.severity||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))})?"critical":t.length?"warning":null},"L",0,function(e){let t=e.filter(d),n=[...t].sort((e,t)=>s(e.severity)-s(t.severity)||(e.package<t.package?-1:1)),r=[];for(let e of n){let t=`${e.package} ${e.installedVersion}${e.fixedVersion?` → ${e.fixedVersion}`:" (no fix yet)"}`;r.includes(t)||r.push(t)}let a=new Set(t.map(e=>e.package)).size,i=function(e){let t={critical:0,high:0,moderate:0,low:0,unknown:0};for(let n of e)t[n.severity]++;return t}(t),o=["critical","high","moderate","low","unknown"].filter(e=>i[e]>0).map(e=>`${i[e]} ${e}`).join(", "),l=`${a} vulnerable package${1===a?"":"s"} (${o}): ${r.slice(0,4).join(", ")}${r.length>4?`, +${r.length-4} more`:""}.`;return l.length>300?`${l.slice(0,299)}…`:l},"z",0,function(e,t,n){let r=new Set;return e.forEach((e,a)=>{for(let s of t[a]??[])n.has(`${e.name}@${e.version}|${s}`)||r.add(s)}),[...r]},"A",0,function(e,t){let n=new Map;if(t)return n;for(let t of e)t.fixedVersion&&"dependabot"!==t.source&&n.set(u(t),{package:t.package,installedVersion:t.installedVersion,vulnId:t.vulnId,aliases:t.aliases,severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,dev:t.dev,source:"osv"});return n},"R",0,function(e,n,r){let a=[...e];for(let e of n)if(!a.some(t=>t.package===e.package&&(t.vulnId===e.ghsaId||t.aliases.includes(e.ghsaId)||null!==e.cveId&&t.aliases.includes(e.cveId)))&&e.range)for(let n of r)n.name===e.package&&function(e,n){let r=n.split(",").map(e=>e.trim()).filter(Boolean);return!!r.length&&r.every(n=>{let r=/^(<=|>=|<|>|=)\s*v?(\S+)$/.exec(n);if(!r)return!1;let a=(0,t.f)(e,r[2]);return"<"===r[1]?a<0:"<="===r[1]?a<=0:">"===r[1]?a>0:">="===r[1]?a>=0:0===a})}(n.version,e.range)&&a.push({package:e.package,installedVersion:n.version,vulnId:e.ghsaId,aliases:e.cveId?[e.cveId]:[],severity:e.severity,fixedVersion:e.fixed,summary:e.summary,dev:e.dev||n.dev,source:"dependabot"});return a},"E",0,function(e){if(!Array.isArray(e))return null;let t=[];for(let a of e){if(!i(a)||"open"!==a.state||!i(a.dependency)||!i(a.security_advisory))continue;let e=i(a.dependency.package)&&"npm"===a.dependency.package.ecosystem?o(a.dependency.package.name):null,s=o(a.security_advisory.ghsa_id);if(!e||!(0,n.L)(e)||!s||!(0,r.G)(s))continue;let u=i(a.security_vulnerability)?a.security_vulnerability:{},d=i(u.first_patched_version)?o(u.first_patched_version.identifier):null,c=o(a.security_advisory.cve_id);t.push({package:e,ghsaId:s,cveId:c&&/^CVE-\d{4}-\d+$/.test(c)?c:null,summary:(o(a.security_advisory.summary)??"").replace(/\s+/g," ").trim().slice(0,r.h),severity:l[(o(u.severity)??o(a.security_advisory.severity)??"").toLowerCase()]??"unknown",range:o(u.vulnerable_version_range),fixed:d&&d.length<=100?d:null,dev:"development"===a.dependency.scope})}return t},"h",0,function(e,t,n){let a=new Map(e.map(e=>[u(e),e])),s=new Set,i={insert:[],update:[],resolve:[]};for(let e of t){let t=u(e);if(s.has(t))continue;s.add(t);let o={...e,aliases:e.aliases.slice(0,r.S),summary:e.summary.slice(0,r.h),direct:n.has(e.package)},l=a.get(t);l?i.update.push({id:l.id,severity:o.severity,fixedVersion:o.fixedVersion,summary:o.summary,aliases:o.aliases,dev:o.dev,direct:o.direct}):i.insert.push(o)}return i.resolve=e.filter(e=>!s.has(u(e))).map(e=>e.id),i},"U",0,function(e,t,n,r=!1){return!!r||!e||!e.scannedAt||(e.error?n.getTime()-e.scannedAt.getTime()>=72e6||e.lockfileSha!