watchbell 1.2.0 → 1.2.1

package/server/.next/server/chunks/ssr/src_0_5_wl0sww-x7._.js

@@ -1,5 +1,5 @@
-(()=>{"use strict";module.exports=[138984,a=>{var b=a.i(26972),c=a.i(427221),d=a.i(827857),e=a.i(899370),f=a.i(371289);let g=b.z.object({COLLECTOR_SECRET:c.z.string().min(32),CRON_SECRET:c.z.string().min(16),QSTASH_CURRENT_SIGNING_KEY:c.z.string().min(10),QSTASH_NEXT_SIGNING_KEY:c.z.string().min(10)}),h=g.extend({QSTASH_CURRENT_SIGNING_KEY:d.z.union([e.z.literal(""),c.z.string().min(10)]).default(""),QSTASH_NEXT_SIGNING_KEY:d.z.union([e.z.literal(""),c.z.string().min(10)]).default("")}),i=!1;a.s(["f",0,function(){try{var a=process.env;let b=("selfhost"===(0,f.c)(a)?h:g).safeParse(a);if(!b.success)throw Error(`Missing or invalid scheduler settings: ${b.error.issues.map(a=>a.path.join(".")).join(", ")}`);return b.data}catch(a){return i||(i=!0,console.warn(a instanceof Error?a.message:"Missing or invalid scheduler settings")),null}}])},736780,664892,a=>{var b=a.i(93321),c=a.i(530385),d=a.i(548734),e=a.i(837137),f=a.i(358179),g=a.i(912283),h=a.i(117859),i=a.i(679662);let j={checks:"waiting for CI",preview:"waiting for preview",smoke:"smoke test",merging:"merging…",merged:"merged ✅","ready-manual":"ready to merge (manual)",failed:"needs a look ⚠️",timeout:"needs a look ⚠️",closed:"closed"},k=(a,b,c)=>{let d=`PR #${a}: ${j[b]}${c?` — ${c}`:""}`;return d.length>200?`${d.slice(0,199)}…`:d},l=new Set(["success","neutral","skipped"]),m=a=>"completed"!==a.status?"pending":l.has(a.conclusion??"")?"success":"failure";a.s(["X",0,["checks","preview","smoke","merging"],"w",0,15e3,"j",0,function(a){let b=(a.checkRuns??a.actionRuns??[]).map(m);return(a.combined&&a.combined.total>0&&b.push("success"===a.combined.state?"success":"pending"===a.combined.state?"pending":"failure"),b.includes("failure"))?"failure":b.includes("pending")?"pending":"success"},"L",0,function(a){if(!a.length||a.some(a=>a.authWall))return null;let b=a.find(a=>null===a.status||a.status<200||a.status>399);return b?{mode:"http",result:"fail",reason:null===b.status?`${b.path} didn't answer within 15 seconds`:`${b.path} answered ${b.status}`}:{mode:"http",result:"pass",reason:null}},"S",0,function(a,b,c){return(401===a||403===a)&&(/vercel\.com\/(sso|login)|Authentication Required|_vercel_sso|vercel-authentication/i.test(b)||/_vercel_sso/i.test(c.get("set-cookie")??"")||"vercel"===(c.get("server")??"").toLowerCase())},"n",0,function(a,b,c){return null!==c&&c>0?{mode:"logs",result:"fail",reason:`${c} errors in the preview logs`}:b.getTime()-a.getTime()<18e4||null===c?{mode:"logs",result:"wait",reason:null}:{mode:"logs",result:"pass",reason:null}},"E",0,function(a){let b=["/"];for(let c of a){let a;try{a=new URL(c).pathname||"/"}catch{continue}!b.includes(a)&&b.length<4&&b.push(a)}return b},"m",0,k,"f",0,function(a,b){let c=a.getTime();return(null===b||!(c-b<1e5))&&(Math.floor(c/6e4)%2==0||null!==b&&c-b>=24e4)},"M",0,function(a){if(a.pr.merged)return{kind:"done",stage:"merged"};if("closed"===a.pr.state)return{kind:"done",stage:"closed"};if(a.pr.headSha!==a.recordedSha)return{kind:"wait",stage:"checks",reason:"new commit on the PR branch, checking again",resetSha:a.pr.headSha};let b=a.now.getTime()-a.openedAt.getTime()>27e5;return"failure"===a.checks?{kind:"stop",stage:"failed",reason:"CI failed"}:!1===a.pr.mergeable?{kind:"stop",stage:"failed",reason:"conflicts with the main branch"}:"error"===a.preview.state||"canceled"===a.preview.state?{kind:"stop",stage:"failed",reason:"Vercel preview failed"}:"pending"===a.checks||null===a.pr.mergeable?b?{kind:"stop",stage:"timeout",reason:"CI not finished within 45 minutes"}:{kind:"wait",stage:"checks",reason:null}:"ready"!==a.preview.state?b?{kind:"stop",stage:"timeout",reason:"preview not ready within 45 minutes"}:{kind:"wait",stage:"preview",reason:null}:a.smoke&&"wait"!==a.smoke.result?"fail"===a.smoke.result?{kind:"stop",stage:"failed",reason:`preview smoke test failed: ${a.smoke.reason??"?"}`}:a.autoRollbackOn?{kind:"merge"}:{kind:"stop",stage:"ready-manual",reason:"PR is ready to merge, but auto-rollback is off; merge it manually"}:b?{kind:"stop",stage:"timeout",reason:"preview smoke test not finished within 45 minutes"}:{kind:"wait",stage:"smoke",reason:null}}],664892);var n=a.i(120213),o=a.i(492665),p=a.i(683439),q=a.i(812092),r=a.i(75105),s=a.i(322145),t=a.i(976937);let u=a=>({done:!1,message:a});async function v(){let[a]=await (0,d.f)().select().from(e.accounts).where((0,b.u)(e.accounts.provider,"github_write")).orderBy((0,c.M)(e.accounts.createdAt)).limit(1);if(!a)return null;let g=(0,f.V)({ciphertext:a.credentialCiphertext,iv:a.credentialIv},(0,o.f)().OPS_ENCRYPTION_KEY);return g?{id:a.id,token:g}:"unreadable"}let w={severity:"no package at the selected severity",major:"an update jumps a major version",nothing:"nothing can be updated"};async function x(c,f,j,l=s.W,m={}){if(!(0,p.f)(f)||!(0,p.f)(j))return l(u("Something in that request wasn't valid."),c,"");let o=await (0,s.q)(c.id,"github_bump_pr",f);if(o)return l(u(o),c,"");let y=await v();if(null===y)return l(u('A GitHub PR-write token is needed: connect "GitHub (PR write)" on Connections (fine-grained, this repository only, Contents and Pull requests: Read and write; Commit statuses: Read for automatic merges), then ask again.'),c,"");if("unreadable"===y)return l(u("Can't read the stored GitHub PR-write credential. Replace it on Connections."),c,"");let[z]=await (0,d.f)().select({app:e.resources.name,fullName:e.githubRepos.fullName,owner:e.githubRepos.owner,goneAt:e.githubRepos.goneAt,lockfilePath:e.dependencyScans.lockfilePath}).from(e.appRepos).innerJoin(e.githubRepos,(0,b.u)(e.githubRepos.id,e.appRepos.repoId)).innerJoin(e.resources,(0,b.u)(e.resources.id,e.appRepos.appId)).leftJoin(e.dependencyScans,(0,b.u)(e.dependencyScans.repoId,e.appRepos.repoId)).where((0,b.b)((0,b.u)(e.appRepos.appId,f),(0,b.u)(e.appRepos.repoId,j))).limit(1);if(!z||z.goneAt)return l(u(r.G),c,y.id);let A=await (0,d.f)().select({package:e.dependencyVulns.package,installedVersion:e.dependencyVulns.installedVersion,fixedVersion:e.dependencyVulns.fixedVersion,vulnId:e.dependencyVulns.vulnId,aliases:e.dependencyVulns.aliases,severity:e.dependencyVulns.severity,direct:e.dependencyVulns.direct}).from(e.dependencyVulns).where((0,b.b)((0,b.u)(e.dependencyVulns.repoId,j),(0,b.M)(e.dependencyVulns.resolvedAt))).limit(2e3),B=(0,n.B)(A);if(!B.length)return l(u(`Nothing to update in ${z.app}: no direct package has a fixed version for its open advisories.`),c,y.id);if(m.auto){let a=(0,g.a)(B,(0,g.D)(A),m.auto.severities);if(!a.ok)return l(u(`Automatic PR not opened: ${w[a.why]}. The proposal waits for your approval.`),c,y.id);B=a.upgrades}let{auto:C,proposalId:D,...E}=m,F={timeoutMs:8e3,...E},G=await (0,q.H)(y.token,z.fullName,F);if(!G.ok)return l({done:!1,failed:G,audit:{message:`Package update PR failed \xb7 ${z.app}`,resourceId:f}},c,y.id);let H=G.data.defaultBranch,I=await (0,q.M)(y.token,z.fullName,H,F);if(!I.ok)return l({done:!1,failed:I,audit:{message:`Package update PR failed \xb7 ${z.app}`,resourceId:f}},c,y.id);if(!I.data)return l(u(`The default branch ${H} wasn't found.`),c,y.id);let J=await (0,q.E)(y.token,z.fullName,I.data,F);if(!J.ok)return l({done:!1,failed:J,audit:{message:`Package update PR failed \xb7 ${z.app}`,resourceId:f}},c,y.id);if(!J.data)return l(u("There is no package.json at the repository root."),c,y.id);let K=(0,h.k)(J.data.text,B);if(!K?.length)return l(u(`package.json in ${z.app} already allows the fixed versions (or its ranges can't be rewritten). Run npm install there.`),c,y.id);if(C){let a=K.find(a=>{let b=(0,i.Y)(a.from);return!b||!(0,g.J)(b,a.fixed)});if(a)return l(u(`Automatic PR not opened: ${a.package} ${a.from} → ${a.to} jumps a major version. The proposal waits for your approval.`),c,y.id)}let L=(0,h.M)(J.data.text,K);if(!L)return l(u("package.json couldn't be edited safely."),c,y.id);let M=(0,h.U)(K);if(!(0,h.c)(M,H))return l(u("Refused: the PR branch would be the default branch."),c,y.id);let N=await (0,q.x)(y.token,z.fullName,z.owner,M,H,F);if(N.ok&&N.data)return{ok:!0,message:`Pull request #${N.data.number} for these updates is already open.`};let O=await (0,q.e)(y.token,z.fullName,F);if(!O.ok)return l({done:!1,failed:O,audit:{message:`Package update PR failed \xb7 ${z.app}`,resourceId:f}},c,y.id);if(O.data.length){let a=new Map((await (0,d.f)().select({number:e.dependencyPrs.number,packages:e.dependencyPrs.packages}).from(e.dependencyPrs).where((0,b.b)((0,b.u)(e.dependencyPrs.repoId,j),(0,b.y)(e.dependencyPrs.number,O.data.map(a=>a.number))))).map(a=>[a.number,a.packages])),f=(0,g.U)(K.map(a=>a.package),O.data.map(b=>({number:b.number,branch:b.branch,title:b.title,packages:a.get(b.number)??null})));if(f)return l(u(`Pull request #${f.number} for the same package is already open in ${z.app}. Merge or close it first.`),c,y.id)}let P=await (0,q.M)(y.token,z.fullName,M,F);if(P.ok&&P.data)return l(u(`Branch ${M} already exists without an open pull request. Delete it on GitHub, then ask again.`),c,y.id);let Q=i.a.find(a=>a.path===z.lockfilePath)?.kind??null,R=a=>l({done:!1,failed:a,audit:{message:`Package update PR failed \xb7 ${z.app} \xb7 ${M}`,resourceId:f}},c,y.id),S=await (0,q.k)(y.token,z.fullName,M,I.data,H,F);if(!S.ok)return R(S);let T=await (0,q.D)(y.token,z.fullName,M,H,L,J.data.sha,(0,h.G)(K),F);if(!T.ok)return R(T);let U=await (0,q.y)(y.token,z.fullName,M,H,(0,h.f)(K),(0,h.y)(K,Q,!!C),F);if(!U.ok)return R(U);let V=K.map(a=>`${a.package} ${a.from} → ${a.to}`).join(", "),W=await (0,q.M)(y.token,z.fullName,M,F).catch(()=>null);if(W?.ok&&W.data){await (0,d.f)().insert(e.dependencyPrs).values({repoId:j,appId:f,proposalId:D??null,number:U.data.number,branch:M,baseBranch:H,headSha:W.data,title:(0,h.f)(K).slice(0,200),packages:K.map(a=>a.package),auto:!!C,stage:"checks",stageText:k(U.data.number,"checks")}).onConflictDoNothing().catch(()=>console.warn("deps: recording the PR failed"));let{extensions:b}=await a.A(414785);await b.runner?.queueLockfileJob({repoId:j,branch:M,headSha:W.data,prNumber:U.data.number,lockfilePath:z.lockfilePath??null,targets:K.map(a=>({name:a.package,version:a.fixed}))}).catch(()=>console.warn("deps: queueing the lockfile job failed")),await (0,t.U)(y.token,{repo:z.fullName,branch:M,lockfilePath:z.lockfilePath??null,prNumber:U.data.number})}return l({done:!0,message:`Pull request #${U.data.number} opened for ${z.app}: ${V}. Run npm install on the branch before merging.`,audit:{message:`Package update PR opened \xb7 ${z.app} \xb7 #${U.data.number}`,resourceId:f,detail:V}},c,y.id)}async function y(a,c){if(!(0,p.f)(a))return{ok:!1,why:"target"};let f=await v();if(!f||"unreadable"===f)return{ok:!1,why:"no write token"};let h=await (0,d.f)().select({package:e.dependencyVulns.package,installedVersion:e.dependencyVulns.installedVersion,fixedVersion:e.dependencyVulns.fixedVersion,vulnId:e.dependencyVulns.vulnId,aliases:e.dependencyVulns.aliases,severity:e.dependencyVulns.severity,direct:e.dependencyVulns.direct}).from(e.dependencyVulns).where((0,b.b)((0,b.u)(e.dependencyVulns.repoId,a),(0,b.M)(e.dependencyVulns.resolvedAt))).limit(2e3),i=(0,g.a)((0,n.B)(h),(0,g.D)(h),c);return i.ok?{ok:!0}:{ok:!1,why:i.why}}a.s(["J",0,y,"W",0,x,"G",0,v],736780)},313235,a=>{var b=a.i(927262),c=a.i(462820);let d={workloads:"Workloads",databases:"Databases",network:"Network",observe:"Observe",ai:"AI & API",admin:"Administration"},e={MonitorDown:"workloads",HighLatency:"workloads",DeploymentFailed:"workloads",DatabasePaused:"databases",StorageAlmostFull:"databases",NeonComputeHigh:"databases",FirestoreQuotaHigh:"databases",AutoPauseRisk:"databases",ComputeHigh:"databases",DbQuotaHigh:"databases",CertExpiringSoon:"network",DomainExpiringSoon:"network",DnsProxiedToVercel:"network",CollectorStale:"observe",CredentialExpiring:"admin",VulnerableDependency:"workloads"},f=new Set(["MonitorDown","HighLatency","DeploymentFailed","VulnerableDependency"]);a.s(["H",0,d,"p",0,function(a){if((0,b.h)(a.ruleKey))return f.has(a.ruleKey)&&null!==a.resourceKind&&"app"!==a.resourceKind?"observe":e[a.ruleKey];let c=new Set(a.ruleKey.replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)),d=(...a)=>a.some(a=>c.has(a));return d("ai","router","gateway","model","models","provider","quota","llm","gemini")?"ai":d("key","keys","member","members","security","audit","credential","credentials","mfa","token")?"admin":d("database","db","storage","compute","neon","supabase","firestore","firebase")?"databases":d("domain","domains","dns","cert","certificate","tls","zone")?"network":"app"===a.resourceKind?"workloads":"observe"},"y",0,a=>c.X.proposedBy(d[a])])},247881,649031,a=>{var b=a.i(488345),c=a.i(342634),d=a.i(313235),e=a.i(188282);let f=["LogErrorSpike","LogErrors","LogDbErrors"],g="timeout|ECONNREFUSED|too many connections|terminating connection|connection terminated|endpoint is disabled|compute.*suspend";RegExp(g,"i");let h=/^dpl_[A-Za-z0-9]{8,40}$/,i=/^ep-[a-z0-9-]{3,60}$/,j=/^[a-z0-9]{8,40}$/;function k(a,d,e){let f=d?(0,b.f)(d,e,120):"";return(0,c.l)((0,b.f)(f?`${a}. Most common: ${f}`:a,e,c.j)||a,c.j)}let l=a=>`${a.ruleKey}:${a.resourceId??""}:${a.action}`,m=new Set(["pending","approved","running"]);a.s(["s",0,864e5,"b",0,72e5,"V",0,3,"N",0,g,"G",0,20,"T",0,f,"v",0,72e5,"H",0,18e5,"w",0,10,"I",0,72e5,"x",0,function(a,b,c){let d=new Set(b.filter(a=>m.has(a.status)||null!==a.closedAt&&c.getTime()-a.closedAt.getTime()<72e5).map(l)),e=new Set;return a.filter(a=>{let b=l(a);return!(d.has(b)||e.has(b))&&(e.add(b),!0)})},"t",0,function(a,b,f){return(function(a,b,c){let d=[],e=c.getTime();if(null!==a.liveAt&&e-a.liveAt.getTime()<72e5&&a.liveAt.getTime()<=e&&a.errorsSinceLive>=Math.max(10,Math.ceil(5*a.baselineErrors/24))&&a.currentId&&a.previousId&&h.test(a.previousId)&&a.previousId!==a.currentId){let c=`${a.errorsSinceLive} errors since the deploy went live ${Math.max(1,Math.round((e-a.liveAt.getTime())/6e4))} min ago (${a.baselineErrors} in the 24 h before)`;d.push({ruleKey:"LogErrorSpike",room:"workloads",action:"vercel_rollback",resourceKind:"app",resourceId:a.appId,targetRef:a.previousId,reason:k(c,a.topSinceLive,b)})}let f=null!==a.lastDeployAt&&e-a.lastDeployAt.getTime()<72e5;if(a.errors30>=20&&!f&&a.httpMonitorId&&d.push({ruleKey:"LogErrors",room:"workloads",action:"recheck",resourceKind:"app",resourceId:a.appId,targetRef:a.httpMonitorId,reason:k(`${a.errors30} errors in the last 30 min`,a.top30,b)}),a.dbErrors30>=3&&a.db){let c=k(`${a.dbErrors30} database connection errors in the last 30 min`,a.topDb,b),e=a.db;("neon_project"===e.kind||"neon_branch"===e.kind)&&e.wakeEndpoint&&i.test(e.wakeEndpoint)?d.push({ruleKey:"LogDbErrors",room:"databases",action:"neon_wake",resourceKind:e.kind,resourceId:e.resourceId,targetRef:e.wakeEndpoint,reason:c}):"supabase_project"===e.kind&&e.supabasePaused&&e.supabaseRef&&j.test(e.supabaseRef)&&d.push({ruleKey:"LogDbErrors",room:"databases",action:"supabase_restore",resourceKind:e.kind,resourceId:e.resourceId,targetRef:e.supabaseRef,reason:c})}return d})(a,b,f).map(g=>{let h="app"===g.resourceKind?(0,c.J)("app",a.appId,a.appName,b):(0,c.J)(g.resourceKind,g.resourceId,null,b);return{alertId:null,ruleKey:g.ruleKey,room:g.room,action:g.action,risk:e.H[g.action].risk,title:(0,c.M)(g.action,h),reason:g.reason,resourceKind:g.resourceKind,resourceId:g.resourceId,resourceName:h,targetRef:g.targetRef,proposedBy:(0,d.y)(g.room),expiresAt:new Date(f.getTime()+e.V)}})},"D",0,function(a,b){let c=a.getTime();return(null===b||!(c-b<27e4))&&(Math.floor(c/6e4)%5==0||null!==b&&c-b>=6e5)},"W",0,function(a,b){let c=new Set(b.map(l));return a.filter(a=>{let b;return"pending"===a.status&&(b=a.ruleKey,f.includes(b))&&!c.has(l(a))}).map(a=>a.id)}],247881);let n=new Set(["MonitorDown","LogErrorSpike"]);a.s(["r",0,72e5,"M",0,n,"s",0,function(a,b){let c=a=>({ok:!1,why:a});if(!a.setting.enabled)return c("off");if(!a.ruleKey||!n.has(a.ruleKey))return c("rule");let d=a.deploy;if(!d||!d.liveAt)return c("no live deploy");let e=b.getTime()-d.liveAt.getTime();return e<0||e>6e4*a.setting.windowMin?c("outside the window"):d.previousId&&a.targetRef===d.previousId&&d.previousId!==d.currentId?d.newestProdCreatedAt&&d.currentCreatedAt.getTime()<d.newestProdCreatedAt.getTime()?c("live deploy is a rollback"):a.rolledOrPromotedLately?c("live deploy came from a rollback or promote"):"ready"!==(d.previousState??"").toLowerCase()?c("previous not ready"):!d.previousCreatedAt||b.getTime()-d.previousCreatedAt.getTime()>2592e6?c("previous too old"):a.autoLately?c("auto-rollback within 2 h"):a.sameDeployBefore?c("already rolled back once"):a.inFlight?c("another auto-rollback is running"):{ok:!0}:c("target changed")},"u",0,(a,b,d)=>(0,c.l)(`Automatic: the new deploy ${a} errored in the first ${b} minutes. ${d}`),"E",0,a=>a.currentSha&&/^[0-9a-f]{7,40}$/i.test(a.currentSha)?a.currentSha.slice(0,7):a.currentId.slice(0,16)],649031)},691100,a=>{let b;var c,d=a.i(93321),e=a.i(530385),f=a.i(351674),g=a.i(548734),h=a.i(462820),i=a.i(837137),j=a.i(247730),k=a.i(455317),l=a.i(930270),m=a.i(396667),n=a.i(160147),o=a.i(767163),p=a.i(757902),q=a.i(893893),r=a.i(556987),s=a.i(142754),t=a.i(342634),u=a.i(247881),v=a.i(649031),w=a.i(381544),x=a.i(138984),y=a.i(492665),z=a.i(221084),A=a.i(736780),B=a.i(560954),C=a.i(895176),D=a.i(30184),E=a.i(721170),F=a.i(322145),G=a.i(248358),H=a.i(915598),I=a.i(312573),J=a.i(323878),K=a.i(19809),L=a.i(371289),M=a.i(94473),N=a.i(188282);let O={checkMonitorNow:C.X,keepAliveNow:B.v,wakeAs:E.v,supabaseAct:G.f,redeployAs:H.B,rollbackAs:H.U,finish:F.W,recordAction:z.f,limit:J.C,bumpPrAs:A.W,autoSecurity:()=>(0,M.X)(),recheckDomain:D._};async function P(){let[a]=await (0,g.f)().select({at:i.collectorRuns.startedAt}).from(i.collectorRuns).where(f.B`(${i.collectorRuns.trigger} = 'vercel_cron' or (${i.collectorRuns.trigger} = 'manual' and ${i.collectorRuns.tasks} ? 'rollups'))`).orderBy((0,e.A)(i.collectorRuns.startedAt)).limit(1);return a?.at??null}async function Q(a){let b=await (a.lastDailyRunAt??P)(),c=(a.now??(()=>new Date))();if(b&&c.getTime()-b.getTime()<216e5)return{ok:!1,error:"The daily job ran less than 6 hours ago."};let d=(a.dailyTarget??function(){let a=(0,x.f)();return a?{url:`${(0,y.f)().SITE_URL.replace(/\/+$/,"")}/api/daily`,secret:a.CRON_SECRET}:null})();if(!d)return{ok:!1,error:"The scheduler settings are missing, so the daily job can't be started."};try{let b=await (a.fetch??fetch)(d.url,{headers:{Authorization:`Bearer ${d.secret}`},signal:AbortSignal.timeout(4e4),redirect:"manual"});if(!b.ok||b.status>=300)return{ok:!1,error:`The daily job route answered ${b.status}.