==t:e.lockfileSha!==t||!e.queriedAt||n.getTime()-e.queriedAt.getTime()>=6048e5)},"M",0,function(e){return[...e].sort((e,t)=>(e.scannedAt?.getTime()??-1)-(t.scannedAt?.getTime()??-1)||(e.id<t.id?-1:1))},"B",0,function(e){let n=new Map,r=new Set;for(let a of e){if(!a.direct||!a.fixedVersion||0>=(0,t.f)(a.fixedVersion,a.installedVersion))continue;!0!==a.dev&&r.add(a.package);let e=n.get(a.package)??{package:a.package,to:a.fixedVersion,vulnIds:[],cves:[],severity:a.severity};for(let n of((0,t.f)(a.fixedVersion,e.to)>0&&(e.to=a.fixedVersion),e.vulnIds.includes(a.vulnId)||e.vulnIds.push(a.vulnId),a.aliases))/^CVE-/.test(n)&&!e.cves.includes(n)&&e.cves.push(n);s(a.severity)<s(e.severity)&&(e.severity=a.severity),n.set(a.package,e)}for(let e of n.values())r.has(e.package)||(e.dev=!0);return[...n.values()].sort((e,t)=>s(e.severity)-s(t.severity)||(e.package<t.package?-1:1))}])},479301,e=>{let t=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;e.s(["f",0,e=>"string"==typeof e&&t.test(e)])},911191,e=>{let t=[[/(?:\b|(?<=%2F))hb(?:_|%5F)[0-9a-f]{32}\b/gi,"hb_[hidden]"],[/(\/api(?:\/|%2F)ping(?:\/|%2F))(?!hb_\[hidden\])[^/?#\s]+/gi,"$1[hidden]"],[/\b(postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|rediss):\/\/\S+/gi,"$1://[hidden]"],[/\b(https?):\/\/[^\s/@:]+:[^\s/@]+@/gi,"$1://[hidden]@"],[/\b(Bearer|Basic)\s+[^\s"',;]+/gi,"$1 [hidden]"],[/\b((?:access_|refresh_|id_)?token|secret|password|passwd|pwd|api[_-]?key|apikey|authorization|cookie|session|private_key)(["']?\s*[:=]\s*["']?)(?!Bearer\b|Basic\b)([^\s"'&,;}]+)/gi,"$1$2[hidden]"],[/\beyJ[\w-]{8,}\.[\w-]{8,}\.[\w-]{8,}/g,"[jwt]"],[/\b[\w.+-]+@[\w-]+(?:\.[\w-]+)+\b/g,"[email]"],[/\b[A-Fa-f0-9]{40,}\b/g,"[redacted]"],[/\b(?=[A-Za-z0-9_-]*\d)(?=[A-Za-z0-9_-]*[A-Za-z])[A-Za-z0-9_-]{40,}\b/g,"[redacted]"]];function n(e,t){return e.length>t?`${e.slice(0,t-1)}…`:e}e.s(["l",0,n,"n",0,function(e){return null===e?null:n(e.split(/[?#]/)[0]||"/",512)},"h",0,function(e){return t.reduce((e,[t,n])=>e.replace(t,n),e)}])},659846,e=>{e.s(["f",0,["vercel","supabase","neon","firebase","turso","upstash","cloudflare","github","github_write"]],659846)},154491,e=>{let t=["home","hosting","database","devops","manage"],n=["hosting","database","devops"],r={vercel:"hosting",cloudflare:"hosting",supabase:"database",neon:"database",firebase:"database",turso:"database",upstash:"database",github:"devops",github_write:"devops"};function a(e){return Array.isArray(e)?t.filter(r=>"string"==typeof r&&t.includes(r)&&n.includes(r)&&e.includes(r)):[]}let s={MonitorDown:"hosting",HighLatency:"hosting",DeploymentFailed:"hosting",CertExpiringSoon:"hosting",DomainExpiringSoon:"hosting",DnsProxiedToVercel:"hosting",DatabasePaused:"database",StorageAlmostFull:"database",NeonComputeHigh:"database",FirestoreQuotaHigh:"database",AutoPauseRisk:"database",ComputeHigh:"database",DbQuotaHigh:"database",VulnerableDependency:"devops",FrameworkVulnerable:"hosting",MonitorDomainMoved:"hosting",CredentialExpiring:"account",CollectorStale:null},i=/^Log/;e.s(["D",0,r,"O",0,(e,t,n)=>{let a;if(!e.size)return!1;let o="account"===(a=s[t])?n?r[n]??null:null:void 0!