`};return{ok:!0,message:`Daily job ran again (${b.status}).`}}catch(a){if(a instanceof Error&&("TimeoutError"===a.name||"AbortError"===a.name))return{ok:!0,message:"Daily job started; it's still running — the heartbeat turns Up when it finishes."};throw a}}let R="The proposal's target is missing, so it can't run.";async function S(a,b,c=O){let d="auto"===b,e=d?{id:t.e,userId:null}:{id:b.id,userId:b.userId},f=(a,b,e)=>c.finish(a,b,e,{refresh:!1,...d?{auditPrefix:t.v}:{}});try{if(!a.resourceId||!a.targetRef)return{ok:!1,error:R};if((0,L.W)()&&"recheck"!==a.action)return await c.recordAction({kind:"ok",message:`${d?t.v:""}${N.H[a.action].label} (simulated)`,detail:"Simulated in the demo",resourceId:a.resourceId,actorUserId:e.userId}).catch(()=>console.warn("audit event failed")),{ok:!0,message:K.r};switch(a.action){case"recheck":{let b=await c.limit(I.t.check,e.id);if(!b.allowed)return{ok:!1,error:`Too many checks. Try again in ${(0,I.H)(b.retryAfter)}.`};let f=await c.checkMonitorNow(a.targetRef);if(!f.ok)return{ok:!1,error:f.error};if(f.audit)try{await c.recordAction({kind:!1===f.passed?"err":"ok",...f.audit,message:`${d?t.v:""}${f.audit.message}`,actorUserId:e.userId})}catch{console.warn("audit event failed")}return{ok:!0,message:f.message}}case"domain_recheck":{let b=await c.limit(I.t.domainCheck,e.id);if(!b.allowed)return{ok:!1,error:`Too many checks. Try again in ${(0,I.H)(b.retryAfter)}.`};let f=await (c.recheckDomain??D._)(a.targetRef);if(!f.ok)return f;return await c.recordAction({kind:"ok",...f.audit,message:`${d?t.v:""}${f.audit.message}`,actorUserId:e.userId}).catch(()=>console.warn("audit event failed")),{ok:!0,message:f.message}}case"daily_rerun":return await Q(c);case"neon_wake":return await c.wakeAs(e,a.resourceId,a.targetRef,f);case"supabase_keepalive":return await c.keepAliveNow(e,a.resourceId,f);case"supabase_restore":return await c.supabaseAct("restore",e,a.resourceId,a.targetRef,f);case"vercel_redeploy":return await c.redeployAs(e,a.resourceId,a.targetRef,f);case"vercel_rollback":return await c.rollbackAs(e,a.resourceId,a.targetRef,f);case"github_bump_pr":{let b=d?await (c.autoSecurity??M.X)():null;if(d&&!b?.enabled)return{ok:!1,error:"Automatic security fixes is off."};return await (c.bumpPrAs??A.W)(e,a.resourceId,a.targetRef,f,{proposalId:a.proposalId??null,...b?{auto:{severities:b.severities}}:{}})}default:return{ok:!1,error:R}}}catch(a){return console.warn(`${h.X.logTag}/proposals run failed:`,a instanceof Error?a.name:"error"),{ok:!1,error:"Something went wrong while running it. Check the console page before trying again."}}}let T={id:s.O.id,room:s.O.room,action:s.O.action,risk:s.O.risk,title:s.O.title,reason:s.O.reason,resourceName:s.O.resourceName,proposedBy:s.O.proposedBy,status:s.O.status,auto:s.O.auto,result:s.O.result,createdAt:s.O.createdAt,decidedAt:s.O.decidedAt,expiresAt:s.O.expiresAt},U={...T,resourceId:s.O.resourceId,targetRef:s.O.targetRef,ruleKey:s.O.ruleKey};async function V(a,b,c){let e=(0,t.z)(a,b),[h,j,k,m,n,o]=await Promise.all([e.monitorIds.length?(0,g.f)().select({id:i.monitors.id,kind:i.monitors.kind}).from(i.monitors).where((0,d.y)(i.monitors.id,e.monitorIds)):[],e.deployApps.length?(0,g.f)().select({app:i.deployments.resourceId,id:i.deployments.externalId,isCurrent:i.deployments.isCurrent,isPrevious:i.deployments.isPreviousProduction,readyAt:i.deployments.readyAt,createdAt:i.deployments.createdAtProvider}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,e.deployApps),(0,d.F)((0,d.u)(i.deployments.isCurrent,!0),(0,d.u)(i.deployments.isPreviousProduction,!0)))):[],e.supabaseIds.length?(0,g.f)().select({id:i.resources.id,ref:i.resources.externalId}).from(i.resources).where((0,d.b)((0,d.y)(i.resources.id,e.supabaseIds),(0,d.u)(i.resources.kind,"supabase_project"),f.B`${i.resources.goneAt} is null`)):[],e.monitorApps.length?X(e.monitorApps):new Map,e.depApps.length?(0,l.C)(e.depApps).catch(()=>new Map):new Map,e.monitorIds.length?W(e.monitorIds):null]),p=new Map;for(let a of j){let b=p.get(a.app)??{currentId:null,previousId:null,liveAt:null};a.isCurrent?(b.currentId=a.id,b.liveAt=a.readyAt??a.createdAt??null):a.isPrevious&&(b.previousId=a.id),p.set(a.app,b)}return{monitorKinds:new Map(h.map(a=>[a.id,String(a.kind)])),deploys:p,...void 0!==c?{rollbackWindowMs:c}:{},supabaseRefs:new Map(k.map(a=>[a.id,a.ref])),neonSuspended:m,fixableRepos:n,dailyHeartbeatId:o}}async function W(a){let b=(0,o.i)(process.env.DAILY_HEARTBEAT_TOKEN);if(!b)return null;let[c]=await (0,g.f)().select({id:i.monitors.id}).from(i.monitors).where((0,d.b)((0,d.y)(i.monitors.id,a),(0,d.u)(i.monitors.kind,"heartbeat"),(0,d.u)(i.monitors.tokenHash,(0,p.C)(b)))).limit(1).catch(()=>[]);return c?.id??null}async function X(a){let b=await (0,g.f)().select({app:i.links.fromResourceId,id:i.resources.id,kind:i.resources.kind,externalId:i.resources.externalId,parentId:i.resources.parentId}).from(i.links).innerJoin(i.resources,(0,d.u)(i.resources.id,i.links.toResourceId)).where((0,d.b)((0,d.y)(i.links.fromResourceId,a),(0,d.u)(i.links.kind,"uses_db"),(0,d.y)(i.resources.kind,["neon_project","neon_branch"]),f.B`${i.resources.goneAt} is null`)),c=new Map;if(!b.length)return c;let e=a=>"neon_branch"===a.kind?a.parentId:a.id,h=[...new Set(b.map(e).filter(a=>!!a))];if(!h.length)return c;let j=new Map((await (0,g.f)().select({id:i.snapshots.resourceId,data:i.snapshots.data}).from(i.snapshots).where((0,d.y)(i.snapshots.resourceId,h))).map(a=>[a.id,(0,q.k)(q.s,a.data)]));for(let a of b){let b=e(a),d=b?j.get(b):void 0,f=d?(0,t.Z)(d.endpoints,d.branches,"neon_branch"===a.kind?a.externalId:null):null;f&&c.set(a.app,{resourceId:a.id,resourceKind:a.kind,endpointId:f})}return c}async function Y(a){if(!a.length)return[];let b=new Set((await (0,g.f)().select({alertId:s.O.alertId,action:s.O.action}).from(s.O).where((0,d.y)(s.O.alertId,[...new Set(a.map(a=>a.alertId))]))).map(a=>`${a.alertId}:${a.action}`)),c=a.filter(a=>!b.has(`${a.alertId}:${a.action}`));return c.length?(0,g.f)().insert(s.O).values(c.map(a=>({...a,status:"pending"}))).onConflictDoNothing().returning(U):[]}async function Z(a,b){return(await (0,g.f)().select(T).from(s.O).where(f.B`${s.O.createdAt} >= ${new Date(a.getTime()-6048e5).toISOString()}::timestamptz`).orderBy(f.B`case when ${s.O.status} = 'pending' then 0 else 1 end`,(0,e.A)(s.O.createdAt),(0,e.A)(s.O.id)).limit(b)).map(t.E)}async function $(a){let[b]=await (0,g.f)().select(T).from(s.O).where((0,d.u)(s.O.id,a)).limit(1);return b?(0,t.E)(b):null}async function _(a,b,c,e){let[h]=await (0,g.f)().update(s.O).set({status:"approve"===b?"approved":"rejected",decidedBy:c,decidedAt:e}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"pending"),f.B`${s.O.expiresAt} > ${e.toISOString()}::timestamptz`)).returning(U);if(h)return{status:"ok",proposal:(0,t.E)(h),row:h};let[i]=await (0,g.f)().select(T).from(s.O).where((0,d.u)(s.O.id,a)).limit(1);return i?{status:"conflict",proposal:(0,t.E)(i)}:{status:"missing"}}async function aa(a,b){let[c]=await (0,g.f)().update(s.O).set({status:"running",claimedAt:b}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"approved"))).returning(U);return c??null}async function ab(a,b,c,e){let[f]=await (0,g.f)().update(s.O).set({status:b?"done":"failed",result:c,finishedAt:e}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"running"))).returning(U);return f??null}let ac={run:(a,b)=>S(a,b),book:()=>(0,j.f)()};async function ad(a,b,c,d=ac){let e=await aa(a,c);if(!e)return null;let f=await d.run({action:e.action,resourceId:e.resourceId,targetRef:e.targetRef,proposalId:e.id},b),g=await d.book().catch(()=>r.a),h=await ab(a,f.ok,(0,t.x)(f,g),new Date);return h?(0,t.E)(h):null}async function ae(a,b){let c=await (0,g.f)().update(s.O).set({status:"expired",result:"Expired: nobody decided in time, or the alert stopped firing."}).where((0,d.b)((0,d.u)(s.O.status,"pending"),(0,d.F)((0,d.S)(s.O.expiresAt,new Date(b.getTime()+1)),(0,d.b)((0,d.E)(s.O.alertId),a.length?(0,d.$)(s.O.alertId,a):f.B`true`)))).returning({id:s.O.id});return await (0,g.f)().update(s.O).set({status:"failed",result:"The run was interrupted. Check the console page before trying again.",finishedAt:b}).where((0,d.b)((0,d.u)(s.O.status,"running"),(0,d.S)(s.O.claimedAt,new Date(b.getTime()-t.L)))),c.length}async function af(a){await (0,g.f)().delete(s.O).where((0,d.b)((0,d.S)(s.O.createdAt,new Date(a.getTime()-2592e6)),(0,d.$)(s.O.status,["pending","approved","running"])))}let ag=f.B`(${i.storedLogs.level} in ('error', 'fatal') or coalesce(${i.storedLogs.statusCode}, 0) >= 500)`,ah=f.B`coalesce(${i.deployments.readyAt}, ${i.deployments.createdAtProvider})`;async function ai(a){let b=await (0,g.f)().select({app:i.links.fromResourceId,id:i.resources.id,kind:i.resources.kind,externalId:i.resources.externalId,parentId:i.resources.parentId}).from(i.links).innerJoin(i.resources,(0,d.u)(i.resources.id,i.links.toResourceId)).where((0,d.b)((0,d.y)(i.links.fromResourceId,a),(0,d.u)(i.links.kind,"uses_db"),(0,d.y)(i.resources.kind,["neon_project","neon_branch","supabase_project"]),(0,d.M)(i.resources.goneAt))),c=new Map;if(!b.length)return c;let e=a=>"neon_branch"===a.kind?a.parentId:a.id,f=[...new Set(b.map(e).filter(a=>!!a))],h=new Map((f.length?await (0,g.f)().select({id:i.snapshots.resourceId,data:i.snapshots.data}).from(i.snapshots).where((0,d.y)(i.snapshots.resourceId,f)):[]).map(a=>[a.id,a.data]));for(let a of b){let b=h.get(e(a)??"");if("supabase_project"===a.kind){let d=(0,q.k)(q.B,b);c.set(a.app,{resourceId:a.id,kind:a.kind,wakeEndpoint:null,supabaseRef:a.externalId,supabasePaused:"INACTIVE"===d.status})}else{let d=(0,q.k)(q.s,b);c.set(a.app,{resourceId:a.id,kind:a.kind,wakeEndpoint:(0,t.Z)(d.endpoints,d.branches,"neon_branch"===a.kind?a.externalId:null),supabaseRef:null,supabasePaused:!1})}}return c}let aj={apps:async function(a){let b=new Date(a.getTime()-u.I-u.s),c=f.B`${i.storedLogs.at} >= ${new Date(a.getTime()-u.H).toISOString()}::timestamptz`,e=f.B`${i.storedLogs.message} ~* ${u.N}`,h=f.B`left(${i.storedLogs.message}, 200)`,j=(await (0,g.f)().select({appId:i.storedLogs.resourceId,appName:f.B`max(${i.resources.name})`,liveAt:f.B`max(${ah})`.mapWith(i.deployments.readyAt),currentId:f.B`max(${i.deployments.externalId})`,errorsSinceLive:f.B`count(*) filter (where ${ag} and ${i.storedLogs.at} >= ${ah})`.mapWith(Number),baselineErrors:f.B`count(*) filter (where ${ag} and ${i.storedLogs.at} >= ${ah} - interval '24 hours' and ${i.storedLogs.at} < ${ah})`.mapWith(Number),topSinceLive:f.B`mode() within group (order by ${h}) filter (where ${ag} and ${i.storedLogs.at} >= ${ah})`,errors30:f.B`count(*) filter (where ${ag} and ${c})`.mapWith(Number),top30:f.B`mode() within group (order by ${h}) filter (where ${ag} and ${c})`,dbErrors30:f.B`count(*) filter (where ${c} and ${e})`.mapWith(Number),topDb:f.B`mode() within group (order by ${h}) filter (where ${c} and ${e})`}).from(i.storedLogs).innerJoin(i.resources,(0,d.u)(i.resources.id,i.storedLogs.resourceId)).leftJoin(i.deployments,(0,d.b)((0,d.u)(i.deployments.resourceId,i.storedLogs.resourceId),(0,d.u)(i.deployments.isCurrent,!0))).where((0,d.b)((0,d.B)(i.storedLogs.at,b),(0,d.u)(i.resources.kind,"app"),(0,d.M)(i.resources.goneAt))).groupBy(i.storedLogs.resourceId)).filter(a=>a.errorsSinceLive>=u.w||a.errors30>=u.G||a.dbErrors30>=u.V);if(!j.length)return[];let k=j.map(a=>a.appId),[l,m,n]=await Promise.all([(0,g.f)().select({app:i.deployments.resourceId,previousId:f.B`max(${i.deployments.externalId}) filter (where ${i.deployments.isPreviousProduction})`,lastDeployAt:f.B`max(${i.deployments.createdAtProvider}) filter (where ${i.deployments.target} = 'production')`.mapWith(i.deployments.createdAtProvider)}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,k),(0,d.F)((0,d.u)(i.deployments.isPreviousProduction,!0),(0,d.B)(i.deployments.createdAtProvider,new Date(a.getTime()-u.v))))).groupBy(i.deployments.resourceId),(0,g.f)().select({app:i.monitors.resourceId,id:i.monitors.id}).from(i.monitors).where((0,d.b)((0,d.y)(i.monitors.resourceId,k),(0,d.u)(i.monitors.kind,"http"),(0,d.u)(i.monitors.paused,!1),(0,d.u)(i.monitors.ownerPaused,!1))).orderBy(i.monitors.createdAt),ai(k)]),o=new Map(l.map(a=>[a.app,a])),p=new Map;for(let a of m)p.has(a.app)||p.set(a.app,a.id);return j.map(a=>({...a,appName:a.appName??"",previousId:o.get(a.appId)?.previousId??null,lastDeployAt:o.get(a.appId)?.lastDeployAt??null,httpMonitorId:p.get(a.appId)??null,db:n.get(a.appId)??null}))},rows:async function(a){let b=f.B`coalesce(${s.O.finishedAt}, ${s.O.decidedAt}, ${s.O.expiresAt})`;return(0,g.f)().select({id:s.O.id,ruleKey:s.O.ruleKey,resourceId:s.O.resourceId,action:s.O.action,status:s.O.status,closedAt:b.mapWith(s.O.finishedAt)}).from(s.O).where((0,d.b)((0,d.M)(s.O.alertId),(0,d.y)(s.O.ruleKey,[...u.T]),(0,d.F)((0,d.y)(s.O.status,["pending","approved","running"]),f.B`${b} > ${new Date(a.getTime()-u.b).toISOString()}::timestamptz`)))}};async function ak(a,b,c=aj){let[e,f]=await Promise.all([c.apps(a),c.rows(a)]),h=e.flatMap(c=>(0,u.t)(c,b,a)),i=(0,u.W)(f,h),j=0;i.length&&(j=(await (0,g.f)().update(s.O).set({status:"expired",result:"Expired: the logs no longer show it.",finishedAt:a}).where((0,d.b)((0,d.y)(s.O.id,i),(0,d.u)(s.O.status,"pending"))).returning({id:s.O.id})).length);let k=(0,u.x)(h,f,a);return k.length?{created:await (0,g.f)().insert(s.O).values(k.map(a=>({...a,status:"pending"}))).onConflictDoNothing().returning(U),expired:j}:{created:[],expired:j}}let al=null;async function am(a,b){return(0,u.D)(a,al)?(al=a.getTime(),ak(a,await b())):{created:[],expired:0}}async function an(a,b){return(await (0,g.f)().update(s.O).set({status:"approved",auto:!0,decidedAt:b}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"pending"),(0,d.u)(s.O.risk,"safe"))).returning({id:s.O.id})).length>0}async function ao(a,b){let c=new Date(b.getTime()-v.r),[e,h,j,k]=await Promise.all([(0,g.f)().select({app:i.deployments.resourceId,id:i.deployments.externalId,sha:i.deployments.commitSha,state:i.deployments.state,isCurrent:i.deployments.isCurrent,isPrevious:i.deployments.isPreviousProduction,readyAt:i.deployments.readyAt,createdAt:i.deployments.createdAtProvider}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,a),(0,d.F)((0,d.u)(i.deployments.isCurrent,!0),(0,d.u)(i.deployments.isPreviousProduction,!0)))),(0,g.f)().select({app:i.deployments.resourceId,at:f.B`max(${i.deployments.createdAtProvider})`.mapWith(i.deployments.createdAtProvider)}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,a),(0,d.u)(i.deployments.target,"production"),(0,d.u)(i.deployments.state,"ready"))).groupBy(i.deployments.resourceId),(0,g.f)().select({app:i.events.resourceId}).from(i.events).where((0,d.b)((0,d.u)(i.events.type,"action"),(0,d.y)(i.events.resourceId,a),(0,d.B)(i.events.at,c),f.B`${i.events.message} ~ ${ap}`)),(0,g.f)().select({app:s.O.resourceId,targetRef:s.O.targetRef,status:s.O.status,decidedAt:s.O.decidedAt}).from(s.O).where((0,d.b)((0,d.u)(s.O.action,"vercel_rollback"),(0,d.u)(s.O.auto,!0),(0,d.B)(s.O.createdAt,new Date(b.getTime()-26784e5))))]),l=new Map;for(let b of a){let a=e.find(a=>a.app===b&&a.isCurrent),d=e.find(a=>a.app===b&&a.isPrevious&&!a.isCurrent),f=k.filter(a=>a.app===b);l.set(b,{deploy:a?{currentId:a.id,currentSha:a.sha,liveAt:a.readyAt??a.createdAt,currentCreatedAt:a.createdAt,newestProdCreatedAt:h.find(a=>a.app===b)?.at??null,previousId:d?.id??null,previousState:d?.state??null,previousCreatedAt:d?.createdAt??null}:null,rolledOrPromotedLately:j.some(a=>a.app===b),autoLately:f.some(a=>null!==a.decidedAt&&a.decidedAt.getTime()>=c.getTime()),sameDeployBefore:!!d&&f.some(a=>a.targetRef===d.id)})}return{apps:l,inFlight:k.some(a=>"approved"===a.status||"running"===a.status)}}let ap="(Rolled back|Promoted|Preview promoted) ·";async function aq(a,b,c){return(await (0,g.f)().update(s.O).set({status:"approved",auto:!0,decidedAt:c,reason:b}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"pending"),(0,d.u)(s.O.action,"vercel_rollback"),f.B`not exists (select 1 from ops.action_proposals x where x.action = 'vercel_rollback' and x.auto and x.status in ('approved', 'running'))`)).returning({id:s.O.id})).length>0}async function ar(a,b,c,d){let e=a.filter(a=>"vercel_rollback"===a.action&&a.ruleKey&&v.M.has(a.ruleKey)&&a.resourceId);if(!e.length||!d.autoRollback||!d.rollbackContext||!d.approveAutoRollback)return[];let f=await d.autoRollback().catch(()=>null);if(!f?.enabled||15e3>c())return[];let g=[];try{let a=await d.rollbackContext([...new Set(e.map(a=>a.resourceId))],b),i=a.inFlight;for(let j of e){let e=a.apps.get(j.resourceId);if(!e||12e3>c())continue;let k=(0,v.s)({setting:f,ruleKey:j.ruleKey??null,targetRef:j.targetRef,inFlight:i,...e},b);if(!k.ok){console.log(`${h.X.logTag}/auto-rollback: skipped (${k.why})`);continue}let l=(0,v.E)(e.deploy);if(!await d.approveAutoRollback(j.id,(0,v.u)(l,f.windowMin,j.reason),new Date))continue;i=!0;let m=await d.execute(j.id,new Date);if(m){g.push(m),await (d.notifyRollback??w.q)(m,{reason:j.reason,newRef:l}).catch(()=>void 0);break}}}catch(a){console.warn(`${h.X.logTag}/auto-rollback failed:`,a instanceof Error?a.name:"error")}return g}async function as(a,b){return(await (0,g.f)().update(s.O).set({status:"approved",auto:!0,decidedAt:b}).where((0,d.b)((0,d.u)(s.O.id,a),(0,d.u)(s.O.status,"pending"),(0,d.u)(s.O.action,"github_bump_pr"))).returning({id:s.O.id})).length>0}async function at(a,b,c){let d=a.filter(a=>"github_bump_pr"===a.action&&a.targetRef);if(!d.length||!c.autoSecurity||!c.bumpReady||!c.approveAutoBump)return[];let e=await c.autoSecurity().catch(()=>null);if(!e?.enabled||!e.severities.length)return[];let f=[];for(let a of d){if(15e3>b())break;try{let b=await c.bumpReady(a.targetRef,e.severities);if(!b.ok){console.log(`${h.X.logTag}/auto-security: waits for the owner (${b.why})`);continue}if(!await c.approveAutoBump(a.id,new Date))continue;let d=await c.execute(a.id,new Date);d&&f.push(d)}catch(a){console.warn(`${h.X.logTag}/auto-security failed:`,a instanceof Error?a.name:"error")}}return f}async function au(a){return new Map((await (0,g.f)().select({id:i.accounts.id,provider:i.accounts.provider}).from(i.accounts).where((0,d.y)(i.accounts.id,a))).map(a=>[a.id,a.provider]))}let av={firing:()=>(0,k.q)(),book:()=>(0,j.f)(),facts:V,create:Y,expire:ae,autoRun:M.I,approveAuto:an,execute:(a,b)=>ad(a,"auto",b),notifyNew:w.i,notifyResult:w.b,logs:am,autoRollback:()=>(0,M.K)(),rollbackContext:ao,approveAutoRollback:aq,notifyRollback:w.q,autoSecurity:()=>(0,M.X)(),bumpReady:A.J,approveAutoBump:as,paused:m.I,providers:au};async function aw(a,b={},c=av){let d={created:0,expired:0,autoRan:0},e=()=>(b.deadline??1/0)-Date.now(),f=await c.firing();d.expired=await c.expire(f.map(a=>a.id),a);let g=c.paused?await c.paused().catch(()=>new Set):new Set,i=[...new Set(f.flatMap(a=>a.accountId?[a.accountId]:[]))],j=g.size&&i.length&&c.providers?await c.providers(i).catch(()=>new Map):new Map,k=f.filter(a=>!(0,n.O)(g,a.ruleKey,a.accountId?j.get(a.accountId):null)),l=null,m=()=>l??=c.book().catch(()=>r.a),o=[],p=(0,t.z)(k,a);if(Object.values(p).some(a=>a.length>0)){let b=p.deployApps.length&&c.autoRollback?await c.autoRollback().catch(()=>null):null,d=await c.facts(k,a,b?6e4*b.windowMin:void 0),e=await m();o.push(...await c.create(k.flatMap(b=>(0,t.t)(b,d,e,a))))}if(e()>1e4&&!g.has("hosting"))try{let b=await c.logs(a,m);o.push(...b.created),d.expired+=b.expired}catch(a){console.warn(`${h.X.logTag}/proposals logs failed:`,a instanceof Error?a.name:"error")}if(d.created=o.length,!o.length)return d;let q=await c.autoRun().catch(()=>null),s=await ar(o,a,e,c);d.autoRan+=s.length;let u=await at(o.filter(a=>!s.some(b=>b.id===a.id)),e,c),v=new Set(s.map(a=>a.id)),w=[...u];for(let a of(d.autoRan+=u.length,u))v.add(a.id);for(let a of o){if(v.has(a.id)||!q||!(0,t.I)(a.action,q)||8e3>e()||!await c.approveAuto(a.id,new Date))continue;let b=await c.execute(a.id,new Date);b&&(w.push(b),d.autoRan++)}let x=new Set([...w.map(a=>a.id),...v]),y=o.filter(a=>"LogErrorSpike"===a.ruleKey&&a.resourceId).map(a=>({proposalId:a.id,appId:a.resourceId})),z=y.length&&c.queueDev?await c.queueDev(y,a).catch(()=>new Set):new Set;for(let a of(await c.notifyNew(o.filter(a=>!x.has(a.id)).map(t.E),{},{devQueued:z}).catch(()=>void 0),w))await c.notifyResult(a).catch(()=>void 0);return d}let ax=(c={},b={...av,queueDev:c.queueDev},async(a,c)=>{try{let d=await aw(a,c??{},b);(d.created||d.expired||d.autoRan)&&console.log(`${h.X.logTag}/proposals: ${d.created} new, ${d.expired} expired, ${d.autoRan} auto-ran`)}catch(a){console.warn(`${h.X.logTag}/proposals failed:`,a instanceof Error?a.name:"error")}});a.s(["V",0,_,"N",0,ad,"Q",0,Z,"Z",0,ax,"t",0,af,"K",0,$],691100)},381544,a=>{var b=a.i(462820),c=a.i(532620),d=a.i(49146),e=a.i(390626),f=a.i(192738),g=a.i(492665),h=a.i(552543),i=a.i(446914),j=a.i(556987),k=a.i(488345),l=a.i(94473),m=a.i(188282);let n={target:d.Q,book:()=>(0,c.e)(),siteUrl:()=>(0,g.f)().SITE_URL,autoRun:()=>(0,l.I)(),send:(a,b,c,d)=>(0,i.I)(a,b,c,d?{replyMarkup:d}:{}),record:(a,b)=>(0,d.P)("telegram",a,b),lang:()=>(0,h.I)("telegram"),discord:()=>(0,d.G)(),sendDiscord:(a,b)=>(0,e.$)(a,b,{timeoutMs:v}),recordDiscord:(a,b)=>(0,d.P)("discord",a,b),discordLang:()=>(0,h.I)("discord"),buttons:()=>a.A(801116).then(a=>a.approvalButtons())},o={en:{pending:"Status: ⏳ waiting",dev:"🧑‍💻 Dev is checking the code",proposer:b.X.notifyFallback.en,app:"app",safe:"safe",risky:"needs care",proposes:"proposes",why:"Why",risk:"Risk",open:"Open in Auto-actions",waitingN:"new proposals waiting for approval:",moreN:"more proposals",automatic:"Automatic",rollbackWhy:"the app errored after the new deploy",succeeded:"Succeeded",failed:"Failed",stopFallback:"something failed"},id:{pending:"Status: ⏳ menunggu",dev:"🧑‍💻 Dev lagi cek kodenya",proposer:b.X.notifyFallback.id,app:"aplikasi",safe:"aman",risky:"perlu hati-hati",proposes:"usul",why:"Kenapa",risk:"Risiko",open:"Buka di Auto-actions",waitingN:"usulan baru menunggu persetujuan:",moreN:"usulan lagi",automatic:"Otomatis",rollbackWhy:"app-nya error setelah deploy baru",succeeded:"Berhasil",failed:"Gagal",stopFallback:"ada yang gagal"}},p={recheck:"Cek ulang sekarang",neon_wake:"Bangunin Neon",supabase_keepalive:"Kirim keep-alive Supabase",supabase_restore:"Restore project Supabase",vercel_redeploy:"Redeploy production",vercel_rollback:"Rollback ke deploy sebelumnya",github_bump_pr:"Bikin PR update paket",domain_recheck:"Cek ulang sertifikat domain",daily_rerun:"Jalanin ulang daily job"},q=(a="en")=>(0,h.t)(o,a,"dev"),r=(a,b)=>("id"===b?p[a.action]:void 0)??m.H[a.action]?.label??a.actionLabel,s=(a,b)=>(0,h.t)(o,b,"risky"===a.risk||m.H[a.action]?.risk==="risky"?"risky":"safe"),t=(a,b)=>`${a.replace(/\/+$/,"")}/auto-actions${b?`?proposal=${encodeURIComponent(b)}`:""}`;function u(a,b,c,d=!1,e="en"){let g=a=>(0,h.t)(o,e,a),i=(0,k.f)(a.proposedBy,b,60)||g("proposer"),j=(0,k.f)(a.title,b,120),l=(0,k.f)(a.reason,b,200)||"-";return[`🧑‍✈️ ${(0,f.H)(i)} ${g("proposes")}: ${(0,f.H)(r(a,e))} — ${(0,f.H)(j)}`,`${g("why")}: ${(0,f.H)(l)}`,`${g("risk")}: ${s(a,e)}`,...d?[q(e)]:[],`${g("open")}: ${(0,f.H)(t(c,a.id))}`].join("\n")}let v=3e3,w={en:{proposed:"📝 Proposed",approved:"✅ Approved by the owner",rejected:"🚫 Rejected by the owner",done:"⚙️ Ran",failed:"❌ Failed",waiting:"waiting for approval on Telegram.",newN:"new proposals"},id:{proposed:"📝 Usulan",approved:"✅ Disetujui owner",rejected:"🚫 Ditolak owner",done:"⚙️ Dijalankan",failed:"❌ Gagal",waiting:"nunggu persetujuan di Telegram.",newN:"usulan baru"}};function x(a,b,c,d="en"){let e=a=>(0,h.t)(w,d,a);if(Array.isArray(b))return`📝 ${b.length} ${e("newN")} — ${e("waiting")}`;let f=((0,k.f)(b.title,c,120)||r(b,d)).replace(/[*_`~|\[\]<>]/g,"");if("proposed"===a)return`${e("proposed")}: ${f} — ${e("waiting")}`;if("approved"===a||"rejected"===a)return`${e(a)}: ${f}`;let g=b.result?(0,k.f)(b.result,c,200).replace(/[*_`~|\[\]<>]/g,""):"";return`${e(a)}: ${f}${g?` — ${g}`:""}`}async function y(a,c,d){try{let e,f=await c.discord();if(!f)return;let g=await c.book().catch(()=>j.a),h=await c.discordLang().catch(()=>"en"),i=a(g,h);if(!i.length)return;try{e=await c.sendDiscord(f.url,i.join("\n"))}catch{e={ok:!1,kind:"transient",error:"Discord didn't answer."}}await c.recordDiscord(e,d).catch(()=>console.warn(`${b.X.logTag}/discord: recording the result failed`))}catch{console.warn(`${b.X.logTag}/discord: sending the action history failed`)}}async function z(a,b,c={},d={}){let e={...n,...c};await B(()=>y((c,d)=>[x(a,b,c,d)],e,d.now??new Date),d.timeoutMs??v)}async function A(a,c,d){let e=await c.target();if(!e)return;let f=await c.book().catch(()=>j.a),g=await c.lang().catch(()=>"en");for(let h of(await a(f,g))){let a;try{a="string"==typeof h?await c.send(e.token,e.chatId,h):await c.send(e.token,e.chatId,h.text,h.keyboard)}catch{a={ok:!1,kind:"transient",error:"Telegram didn't answer."}}await c.record(a,d).catch(()=>console.warn(`${b.X.logTag}/telegram: recording the result failed`))}}async function B(a,c){try{var d;let b;await (d=a(),Promise.race([d,new Promise((a,d)=>{b=setTimeout(()=>d(Object.assign(Error("timeout"),{name:"TimeoutError"})),c)})]).finally(()=>clearTimeout(b)))}catch(a){console.warn(`${b.X.logTag}/telegram: sending the proposal notice failed:`,a instanceof Error?a.name:"error")}}async function C(a,b={},c={}){if(!a.length)return;let d={...n,...b};await B(async()=>{let b=await d.autoRun().catch(()=>null),e=a.filter(a=>{var c;return c=b??{},"pending"===a.status&&!a.auto&&(m.H[a.action]?.risk!=="safe"||"risky"===a.risk||!c[a.action])});if(!e.length)return;let g=e.length>3||!d.buttons?null:await d.buttons().catch(()=>null),i=c.now??new Date;await Promise.all([A((a,b)=>e.length>3?[function(a,b,c,d=new Set,e="en"){let g=a=>(0,h.t)(o,e,a),i=a.slice(0,10).map(a=>{let h=(0,k.f)(a.proposedBy,b,60)||g("proposer");return`• ${(0,f.H)(h)}: ${(0,f.H)(r(a,e))} — ${(0,f.H)((0,k.f)(a.title,b,120))} (${s(a,e)})${d.has(a.id)?` \xb7 ${q(e)}`:""}
+(()=>{"use strict";module.exports=[138984,a=>{var b=a.i(26972),c=a.i(427221),d=a.i(827857),e=a.i(899370),f=a.i(371289);let g=b.z.object({COLLECTOR_SECRET:c.z.string().min(32),CRON_SECRET:c.z.string().min(16),QSTASH_CURRENT_SIGNING_KEY:c.z.string().min(10),QSTASH_NEXT_SIGNING_KEY:c.z.string().min(10)}),h=g.extend({QSTASH_CURRENT_SIGNING_KEY:d.z.union([e.z.literal(""),c.z.string().min(10)]).default(""),QSTASH_NEXT_SIGNING_KEY:d.z.union([e.z.literal(""),c.z.string().min(10)]).default("")}),i=!1;a.s(["f",0,function(){try{var a=process.env;let b=("selfhost"===(0,f.c)(a)?h:g).safeParse(a);if(!b.success)throw Error(`Missing or invalid scheduler settings: ${b.error.issues.map(a=>a.path.join(".")).join(", ")}`);return b.data}catch(a){return i||(i=!0,console.warn(a instanceof Error?a.message:"Missing or invalid scheduler settings")),null}}])},736780,664892,a=>{var b=a.i(93321),c=a.i(530385),d=a.i(548734),e=a.i(837137),f=a.i(358179),g=a.i(912283),h=a.i(117859),i=a.i(876808),j=a.i(521050),k=a.i(679662);let l={checks:"waiting for CI",preview:"waiting for preview",smoke:"smoke test",merging:"merging…",merged:"merged ✅","ready-manual":"ready to merge (manual)",failed:"needs a look ⚠️",timeout:"needs a look ⚠️",closed:"closed"},m=(a,b,c)=>{let d=`PR #${a}: ${l[b]}${c?` — ${c}`:""}`;return d.length>200?`${d.slice(0,199)}…`:d},n=new Set(["success","neutral","skipped"]),o=a=>"completed"!==a.status?"pending":n.has(a.conclusion??"")?"success":"failure",p={name:"watchbell[bot]",email:"watchbell-bot@users.noreply.github.com",message:"chore(deps): update package-lock.json (Watchbell)"},q={name:"watchpost[bot]",email:"watchpost-bot@users.noreply.github.com",message:"chore(deps): update package-lock.json (Watchpost)"},r=a=>[p,q].some(b=>a.name===b.name&&a.email.toLowerCase()===b.email&&a.message.trim()===b.message),s=/^[\^~]?[0-9][0-9A-Za-z.+-]*$/,t=a=>Array.isArray(a)?a.map(t):a&&"object"==typeof a?Object.fromEntries(Object.keys(a).sort().map(b=>[b,t(a[b])])):a,u=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,v=/^sha512-[A-Za-z0-9+/]{86}==$/,w="(?:@[a-z0-9][a-z0-9._~-]*/)?[a-z0-9][a-z0-9._~-]*",x=RegExp(`^(?:[A-Za-z0-9_-][A-Za-z0-9._-]*/)*?node_modules/${w}(?:/node_modules/${w})*$`,"i"),y=new Set(["dev","optional","devOptional","peer"]),z=a=>!!a&&"object"==typeof a&&!Array.isArray(a),A=a=>a.slice(a.lastIndexOf("node_modules/")+13),B=(a,b,c)=>`${a}/${b}/-/${b.split("/").pop()}-${c}.tgz`,C=(a,b)=>JSON.stringify(t(a))===JSON.stringify(t(b)),D=a=>Object.fromEntries(Object.entries(a).filter(([a])=>!y.has(a))),E=a=>{try{let b=JSON.parse(a);return z(b)&&z(b.packages)?b:null}catch{return null}};a.s(["y",0,20,"X",0,["checks","preview","smoke","merging"],"w",0,15e3,"R",0,27e5,"j",0,function(a){let b=(a.checkRuns??a.actionRuns??[]).map(o);return(a.combined&&a.combined.total>0&&b.push("success"===a.combined.state?"success":"pending"===a.combined.state?"pending":"failure"),b.includes("failure"))?"failure":b.includes("pending")?"pending":"success"},"L",0,function(a){if(!a.length||a.some(a=>a.authWall))return null;let b=a.find(a=>null===a.status||a.status<200||a.status>399);return b?{mode:"http",result:"fail",reason:null===b.status?`${b.path} didn't answer within 15 seconds`:`${b.path} answered ${b.status}`}:{mode:"http",result:"pass",reason:null}},"S",0,function(a,b,c){return(401===a||403===a)&&(/vercel\.com\/(sso|login)|Authentication Required|_vercel_sso|vercel-authentication/i.test(b)||/_vercel_sso/i.test(c.get("set-cookie")??"")||"vercel"===(c.get("server")??"").toLowerCase())},"T",0,function(a,b,c){if([a,b].some(a=>null!==a&&(a=>{if(a.length>0x1900000)return!0;if(3*a.length<=0x1900000)return!1;let b=0;for(let c=0;c<a.length;c++){let d=a.charCodeAt(c);d<128?b+=1:d<2048?b+=2:d>=55296&&d<56320&&(64512&a.charCodeAt(c+1))==56320?(b+=4,c++):b+=3}return b>0x1900000})(a)))return`lockfile too large to check (over 25 MB): ${c}`.slice(0,150);try{return function(a,b,c){let d=a=>`unexpected lockfile change ${a}`.slice(0,150),e=null===b?null:E(b),f=null===a?{packages:{}}:E(a);if(!e||!f)return d(c);if(2!==e.lockfileVersion&&3!==e.lockfileVersion||null!==a&&e.lockfileVersion!==f.lockfileVersion)return d("lockfileVersion");let g=new Set;for(let[a,b]of Object.entries(f.packages)){if(!x.test(a)||!z(b)||"string"!=typeof b.resolved||"string"!=typeof b.version)continue;let c=B("","string"==typeof b.name?b.name:A(a),b.version);b.resolved.startsWith("https://")&&b.resolved.endsWith(c)&&g.add(b.resolved.slice(0,-c.length))}for(let[a,b]of(g.size||g.add("https://registry.npmjs.org"),Object.entries(e.packages))){let e=Object.hasOwn(f.packages,a)?f.packages[a]:void 0;if(void 0!==e&&C(e,b))continue;let h=z(e)?e:null;if(""===a||!a.includes("node_modules/")){let e=""===a?z(b)&&"string"==typeof b.name?b.name:c:a;if(!z(b)||""!==a&&!h||"resolved"in b||"link"in b)return d(e);continue}if(!x.test(a)||!z(b))return d(x.test(a)?A(a):a);let i=A(a);if(void 0!==b.name&&b.name!==i&&(!h||h.name!==b.name))return d(i);let j="string"==typeof b.name?b.name:i,k=b.version;if(void 0!==b.link||"string"!=typeof k||!u.test(k)||"string"!=typeof b.integrity||!v.test(b.integrity)||"string"!=typeof b.resolved||![...g].some(a=>b.resolved===B(a,j,k))||h&&h.version===k&&!C(D(h),D(b)))return d(i)}return null}(a,b,c)}catch{return`unexpected lockfile change ${c} (couldn't be checked)`.slice(0,150)}},"H",0,a=>!!a.lockfileRequired&&!!a.lockfile&&!a.files.some(b=>b.filename===a.lockfile),"n",0,function(a,b,c){return null!==c&&c>0?{mode:"logs",result:"fail",reason:`${c} errors in the preview logs`}:b.getTime()-a.getTime()<18e4||null===c?{mode:"logs",result:"wait",reason:null}:{mode:"logs",result:"pass",reason:null}},"C",0,function(a,b,c){let d,e;try{d=JSON.parse(a),e=JSON.parse(b)}catch{return"unexpected change: package.json isn't valid JSON"}if(!d||!e||"object"!=typeof d||"object"!=typeof e)return"unexpected change: package.json isn't an object";let f=a=>{let b=structuredClone(a);for(let a of["dependencies","devDependencies"]){let d=b[a];if(d&&"object"==typeof d)for(let a of c)delete d[a]}return b};if(JSON.stringify(t(f(d)))!==JSON.stringify(t(f(e))))return"unexpected change in package.json beyond the bumped versions";for(let a of["dependencies","devDependencies"]){let b=d[a]??{},f=e[a]??{};for(let a of c){if(a in b!=a in f)return`unexpected change in package.json: ${a} added or removed`;if(a in f&&f[a]!==b[a]&&("string"!=typeof f[a]||!s.test(f[a])))return`unexpected change in package.json: ${a} isn't a plain version`}}return null},"E",0,function(a){let b=["/"];for(let c of a){let a;try{a=new URL(c).pathname||"/"}catch{continue}!b.includes(a)&&b.length<4&&b.push(a)}return b},"m",0,m,"k",0,function(a){let b=new Set([a.manifest,...a.lockfile?[a.lockfile]:[]]);for(let c of a.files)for(let a of[c.filename,c.previous])if(a&&!b.has(a))return`unexpected change in ${a}`.slice(0,150);if(!a.files.some(b=>b.filename===a.manifest))return`unexpected change: ${a.manifest} isn't changed`.slice(0,150);if(a.manifestProblem)return a.manifestProblem.slice(0,150);if(a.lockfileProblem)return a.lockfileProblem.slice(0,150);if(!a.tokenLogin||!a.commits.length||a.commits.length>20)return"couldn't confirm who wrote the PR's commits";if(a.headSha&&a.commits[a.commits.length-1].sha!==a.headSha)return"the PR's head moved while it was checked";for(let b of a.commits){if(null!==b.login&&b.login.toLowerCase()===a.tokenLogin.toLowerCase())continue;let c=b.sha.slice(0,7);if(!r(b)||!b.files||!a.lockfile)return`unexpected commit ${c} by ${b.login??b.name}`.slice(0,150);let d=b.files.find(b=>b!==a.lockfile);if(d)return`unexpected change in ${d} by commit ${c}`.slice(0,150)}return null},"f",0,function(a,b){let c=a.getTime();return(null===b||!(c-b<1e5))&&(Math.floor(c/6e4)%2==0||null!==b&&c-b>=24e4)},"M",0,function(a){if(a.pr.merged)return{kind:"done",stage:"merged"};if("closed"===a.pr.state)return{kind:"done",stage:"closed"};if(void 0!==a.pr.base&&void 0!==a.recordedBase&&a.pr.base!==a.recordedBase)return{kind:"stop",stage:"failed",reason:`the PR's base changed to ${a.pr.base}`};if(a.pr.headSha!==a.recordedSha)return{kind:"wait",stage:"checks",reason:"new commit on the PR branch, checking again",resetSha:a.pr.headSha};let b=a.now.getTime()-a.openedAt.getTime()>27e5;return"failure"===a.checks?{kind:"stop",stage:"failed",reason:"CI failed"}:!1===a.pr.mergeable?{kind:"stop",stage:"failed",reason:"conflicts with the main branch"}:"error"===a.preview.state||"canceled"===a.preview.state?{kind:"stop",stage:"failed",reason:"Vercel preview failed"}:"pending"===a.checks||null===a.pr.mergeable?b?{kind:"stop",stage:"timeout",reason:"CI not finished within 45 minutes"}:{kind:"wait",stage:"checks",reason:null}:"ready"!==a.preview.state?b?{kind:"stop",stage:"timeout",reason:"preview not ready within 45 minutes"}:{kind:"wait",stage:"preview",reason:null}:a.smoke&&"wait"!==a.smoke.result?"fail"===a.smoke.result?{kind:"stop",stage:"failed",reason:`preview smoke test failed: ${a.smoke.reason??"?"}`}:a.autoRollbackOn?{kind:"merge"}:{kind:"stop",stage:"ready-manual",reason:"PR is ready to merge, but auto-rollback is off; merge it manually"}:b?{kind:"stop",stage:"timeout",reason:"preview smoke test not finished within 45 minutes"}:{kind:"wait",stage:"smoke",reason:null}}],664892);var F=a.i(120213),G=a.i(492665),H=a.i(683439),I=a.i(751263),J=a.i(812092),K=a.i(75105),L=a.i(322145),M=a.i(976937);let N=a=>({done:!1,message:a});async function O(){let[a]=await (0,d.f)().select().from(e.accounts).where((0,b.u)(e.accounts.provider,"github_write")).orderBy((0,c.M)(e.accounts.createdAt)).limit(1);if(!a)return null;let g=(0,f.V)({ciphertext:a.credentialCiphertext,iv:a.credentialIv},(0,G.f)().OPS_ENCRYPTION_KEY);return g?{id:a.id,token:g}:"unreadable"}let P={severity:"no package at the selected severity",major:"an update jumps a major version",nothing:"nothing can be updated"};async function Q(a){let[c]=await (0,d.f)().select({version:e.appSecurity.version,status:e.appSecurity.status,findings:e.appSecurity.findings}).from(e.appSecurity).where((0,b.u)(e.appSecurity.resourceId,a)).limit(1);return c?(0,i.p)({version:c.version,status:c.status,findings:Array.isArray(c.findings)?c.findings:[]}):null}async function R(a){let c=await (0,d.f)().select({package:e.dependencyVulns.package,installedVersion:e.dependencyVulns.installedVersion,fixedVersion:e.dependencyVulns.fixedVersion,vulnId:e.dependencyVulns.vulnId,aliases:e.dependencyVulns.aliases,severity:e.dependencyVulns.severity,direct:e.dependencyVulns.direct,dev:e.dependencyVulns.dev}).from(e.dependencyVulns).where((0,b.b)((0,b.u)(e.dependencyVulns.repoId,a),(0,b.M)(e.dependencyVulns.resolvedAt))).limit(2e3);return{upgrades:(0,F.B)(c),installed:(0,g.D)(c)}}async function S(a,b,c,d,e){let f=(0,I.f)(d,c);if(f){let c=await (0,J.M)(a,b,f,e);if(!c.ok)return c;if(c.data)return{ok:!0,data:{base:f,head:c}}}return{ok:!0,data:{base:c,head:await (0,J.M)(a,b,c,e)}}}async function T(c,f,l,n=L.W,o={}){let p;if(!(0,H.f)(f)||!