==a?a:i.test(t)?"hosting":null;return null!==o&&e.has(o)},"N",0,a,"s",0,function(e){return{ruleKeys:Object.entries(s).filter(([,t])=>null!==t&&"account"!==t&&e.has(t)).map(([e])=>e),providers:Object.entries(r).filter(([,t])=>e.has(t)).map(([e])=>e)}},"I",0,e=>new Set(a(e))])},7494,e=>{let t={CRITICAL:4,HIGH:3,MODERATE:2,LOW:1,UNKNOWN:0};function n(e){return e.reduce((e,n)=>t[n.severity]>t[e]?n.severity:e,"UNKNOWN")}let r=e=>`${e} known vulnerabilit${1===e?"y":"ies"}`;e.s(["t",0,function(e,a,s){let i=new Set((a?.findings??[]).map(e=>e.id));if("vulnerable"===s.status&&s.findings.length>0){if(s.findings.every(e=>i.has(e.id)))return null;let a=n(s.findings);return{kind:t[a]>=t.HIGH?"err":"warn",message:`${e} runs Next.js ${s.version} with ${r(s.findings.length)} (${a.toLowerCase()})`,detail:s.findings.map(e=>e.id).join(", ").slice(0,1e3)}}return"ok"===s.status&&i.size>0?{kind:"ok",message:`${e} no longer has known Next.js vulnerabilities (now ${s.version})`,detail:null}:null},"I",0,function(e){return[...e].sort((e,n)=>t[n.severity]-t[e.severity]||(e.id<n.id?-1:+(e.id>n.id)))},"q",0,r,"N",0,n])},250474,32391,e=>{function t(e){let[t,...n]=e.trim().split("-"),r=t.split(".").map(e=>Number.parseInt(e,10)||0);return{nums:[r[0]??0,r[1]??0,r[2]??0],pre:n.length?n.join("-").split("."):[]}}e.s(["f",0,function(e,n){let r=t(e),a=t(n);for(let e=0;e<3;e++)if(r.nums[e]!==a.nums[e])return r.nums[e]-a.nums[e];return function(e,t){if(!e.length||!t.length)return e.length?-1:+!!t.length;for(let n=0;n<Math.max(e.length,t.length);n++){if(void 0===e[n])return -1;if(void 0===t[n])return 1;let r=/^\d+$/.test(e[n])?Number(e[n]):null,a=/^\d+$/.test(t[n])?Number(t[n]):null;if(null!==r&&null!==a){if(r!==a)return r-a}else if(null!==r||null!==a)return null!==r?-1:1;else if(e[n]!==t[n])return e[n]<t[n]?-1:1}return 0}(r.pre,a.pre)}],250474);let n=/^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9._~-][a-z0-9._~-]*$/i,r=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,a=e=>e.length<=214&&n.test(e),s=e=>e.length<=100&&r.test(e),i=e=>"object"==typeof e&&null!==e&&!Array.isArray(e);function o(e){let t=new Map;for(let n of e){if(!a(n.name)||!s(n.version))continue;let e=`${n.name}@${n.version}`,r=t.get(e);if(r?r.dev=r.dev&&n.dev:t.set(e,{...n}),t.size>=1e4)break}return[...t.values()].sort((e,t)=>e.name===t.name?e.version<t.version?-1:1:e.name<t.name?-1:1)}function l(e){try{return JSON.parse(e)}catch{return null}}let u=e=>{let t=e.lastIndexOf("node_modules/");return t<0?null:e.slice(t+13)||null},d=e=>e.trim().replace(/^['"]|['"]$/g,""),c=e=>i(e)?Object.fromEntries(Object.entries(e).filter(e=>"string"==typeof e[1])):{};function p(e){let t=/^\s*(?:\^|~|>=|=|v)?\s*v?(\d+)(?:\.