(0,H.f)(l))return n(N("Something in that request wasn't valid."),c,"");let q=await (0,L.q)(c.id,"github_bump_pr",f);if(q)return n(N(q),c,"");let r=await O();if(null===r)return n(N('A GitHub PR-write token is needed: connect "GitHub (PR write)" on Connections (fine-grained, this repository only, Contents and Pull requests: Read and write; Commit statuses: Read for automatic merges), then ask again.'),c,"");if("unreadable"===r)return n(N("Can't read the stored GitHub PR-write credential. Replace it on Connections."),c,"");let[s]=await (0,d.f)().select({app:e.resources.name,meta:e.resources.meta,fullName:e.githubRepos.fullName,owner:e.githubRepos.owner,goneAt:e.githubRepos.goneAt,lockfilePath:e.dependencyScans.lockfilePath}).from(e.appRepos).innerJoin(e.githubRepos,(0,b.u)(e.githubRepos.id,e.appRepos.repoId)).innerJoin(e.resources,(0,b.u)(e.resources.id,e.appRepos.appId)).leftJoin(e.dependencyScans,(0,b.u)(e.dependencyScans.repoId,e.appRepos.repoId)).where((0,b.b)((0,b.u)(e.appRepos.appId,f),(0,b.u)(e.appRepos.repoId,l))).limit(1);if(!s||s.goneAt)return n(N(K.G),c,r.id);let t=s.meta??{},u=(0,j.l)(t.rootDirectoryUnsupported);if(u)return n(N(`The Vercel Root Directory "${u}" of ${s.app} couldn't be used (Watchbell reads plain folder names, at most 4 deep). Update its package.json yourself.`),c,r.id);let v=(0,j.Q)(t.rootDirectory),w=(0,j.H)(v,"package.json"),x=v?`in ${v}`:"at the repository root";if(o.framework){let a=await Q(f);if(!a)return n(N(`Nothing to update in ${s.app}: its Next.js check shows no advisory with a fixed version.`),c,r.id);p=a}else if(!(p=await R(l)).upgrades.length)return n(N(`Nothing to update in ${s.app}: no direct package has a fixed version for its open advisories.`),c,r.id);let y=p.upgrades;if(o.auto){let a=(0,g.a)(y,p.installed,o.auto.severities);if(!a.ok)return n(N(`Automatic PR not opened: ${P[a.why]}. The proposal waits for your approval.`),c,r.id);y=a.upgrades}y=(0,i.F)(y);let{auto:z,proposalId:A,framework:B,...C}=o,D={timeoutMs:8e3,...C},E=await (0,J.H)(r.token,s.fullName,D);if(!E.ok)return n({done:!1,failed:E,audit:{message:`Package update PR failed \xb7 ${s.app}`,resourceId:f}},c,r.id);let F=await S(r.token,s.fullName,E.data.defaultBranch,t.productionBranch,D);if(!F.ok)return n({done:!1,failed:F,audit:{message:`Package update PR failed \xb7 ${s.app}`,resourceId:f}},c,r.id);let G=F.data.base,I=F.data.head;if(!I.ok)return n({done:!1,failed:I,audit:{message:`Package update PR failed \xb7 ${s.app}`,resourceId:f}},c,r.id);if(!I.data)return n(N(`The default branch ${G} wasn't found.`),c,r.id);let U=await (0,J.E)(r.token,s.fullName,I.data,D,w);if(!U.ok)return n({done:!1,failed:U,audit:{message:`Package update PR failed \xb7 ${s.app}`,resourceId:f}},c,r.id);if(!U.data)return n(N(`There is no package.json ${x}.`),c,r.id);let V=(0,h.k)(U.data.text,y);if(!V?.length||B&&!V.some(a=>"next"===a.package))return n(N(`${w} in ${s.app} already allows the fixed versions (or its ranges can't be rewritten). Run npm install there.`),c,r.id);if(z){let a=V.find(a=>{let b=(0,k.Y)(a.from);return!b||!(0,g.J)(b,a.fixed)});if(a)return n(N(`Automatic PR not opened: ${a.package} ${a.from} → ${a.to} jumps a major version. The proposal waits for your approval.`),c,r.id)}let W=(0,h.M)(U.data.text,V);if(!W)return n(N("package.json couldn't be edited safely."),c,r.id);let X=(0,h.U)(V,v);if(!(0,h.c)(X,G))return n(N("Refused: the PR branch would be the default branch."),c,r.id);let Y=await (0,J.x)(r.token,s.fullName,s.owner,X,G,D);if(Y.ok&&Y.data)return{ok:!0,message:`Pull request #${Y.data.number} for these updates is already open.`};let Z=await (0,J.e)(r.token,s.fullName,D);if(!Z.ok)return n({done:!1,failed:Z,audit:{message:`Package update PR failed \xb7 ${s.app}`,resourceId:f}},c,r.id);if(Z.data.length){let a=new Map((await (0,d.f)().select({number:e.dependencyPrs.number,packages:e.dependencyPrs.packages}).from(e.dependencyPrs).where((0,b.b)((0,b.u)(e.dependencyPrs.repoId,l),(0,b.y)(e.dependencyPrs.number,Z.data.map(a=>a.number))))).map(a=>[a.number,a.packages])),f=(0,g.U)(V.map(a=>a.package),Z.data.map(b=>({number:b.number,branch:b.branch,title:b.title,packages:a.get(b.number)??null})),v);if(f)return n(N(`Pull request #${f.number} for the same package is already open in ${s.app}. Merge or close it first.`),c,r.id)}let $=await (0,J.M)(r.token,s.fullName,X,D);if($.ok&&$.data)return n(N(`Branch ${X} already exists without an open pull request. Delete it on GitHub, then ask again.`),c,r.id);let _=s.lockfilePath??(v?(0,j.H)(v,"package-lock.json"):null),aa=k.a.find(a=>a.path===_?.split("/").pop())?.kind??null,ab=a=>n({done:!1,failed:a,audit:{message:`Package update PR failed \xb7 ${s.app} \xb7 ${X}`,resourceId:f}},c,r.id),ac=await (0,J.k)(r.token,s.fullName,X,I.data,G,D);if(!ac.ok)return ab(ac);let ad=await (0,J.D)(r.token,s.fullName,X,G,W,U.data.sha,(0,h.G)(V),D,w);if(!ad.ok)return ab(ad);let ae=(0,h.f)(V,v),af=await (0,J.y)(r.token,s.fullName,X,G,ae,(0,h.y)(V,aa,!!z,v),D);if(!af.ok)return ab(af);let ag=V.map(a=>`${a.package} ${a.from} → ${a.to}`).join(", "),ah=await (0,J.M)(r.token,s.fullName,X,D).catch(()=>null);if(ah?.ok&&ah.data){await (0,d.f)().insert(e.dependencyPrs).values({repoId:l,appId:f,proposalId:A??null,number:af.data.number,branch:X,baseBranch:G,headSha:ah.data,title:ae.slice(0,200),packages:V.map(a=>a.package),auto:!!z,stage:"checks",stageText:m(af.data.number,"checks")}).onConflictDoNothing().catch(()=>console.warn("deps: recording the PR failed"));let{extensions:b}=await a.A(414785);await b.runner?.queueLockfileJob({repoId:l,branch:X,headSha:ah.data,prNumber:af.data.number,lockfilePath:_,targets:V.map(a=>({name:a.package,version:a.fixed}))}).catch(()=>console.warn("deps: queueing the lockfile job failed")),await (0,M.U)(r.token,{repo:s.fullName,branch:X,lockfilePath:_,prNumber:af.data.number})}return n({done:!0,message:`Pull request #${af.data.number} opened for ${s.app}: ${ag}. Run npm install${v?` in ${v}`:""} on the branch before merging.`,audit:{message:`Package update PR opened \xb7 ${s.app} \xb7 #${af.data.number}`,resourceId:f,detail:ag}},c,r.id)}async function U(a,b,c){if(!(0,H.f)(a)||c&&!(0,H.f)(c.appId))return{ok:!1,why:"target"};let d=await O();if(!d||"unreadable"===d)return{ok:!1,why:"no write token"};let e=c?await Q(c.appId):await R(a);if(!e)return{ok:!1,why:"nothing"};let f=(0,g.a)(e.upgrades,e.installed,b);return f.ok?{ok:!0}:{ok:!1,why:f.why}}async function V(a,c=[]){let f=a.filter(H.f),g=new Map;if(!f.length)return g;let h=await (0,d.f)().select({appId:e.appRepos.appId,repoId:e.appRepos.repoId,version:e.appSecurity.version,status:e.appSecurity.status,findings:e.appSecurity.findings}).from(e.appRepos).innerJoin(e.githubRepos,(0,b.u)(e.githubRepos.id,e.appRepos.repoId)).innerJoin(e.appSecurity,(0,b.u)(e.appSecurity.resourceId,e.appRepos.appId)).where((0,b.b)((0,b.y)(e.appRepos.appId,f),(0,b.M)(e.githubRepos.goneAt),(0,b.u)(e.appSecurity.status,"vulnerable"))).limit(f.length),j=new Set(c),k=h.filter(a=>j.has(a.appId)),l=k.length?new Set((await (0,d.f)().selectDistinct({repoId:e.dependencyVulns.repoId}).from(e.dependencyVulns).where((0,b.b)((0,b.y)(e.dependencyVulns.repoId,[...new Set(k.map(a=>a.repoId))]),(0,b.M)(e.dependencyVulns.resolvedAt),(0,b.u)(e.dependencyVulns.package,"next"),(0,b.u)(e.dependencyVulns.direct,!0),(0,b.E)(e.dependencyVulns.fixedVersion))).limit(k.length)).map(a=>a.repoId)):new Set;for(let a of h){if(j.has(a.appId)&&l.has(a.repoId))continue;let b=(0,i.p)({version:a.version,status:a.status,findings:Array.isArray(a.findings)?a.findings:[]});b&&g.set(a.appId,{repoId:a.repoId,from:b.from,to:b.to})}return g}a.s(["J",0,U,"W",0,T,"h",0,V,"G",0,O],736780)},313235,a=>{var b=a.i(927262),c=a.i(462820);let d={workloads:"Workloads",databases:"Databases",network:"Network",observe:"Observe",ai:"AI & API",admin:"Administration"},e={MonitorDown:"workloads",HighLatency:"workloads",DeploymentFailed:"workloads",DatabasePaused:"databases",StorageAlmostFull:"databases",NeonComputeHigh:"databases",FirestoreQuotaHigh:"databases",AutoPauseRisk:"databases",ComputeHigh:"databases",DbQuotaHigh:"databases",CertExpiringSoon:"network",DomainExpiringSoon:"network",DnsProxiedToVercel:"network",CollectorStale:"observe",CredentialExpiring:"admin",VulnerableDependency:"workloads",FrameworkVulnerable:"workloads",MonitorDomainMoved:"workloads"},f=new Set(["MonitorDown","HighLatency","DeploymentFailed","VulnerableDependency","FrameworkVulnerable","MonitorDomainMoved"]);a.s(["H",0,d,"p",0,function(a){if((0,b.h)(a.ruleKey))return f.has(a.ruleKey)&&null!==a.resourceKind&&"app"!==a.resourceKind?"observe":e[a.ruleKey];let c=new Set(a.ruleKey.replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2").toLowerCase().split(/[^a-z0-9]+/).filter(Boolean)),d=(...a)=>a.some(a=>c.has(a));return d("ai","router","gateway","model","models","provider","quota","llm","gemini")?"ai":d("key","keys","member","members","security","audit","credential","credentials","mfa","token")?"admin":d("database","db","storage","compute","neon","supabase","firestore","firebase")?"databases":d("domain","domains","dns","cert","certificate","tls","zone")?"network":"app"===a.resourceKind?"workloads":"observe"},"y",0,a=>c.X.proposedBy(d[a])])},247881,649031,a=>{var b=a.i(488345),c=a.i(342634),d=a.i(313235),e=a.i(188282);let f=["LogErrorSpike","LogErrors","LogDbErrors"],g="timeout|ECONNREFUSED|too many connections|terminating connection|connection terminated|endpoint is disabled|compute.*suspend";RegExp(g,"i");let h=/^dpl_[A-Za-z0-9]{8,40}$/,i=/^ep-[a-z0-9-]{3,60}$/,j=/^[a-z0-9]{8,40}$/;function k(a,d,e){let f=d?(0,b.f)(d,e,120):"";return(0,c.l)((0,b.f)(f?`${a}. Most common: ${f}`:a,e,c.j)||a,c.j)}let l=a=>`${a.ruleKey}:${a.resourceId??""}:${a.action}`,m=new Set(["pending","approved","running"]);a.s(["s",0,864e5,"b",0,72e5,"V",0,3,"N",0,g,"G",0,20,"T",0,f,"v",0,72e5,"H",0,18e5,"w",0,10,"I",0,72e5,"x",0,function(a,b,c){let d=new Set(b.filter(a=>m.has(a.status)||null!==a.closedAt&&c.getTime()-a.closedAt.getTime()<72e5).map(l)),e=new Set;return a.filter(a=>{let b=l(a);return!(d.has(b)||e.has(b))&&(e.add(b),!0)})},"t",0,function(a,b,f){return(function(a,b,c){let d=[],e=c.getTime();if(null!==a.liveAt&&e-a.liveAt.getTime()<72e5&&a.liveAt.getTime()<=e&&a.errorsSinceLive>=Math.max(10,Math.ceil(5*a.baselineErrors/24))&&a.currentId&&a.previousId&&h.test(a.previousId)&&a.previousId!==a.currentId){let c=`${a.errorsSinceLive} errors since the deploy went live ${Math.max(1,Math.round((e-a.liveAt.getTime())/6e4))} min ago (${a.baselineErrors} in the 24 h before)`;d.push({ruleKey:"LogErrorSpike",room:"workloads",action:"vercel_rollback",resourceKind:"app",resourceId:a.appId,targetRef:a.previousId,reason:k(c,a.topSinceLive,b)})}let f=null!==a.lastDeployAt&&e-a.lastDeployAt.getTime()<72e5;if(a.errors30>=20&&!f&&a.httpMonitorId&&d.push({ruleKey:"LogErrors",room:"workloads",action:"recheck",resourceKind:"app",resourceId:a.appId,targetRef:a.httpMonitorId,reason:k(`${a.errors30} errors in the last 30 min`,a.top30,b)}),a.dbErrors30>=3&&a.db){let c=k(`${a.dbErrors30} database connection errors in the last 30 min`,a.topDb,b),e=a.db;("neon_project"===e.kind||"neon_branch"===e.kind)&&e.wakeEndpoint&&i.test(e.wakeEndpoint)?d.push({ruleKey:"LogDbErrors",room:"databases",action:"neon_wake",resourceKind:e.kind,resourceId:e.resourceId,targetRef:e.wakeEndpoint,reason:c}):"supabase_project"===e.kind&&e.supabasePaused&&e.supabaseRef&&j.test(e.supabaseRef)&&d.push({ruleKey:"LogDbErrors",room:"databases",action:"supabase_restore",resourceKind:e.kind,resourceId:e.resourceId,targetRef:e.supabaseRef,reason:c})}return d})(a,b,f).map(g=>{let h="app"===g.resourceKind?(0,c.J)("app",a.appId,a.appName,b):(0,c.J)(g.resourceKind,g.resourceId,null,b);return{alertId:null,ruleKey:g.ruleKey,room:g.room,action:g.action,risk:e.H[g.action].risk,title:(0,c.M)(g.action,h),reason:g.reason,resourceKind:g.resourceKind,resourceId:g.resourceId,resourceName:h,targetRef:g.targetRef,proposedBy:(0,d.y)(g.room),expiresAt:new Date(f.getTime()+e.V)}})},"D",0,function(a,b){let c=a.getTime();return(null===b||!(c-b<27e4))&&(Math.floor(c/6e4)%5==0||null!==b&&c-b>=6e5)},"W",0,function(a,b){let c=new Set(b.map(l));return a.filter(a=>{let b;return"pending"===a.status&&(b=a.ruleKey,f.includes(b))&&!c.has(l(a))}).map(a=>a.id)}],247881);let n=new Set(["MonitorDown","LogErrorSpike"]);a.s(["r",0,72e5,"M",0,n,"s",0,function(a,b){let c=a=>({ok:!1,why:a});if(!a.setting.enabled)return c("off");if(!a.ruleKey||!n.has(a.ruleKey))return c("rule");let d=a.deploy;if(!d||!d.liveAt)return c("no live deploy");let e=b.getTime()-d.liveAt.getTime();return e<0||e>6e4*a.setting.windowMin?c("outside the window"):d.previousId&&a.targetRef===d.previousId&&d.previousId!==d.currentId?d.newestProdCreatedAt&&d.currentCreatedAt.getTime()<d.newestProdCreatedAt.getTime()?c("live deploy is a rollback"):a.rolledOrPromotedLately?c("live deploy came from a rollback or promote"):"ready"!==(d.previousState??"").toLowerCase()?c("previous not ready"):!d.previousCreatedAt||b.getTime()-d.previousCreatedAt.getTime()>2592e6?c("previous too old"):a.autoLately?c("auto-rollback within 2 h"):a.sameDeployBefore?c("already rolled back once"):a.inFlight?c("another auto-rollback is running"):{ok:!0}:c("target changed")},"u",0,(a,b,d)=>(0,c.l)(`Automatic: the new deploy ${a} errored in the first ${b} minutes. ${d}`),"E",0,a=>a.currentSha&&/^[0-9a-f]{7,40}$/i.test(a.currentSha)?a.currentSha.slice(0,7):a.currentId.slice(0,16)],649031)},691100,a=>{let b;var c,d=a.i(93321),e=a.i(530385),f=a.i(351674),g=a.i(548734),h=a.i(462820),i=a.i(837137),j=a.i(247730),k=a.i(455317),l=a.i(930270),m=a.i(396667),n=a.i(160147),o=a.i(767163),p=a.i(757902),q=a.i(436357),r=a.i(893893),s=a.i(556987),t=a.i(142754),u=a.i(342634),v=a.i(247881),w=a.i(649031),x=a.i(381544),y=a.i(138984),z=a.i(492665),A=a.i(221084),B=a.i(736780),C=a.i(560954),D=a.i(895176),E=a.i(305731),F=a.i(30184),G=a.i(721170),H=a.i(322145),I=a.i(248358),J=a.i(915598),K=a.i(312573),L=a.i(323878),M=a.i(19809),N=a.i(371289),O=a.i(94473),P=a.i(188282);let Q={checkMonitorNow:D.X,keepAliveNow:C.v,wakeAs:G.v,supabaseAct:I.Q,redeployAs:J.B,rollbackAs:J.U,finish:H.W,recordAction:A.f,limit:L.C,bumpPrAs:B.W,autoSecurity:()=>(0,O.X)(),recheckDomain:F._,moveMonitorToDomain:E.f};async function R(){let[a]=await (0,g.f)().select({at:i.collectorRuns.startedAt}).from(i.collectorRuns).where(f.B`(${i.collectorRuns.trigger} = 'vercel_cron' or (${i.collectorRuns.trigger} = 'manual' and ${i.collectorRuns.tasks} ? 'rollups'))`).orderBy((0,e.A)(i.collectorRuns.startedAt)).limit(1);return a?.at??null}async function S(a){let b=await (a.lastDailyRunAt??R)(),c=(a.now??(()=>new Date))();if(b&&c.getTime()-b.getTime()<216e5)return{ok:!1,error:"The daily job ran less than 6 hours ago."};let d=(a.dailyTarget??function(){let a=(0,y.f)();return a?{url:`${(0,z.f)().SITE_URL.replace(/\/+$/,"")}/api/daily`,secret:a.CRON_SECRET}:null})();if(!d)return{ok:!1,error:"The scheduler settings are missing, so the daily job can't be started."};try{let b=await (a.fetch??fetch)(d.url,{headers:{Authorization:`Bearer ${d.secret}`},signal:AbortSignal.timeout(4e4),redirect:"manual"});if(!b.ok||b.status>=300)return{ok:!1,error:`The daily job route answered ${b.status}.`};return{ok:!0,message:`Daily job ran again (${b.status}).`}}catch(a){if(a instanceof Error&&("TimeoutError"===a.name||"AbortError"===a.name))return{ok:!0,message:"Daily job started; it's still running — the heartbeat turns Up when it finishes."};throw a}}let T="The proposal's target is missing, so it can't run.";async function U(a,b,c=Q){let d="auto"===b,e=d?{id:u.e,userId:null}:{id:b.id,userId:b.userId},f=(a,b,e)=>c.finish(a,b,e,{refresh:!1,...d?{auditPrefix:u.v}:{}});try{if(!a.resourceId||!a.targetRef)return{ok:!1,error:T};if((0,N.W)()&&"recheck"!==a.action)return await c.recordAction({kind:"ok",message:`${d?u.v:""}${P.H[a.action].label} (simulated)`,detail:"Simulated in the demo",resourceId:a.resourceId,actorUserId:e.userId}).catch(()=>console.warn("audit event failed")),{ok:!0,message:M.r};switch(a.action){case"recheck":{let b=await c.limit(K.t.check,e.id);if(!b.allowed)return{ok:!1,error:`Too many checks. Try again in ${(0,K.H)(b.retryAfter)}.`};let f=await c.checkMonitorNow(a.targetRef);if(!f.ok)return{ok:!1,error:f.error};if(f.audit)try{await c.recordAction({kind:!1===f.passed?"err":"ok",...f.audit,message:`${d?u.v:""}${f.audit.message}`,actorUserId:e.userId})}catch{console.warn("audit event failed")}return{ok:!0,message:f.message}}case"domain_recheck":{let b=await c.limit(K.t.domainCheck,e.id);if(!b.allowed)return{ok:!1,error:`Too many checks. Try again in ${(0,K.H)(b.retryAfter)}.`};let f=await (c.recheckDomain??F._)(a.targetRef);if(!f.ok)return f;return await c.recordAction({kind:"ok",...f.audit,message:`${d?u.v:""}${f.audit.message}`,actorUserId:e.userId}).catch(()=>console.warn("audit event failed")),{ok:!0,message:f.message}}case"monitor_update_url":{let b=await c.limit(K.t.monitorWrite,e.id);if(!b.allowed)return{ok:!1,error:`Too many changes. Try again in ${(0,K.H)(b.retryAfter)}.`};let f=await (c.moveMonitorToDomain??E.f)(a.targetRef);if(!f.ok)return f;return f.audit&&await c.recordAction({kind:"ok",...f.audit,message:`${d?u.v:""}${f.audit.message}`,actorUserId:e.userId}).catch(()=>console.warn("audit event failed")),{ok:!0,message:f.message}}case"daily_rerun":return await S(c);case"neon_wake":return await c.wakeAs(e,a.resourceId,a.targetRef,f);case"supabase_keepalive":return await c.keepAliveNow(e,a.resourceId,f);case"supabase_restore":return await c.supabaseAct("restore",e,a.resourceId,a.targetRef,f);case"vercel_redeploy":return await c.redeployAs(e,a.resourceId,a.targetRef,f);case"vercel_rollback":return await c.rollbackAs(e,a.resourceId,a.targetRef,f);case"github_bump_pr":{let b=d?await (c.autoSecurity??O.X)():null;if(d&&!b?.enabled)return{ok:!1,error:"Automatic security fixes is off."};return await (c.bumpPrAs??B.W)(e,a.resourceId,a.targetRef,f,{proposalId:a.proposalId??null,...b?{auto:{severities:b.severities}}:{},..."FrameworkVulnerable"===a.ruleKey?{framework:!0}:{}})}default:return{ok:!1,error:T}}}catch(a){return console.warn(`${h.X.logTag}/proposals run failed:`,a instanceof Error?a.name:"error"),{ok:!1,error:"Something went wrong while running it. Check the console page before trying again."}}}let V={id:t.O.id,room:t.O.room,action:t.O.action,risk:t.O.risk,title:t.O.title,reason:t.O.reason,resourceName:t.O.resourceName,proposedBy:t.O.proposedBy,status:t.O.status,auto:t.O.auto,result:t.O.result,createdAt:t.O.createdAt,decidedAt:t.O.decidedAt,expiresAt:t.O.expiresAt},W={...V,resourceId:t.O.resourceId,targetRef:t.O.targetRef,ruleKey:t.O.ruleKey};async function X(a,b,c){let e=(0,u.z)(a,b),[h,j,k,m,n,o,p]=await Promise.all([e.monitorIds.length?(0,g.f)().select({id:i.monitors.id,kind:i.monitors.kind,url:i.monitors.url,lastError:i.monitors.lastError,appId:i.monitors.resourceId,appName:i.resources.name,appMeta:i.resources.meta}).from(i.monitors).innerJoin(i.resources,(0,d.u)(i.resources.id,i.monitors.resourceId)).where((0,d.y)(i.monitors.id,e.monitorIds)):[],e.deployApps.length?(0,g.f)().select({app:i.deployments.resourceId,id:i.deployments.externalId,isCurrent:i.deployments.isCurrent,isPrevious:i.deployments.isPreviousProduction,readyAt:i.deployments.readyAt,createdAt:i.deployments.createdAtProvider}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,e.deployApps),(0,d.F)((0,d.u)(i.deployments.isCurrent,!0),(0,d.u)(i.deployments.isPreviousProduction,!0)))):[],e.supabaseIds.length?(0,g.f)().select({id:i.resources.id,ref:i.resources.externalId}).from(i.resources).where((0,d.b)((0,d.y)(i.resources.id,e.supabaseIds),(0,d.u)(i.resources.kind,"supabase_project"),f.B`${i.resources.goneAt} is null`)):[],e.monitorApps.length?$(e.monitorApps):new Map,e.depApps.length?Y(a,e.depApps).catch(()=>new Set).then(a=>(0,l.C)(e.depApps,a)).catch(()=>new Map):new Map,e.monitorIds.length?Z(e.monitorIds):null,e.frameworkApps.length?(0,B.h)(e.frameworkApps,e.depApps).catch(()=>new Map):new Map]),r=h.some(a=>null!==(0,q.Y)(a.appMeta)),s=r?await (0,g.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta}).from(i.resources).where((0,d.b)((0,d.u)(i.resources.kind,"app"),(0,d.u)(i.resources.monitored,!0),(0,d.M)(i.resources.goneAt))).limit(500):[],t=r?(0,q.P)(h,s):new Map,v=new Map;for(let a of j){let b=v.get(a.app)??{currentId:null,previousId:null,liveAt:null};a.isCurrent?(b.currentId=a.id,b.liveAt=a.readyAt??a.createdAt??null):a.isPrevious&&(b.previousId=a.id),v.set(a.app,b)}return{monitorKinds:new Map(h.map(a=>[a.id,String(a.kind)])),deploys:v,...void 0!==c?{rollbackWindowMs:c}:{},supabaseRefs:new Map(k.map(a=>[a.id,a.ref])),neonSuspended:m,fixableRepos:n,dailyHeartbeatId:o,frameworkFixes:p,monitorMoves:t}}async function Y(a,b){let c=new Set(b),e=a.filter(a=>"FrameworkVulnerable"===a.ruleKey&&"app"===a.resourceKind&&a.resourceId&&c.has(a.resourceId)).map(a=>a.id);return e.length?new Set((await (0,g.f)().selectDistinct({resourceId:t.O.resourceId}).from(t.O).where((0,d.b)((0,d.u)(t.O.ruleKey,"FrameworkVulnerable"),(0,d.u)(t.O.action,"github_bump_pr"),(0,d.y)(t.O.status,["pending","approved","running","done"]),(0,d.y)(t.O.alertId,e),(0,d.y)(t.O.resourceId,[...c]))).limit(e.length)).flatMap(a=>a.resourceId?[a.resourceId]:[])):new Set}async function Z(a){let b=(0,o.i)(process.env.DAILY_HEARTBEAT_TOKEN);if(!b)return null;let[c]=await (0,g.f)().select({id:i.monitors.id}).from(i.monitors).where((0,d.b)((0,d.y)(i.monitors.id,a),(0,d.u)(i.monitors.kind,"heartbeat"),(0,d.u)(i.monitors.tokenHash,(0,p.C)(b)))).limit(1).catch(()=>[]);return c?.id??null}async function $(a){let b=await (0,g.f)().select({app:i.links.fromResourceId,id:i.resources.id,kind:i.resources.kind,externalId:i.resources.externalId,parentId:i.resources.parentId}).from(i.links).innerJoin(i.resources,(0,d.u)(i.resources.id,i.links.toResourceId)).where((0,d.b)((0,d.y)(i.links.fromResourceId,a),(0,d.u)(i.links.kind,"uses_db"),(0,d.y)(i.resources.kind,["neon_project","neon_branch"]),f.B`${i.resources.goneAt} is null`)),c=new Map;if(!b.length)return c;let e=a=>"neon_branch"===a.kind?a.parentId:a.id,h=[...new Set(b.map(e).filter(a=>!!a))];if(!h.length)return c;let j=new Map((await (0,g.f)().select({id:i.snapshots.resourceId,data:i.snapshots.data}).from(i.snapshots).where((0,d.y)(i.snapshots.resourceId,h))).map(a=>[a.id,(0,r.k)(r.s,a.data)]));for(let a of b){let b=e(a),d=b?j.get(b):void 0,f=d?(0,u.Z)(d.endpoints,d.branches,"neon_branch"===a.kind?a.externalId:null):null;f&&c.set(a.app,{resourceId:a.id,resourceKind:a.kind,endpointId:f})}return c}async function _(a){if(!a.length)return[];let b=new Set((await (0,g.f)().select({alertId:t.O.alertId,action:t.O.action}).from(t.O).where((0,d.y)(t.O.alertId,[...new Set(a.map(a=>a.alertId))]))).map(a=>`${a.alertId}:${a.action}`)),c=a.filter(a=>!b.has(`${a.alertId}:${a.action}`));return c.length?(0,g.f)().insert(t.O).values(c.map(a=>({...a,status:"pending"}))).onConflictDoNothing().returning(W):[]}async function aa(a,b){return(await (0,g.f)().select(V).from(t.O).where(f.B`${t.O.createdAt} >= ${new Date(a.getTime()-6048e5).toISOString()}::timestamptz`).orderBy(f.B`case when ${t.O.status} = 'pending' then 0 else 1 end`,(0,e.A)(t.O.createdAt),(0,e.A)(t.O.id)).limit(b)).map(u.E)}async function ab(a){let[b]=await (0,g.f)().select(V).from(t.O).where((0,d.u)(t.O.id,a)).limit(1);return b?(0,u.E)(b):null}async function ac(a,b,c,e){let[h]=await (0,g.f)().update(t.O).set({status:"approve"===b?"approved":"rejected",decidedBy:c,decidedAt:e}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"pending"),f.B`${t.O.expiresAt} > ${e.toISOString()}::timestamptz`)).returning(W);if(h)return{status:"ok",proposal:(0,u.E)(h),row:h};let[i]=await (0,g.f)().select(V).from(t.O).where((0,d.u)(t.O.id,a)).limit(1);return i?{status:"conflict",proposal:(0,u.E)(i)}:{status:"missing"}}async function ad(a,b){let[c]=await (0,g.f)().update(t.O).set({status:"running",claimedAt:b}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"approved"))).returning(W);return c??null}async function ae(a,b,c,e){let[f]=await (0,g.f)().update(t.O).set({status:b?"done":"failed",result:c,finishedAt:e}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"running"))).returning(W);return f??null}let af={run:(a,b)=>U(a,b),book:()=>(0,j.f)()};async function ag(a,b,c,d=af){let e=await ad(a,c);if(!e)return null;let f=await d.run({action:e.action,resourceId:e.resourceId,targetRef:e.targetRef,proposalId:e.id,ruleKey:e.ruleKey??null},b),g=await d.book().catch(()=>s.a),h=await ae(a,f.ok,(0,u.x)(f,g),new Date);return h?(0,u.E)(h):null}async function ah(a,b){let c=await (0,g.f)().update(t.O).set({status:"expired",result:"Expired: nobody decided in time, or the alert stopped firing."}).where((0,d.b)((0,d.u)(t.O.status,"pending"),(0,d.F)((0,d.S)(t.O.expiresAt,new Date(b.getTime()+1)),(0,d.b)((0,d.E)(t.O.alertId),a.length?(0,d.$)(t.O.alertId,a):f.B`true`)))).returning({id:t.O.id});return await (0,g.f)().update(t.O).set({status:"failed",result:"The run was interrupted. Check the console page before trying again.",finishedAt:b}).where((0,d.b)((0,d.u)(t.O.status,"running"),(0,d.S)(t.O.claimedAt,new Date(b.getTime()-u.L)))),c.length}async function ai(a){await (0,g.f)().delete(t.O).where((0,d.b)((0,d.S)(t.O.createdAt,new Date(a.getTime()-2592e6)),(0,d.$)(t.O.status,["pending","approved","running"])))}let aj=f.B`(${i.storedLogs.level} in ('error', 'fatal') or coalesce(${i.storedLogs.statusCode}, 0) >= 500)`,ak=f.B`coalesce(${i.deployments.readyAt}, ${i.deployments.createdAtProvider})`;async function al(a){let b=await (0,g.f)().select({app:i.links.fromResourceId,id:i.resources.id,kind:i.resources.kind,externalId:i.resources.externalId,parentId:i.resources.parentId}).from(i.links).innerJoin(i.resources,(0,d.u)(i.resources.id,i.links.toResourceId)).where((0,d.b)((0,d.y)(i.links.fromResourceId,a),(0,d.u)(i.links.kind,"uses_db"),(0,d.y)(i.resources.kind,["neon_project","neon_branch","supabase_project"]),(0,d.M)(i.resources.goneAt))),c=new Map;if(!b.length)return c;let e=a=>"neon_branch"===a.kind?a.parentId:a.id,f=[...new Set(b.map(e).filter(a=>!!a))],h=new Map((f.length?await (0,g.f)().select({id:i.snapshots.resourceId,data:i.snapshots.data}).from(i.snapshots).where((0,d.y)(i.snapshots.resourceId,f)):[]).map(a=>[a.id,a.data]));for(let a of b){let b=h.get(e(a)??"");if("supabase_project"===a.kind){let d=(0,r.k)(r.B,b);c.set(a.app,{resourceId:a.id,kind:a.kind,wakeEndpoint:null,supabaseRef:a.externalId,supabasePaused:"INACTIVE"===d.status})}else{let d=(0,r.k)(r.s,b);c.set(a.app,{resourceId:a.id,kind:a.kind,wakeEndpoint:(0,u.Z)(d.endpoints,d.branches,"neon_branch"===a.kind?a.externalId:null),supabaseRef:null,supabasePaused:!1})}}return c}let am={apps:async function(a){let b=new Date(a.getTime()-v.I-v.s),c=f.B`${i.storedLogs.at} >= ${new Date(a.getTime()-v.H).toISOString()}::timestamptz`,e=f.B`${i.storedLogs.message} ~* ${v.N}`,h=f.B`left(${i.storedLogs.message}, 200)`,j=(await (0,g.f)().select({appId:i.storedLogs.resourceId,appName:f.B`max(${i.resources.name})`,liveAt:f.B`max(${ak})`.mapWith(i.deployments.readyAt),currentId:f.B`max(${i.deployments.externalId})`,errorsSinceLive:f.B`count(*) filter (where ${aj} and ${i.storedLogs.at} >= ${ak})`.mapWith(Number),baselineErrors:f.B`count(*) filter (where ${aj} and ${i.storedLogs.at} >= ${ak} - interval '24 hours' and ${i.storedLogs.at} < ${ak})`.mapWith(Number),topSinceLive:f.B`mode() within group (order by ${h}) filter (where ${aj} and ${i.storedLogs.at} >= ${ak})`,errors30:f.B`count(*) filter (where ${aj} and ${c})`.mapWith(Number),top30:f.B`mode() within group (order by ${h}) filter (where ${aj} and ${c})`,dbErrors30:f.B`count(*) filter (where ${c} and ${e})`.mapWith(Number),topDb:f.B`mode() within group (order by ${h}) filter (where ${c} and ${e})`}).from(i.storedLogs).innerJoin(i.resources,(0,d.u)(i.resources.id,i.storedLogs.resourceId)).leftJoin(i.deployments,(0,d.b)((0,d.u)(i.deployments.resourceId,i.storedLogs.resourceId),(0,d.u)(i.deployments.isCurrent,!0))).where((0,d.b)((0,d.B)(i.storedLogs.at,b),(0,d.u)(i.resources.kind,"app"),(0,d.M)(i.resources.goneAt))).groupBy(i.storedLogs.resourceId)).filter(a=>a.errorsSinceLive>=v.w||a.errors30>=v.G||a.dbErrors30>=v.V);if(!j.length)return[];let k=j.map(a=>a.appId),[l,m,n]=await Promise.all([(0,g.f)().select({app:i.deployments.resourceId,previousId:f.B`max(${i.deployments.externalId}) filter (where ${i.deployments.isPreviousProduction})`,lastDeployAt:f.B`max(${i.deployments.createdAtProvider}) filter (where ${i.deployments.target} = 'production')`.mapWith(i.deployments.createdAtProvider)}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,k),(0,d.F)((0,d.u)(i.deployments.isPreviousProduction,!0),(0,d.B)(i.deployments.createdAtProvider,new Date(a.getTime()-v.v))))).groupBy(i.deployments.resourceId),(0,g.f)().select({app:i.monitors.resourceId,id:i.monitors.id}).from(i.monitors).where((0,d.b)((0,d.y)(i.monitors.resourceId,k),(0,d.u)(i.monitors.kind,"http"),(0,d.u)(i.monitors.paused,!1),(0,d.u)(i.monitors.ownerPaused,!1))).orderBy(i.monitors.createdAt),al(k)]),o=new Map(l.map(a=>[a.app,a])),p=new Map;for(let a of m)p.has(a.app)||p.set(a.app,a.id);return j.map(a=>({...a,appName:a.appName??"",previousId:o.get(a.appId)?.previousId??null,lastDeployAt:o.get(a.appId)?.lastDeployAt??null,httpMonitorId:p.get(a.appId)??null,db:n.get(a.appId)??null}))},rows:async function(a){let b=f.B`coalesce(${t.O.finishedAt}, ${t.O.decidedAt}, ${t.O.expiresAt})`;return(0,g.f)().select({id:t.O.id,ruleKey:t.O.ruleKey,resourceId:t.O.resourceId,action:t.O.action,status:t.O.status,closedAt:b.mapWith(t.O.finishedAt)}).from(t.O).where((0,d.b)((0,d.M)(t.O.alertId),(0,d.y)(t.O.ruleKey,[...v.T]),(0,d.F)((0,d.y)(t.O.status,["pending","approved","running"]),f.B`${b} > ${new Date(a.getTime()-v.b).toISOString()}::timestamptz`)))}};async function an(a,b,c=am){let[e,f]=await Promise.all([c.apps(a),c.rows(a)]),h=e.flatMap(c=>(0,v.t)(c,b,a)),i=(0,v.W)(f,h),j=0;i.length&&(j=(await (0,g.f)().update(t.O).set({status:"expired",result:"Expired: the logs no longer show it.",finishedAt:a}).where((0,d.b)((0,d.y)(t.O.id,i),(0,d.u)(t.O.status,"pending"))).returning({id:t.O.id})).length);let k=(0,v.x)(h,f,a);return k.length?{created:await (0,g.f)().insert(t.O).values(k.map(a=>({...a,status:"pending"}))).onConflictDoNothing().returning(W),expired:j}:{created:[],expired:j}}let ao=null;async function ap(a,b){return(0,v.D)(a,ao)?(ao=a.getTime(),an(a,await b())):{created:[],expired:0}}async function aq(a,b){return(await (0,g.f)().update(t.O).set({status:"approved",auto:!0,decidedAt:b}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"pending"),(0,d.u)(t.O.risk,"safe"))).returning({id:t.O.id})).length>0}async function ar(a,b){let c=new Date(b.getTime()-w.r),[e,h,j,k]=await Promise.all([(0,g.f)().select({app:i.deployments.resourceId,id:i.deployments.externalId,sha:i.deployments.commitSha,state:i.deployments.state,isCurrent:i.deployments.isCurrent,isPrevious:i.deployments.isPreviousProduction,readyAt:i.deployments.readyAt,createdAt:i.deployments.createdAtProvider}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,a),(0,d.F)((0,d.u)(i.deployments.isCurrent,!0),(0,d.u)(i.deployments.isPreviousProduction,!0)))),(0,g.f)().select({app:i.deployments.resourceId,at:f.B`max(${i.deployments.createdAtProvider})`.mapWith(i.deployments.createdAtProvider)}).from(i.deployments).where((0,d.b)((0,d.y)(i.deployments.resourceId,a),(0,d.u)(i.deployments.target,"production"),(0,d.u)(i.deployments.state,"ready"))).groupBy(i.deployments.resourceId),(0,g.f)().select({app:i.events.resourceId}).from(i.events).where((0,d.b)((0,d.u)(i.events.type,"action"),(0,d.y)(i.events.resourceId,a),(0,d.B)(i.events.at,c),f.B`${i.events.message} ~ ${as}`)),(0,g.f)().select({app:t.O.resourceId,targetRef:t.O.targetRef,status:t.O.status,decidedAt:t.O.decidedAt}).from(t.O).where((0,d.b)((0,d.u)(t.O.action,"vercel_rollback"),(0,d.u)(t.O.auto,!0),(0,d.B)(t.O.createdAt,new Date(b.getTime()-26784e5))))]),l=new Map;for(let b of a){let a=e.find(a=>a.app===b&&a.isCurrent),d=e.find(a=>a.app===b&&a.isPrevious&&!a.isCurrent),f=k.filter(a=>a.app===b);l.set(b,{deploy:a?{currentId:a.id,currentSha:a.sha,liveAt:a.readyAt??a.createdAt,currentCreatedAt:a.createdAt,newestProdCreatedAt:h.find(a=>a.app===b)?.at??null,previousId:d?.id??null,previousState:d?.state??null,previousCreatedAt:d?.createdAt??null}:null,rolledOrPromotedLately:j.some(a=>a.app===b),autoLately:f.some(a=>null!==a.decidedAt&&a.decidedAt.getTime()>=c.getTime()),sameDeployBefore:!!d&&f.some(a=>a.targetRef===d.id)})}return{apps:l,inFlight:k.some(a=>"approved"===a.status||"running"===a.status)}}let as="(Rolled back|Promoted|Preview promoted) ·";async function at(a,b,c){return(await (0,g.f)().update(t.O).set({status:"approved",auto:!0,decidedAt:c,reason:b}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"pending"),(0,d.u)(t.O.action,"vercel_rollback"),f.B`not exists (select 1 from ops.action_proposals x where x.action = 'vercel_rollback' and x.auto and x.status in ('approved', 'running'))`)).returning({id:t.O.id})).length>0}async function au(a,b,c,d){let e=a.filter(a=>"vercel_rollback"===a.action&&a.ruleKey&&w.M.has(a.ruleKey)&&a.resourceId);if(!e.length||!d.autoRollback||!d.rollbackContext||!d.approveAutoRollback)return[];let f=await d.autoRollback().catch(()=>null);if(!f?.enabled||15e3>c())return[];let g=[];try{let a=await d.rollbackContext([...new Set(e.map(a=>a.resourceId))],b),i=a.inFlight;for(let j of e){let e=a.apps.get(j.resourceId);if(!e||12e3>c())continue;let k=(0,w.s)({setting:f,ruleKey:j.ruleKey??null,targetRef:j.targetRef,inFlight:i,...e},b);if(!k.ok){console.log(`${h.X.logTag}/auto-rollback: skipped (${k.why})`);continue}let l=(0,w.E)(e.deploy);if(!await d.approveAutoRollback(j.id,(0,w.u)(l,f.windowMin,j.reason),new Date))continue;i=!0;let m=await d.execute(j.id,new Date);if(m){g.push(m),await (d.notifyRollback??x.q)(m,{reason:j.reason,newRef:l}).catch(()=>void 0);break}}}catch(a){console.warn(`${h.X.logTag}/auto-rollback failed:`,a instanceof Error?a.name:"error")}return g}async function av(a,b){return(await (0,g.f)().update(t.O).set({status:"approved",auto:!0,decidedAt:b}).where((0,d.b)((0,d.u)(t.O.id,a),(0,d.u)(t.O.status,"pending"),(0,d.u)(t.O.action,"github_bump_pr"))).returning({id:t.O.id})).length>0}async function aw(a,b,c){let d=a.filter(a=>"github_bump_pr"===a.action&&a.targetRef);if(!d.length||!c.autoSecurity||!c.bumpReady||!c.approveAutoBump)return[];let e=await c.autoSecurity().catch(()=>null);if(!e?.enabled||!e.severities.length)return[];let f=[];for(let a of d){if(15e3>b())break;try{let b="FrameworkVulnerable"===a.ruleKey&&a.resourceId?await c.bumpReady(a.targetRef,e.severities,{appId:a.resourceId}):await c.bumpReady(a.targetRef,e.severities);if(!b.ok){console.log(`${h.X.logTag}/auto-security: waits for the owner (${b.why})`);continue}if(!await c.approveAutoBump(a.id,new Date))continue;let d=await c.execute(a.id,new Date);d&&f.push(d)}catch(a){console.warn(`${h.X.logTag}/auto-security failed:`,a instanceof Error?a.name:"error")}}return f}async function ax(a){return new Map((await (0,g.f)().select({id:i.accounts.id,provider:i.accounts.provider}).from(i.accounts).where((0,d.y)(i.accounts.id,a))).map(a=>[a.id,a.provider]))}let ay={firing:()=>(0,k.q)(),book:()=>(0,j.f)(),facts:X,create:_,expire:ah,autoRun:O.I,approveAuto:aq,execute:(a,b)=>ag(a,"auto",b),notifyNew:x.i,notifyResult:x.b,logs:ap,autoRollback:()=>(0,O.K)(),rollbackContext:ar,approveAutoRollback:at,notifyRollback:x.q,autoSecurity:()=>(0,O.X)(),bumpReady:B.J,approveAutoBump:av,paused:m.I,providers:ax};async function az(a,b={},c=ay){let d={created:0,expired:0,autoRan:0},e=()=>(b.deadline??1/0)-Date.now(),f=await c.firing();d.expired=await c.expire(f.map(a=>a.id),a);let g=c.paused?await c.paused().catch(()=>new Set):new Set,i=[...new Set(f.flatMap(a=>a.accountId?[a.accountId]:[]))],j=g.size&&i.length&&c.providers?await c.providers(i).catch(()=>new Map):new Map,k=f.filter(a=>!(0,n.O)(g,a.ruleKey,a.accountId?j.get(a.accountId):null)),l=null,m=()=>l??=c.book().catch(()=>s.a),o=[],p=(0,u.z)(k,a);if(Object.values(p).some(a=>a.length>0)){let b=p.deployApps.length&&c.autoRollback?await c.autoRollback().catch(()=>null):null,d=await c.facts(k,a,b?6e4*b.windowMin:void 0),e=await m(),f=k.flatMap(b=>(0,u.t)(b,d,e,a)).filter(a=>!("github_bump_pr"===a.action&&g.has("devops")));o.push(...await c.create(f))}if(e()>1e4&&!g.has("hosting"))try{let b=await c.logs(a,m);o.push(...b.created),d.expired+=b.expired}catch(a){console.warn(`${h.X.logTag}/proposals logs failed:`,a instanceof Error?a.name:"error")}if(d.created=o.length,!o.length)return d;let q=await c.autoRun().catch(()=>null),r=await au(o,a,e,c);d.autoRan+=r.length;let t=await aw(o.filter(a=>!r.some(b=>b.id===a.id)),e,c),v=new Set(r.map(a=>a.id)),w=[...t];for(let a of(d.autoRan+=t.length,t))v.add(a.id);for(let a of o){if(v.has(a.id)||!q||!(0,u.I)(a.action,q)||8e3>e()||!await c.approveAuto(a.id,new Date))continue;let b=await c.execute(a.id,new Date);b&&(w.push(b),d.autoRan++)}let x=new Set([...w.map(a=>a.id),...v]),y=o.filter(a=>"LogErrorSpike"===a.ruleKey&&a.resourceId).map(a=>({proposalId:a.id,appId:a.resourceId})),z=y.length&&c.queueDev?await c.queueDev(y,a).catch(()=>new Set):new Set;for(let a of(await c.notifyNew(o.filter(a=>!x.has(a.id)).map(u.E),{},{devQueued:z}).catch(()=>void 0),w))await c.notifyResult(a).catch(()=>void 0);return d}let aA=(c={},b={...ay,queueDev:c.queueDev},async(a,c)=>{try{let d=await az(a,c??