(\d+|x|\*))?(?:\.(\d+|x|\*))?(-[0-9A-Za-z.-]+)?\s*$/.exec(e);if(!t)return null;let n=e=>e&&/^\d+$/.test(e)?e:"0";return`${t[1]}.${n(t[2])}.${n(t[3])}${t[4]??""}`}e.s(["a",0,[{path:"package-lock.json",kind:"npm"},{path:"npm-shrinkwrap.json",kind:"npm"},{path:"pnpm-lock.yaml",kind:"pnpm"},{path:"yarn.lock",kind:"yarn"},{path:"bun.lock",kind:"bun"}],"e",0,function(e){let t=[],n=(e,n)=>{for(let[r,a]of Object.entries(e)){let e=p(a);e&&t.push({name:r,version:e,dev:n})}};return n(e.dependencies,!1),n(e.optionalDependencies,!1),n(e.devDependencies,!0),o(t)},"K",0,function(e){return e?new Set([...Object.keys(e.dependencies),...Object.keys(e.devDependencies),...Object.keys(e.optionalDependencies)]):new Set},"L",0,a,"C",0,s,"Y",0,p,"D",0,function(e,t){switch(e){case"npm":let n=l(t);if(!i(n))return null;let r=[];if(i(n.packages)){for(let[e,t]of Object.entries(n.packages)){if(!e||!i(t)||!0===t.link||"string"!=typeof t.version)continue;let n="string"==typeof t.name&&e.includes("node_modules/")?t.name:u(e);n&&r.push({name:n,version:t.version,dev:!0===t.dev})}return o(r)}if(i(n.dependencies)){let e=(t,n)=>{if(!(n>40))for(let[a,s]of Object.entries(t))i(s)&&("string"==typeof s.version&&r.push({name:a,version:s.version,dev:!0===s.dev}),i(s.dependencies)&&e(s.dependencies,n+1))};return e(n.dependencies,0),o(r)}return null;case"pnpm":return function(e){let t=e.split(/\r?\n/);if(!t.some(e=>/^lockfileVersion:/.test(e)))return null;let n=[],r=!1,s=null;for(let e of t){if(/^\S/.test(e)){r=/^packages:\s*$/.test(e),s=null;continue}if(!r)continue;let t=/^ {2}(\S.*?):\s*$/.exec(e);if(t){let e=function(e){let t=d(e).replace(/^\//,""),n=t.indexOf("(");n>0&&(t=t.slice(0,n));let r=t.lastIndexOf("@");if(r>0&&!t.slice(r+1).includes("/")&&a(t.slice(0,r)))return{name:t.slice(0,r),version:t.slice(r+1).split("_")[0]};let s=t.lastIndexOf("/");return s<=0?null:{name:t.slice(0,s),version:t.slice(s+1).split("_")[0]}}(t[1]);(s=e?{...e,dev:!1}:null)&&n.push(s);continue}s&&/^ {4}dev: true\s*$/.test(e)&&(s.dev=!0)}return o(n)}(t);case"yarn":return function(e){let t=e.split(/\r?\n/),n=[],r=null,a=!1;for(let e of t){if(!e.trim()||e.trimStart().startsWith("#"))continue;if(/^\S/.test(e)){let t=e.replace(/:\s*$/,"");r=t.startsWith("__metadata")||/@(?:workspace|link|portal|file):/.test(t)?null:function(e){let t=d(e),n=t.indexOf("@",+!!t.startsWith("@"));return n>0?t.slice(0,n):null}(t.split(/,\s*/)[0]),a=!0;continue}let t=/^ {2}version:?\s+"?([^"\s]+)"?\s*$/.exec(e);t&&r&&(n.push({name:r,version:t[1],dev:!1}),r=null)}return a?o(n):null}(t);case"bun":let s=l(t.replace(/,(\s*[}\]])/g,"$1"));if(!i(s)||!i(s.packages))return null;let c=[];for(let e of Object.values(s.packages)){if(!Array.isArray(e)||"string"!=typeof e[0])continue;let t=e[0],n=t.lastIndexOf("@");n<=0||c.push({name:t.slice(0,n),version:t.slice(n+1),dev:!1})}return o(c)}},"b",0,function(e){let t=l(e);return i(t)?{dependencies:c(t.dependencies),devDependencies:c(t.devDependencies),optionalDependencies:c(t.optionalDependencies)}:null}],32391)}]})();
+
+//# sourceMappingURL=src_lib_1iwyh213u9xts._.js.map