{},b);(d.created||d.expired||d.autoRan)&&console.log(`${h.X.logTag}/proposals: ${d.created} new, ${d.expired} expired, ${d.autoRan} auto-ran`)}catch(a){console.warn(`${h.X.logTag}/proposals failed:`,a instanceof Error?a.name:"error")}});a.s(["V",0,ac,"N",0,ag,"Q",0,aa,"Z",0,aA,"t",0,ai,"K",0,ab],691100)},381544,a=>{var b=a.i(462820),c=a.i(532620),d=a.i(49146),e=a.i(390626),f=a.i(192738),g=a.i(492665),h=a.i(552543),i=a.i(446914),j=a.i(556987),k=a.i(488345),l=a.i(94473),m=a.i(188282);let n={target:d.Q,book:()=>(0,c.e)(),siteUrl:()=>(0,g.f)().SITE_URL,autoRun:()=>(0,l.I)(),send:(a,b,c,d)=>(0,i.I)(a,b,c,d?{replyMarkup:d}:{}),record:(a,b)=>(0,d.P)("telegram",a,b),lang:()=>(0,h.I)("telegram"),discord:()=>(0,d.G)(),sendDiscord:(a,b)=>(0,e.$)(a,b,{timeoutMs:v}),recordDiscord:(a,b)=>(0,d.P)("discord",a,b),discordLang:()=>(0,h.I)("discord"),buttons:()=>a.A(801116).then(a=>a.approvalButtons())},o={en:{pending:"Status: ⏳ waiting",dev:"🧑‍💻 Dev is checking the code",proposer:b.X.notifyFallback.en,app:"app",safe:"safe",risky:"needs care",proposes:"proposes",why:"Why",risk:"Risk",open:"Open in Auto-actions",waitingN:"new proposals waiting for approval:",moreN:"more proposals",automatic:"Automatic",rollbackWhy:"the app errored after the new deploy",succeeded:"Succeeded",failed:"Failed",stopFallback:"something failed"},id:{pending:"Status: ⏳ menunggu",dev:"🧑‍💻 Dev lagi cek kodenya",proposer:b.X.notifyFallback.id,app:"aplikasi",safe:"aman",risky:"perlu hati-hati",proposes:"usul",why:"Kenapa",risk:"Risiko",open:"Buka di Auto-actions",waitingN:"usulan baru menunggu persetujuan:",moreN:"usulan lagi",automatic:"Otomatis",rollbackWhy:"app-nya error setelah deploy baru",succeeded:"Berhasil",failed:"Gagal",stopFallback:"ada yang gagal"}},p={recheck:"Cek ulang sekarang",neon_wake:"Bangunin Neon",supabase_keepalive:"Kirim keep-alive Supabase",supabase_restore:"Restore project Supabase",vercel_redeploy:"Redeploy production",vercel_rollback:"Rollback ke deploy sebelumnya",github_bump_pr:"Bikin PR update paket",domain_recheck:"Cek ulang sertifikat domain",daily_rerun:"Jalanin ulang daily job",monitor_update_url:"Arahin monitor ke domain baru"},q=(a="en")=>(0,h.t)(o,a,"dev"),r=(a,b)=>("id"===b?p[a.action]:void 0)??m.H[a.action]?.label??a.actionLabel,s=(a,b)=>(0,h.t)(o,b,"risky"===a.risk||m.H[a.action]?.risk==="risky"?"risky":"safe"),t=(a,b)=>`${a.replace(/\/+$/,"")}/auto-actions${b?`?proposal=${encodeURIComponent(b)}`:""}`;function u(a,b,c,d=!1,e="en"){let g=a=>(0,h.t)(o,e,a),i=(0,k.f)(a.proposedBy,b,60)||g("proposer"),j=(0,k.f)(a.title,b,120),l=(0,k.f)(a.reason,b,200)||"-";return[`🧑‍✈️ ${(0,f.H)(i)} ${g("proposes")}: ${(0,f.H)(r(a,e))} — ${(0,f.H)(j)}`,`${g("why")}: ${(0,f.H)(l)}`,`${g("risk")}: ${s(a,e)}`,...d?[q(e)]:[],`${g("open")}: ${(0,f.H)(t(c,a.id))}`].join("\n")}let v=3e3,w={en:{proposed:"📝 Proposed",approved:"✅ Approved by the owner",rejected:"🚫 Rejected by the owner",done:"⚙️ Ran",failed:"❌ Failed",waiting:"waiting for approval on Telegram.",newN:"new proposals"},id:{proposed:"📝 Usulan",approved:"✅ Disetujui owner",rejected:"🚫 Ditolak owner",done:"⚙️ Dijalankan",failed:"❌ Gagal",waiting:"nunggu persetujuan di Telegram.",newN:"usulan baru"}};function x(a,b,c,d="en"){let e=a=>(0,h.t)(w,d,a);if(Array.isArray(b))return`📝 ${b.length} ${e("newN")} — ${e("waiting")}`;let f=((0,k.f)(b.title,c,120)||r(b,d)).replace(/[*_`~|\[\]<>]/g,"");if("proposed"===a)return`${e("proposed")}: ${f} — ${e("waiting")}`;if("approved"===a||"rejected"===a)return`${e(a)}: ${f}`;let g=b.result?(0,k.f)(b.result,c,200).replace(/[*_`~|\[\]<>]/g,""):"";return`${e(a)}: ${f}${g?` — ${g}`:""}`}async function y(a,c,d){try{let e,f=await c.discord();if(!f)return;let g=await c.book().catch(()=>j.a),h=await c.discordLang().catch(()=>"en"),i=a(g,h);if(!i.length)return;try{e=await c.sendDiscord(f.url,i.join("\n"))}catch{e={ok:!1,kind:"transient",error:"Discord didn't answer."}}await c.recordDiscord(e,d).catch(()=>console.warn(`${b.X.logTag}/discord: recording the result failed`))}catch{console.warn(`${b.X.logTag}/discord: sending the action history failed`)}}async function z(a,b,c={},d={}){let e={...n,...c};await B(()=>y((c,d)=>[x(a,b,c,d)],e,d.now??new Date),d.timeoutMs??v)}async function A(a,c,d){let e=await c.target();if(!e)return;let f=await c.book().catch(()=>j.a),g=await c.lang().catch(()=>"en");for(let h of(await a(f,g))){let a;try{a="string"==typeof h?await c.send(e.token,e.chatId,h):await c.send(e.token,e.chatId,h.text,h.keyboard)}catch{a={ok:!1,kind:"transient",error:"Telegram didn't answer."}}await c.record(a,d).catch(()=>console.warn(`${b.X.logTag}/telegram: recording the result failed`))}}async function B(a,c){try{var d;let b;await (d=a(),Promise.race([d,new Promise((a,d)=>{b=setTimeout(()=>d(Object.assign(Error("timeout"),{name:"TimeoutError"})),c)})]).finally(()=>clearTimeout(b)))}catch(a){console.warn(`${b.X.logTag}/telegram: sending the proposal notice failed:`,a instanceof Error?a.name:"error")}}async function C(a,b={},c={}){if(!a.length)return;let d={...n,...b};await B(async()=>{let b=await d.autoRun().catch(()=>null),e=a.filter(a=>{var c;return c=b??{},"pending"===a.status&&!a.auto&&(m.H[a.action]?.risk!=="safe"||"risky"===a.risk||!c[a.action])});if(!e.length)return;let g=e.length>3||!d.buttons?null:await d.buttons().catch(()=>null),i=c.now??new Date;await Promise.all([A((a,b)=>e.length>3?[function(a,b,c,d=new Set,e="en"){let g=a=>(0,h.t)(o,e,a),i=a.slice(0,10).map(a=>{let h=(0,k.f)(a.proposedBy,b,60)||g("proposer");return`• ${(0,f.H)(h)}: ${(0,f.H)(r(a,e))} — ${(0,f.H)((0,k.f)(a.title,b,120))} (${s(a,e)})${d.has(a.id)?` \xb7 ${q(e)}`:""}
   ${(0,f.H)(t(c,a.id))}`}),j=a.length>10?[`+${a.length-10} ${g("moreN")}`]:[];return[`🧑‍✈️ ${a.length} ${g("waitingN")}`,...i,...j,`${g("open")}: ${(0,f.H)(t(c))}`].join("\n")}(e,a,d.siteUrl(),c.devQueued,b)]:e.map(e=>{let f=u(e,a,d.siteUrl(),c.devQueued?.has(e.id)??!1,b);return g?{text:`${f}
-${((a="en")=>(0,h.t)(o,a,"pending"))(b)}`,keyboard:g(e)}:f}),d,i),y((a,b)=>e.length>3?[x("proposed",e,a,b)]:e.map(c=>x("proposed",c,a,b)),d,i)])},c.timeoutMs??8e3)}async function D(a,b={},c={}){if(!a.auto||"done"!==a.status&&"failed"!==a.status)return;let d={...n,...b},e=c.now??new Date;await B(()=>Promise.all([A((b,c)=>{let d=function(a,b,c="en"){if(!a.auto||"done"!==a.status&&"failed"!==a.status)return null;let d="done"===a.status?"✅":"❌",e=a.result?(0,k.f)(a.result,b,200):"";return`${d} ${(0,h.t)(o,c,"automatic")}: ${(0,f.H)(r(a,c))} — ${(0,f.H)((0,k.f)(a.title,b,120))}${e?`: ${(0,f.H)(e)}`:""}`}(a,b,c);return d?[d]:[]},d,e),y((b,c)=>[x("done"===a.status?"done":"failed",a,b,c)],d,e)]).then(()=>void 0),c.timeoutMs??8e3)}async function E(a,b,c={},d={}){if("done"!==a.status&&"failed"!==a.status)return;let e={...n,...c},g=d.now??new Date;await B(()=>Promise.all([A((c,d)=>[function(a,b,c,d="en"){let e=a=>(0,h.t)(o,d,a),g=(0,k.f)(a.resourceName??e("app"),c,60)||e("app"),i=(0,k.f)(b.reason,c,200).replace(/[.!?…]+$/,"")||e("rollbackWhy"),j=a.result?(0,k.f)(a.result,c,200):"";return["id"===d?`⏪ Otomatis rollback ${(0,f.H)(g)}: ${(0,f.H)(i)}. Deploy baru ${(0,f.H)((0,k.f)(b.newRef,c,40))} dibalikin ke deploy sebelumnya. Benerin dulu, terus deploy ulang.`:`⏪ Automatic rollback of ${(0,f.H)(g)}: ${(0,f.H)(i)}. The new deploy ${(0,f.H)((0,k.f)(b.newRef,c,40))} was rolled back to the previous one. Fix it first, then deploy again.`,`${"done"===a.status?"✅":"❌"} ${e("done"===a.status?"succeeded":"failed")}${j?`: ${(0,f.H)(j)}`:""}`].join("\n")}(a,b,c,d)],e,g),y((b,c)=>[x("done"===a.status?"done":"failed",a,b,c)],e,g)]).then(()=>void 0),d.timeoutMs??8e3)}async function F(a,b={},c={}){let d={...n,...b};await B(()=>A((b,c)=>[function(a,b,c="en"){let d="id"===c,e=(0,k.f)(a.app,b,60)||(0,h.t)(o,c,"app"),g=a.packages.slice(0,4).join(", ")+(a.packages.length>4?`, +${a.packages.length-4}`:"");if("merged"===a.kind)return d?`✅ PR #${a.number} di ${(0,f.H)(e)} di-merge otomatis (${(0,f.H)(g)}). Deploy production jalan lewat Vercel; auto-rollback jaga ${a.windowMin??30} menit pertama.`:`✅ PR #${a.number} in ${(0,f.H)(e)} was merged automatically (${(0,f.H)(g)}). The production deploy runs through Vercel; auto-rollback watches the first ${a.windowMin??30} minutes.`;if("ready-manual"===a.kind)return d?`🔐 PR #${a.number} di ${(0,f.H)(e)} siap di-merge, tapi auto-rollback mati — merge manual ya.`:`🔐 PR #${a.number} in ${(0,f.H)(e)} is ready to merge, but auto-rollback is off — please merge it manually.`;let i=(0,k.f)(a.reason??"",b,200)||(0,h.t)(o,c,"stopFallback");return d?`⚠️ PR #${a.number} di ${(0,f.H)(e)} butuh dicek: ${(0,f.H)(i)}. PR-nya dibiarin terbuka.`:`⚠️ PR #${a.number} in ${(0,f.H)(e)} needs a look: ${(0,f.H)(i)}. The PR was left open.`}(a,b,c)],d,c.now??new Date),c.timeoutMs??8e3)}a.s(["h",0,v,"q",0,E,"y",0,F,"v",0,z,"i",0,C,"b",0,D,"a",0,u])},342634,a=>{var b=a.i(556987),c=a.i(313235),d=a.i(462820),e=a.i(488345),f=a.i(188282);let g=200,h=d.X.auditPrefix,i=/^dpl_[A-Za-z0-9]{8,40}$/,j=/^ep-[a-z0-9-]{3,60}$/,k=/^[a-z0-9]{8,40}$/,l=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,m=(a,b=g)=>a.length>b?`${a.slice(0,b-1).trimEnd()}…`:a,n=a=>/[.!?…]$/.test(a)?a:`${a}.`;function o(a,c,d,f){return"app"===a&&d?(0,b.r)(f,d):("supabase_project"===a||"neon_project"===a||"neon_branch"===a||"firestore"===a)&&c?(0,b.X)(f,c):d&&(0,e.f)(d,f,120)||null}let p={recheck:a=>`Check ${a} again now`,neon_wake:a=>`Wake the Neon compute of ${a}`,supabase_keepalive:a=>`Send a keep-alive to ${a}`,supabase_restore:a=>`Restore Supabase project ${a}`,vercel_redeploy:a=>`Redeploy production ${a}`,vercel_rollback:a=>`Roll ${a} back to the previous deployment`,github_bump_pr:a=>`Open a PR updating vulnerable packages in ${a}`,domain_recheck:a=>`Re-check the certificate of ${a}`,daily_rerun:()=>"Rerun the daily job"},q=(a,b)=>m(p[a](b??"this resource")),r=(a,b)=>a.silencedUntilResolved||null!==a.silencedUntil&&a.silencedUntil.getTime()>b.getTime();a.s(["e",0,"office-auto","v",0,h,"L",0,6e5,"j",0,g,"I",0,(a,b)=>"safe"===f.H[a].risk&&!0===b[a],"l",0,m,"z",0,function(a,b){let c=a.filter(a=>!r(a,b)),d=a=>[...new Set(a.filter(a=>!!a&&l.test(a)))],e=c.filter(a=>("MonitorDown"===a.ruleKey||"HighLatency"===a.ruleKey)&&"app"===a.resourceKind);return{monitorIds:d(e.map(a=>a.subject)),monitorApps:d(e.map(a=>a.resourceId)),deployApps:d(c.filter(a=>("DeploymentFailed"===a.ruleKey||"MonitorDown"===a.ruleKey||"HighLatency"===a.ruleKey)&&"app"===a.resourceKind).map(a=>a.resourceId)),supabaseIds:d(c.filter(a=>("DatabasePaused"===a.ruleKey||"AutoPauseRisk"===a.ruleKey)&&"supabase_project"===a.resourceKind).map(a=>a.resourceId)),depApps:d(c.filter(a=>"VulnerableDependency"===a.ruleKey&&"app"===a.resourceKind).map(a=>a.resourceId))}},"b",0,a=>"string"==typeof a&&l.test(a),"M",0,q,"t",0,function(a,d,h,p){let s,t,u;if(r(a,p))return[];let v=(s=(0,b.o)(a,h),t=(0,e.f)(s.title,h,80),u=(0,e.f)(s.message,h,g),m([t&&n(t),u&&n(u)].filter(Boolean).join(" ")||`${a.ruleKey}.`));return(function(a,b,c){let d="app"===a.resourceKind&&a.resourceId?a.resourceId:null;switch(a.ruleKey){case"DeploymentFailed":{let a=d?b.deploys.get(d):void 0;if(!d||!a?.currentId||!i.test(a.currentId))return[];let c=[{action:"vercel_redeploy",resourceKind:"app",resourceId:d,targetRef:a.currentId}];return a.previousId&&i.test(a.previousId)&&a.previousId!==a.currentId&&c.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:a.previousId}),c}case"DatabasePaused":case"AutoPauseRisk":{if("supabase_project"!==a.resourceKind||!a.resourceId)return[];let c=b.supabaseRefs.get(a.resourceId);if(!c||!k.test(c))return[];return[{action:"DatabasePaused"===a.ruleKey?"supabase_restore":"supabase_keepalive",resourceKind:"supabase_project",resourceId:a.resourceId,targetRef:c}]}case"VulnerableDependency":{let a=d?b.fixableRepos?.get(d):void 0;return d&&a&&l.test(a)?[{action:"github_bump_pr",resourceKind:"app",resourceId:d,targetRef:a}]:[]}case"MonitorDown":case"HighLatency":{let e=[];d&&l.test(a.subject)&&"http"===b.monitorKinds.get(a.subject)&&e.push({action:"recheck",resourceKind:"app",resourceId:d,targetRef:a.subject}),"MonitorDown"===a.ruleKey&&a.resourceId&&l.test(a.subject)&&b.dailyHeartbeatId===a.subject&&e.push({action:"daily_rerun",room:"observe",resourceKind:a.resourceKind,resourceId:a.resourceId,targetRef:a.subject});let f=d?b.neonSuspended.get(d):void 0;f&&j.test(f.endpointId)&&e.push({action:"neon_wake",room:"databases",resourceKind:f.resourceKind,resourceId:f.resourceId,targetRef:f.endpointId});let g=d?b.deploys.get(d):void 0;return d&&function(a,b,c){if(!a?.currentId||!a.previousId||!a.liveAt||!i.test(a.previousId)||a.previousId===a.currentId)return!1;let d=c.getTime()-a.liveAt.getTime();return d>=0&&d<=b}(g,b.rollbackWindowMs??18e5,c)?e.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:g.previousId}):"MonitorDown"===a.ruleKey&&d&&g?.currentId&&i.test(g.currentId)&&"http"===b.monitorKinds.get(a.subject)&&(e.push({action:"vercel_redeploy",resourceKind:"app",resourceId:d,targetRef:g.currentId}),g.previousId&&i.test(g.previousId)&&g.previousId!==g.currentId&&e.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:g.previousId})),e}case"CertExpiringSoon":return"domain"===a.resourceKind&&a.resourceId&&l.test(a.resourceId)?[{action:"domain_recheck",resourceKind:"domain",resourceId:a.resourceId,targetRef:a.resourceId}]:[];default:return[]}})(a,d,p).map(d=>{let i,j,k,l=d.room??(0,c.p)(a),n="neon_wake"===d.action?o(d.resourceKind,d.resourceId,null,h):o(a.resourceKind,a.resourceId,a.resourceName,h);return{alertId:a.id,ruleKey:a.ruleKey,room:l,action:d.action,risk:f.H[d.action].risk,title:q(d.action,n),reason:"github_bump_pr"===d.action?(j=(i=(0,e.f)((0,b.o)(a,h).message,h,g)).includes(": ")?i.slice(i.indexOf(": ")+2):"",k=`Vulnerable packages in ${n??"this app"} have a fix`,m(j?`${k}: ${j}`:`${k}.`)):v,resourceKind:d.resourceKind,resourceId:d.resourceId,resourceName:n,targetRef:d.targetRef,proposedBy:(0,c.y)(l),expiresAt:new Date(p.getTime()+f.V)}})},"x",0,function(a,b){let c=a.ok?a.message||"Done.":a.error||"It didn't run.";return m((0,e.f)(c,b,g)||(a.ok?"Done.":"It didn't run."))},"J",0,o,"E",0,function(a){return{id:a.id,room:a.room,action:a.action,actionLabel:f.H[a.action].label,risk:f.H[a.action].risk,title:a.title,reason:a.reason,resourceName:a.resourceName,proposedBy:a.proposedBy,status:a.status,auto:a.auto,result:a.result,createdAt:a.createdAt.toISOString(),decidedAt:a.decidedAt?a.decidedAt.toISOString():null,expiresAt:a.expiresAt.toISOString()}},"Z",0,function(a,b,c){let d=c??b?.find(a=>a.isDefault)?.id??null,e=(a??[]).find(a=>!d||a.branchId===d);return e&&!e.disabled&&"idle"===e.state&&"active"!==e.pendingState&&j.test(e.id)?e.id:null}])},488345,a=>{var b=a.i(556987),c=a.i(425238),d=a.i(609007),e=a.i(434711);let f=/\b([a-z][a-z0-9+.-]{1,20}):\/\/[^\s"'<>`]*/gi,g=/\b(?:\d{1,3}\.){3}\d{1,3}\b/g,h=/\b(?:w[bp]_[A-Za-z0-9]{6,}|hb_[A-Za-z0-9[\]]{2,}|sk-[A-Za-z0-9_-]{6,}|gsk_[A-Za-z0-9]{6,}|AIza[0-9A-Za-z_-]{10,}|AQ\.[A-Za-z0-9_-]{10,})/g,i=/(?<![\p{L}\p{N}_.-])[a-z0-9-]+\.vercel\.app(?![\p{L}\p{N}_-])/giu,j=/@/g,k=new WeakMap;function l(a,b){return/^https?$/i.test(b)?"[link]":"[hidden]"}e._;let m="[\\p{L}\\p{N}_./-]",n=a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=/(?<![\p{L}\p{N}_.@-])(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,24}(?![\p{L}\p{N}_-]|\.[\p{L}\p{N}])/giu,p=new WeakMap;a.s(["f",0,(a,e,q)=>{var r;let s;return s=(r=String(a??"").replace(/\s+/g," "),String(r??"").replace(/\r\n?/g,"\n").split("\n").map(a=>{var q,r;let s,t,u,v=(q=(0,c.F)(a,e),s=q.replace(f,l),s=(0,b.J)(s,e),s=(s=(0,d.h)(s)).replace(h,"[hidden]"),(t=function(a){if(k.has(a))return k.get(a);let b=[...a.host??[]].filter(a=>a.name.includes(".")).sort((a,b)=>b.name.length-a.name.length),c=b.length?{re:RegExp(`(?<![\\p{L}\\p{N}_-])((?:[a-z0-9-]+\\.)*?)(${b.map(a=>a.name.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")})(?![\\p{L}\\p{N}_-]|\\.[\\p{L}\\p{N}])`,"giu"),alias:new Map(b.map(a=>[a.name.toLowerCase(),a.alias]))}:null;return k.set(a,c),c}(e))&&(s=s.replace(t.re,(a,b,c)=>`${b}${t.alias.get(c.toLowerCase())??"site.example"}`)),s=s.replace(i,"preview.example").replace(g,"[ip]").replace(j," at "));return v=v.replace(o,a=>/\.example$/i.test(a)?a:"site.example"),(0,b.G)((r=v,(u=function(a){if(p.has(a))return p.get(a);let b=new Map(a.app.filter(a=>a.name.trim().length>=2).map(a=>[a.name.toLowerCase(),a.alias])),c=[...b.keys()].sort((a,b)=>b.length-a.length),d=c.length?{re:RegExp(`(?<!${m})(?:${c.map(n).join("|")})(?!${m})`,"giu"),alias:b}:null;return p.set(a,d),d}(e))?r.replace(u.re,a=>u.alias.get(a.toLowerCase())??a):r))}).join("\n")).replace(/\s+/g," ").trim(),s.length>q?`${s.slice(0,q-1).trimEnd()}…`:s}],488345)}]})();
+${((a="en")=>(0,h.t)(o,a,"pending"))(b)}`,keyboard:g(e)}:f}),d,i),y((a,b)=>e.length>3?[x("proposed",e,a,b)]:e.map(c=>x("proposed",c,a,b)),d,i)])},c.timeoutMs??8e3)}async function D(a,b={},c={}){if(!a.auto||"done"!==a.status&&"failed"!==a.status)return;let d={...n,...b},e=c.now??new Date;await B(()=>Promise.all([A((b,c)=>{let d=function(a,b,c="en"){if(!a.auto||"done"!==a.status&&"failed"!==a.status)return null;let d="done"===a.status?"✅":"❌",e=a.result?(0,k.f)(a.result,b,200):"";return`${d} ${(0,h.t)(o,c,"automatic")}: ${(0,f.H)(r(a,c))} — ${(0,f.H)((0,k.f)(a.title,b,120))}${e?`: ${(0,f.H)(e)}`:""}`}(a,b,c);return d?[d]:[]},d,e),y((b,c)=>[x("done"===a.status?"done":"failed",a,b,c)],d,e)]).then(()=>void 0),c.timeoutMs??8e3)}async function E(a,b,c={},d={}){if("done"!==a.status&&"failed"!==a.status)return;let e={...n,...c},g=d.now??new Date;await B(()=>Promise.all([A((c,d)=>[function(a,b,c,d="en"){let e=a=>(0,h.t)(o,d,a),g=(0,k.f)(a.resourceName??e("app"),c,60)||e("app"),i=(0,k.f)(b.reason,c,200).replace(/[.!?…]+$/,"")||e("rollbackWhy"),j=a.result?(0,k.f)(a.result,c,200):"";return["id"===d?`⏪ Otomatis rollback ${(0,f.H)(g)}: ${(0,f.H)(i)}. Deploy baru ${(0,f.H)((0,k.f)(b.newRef,c,40))} dibalikin ke deploy sebelumnya. Benerin dulu, terus deploy ulang.`:`⏪ Automatic rollback of ${(0,f.H)(g)}: ${(0,f.H)(i)}. The new deploy ${(0,f.H)((0,k.f)(b.newRef,c,40))} was rolled back to the previous one. Fix it first, then deploy again.`,`${"done"===a.status?"✅":"❌"} ${e("done"===a.status?"succeeded":"failed")}${j?`: ${(0,f.H)(j)}`:""}`].join("\n")}(a,b,c,d)],e,g),y((b,c)=>[x("done"===a.status?"done":"failed",a,b,c)],e,g)]).then(()=>void 0),d.timeoutMs??8e3)}async function F(a,b={},c={}){let d={...n,...b};await B(()=>A((b,c)=>[function(a,b,c="en"){let d="id"===c,e=(0,k.f)(a.app,b,60)||(0,h.t)(o,c,"app"),g=a.packages.slice(0,4).join(", ")+(a.packages.length>4?`, +${a.packages.length-4}`:"");if("merged"===a.kind)return d?`✅ PR #${a.number} di ${(0,f.H)(e)} di-merge otomatis (${(0,f.H)(g)}). Deploy production jalan lewat Vercel; auto-rollback jaga ${a.windowMin??30} menit pertama.`:`✅ PR #${a.number} in ${(0,f.H)(e)} was merged automatically (${(0,f.H)(g)}). The production deploy runs through Vercel; auto-rollback watches the first ${a.windowMin??30} minutes.`;if("ready-manual"===a.kind)return d?`🔐 PR #${a.number} di ${(0,f.H)(e)} siap di-merge, tapi auto-rollback mati — merge manual ya.`:`🔐 PR #${a.number} in ${(0,f.H)(e)} is ready to merge, but auto-rollback is off — please merge it manually.`;let i=(0,k.f)(a.reason??"",b,200)||(0,h.t)(o,c,"stopFallback");return d?`⚠️ PR #${a.number} di ${(0,f.H)(e)} butuh dicek: ${(0,f.H)(i)}. PR-nya dibiarin terbuka.`:`⚠️ PR #${a.number} in ${(0,f.H)(e)} needs a look: ${(0,f.H)(i)}. The PR was left open.`}(a,b,c)],d,c.now??new Date),c.timeoutMs??8e3)}a.s(["h",0,v,"q",0,E,"y",0,F,"v",0,z,"i",0,C,"b",0,D,"a",0,u])},342634,a=>{var b=a.i(556987),c=a.i(313235),d=a.i(462820),e=a.i(488345),f=a.i(188282);let g=200,h=d.X.auditPrefix,i=/^dpl_[A-Za-z0-9]{8,40}$/,j=/^ep-[a-z0-9-]{3,60}$/,k=/^[a-z0-9]{8,40}$/,l=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i,m=(a,b=g)=>a.length>b?`${a.slice(0,b-1).trimEnd()}…`:a,n=a=>/[.!?…]$/.test(a)?a:`${a}.`;function o(a,c,d,f){return"app"===a&&d?(0,b.r)(f,d):("supabase_project"===a||"neon_project"===a||"neon_branch"===a||"firestore"===a)&&c?(0,b.X)(f,c):d&&(0,e.f)(d,f,120)||null}let p={recheck:a=>`Check ${a} again now`,neon_wake:a=>`Wake the Neon compute of ${a}`,supabase_keepalive:a=>`Send a keep-alive to ${a}`,supabase_restore:a=>`Restore Supabase project ${a}`,vercel_redeploy:a=>`Redeploy production ${a}`,vercel_rollback:a=>`Roll ${a} back to the previous deployment`,github_bump_pr:a=>`Open a PR updating vulnerable packages in ${a}`,domain_recheck:a=>`Re-check the certificate of ${a}`,daily_rerun:()=>"Rerun the daily job",monitor_update_url:a=>`Point the ${a} monitor at its new domain`},q=(a,b)=>m(p[a](b??"this resource")),r=(a,b)=>a.silencedUntilResolved||null!==a.silencedUntil&&a.silencedUntil.getTime()>b.getTime();a.s(["e",0,"office-auto","v",0,h,"L",0,6e5,"j",0,g,"I",0,(a,b)=>"safe"===f.H[a].risk&&!0===b[a],"l",0,m,"z",0,function(a,b){let c=a.filter(a=>!r(a,b)),d=a=>[...new Set(a.filter(a=>!!a&&l.test(a)))],e=c.filter(a=>("MonitorDown"===a.ruleKey||"HighLatency"===a.ruleKey)&&"app"===a.resourceKind);return{monitorIds:d([...e,...c.filter(a=>"MonitorDomainMoved"===a.ruleKey&&"app"===a.resourceKind)].map(a=>a.subject)),monitorApps:d(e.map(a=>a.resourceId)),deployApps:d(c.filter(a=>("DeploymentFailed"===a.ruleKey||"MonitorDown"===a.ruleKey||"HighLatency"===a.ruleKey)&&"app"===a.resourceKind).map(a=>a.resourceId)),supabaseIds:d(c.filter(a=>("DatabasePaused"===a.ruleKey||"AutoPauseRisk"===a.ruleKey)&&"supabase_project"===a.resourceKind).map(a=>a.resourceId)),depApps:d(c.filter(a=>"VulnerableDependency"===a.ruleKey&&"app"===a.resourceKind).map(a=>a.resourceId)),frameworkApps:d(c.filter(a=>"FrameworkVulnerable"===a.ruleKey&&"app"===a.resourceKind).map(a=>a.resourceId))}},"b",0,a=>"string"==typeof a&&l.test(a),"M",0,q,"t",0,function(a,d,h,p){let s,t,u;if(r(a,p))return[];let v=(s=(0,b.o)(a,h),t=(0,e.f)(s.title,h,80),u=(0,e.f)(s.message,h,g),m([t&&n(t),u&&n(u)].filter(Boolean).join(" ")||`${a.ruleKey}.`));return(function(a,b,c){let d="app"===a.resourceKind&&a.resourceId?a.resourceId:null;switch(a.ruleKey){case"DeploymentFailed":{let a=d?b.deploys.get(d):void 0;if(!d||!a?.currentId||!i.test(a.currentId))return[];let c=[{action:"vercel_redeploy",resourceKind:"app",resourceId:d,targetRef:a.currentId}];return a.previousId&&i.test(a.previousId)&&a.previousId!==a.currentId&&c.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:a.previousId}),c}case"DatabasePaused":case"AutoPauseRisk":{if("supabase_project"!==a.resourceKind||!a.resourceId)return[];let c=b.supabaseRefs.get(a.resourceId);if(!c||!k.test(c))return[];return[{action:"DatabasePaused"===a.ruleKey?"supabase_restore":"supabase_keepalive",resourceKind:"supabase_project",resourceId:a.resourceId,targetRef:c}]}case"VulnerableDependency":{let a=d?b.fixableRepos?.get(d):void 0;return d&&a&&l.test(a)?[{action:"github_bump_pr",resourceKind:"app",resourceId:d,targetRef:a}]:[]}case"FrameworkVulnerable":{let a=d?b.frameworkFixes?.get(d):void 0;return d&&a&&l.test(a.repoId)?[{action:"github_bump_pr",resourceKind:"app",resourceId:d,targetRef:a.repoId}]:[]}case"MonitorDomainMoved":return d&&l.test(a.subject)&&b.monitorMoves?.has(a.subject)?[{action:"monitor_update_url",resourceKind:"app",resourceId:d,targetRef:a.subject}]:[];case"MonitorDown":case"HighLatency":{let e=[];d&&l.test(a.subject)&&"http"===b.monitorKinds.get(a.subject)&&e.push({action:"recheck",resourceKind:"app",resourceId:d,targetRef:a.subject}),"MonitorDown"===a.ruleKey&&a.resourceId&&l.test(a.subject)&&b.dailyHeartbeatId===a.subject&&e.push({action:"daily_rerun",room:"observe",resourceKind:a.resourceKind,resourceId:a.resourceId,targetRef:a.subject});let f=d?b.neonSuspended.get(d):void 0;if(f&&j.test(f.endpointId)&&e.push({action:"neon_wake",room:"databases",resourceKind:f.resourceKind,resourceId:f.resourceId,targetRef:f.endpointId}),b.monitorMoves?.has(a.subject))return e;let g=d?b.deploys.get(d):void 0;return d&&function(a,b,c){if(!a?.currentId||!a.previousId||!a.liveAt||!i.test(a.previousId)||a.previousId===a.currentId)return!1;let d=c.getTime()-a.liveAt.getTime();return d>=0&&d<=b}(g,b.rollbackWindowMs??18e5,c)?e.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:g.previousId}):"MonitorDown"===a.ruleKey&&d&&g?.currentId&&i.test(g.currentId)&&"http"===b.monitorKinds.get(a.subject)&&(e.push({action:"vercel_redeploy",resourceKind:"app",resourceId:d,targetRef:g.currentId}),g.previousId&&i.test(g.previousId)&&g.previousId!==g.currentId&&e.push({action:"vercel_rollback",resourceKind:"app",resourceId:d,targetRef:g.previousId})),e}case"CertExpiringSoon":return"domain"===a.resourceKind&&a.resourceId&&l.test(a.resourceId)?[{action:"domain_recheck",resourceKind:"domain",resourceId:a.resourceId,targetRef:a.resourceId}]:[];default:return[]}})(a,d,p).map(i=>{var j;let k,l,n,r,s=i.room??(0,c.p)(a),t="neon_wake"===i.action?o(i.resourceKind,i.resourceId,null,h):o(a.resourceKind,a.resourceId,a.resourceName,h),u="FrameworkVulnerable"===a.ruleKey&&"github_bump_pr"===i.action,w="monitor_update_url"===i.action?d.monitorMoves?.get(i.targetRef):void 0;return{alertId:a.id,ruleKey:a.ruleKey,room:s,action:i.action,risk:f.H[i.action].risk,title:u?m(`Open a PR updating Next.js in ${t??"this app"}`):w?m(`Point the ${t??"app's"} monitor at ${w.to}`):q(i.action,t),reason:u?(j=i.resourceId?d.frameworkFixes?.get(i.resourceId):void 0,k=t??"this app",m(j?`Next.js ${j.from} in ${k} has known vulnerabilities: the PR updates next (and eslint-config-next when listed) to ${j.to}.`:`Next.js in ${k} has known vulnerabilities with a fixed version.`)):"github_bump_pr"===i.action?(n=(l=(0,e.f)((0,b.o)(a,h).message,h,g)).includes(": ")?l.slice(l.indexOf(": ")+2):"",r=`Vulnerable packages in ${t??"this app"} have a fix`,m(n?`${r}: ${n}`:`${r}.`)):v,resourceKind:i.resourceKind,resourceId:i.resourceId,resourceName:t,targetRef:i.targetRef,proposedBy:(0,c.y)(s),expiresAt:new Date(p.getTime()+f.V)}})},"x",0,function(a,b){let c=a.ok?a.message||"Done.":a.error||"It didn't run.";return m((0,e.f)(c,b,g)||(a.ok?"Done.":"It didn't run."))},"J",0,o,"E",0,function(a){return{id:a.id,room:a.room,action:a.action,actionLabel:f.H[a.action].label,risk:f.H[a.action].risk,title:a.title,reason:a.reason,resourceName:a.resourceName,proposedBy:a.proposedBy,status:a.status,auto:a.auto,result:a.result,createdAt:a.createdAt.toISOString(),decidedAt:a.decidedAt?a.decidedAt.toISOString():null,expiresAt:a.expiresAt.toISOString()}},"Z",0,function(a,b,c){let d=c??b?.find(a=>a.isDefault)?.id??null,e=(a??[]).find(a=>!d||a.branchId===d);return e&&!e.disabled&&"idle"===e.state&&"active"!==e.pendingState&&j.test(e.id)?e.id:null}])},488345,a=>{var b=a.i(556987),c=a.i(425238),d=a.i(609007),e=a.i(434711);let f=/\b([a-z][a-z0-9+.-]{1,20}):\/\/[^\s"'<>`]*/gi,g=/\b(?:\d{1,3}\.){3}\d{1,3}\b/g,h=/\b(?:w[bp]_[A-Za-z0-9]{6,}|hb_[A-Za-z0-9[\]]{2,}|sk-[A-Za-z0-9_-]{6,}|gsk_[A-Za-z0-9]{6,}|AIza[0-9A-Za-z_-]{10,}|AQ\.[A-Za-z0-9_-]{10,})/g,i=/(?<![\p{L}\p{N}_.-])[a-z0-9-]+\.vercel\.app(?![\p{L}\p{N}_-])/giu,j=/@/g,k=new WeakMap;function l(a,b){return/^https?$/i.test(b)?"[link]":"[hidden]"}e._;let m="[\\p{L}\\p{N}_./-]",n=a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&"),o=/(?<![\p{L}\p{N}_.@-])(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?\.)+[a-z]{2,24}(?![\p{L}\p{N}_-]|\.[\p{L}\p{N}])/giu,p=new WeakMap;a.s(["f",0,(a,e,q)=>{var r;let s;return s=(r=String(a??"").replace(/\s+/g," "),String(r??"").replace(/\r\n?/g,"\n").split("\n").map(a=>{var q,r;let s,t,u,v=(q=(0,c.F)(a,e),s=q.replace(f,l),s=(0,b.J)(s,e),s=(s=(0,d.h)(s)).replace(h,"[hidden]"),(t=function(a){if(k.has(a))return k.get(a);let b=[...a.host??[]].filter(a=>a.name.includes(".")).sort((a,b)=>b.name.length-a.name.length),c=b.length?{re:RegExp(`(?<![\\p{L}\\p{N}_-])((?:[a-z0-9-]+\\.)*?)(${b.map(a=>a.name.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")})(?![\\p{L}\\p{N}_-]|\\.[\\p{L}\\p{N}])`,"giu"),alias:new Map(b.map(a=>[a.name.toLowerCase(),a.alias]))}:null;return k.set(a,c),c}(e))&&(s=s.replace(t.re,(a,b,c)=>`${b}${t.alias.get(c.toLowerCase())??"site.example"}`)),s=s.replace(i,"preview.example").replace(g,"[ip]").replace(j," at "));return v=v.replace(o,a=>/\.example$/i.test(a)?a:"site.example"),(0,b.G)((r=v,(u=function(a){if(p.has(a))return p.get(a);let b=new Map(a.app.filter(a=>a.name.trim().length>=2).map(a=>[a.name.toLowerCase(),a.alias])),c=[...b.keys()].sort((a,b)=>b.length-a.length),d=c.length?{re:RegExp(`(?<!${m})(?:${c.map(n).join("|")})(?!${m})`,"giu"),alias:b}:null;return p.set(a,d),d}(e))?r.replace(u.re,a=>u.alias.get(a.toLowerCase())??a):r))}).join("\n")).replace(/\s+/g," ").trim(),s.length>q?`${s.slice(0,q-1).trimEnd()}…`:s}],488345)}]})();
 
 //# sourceMappingURL=src_0_5_wl0sww-x7._.js.map

package/server/.next/server/chunks/ssr/src_0abts6wp5ucc0._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[270044,a=>{var b=a.i(187924),c=a.i(572131),d=a.i(823292),e=a.i(771378),f=a.i(619089),g=a.i(405050);let h=(0,g.createServerReference)("40426e27f087a5b8085cb398fcff38e73a3a1d772f",g.callServer,void 0,g.findSourceMapURL,"scanDependencies");a.s(["DepsScanButton",0,function({appId:a,appName:g}){let[i,j]=(0,c.useTransition)(),k=(0,c.useRef)(!1),l=(0,e.useMask)();return(0,b.jsx)(f.K,{size:"sm",onClick:()=>{if(k.current)return;k.current=!0;let b=d.c.loading(`Scanning the dependencies of ${l("app",g)}. This can take up to half a minute.`);j(async()=>{try{let c=await h(a);c.ok?c.data?.vulns?d.c.warning(c.message??"",{id:b}):d.c.success(c.message??"",{id:b}):d.c.error(c.error,{id:b})}catch{d.c.error("Something went wrong. Try again.",{id:b})}finally{k.current=!1}})},disabled:i,children:i?"Scanning…":"Scan now"})}],270044)},585709,a=>{var b=a.i(187924),c=a.i(572131),d=a.i(486747),e=a.i(462007),f=a.i(427110);a.s(["PlainTable",0,function({head:a,rows:g}){let[h,i]=(0,c.useState)(1),j=(0,f.$)(g,h);return j.page!==h&&i(j.page),(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("div",{className:"overflow-x-auto",children:(0,b.jsxs)("table",{className:e.o,children:[(0,b.jsx)(e.U,{head:a}),(0,b.jsx)("tbody",{children:j.rows.map(a=>(0,b.jsx)(c.Fragment,{children:a.row},a.key))})]})}),(0,b.jsx)(d.f,{page:j.page,pages:j.pages,text:(0,f.z)(j),onPage:i})]})}])},683874,a=>{var b=a.i(187924);a.i(238246),a.i(771378);var c=a.i(368114);let d={app:["APP","bg-brand-soft text-brand"],db:["DB","bg-teal-soft text-teal"],br:["BR","bg-teal-soft text-teal"],fs:["FS","bg-teal-soft text-teal"],mon:["MON","bg-amber-soft text-amber"],dpl:["DPL","bg-gray-soft text-ink-soft"],dom:["DOM","bg-gray-soft text-ink-soft"],dns:["DNS","bg-gray-soft text-ink-soft"],usr:["USR","bg-gray-soft text-ink-soft"]};a.s(["f",0,function({kind:a}){let[e,f]=d[a];return(0,b.jsx)("span",{className:(0,c.f)("rounded px-[5px] py-px font-mono text-[10.5px] font-medium tracking-[0.02em]",f),children:e})}])}]})();
+(()=>{"use strict";module.exports=[270044,a=>{var b=a.i(187924),c=a.i(572131),d=a.i(823292),e=a.i(771378),f=a.i(619089),g=a.i(405050);let h=(0,g.createServerReference)("4059aeefd12ed36bea8aadcf5c024215341ad1a84e",g.callServer,void 0,g.findSourceMapURL,"scanDependencies");a.s(["DepsScanButton",0,function({appId:a,appName:g}){let[i,j]=(0,c.useTransition)(),k=(0,c.useRef)(!1),l=(0,e.useMask)();return(0,b.jsx)(f.K,{size:"sm",onClick:()=>{if(k.current)return;k.current=!0;let b=d.c.loading(`Scanning the dependencies of ${l("app",g)}. This can take up to half a minute.`);j(async()=>{try{let c=await h(a);c.ok?c.data?.vulns?d.c.warning(c.message??"",{id:b}):d.c.success(c.message??"",{id:b}):d.c.error(c.error,{id:b})}catch{d.c.error("Something went wrong. Try again.",{id:b})}finally{k.current=!1}})},disabled:i,children:i?"Scanning…":"Scan now"})}],270044)},585709,a=>{var b=a.i(187924),c=a.i(572131),d=a.i(486747),e=a.i(462007),f=a.i(427110);a.s(["PlainTable",0,function({head:a,rows:g}){let[h,i]=(0,c.useState)(1),j=(0,f.$)(g,h);return j.page!==h&&i(j.page),(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("div",{className:"overflow-x-auto",children:(0,b.jsxs)("table",{className:e.o,children:[(0,b.jsx)(e.U,{head:a}),(0,b.jsx)("tbody",{children:j.rows.map(a=>(0,b.jsx)(c.Fragment,{children:a.row},a.key))})]})}),(0,b.jsx)(d.f,{page:j.page,pages:j.pages,text:(0,f.z)(j),onPage:i})]})}])},683874,a=>{var b=a.i(187924);a.i(238246),a.i(771378);var c=a.i(368114);let d={app:["APP","bg-brand-soft text-brand"],db:["DB","bg-teal-soft text-teal"],br:["BR","bg-teal-soft text-teal"],fs:["FS","bg-teal-soft text-teal"],mon:["MON","bg-amber-soft text-amber"],dpl:["DPL","bg-gray-soft text-ink-soft"],dom:["DOM","bg-gray-soft text-ink-soft"],dns:["DNS","bg-gray-soft text-ink-soft"],usr:["USR","bg-gray-soft text-ink-soft"]};a.s(["f",0,function({kind:a}){let[e,f]=d[a];return(0,b.jsx)("span",{className:(0,c.f)("rounded px-[5px] py-px font-mono text-[10.5px] font-medium tracking-[0.02em]",f),children:e})}])}]})();
 
 //# sourceMappingURL=src_0abts6wp5ucc0._.js.map

package/server/.next/server/chunks/ssr/src_0i-1ohush6mui._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[263251,a=>{a.s(["f",0,function(a){if(Array.isArray(a))return a;let b=a?.rows;return Array.isArray(b)?b:[]}])},655206,a=>{a.s(["f",0,{checks:7,rollupsHourly:90,deployments:30,events:90,alerts:90,collectorRuns:14,storedLogs:7,recommendationDismissals:90}])},609007,a=>{let b=[[/(?:\b|(?<=%2F))hb(?:_|%5F)[0-9a-f]{32}\b/gi,"hb_[hidden]"],[/(\/api(?:\/|%2F)ping(?:\/|%2F))(?!hb_\[hidden\])[^/?#\s]+/gi,"$1[hidden]"],[/\b(postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|rediss):\/\/\S+/gi,"$1://[hidden]"],[/\b(https?):\/\/[^\s/@:]+:[^\s/@]+@/gi,"$1://[hidden]@"],[/\b(Bearer|Basic)\s+[^\s"',;]+/gi,"$1 [hidden]"],[/\b((?:access_|refresh_|id_)?token|secret|password|passwd|pwd|api[_-]?key|apikey|authorization|cookie|session|private_key)(["']?\s*[:=]\s*["']?)(?!Bearer\b|Basic\b)([^\s"'&,;}]+)/gi,"$1$2[hidden]"],[/\beyJ[\w-]{8,}\.[\w-]{8,}\.[\w-]{8,}/g,"[jwt]"],[/\b[\w.+-]+@[\w-]+(?:\.[\w-]+)+\b/g,"[email]"],[/\b[A-Fa-f0-9]{40,}\b/g,"[redacted]"],[/\b(?=[A-Za-z0-9_-]*\d)(?=[A-Za-z0-9_-]*[A-Za-z])[A-Za-z0-9_-]{40,}\b/g,"[redacted]"]];function c(a,b){return a.length>b?`${a.slice(0,b-1)}…`:a}a.s(["l",0,c,"n",0,function(a){return null===a?null:c(a.split(/[?#]/)[0]||"/",512)},"h",0,function(a){return b.reduce((a,[b,c])=>a.replace(b,c),a)}])},84877,a=>{function b(a){let[b,...c]=a.trim().split("-"),d=b.split(".").map(a=>Number.parseInt(a,10)||0);return{nums:[d[0]??0,d[1]??0,d[2]??0],pre:c.length?c.join("-").split("."):[]}}a.s(["f",0,function(a,c){let d=b(a),e=b(c);for(let a=0;a<3;a++)if(d.nums[a]!==e.nums[a])return d.nums[a]-e.nums[a];return function(a,b){if(!a.length||!b.length)return a.length?-1:+!!b.length;for(let c=0;c<Math.max(a.length,b.length);c++){if(void 0===a[c])return -1;if(void 0===b[c])return 1;let d=/^\d+$/.test(a[c])?Number(a[c]):null,e=/^\d+$/.test(b[c])?Number(b[c]):null;if(null!==d&&null!==e){if(d!==e)return d-e}else if(null!==d||null!==e)return null!==d?-1:1;else if(a[c]!==b[c])return a[c]<b[c]?-1:1}return 0}(d.pre,e.pre)}])},71575,a=>{var b=a.i(245710);a.s(["_",0,[["critical","Critical"],["warning","Warning"],["info","Info"]],"O",0,function(a,c){return a.silencedUntilResolved?{state:"off",text:"Silenced until resolved"}:a.silencedUntil&&a.silencedUntil.getTime()>c.getTime()?{state:"off",text:`Silenced until ${(0,b.U)(a.silencedUntil)}`}:"open"===a.pending||"repeat"===a.pending?{state:"build",text:"Sending…"}:a.causedBy&&!a.notifiedOpen?{state:"off",text:"Muted"}:a.lastNotifiedAt?{state:"ok",text:`Sent ${(0,b.U)(a.lastNotifiedAt)}`}:{state:"off",text:"Digest only"}},"G",0,function(a){return a.enabled?a.firing?{state:"err",text:`Firing \xb7 ${a.firing}`}:a.hasData?{state:"off",text:"Inactive"}:{state:"unknown",text:"No data yet"}:{state:"off",text:"Disabled"}},"A",0,function(a,b){return"1h"===a?{silencedUntil:new Date(b.getTime()+36e5),silencedUntilResolved:!1}:{silencedUntil:null,silencedUntilResolved:!0}},"M",0,function(a,b){let c=Math.max(1,Math.round((b.getTime()-a.getTime())/6e4));if(c<60)return`${c} min`;let d=Math.floor(c/60);return d<24?`${d} h ${c%60} min`:`${Math.floor(d/24)} d ${d%24} h`}])}]})();
+
+//# sourceMappingURL=src_0i-1ohush6mui._.js.map

package/server/.next/server/chunks/ssr/src_0ixeyy74fe5jy._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[263251,a=>{a.s(["f",0,function(a){if(Array.isArray(a))return a;let b=a?.rows;return Array.isArray(b)?b:[]}])},655206,a=>{a.s(["f",0,{checks:7,rollupsHourly:90,deployments:30,events:90,alerts:90,collectorRuns:14,storedLogs:7,recommendationDismissals:90}])},904370,a=>{let b="shared";function c(a){if(!a.includes(":")||a.includes("."))return a;let[b,c]=a.toLowerCase().split("::"),d=b?b.split(":"):[],e=void 0===c?[]:c?c.split(":"):[],f=void 0===c?d:[...d,...Array(Math.max(0,8-d.length-e.length)).fill("0"),...e];return 8===f.length&&f.every(a=>/^[0-9a-f]{1,4}$/.test(a))?`${f.slice(0,4).map(a=>a.replace(/^0+(?=.)/,"")).join(":")}::/64`:a}function d(a,c=6e5){let e=new Map;return{take(d,f,g=Date.now()){let h=e.get(d);if(h){var i=h;for(let[a,b]of i)g-b>=c&&i.delete(a);e.delete(d)}else h=new Map;return e.set(d,h),e.size>1e4&&e.delete(e.keys().next().value),!!h.has(f)||!(h.size>=(d===b?a.shared:a.perClient))&&(h.set(f,g),!0)},reset(){e.clear()}}}let e=globalThis.__watchpostDemoLimits??={creations:d({perClient:5,shared:60}),signIns:d({perClient:10,shared:120})},f=e.creations,g=e.signIns;a.s(["CREATIONS_PER_CLIENT",0,5,"CREATIONS_SHARED",0,60,"DEMO_LIMIT_WINDOW_MS",0,6e5,"DEMO_SIGN_IN_LIMITED",0,"Too many demo sign-ins from your network. Try again in a few minutes.","SHARED_CLIENT",0,b,"SIGN_INS_PER_CLIENT",0,10,"SIGN_INS_SHARED",0,120,"clientNetwork",0,c,"demoClientKey",0,function(a,d=process.env){if("1"!==d.VERCEL)return b;let e=a.get("x-forwarded-for")?.split(",")[0]?.trim();return`ip:${e?c(e):"unknown"}`},"demoCreations",0,f,"demoSignIns",0,g,"resetDemoLimitsForTests",0,function(){if(!process.env.VITEST)throw Error("resetDemoLimitsForTests is for tests only");f.reset(),g.reset()},"windowLimiter",0,d])},50519,a=>{a.i(904370),a.s(["d",0,function(a){let b=a.maxKeys??1e4,c=new Map,d=(d,e)=>{let f=c.get(d);for(f&&c.delete(d),(!f||e-f.start>=a.windowMs)&&(f={start:e,n:0}),c.set(d,f);c.size>b;)c.delete(c.keys().next().value);return f},e=(b,c,d)=>({allowed:d,retryAfter:Math.max(1,Math.ceil((b.start+a.windowMs-c)/1e3))});return{hit(b,c=Date.now()){let f=d(b,c);return f.n++,e(f,c,f.n<=a.max)},peek(b,c=Date.now()){let f=d(b,c);return e(f,c,f.n<a.max)},count(a,b=Date.now()){d(a,b).n++},size:()=>c.size,reset:()=>c.clear()}},"V",0,function(a){let b=a.maxKeys??1e4,c=new Map;return{has(b,d=Date.now()){let e=c.get(b);return void 0!==e&&(!(d-e>=a.ttlMs)||(c.delete(b),!1))},add(a,d=Date.now()){for(c.delete(a),c.set(a,d);c.size>b;)c.delete(c.keys().next().value)},delete:a=>void c.delete(a),reset:()=>c.clear()}}])},71575,a=>{var b=a.i(245710);a.s(["_",0,[["critical","Critical"],["warning","Warning"],["info","Info"]],"O",0,function(a,c){return a.silencedUntilResolved?{state:"off",text:"Silenced until resolved"}:a.silencedUntil&&a.silencedUntil.getTime()>c.getTime()?{state:"off",text:`Silenced until ${(0,b.U)(a.silencedUntil)}`}:"open"===a.pending||"repeat"===a.pending?{state:"build",text:"Sending…"}:a.causedBy&&!a.notifiedOpen?{state:"off",text:"Muted"}:a.lastNotifiedAt?{state:"ok",text:`Sent ${(0,b.U)(a.lastNotifiedAt)}`}:{state:"off",text:"Digest only"}},"G",0,function(a){return a.enabled?a.firing?{state:"err",text:`Firing \xb7 ${a.firing}`}:a.hasData?{state:"off",text:"Inactive"}:{state:"unknown",text:"No data yet"}:{state:"off",text:"Disabled"}},"A",0,function(a,b){return"1h"===a?{silencedUntil:new Date(b.getTime()+36e5),silencedUntilResolved:!1}:{silencedUntil:null,silencedUntilResolved:!0}},"M",0,function(a,b){let c=Math.max(1,Math.round((b.getTime()-a.getTime())/6e4));if(c<60)return`${c} min`;let d=Math.floor(c/60);return d<24?`${d} h ${c%60} min`:`${Math.floor(d/24)} d ${d%24} h`}])}]})();
+
+//# sourceMappingURL=src_0ixeyy74fe5jy._.js.map

package/server/.next/server/chunks/ssr/src_0ley8c3htc2q9._.js

@@ -0,0 +1,3 @@
+module.exports=[[482169,a=>{var b=a.i(907997),c=a.i(568119),d=a.i(395936);a.i(570396);var e=a.i(673727),f=a.i(843405),g=a.i(903769),h=a.i(803681),i=a.i(109307),j=a.i(371289),k=a.i(330802);async function l(){await (0,f.connection)(),"selfhost"!==(0,j.c)()&&(0,e.notFound)();let{member:a,step:l}=await (0,i.F)();"setup"===l&&(0,e.redirect)("/mfa/setup"),"challenge"===l&&(0,e.redirect)("/mfa");let m=(await (0,i.x)())?.mustChangePassword===!0;return(0,b.jsx)("main",{className:"grid min-h-screen place-items-center px-4 py-6",children:(0,b.jsxs)("div",{className:"w-[400px] max-w-full rounded-xl border border-line bg-surface p-7",children:[(0,b.jsx)(c.f,{className:"mb-[18px]"}),(0,b.jsx)("h1",{className:"mb-1 text-xl",children:m?"Choose your password":"Change password"}),(0,b.jsx)("p",{className:"mb-[18px] text-ink-soft",children:m?"You signed in with a temporary password. Pick your own before you use the console.":`Signed in as ${a.email}.`}),(0,b.jsx)(k.ChangePasswordForm,{forced:m}),m?(0,b.jsx)("form",{action:g.f,className:"mt-3",children:(0,b.jsx)(h.K,{type:"submit",variant:"ghost",size:"sm",children:"Sign out"})}):(0,b.jsx)(d.default,{href:"/",className:"mt-3 inline-block text-[13px] text-ink-soft hover:text-ink",children:"Back to the console"})]})})}a.s(["default",0,l])},432478,a=>{let b=(0,a.i(211857).registerClientReference)(function(){throw Error("Attempted to call ChangePasswordForm() from the server but ChangePasswordForm is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/app/account/password/password-form.tsx","ChangePasswordForm");a.s(["ChangePasswordForm",0,b])},330802,a=>{var b=a.i(432478);a.n(b)},568119,a=>{var b=a.i(907997),c=a.i(139138);a.s(["f",0,function({size:a=28,title:d,className:e}){return(0,b.jsxs)("svg",{xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 32 32",width:a,height:a,className:(0,c.f)("shrink-0",e),role:d?"img":void 0,"aria-hidden":!d||void 0,focusable:"false",children:[d?(0,b.jsx)("title",{children:d}):null,(0,b.jsx)("rect",{x:"0.5",y:"0.5",width:"31",height:"31",rx:"7",fill:"#14213d",strokeWidth:"1",className:"stroke-transparent dark:stroke-[#2f4372]"}),(0,b.jsxs)("g",{transform:"rotate(-14 15 16)",fill:"#fcc419",children:[(0,b.jsx)("rect",{x:"13.7",y:"5.4",width:"2.6",height:"2.4",rx:"1.1"}),(0,b.jsx)("path",{d:"M15 7.2c-4.3 0-6.8 3.1-6.8 7.3v4.1l-2.4 3.3h18.4l-2.4-3.3v-4.1c0-4.2-2.5-7.3-6.8-7.3z"}),(0,b.jsx)("circle",{cx:"15",cy:"24.3",r:"2.3"})]}),(0,b.jsxs)("g",{fill:"none",stroke:"#fcc419",strokeWidth:"2.2",strokeLinecap:"round",children:[(0,b.jsx)("path",{d:"M24.4 9.2c1.4 1.4 2.2 3.2 2.2 5.2"}),(0,b.jsx)("path",{d:"M22.8 11.1c.8.8 1.2 1.8 1.2 2.9"})]})]})}])}],609983,function(a){a.n(a.i(482169))}];
+
+//# sourceMappingURL=src_0ley8c3htc2q9._.js.map

package/server/.next/server/chunks/ssr/src_0oagnv9_4qww7._.js

@@ -0,0 +1,3 @@
+module.exports=[461750,a=>{a.v(b=>Promise.all(["server/chunks/ssr/[root-of-the-server]__0ptdec0sozaqm._.js","server/chunks/ssr/src_db_pglite_ts_0r1r9wqxilnam._.js","server/chunks/ssr/node_modules_0vppy-p56c35f._.js","server/chunks/ssr/node_modules_@electric-sql_pglite_dist_0j1fzsq3ed7ph._.js"].map(b=>a.l(b))).then(()=>b(614755)))},73710,a=>{a.v(b=>Promise.all(["server/chunks/ssr/src_lib_demo_cookie_ts_0a12-0n1novgh._.js"].map(b=>a.l(b))).then(()=>b(716983)))},871289,a=>{a.v(b=>Promise.all(["server/chunks/ssr/[root-of-the-server]__0kr_tvfgqtb-o._.js","server/chunks/ssr/node_modules_0vppy-p56c35f._.js","server/chunks/ssr/node_modules_@electric-sql_pglite_dist_0j1fzsq3ed7ph._.js"].map(b=>a.l(b))).then(()=>b(204048)))},522169,a=>{a.v(b=>Promise.all(["server/chunks/ssr/src_lib_demo_seed_members_ts_0pz2fa9295pvm._.js"].map(b=>a.l(b))).then(()=>b(615089)))},372153,a=>{a.v(b=>Promise.all(["server/chunks/ssr/src_lib_demo_session_ts_0rwvb3aun41zx._.js","server/chunks/ssr/src_lib_demo_0mr090huk17s8._.js"].map(b=>a.l(b))).then(()=>b(765161)))}];
+
+//# sourceMappingURL=src_0oagnv9_4qww7._.js.map

package/server/.next/server/chunks/ssr/src_0p0fk07bj9gpq._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[925345,a=>{let b=(0,a.i(211857).registerClientReference)(function(){throw Error("Attempted to call DepsScanButton() from the server but DepsScanButton is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/app/(console)/apps/[id]/deps-scan-button.tsx","DepsScanButton");a.s(["DepsScanButton",0,b])},67400,a=>{var b=a.i(925345);a.n(b)},414280,718064,a=>{var b=a.i(907997),c=a.i(863858);function d({href:a,children:e,className:f,...g}){return(0,c.f)()?(0,b.jsx)("a",{href:a,className:f,...g,children:e}):(0,b.jsx)("span",{className:f,children:e})}a.s(["f",0,d],414280);var e=a.i(395936),f=a.i(803681),g=a.i(605826),h=a.i(293167),i=a.i(954296),j=a.i(686251),k=a.i(791444),l=a.i(852539),m=a.i(120213),n=a.i(245710),o=a.i(139138),p=a.i(462820),q=a.i(67400);let r="font-mono text-[12.5px]",s={critical:"CRITICAL",high:"HIGH",moderate:"MODERATE",low:"LOW",unknown:"UNKNOWN"};a.s(["f",0,function({app:a,view:c,canAct:t,owner:u,now:v}){let{repo:w,scan:x,vulns:y}=c,z=(0,m.Z)(y),A=(0,m.B)(y).length;return(0,b.jsxs)(f.N,{title:"Dependencies",meta:(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(i.Src,{kind:"api",children:"OSV.dev"}),t&&w&&(0,b.jsx)(q.DepsScanButton,{appId:a.id,appName:a.name})]}),flush:!0,children:[(0,b.jsx)("div",{className:"px-[18px] pb-4 pt-2",children:w?x?.scannedAt?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("dl",{className:"grid grid-cols-[170px_minmax(0,1fr)] gap-x-4 gap-y-2.5 max-[720px]:grid-cols-1 max-[720px]:gap-y-1 [&_dd]:min-w-0 [&_dd]:[overflow-wrap:anywhere] [&_dt]:text-ink-soft",children:[(0,b.jsx)("dt",{children:"Open advisories"}),(0,b.jsx)("dd",{children:0===y.length?(0,b.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,b.jsx)(j.Z,{state:"ok"}),"None known"]}):(0,b.jsx)("span",{className:"flex flex-wrap gap-x-3 gap-y-1",children:m.u.filter(a=>z[a]>0).map(a=>(0,b.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,b.jsx)("span",{className:r,children:z[a]}),(0,b.jsx)(h.s,{severity:s[a]})]},a))})}),(0,b.jsx)("dt",{children:"Lockfile"}),(0,b.jsx)("dd",{children:x.lockfilePath?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("span",{className:r,children:x.lockfilePath}),(0,b.jsxs)("span",{className:"text-ink-faint",children:[" · ",x.packageCount," packages"]})]}):(0,b.jsx)("span",{className:"text-ink-faint",children:"None at the repository root"})}),(0,b.jsx)("dt",{children:"Last scan"}),(0,b.jsx)("dd",{children:(0,n.$)(x.scannedAt,v)})]}),x.error&&(0,b.jsxs)("p",{className:"mt-3 flex items-start gap-1.5 text-ink-soft",children:[(0,b.jsx)(j.Z,{state:"warn"}),(0,b.jsxs)("span",{children:["The last scan failed: ",x.error," The list below is from the scan before."]})]}),x.note&&(0,b.jsx)("p",{className:"mt-2 text-[12.5px] text-ink-faint",children:x.note}),c.prs&&c.prs.length>0&&(0,b.jsx)("ul",{className:"mt-2 flex flex-col gap-0.5 text-[13px]",children:c.prs.map(a=>(0,b.jsxs)("li",{children:[(0,b.jsx)(d,{href:`https://github.com/${a.fullName}/pull/${a.number}`,target:"_blank",rel:"noopener",children:a.stageText??`PR #${a.number}`}),(0,b.jsxs)("span",{className:"text-ink-faint",children:[" · ",(0,n.$)(a.openedAt,v)]})]},a.number))}),A>0&&(0,b.jsxs)("p",{className:"mt-2 text-[12.5px] text-ink-soft",children:[A," direct package",1===A?" has":"s have"," a fixed version. ",p.K.cardProposes,u&&!c.writeConnected&&(0,b.jsxs)(b.Fragment,{children:[" It needs the ",(0,b.jsx)(e.default,{href:"/connections?provider=github_write",children:"GitHub (PR write)"})," token."]})]})]}):(0,b.jsx)("p",{className:"text-ink-soft",children:"Not scanned yet. The daily run scans linked repositories; Scan now does it at once."}):(0,b.jsx)("p",{className:"text-ink-soft",children:"Link a repository (Repository card below) to scan its lockfile for known vulnerabilities."})}),y.length>0&&(0,b.jsx)(g.PlainTable,{head:["Package","Version","Severity","Advisory"],rows:y.map(a=>{let c=(0,l.m)(a.aliases);return{key:`${a.package}@${a.installedVersion}|${a.vulnId}`,state:s[a.severity],text:[a.package,a.vulnId,c,a.summary].filter(Boolean).join(" "),row:(0,b.jsxs)("tr",{className:k.C,children:[(0,b.jsxs)("td",{className:k.z,children:[(0,b.jsx)("span",{className:r,children:a.package}),(a.dev||!a.direct)&&(0,b.jsx)("div",{className:"mt-0.5 text-xs text-ink-faint",children:[a.direct?null:"transitive",a.dev?"dev only":null].filter(Boolean).join(" · ")})]}),(0,b.jsxs)("td",{className:(0,o.f)(k.z,r,"whitespace-nowrap"),children:[a.installedVersion," ",a.fixedVersion?(0,b.jsxs)(b.Fragment,{children:["→ ",a.fixedVersion]}):(0,b.jsx)("span",{className:"font-sans text-ink-faint",children:"· no fix yet"})]}),(0,b.jsx)("td",{className:k.z,children:(0,b.jsx)(h.s,{severity:s[a.severity]})}),(0,b.jsxs)("td",{className:(0,o.f)(k.z,k.M),children:[(0,b.jsx)("a",{href:`https://osv.dev/vulnerability/${encodeURIComponent(c??a.vulnId)}`,target:"_blank",rel:"noopener",className:r,children:c??a.vulnId}),c&&(0,b.jsx)("span",{className:(0,o.f)(r,"ml-1.5 text-xs text-ink-faint"),children:a.vulnId}),a.summary&&(0,b.jsx)("div",{className:"mt-0.5 text-ink-soft",children:a.summary})]})]})}})})]})}],718064)}]})();
+(()=>{"use strict";module.exports=[925345,a=>{let b=(0,a.i(211857).registerClientReference)(function(){throw Error("Attempted to call DepsScanButton() from the server but DepsScanButton is on the client. It's not possible to invoke a client function from the server, it can only be rendered as a Component or passed to props of a Client Component.")},"[project]/src/app/(console)/apps/[id]/deps-scan-button.tsx","DepsScanButton");a.s(["DepsScanButton",0,b])},67400,a=>{var b=a.i(925345);a.n(b)},414280,718064,a=>{var b=a.i(907997),c=a.i(863858);function d({href:a,children:e,className:f,...g}){return(0,c.f)()?(0,b.jsx)("a",{href:a,className:f,...g,children:e}):(0,b.jsx)("span",{className:f,children:e})}a.s(["f",0,d],414280);var e=a.i(395936),f=a.i(803681),g=a.i(605826),h=a.i(293167),i=a.i(954296),j=a.i(686251),k=a.i(791444),l=a.i(852539),m=a.i(120213),n=a.i(245710),o=a.i(139138),p=a.i(462820);let q={"no-repo":"no linked repository. Link one (Repository card below) to scan its lockfile for known vulnerabilities.","devops-off":"DevOps is off (Manage › Sections), so Watchbell doesn't read GitHub. Turn it on to scan the linked repository.",failed:"the scan failed.","no-lockfile":"no lockfile or package.json was found in the linked repository.","not-yet":"the daily run scans linked repositories; Scan now does it at once."};var r=a.i(67400);let s="font-mono text-[12.5px]",t={critical:"CRITICAL",high:"HIGH",moderate:"MODERATE",low:"LOW",unknown:"UNKNOWN"};a.s(["f",0,function({app:a,view:c,canAct:u,owner:v,now:w,devopsOff:x=!1}){let{repo:y,scan:z,vulns:A}=c,B=function(a,b){if(!a.repo)return{scanned:!1,reason:"no-repo"};let c=a.scan;return c?.scannedAt&&(c.lockfilePath||c.packageCount>0)?{scanned:!0,paused:b}:b?{scanned:!1,reason:"devops-off"}:c?.scannedAt&&c.error?{scanned:!1,reason:"failed"}:c?.scannedAt?{scanned:!1,reason:"no-lockfile"}:{scanned:!1,reason:"not-yet"}}(c,x),C=(0,m.Z)(A),D=(0,m.B)(A).length;return(0,b.jsxs)(f.N,{title:"Dependencies",meta:(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)(i.Src,{kind:"api",children:"OSV.dev"}),u&&y&&!x&&(0,b.jsx)(r.DepsScanButton,{appId:a.id,appName:a.name})]}),flush:!0,children:[(0,b.jsx)("div",{className:"px-[18px] pb-4 pt-2",children:B.scanned&&z?.scannedAt?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("dl",{className:"grid grid-cols-[170px_minmax(0,1fr)] gap-x-4 gap-y-2.5 max-[720px]:grid-cols-1 max-[720px]:gap-y-1 [&_dd]:min-w-0 [&_dd]:[overflow-wrap:anywhere] [&_dt]:text-ink-soft",children:[(0,b.jsx)("dt",{children:"Open advisories"}),(0,b.jsx)("dd",{children:0===A.length?(0,b.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,b.jsx)(j.Z,{state:"ok"}),"None known"]}):(0,b.jsx)("span",{className:"flex flex-wrap gap-x-3 gap-y-1",children:m.u.filter(a=>C[a]>0).map(a=>(0,b.jsxs)("span",{className:"inline-flex items-center gap-1.5",children:[(0,b.jsx)("span",{className:s,children:C[a]}),(0,b.jsx)(h.s,{severity:t[a]})]},a))})}),(0,b.jsx)("dt",{children:"Lockfile"}),(0,b.jsx)("dd",{children:z.lockfilePath?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("span",{className:s,children:z.lockfilePath}),(0,b.jsxs)("span",{className:"text-ink-faint",children:[" · ",z.packageCount," packages"]})]}):(0,b.jsx)("span",{className:"text-ink-faint",children:"None found"})}),(0,b.jsx)("dt",{children:"Last scan"}),(0,b.jsx)("dd",{children:(0,n.$)(z.scannedAt,w)})]}),z.error&&(0,b.jsxs)("p",{className:"mt-3 flex items-start gap-1.5 text-ink-soft",children:[(0,b.jsx)(j.Z,{state:"warn"}),(0,b.jsxs)("span",{children:["The last scan failed: ",z.error," The list below is from the scan before."]})]}),z.note&&(0,b.jsx)("p",{className:"mt-2 text-[12.5px] text-ink-faint",children:z.note}),B.paused&&(0,b.jsx)("p",{className:"mt-2 text-[12.5px] text-ink-faint",children:"Scans pause while DevOps is off (Manage › Sections); this is the last scan."}),c.prs&&c.prs.length>0&&(0,b.jsx)("ul",{className:"mt-2 flex flex-col gap-0.5 text-[13px]",children:c.prs.map(a=>(0,b.jsxs)("li",{children:[(0,b.jsx)(d,{href:`https://github.com/${a.fullName}/pull/${a.number}`,target:"_blank",rel:"noopener",children:a.stageText??`PR #${a.number}`}),(0,b.jsxs)("span",{className:"text-ink-faint",children:[" · ",(0,n.$)(a.openedAt,w)]})]},a.number))}),D>0&&(0,b.jsxs)("p",{className:"mt-2 text-[12.5px] text-ink-soft",children:[D," direct package",1===D?" has":"s have"," a fixed version. ",p.K.cardProposes,v&&!c.writeConnected&&(0,b.jsxs)(b.Fragment,{children:[" It needs the ",(0,b.jsx)(e.default,{href:"/connections?provider=github_write",children:"GitHub (PR write)"})," token."]})]})]}):(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("p",{className:"flex items-start gap-1.5 text-ink-soft",children:[!B.scanned&&"failed"===B.reason&&(0,b.jsx)(j.Z,{state:"warn"}),(0,b.jsxs)("span",{children:[(0,b.jsx)("span",{className:"font-medium text-ink",children:"Not scanned:"})," ",q[B.scanned?"not-yet":B.reason],!B.scanned&&"failed"===B.reason&&z?.error&&(0,b.jsxs)(b.Fragment,{children:[" ",z.error]})]})]}),z?.scannedAt&&(0,b.jsxs)("p",{className:"mt-2 text-[12.5px] text-ink-faint",children:["Last tried ",(0,n.$)(z.scannedAt,w),".",z.note&&(0,b.jsxs)(b.Fragment,{children:[" ",z.note]})]})]})}),B.scanned&&A.length>0&&(0,b.jsx)(g.PlainTable,{head:["Package","Version","Severity","Advisory"],rows:A.map(a=>{let c=(0,l.m)(a.aliases);return{key:`${a.package}@${a.installedVersion}|${a.vulnId}`,state:t[a.severity],text:[a.package,a.vulnId,c,a.summary].filter(Boolean).join(" "),row:(0,b.jsxs)("tr",{className:k.C,children:[(0,b.jsxs)("td",{className:k.z,children:[(0,b.jsx)("span",{className:s,children:a.package}),(a.dev||!a.direct)&&(0,b.jsx)("div",{className:"mt-0.5 text-xs text-ink-faint",children:[a.direct?null:"transitive",a.dev?"dev only":null].filter(Boolean).join(" · ")})]}),(0,b.jsxs)("td",{className:(0,o.f)(k.z,s,"whitespace-nowrap"),children:[a.installedVersion," ",a.fixedVersion?(0,b.jsxs)(b.Fragment,{children:["→ ",a.fixedVersion]}):(0,b.jsx)("span",{className:"font-sans text-ink-faint",children:"· no fix yet"})]}),(0,b.jsx)("td",{className:k.z,children:(0,b.jsx)(h.s,{severity:t[a.severity]})}),(0,b.jsxs)("td",{className:(0,o.f)(k.z,k.M),children:[(0,b.jsx)("a",{href:`https://osv.dev/vulnerability/${encodeURIComponent(c??a.vulnId)}`,target:"_blank",rel:"noopener",className:s,children:c??a.vulnId}),c&&(0,b.jsx)("span",{className:(0,o.f)(s,"ml-1.5 text-xs text-ink-faint"),children:a.vulnId}),a.summary&&(0,b.jsx)("div",{className:"mt-0.5 text-ink-soft",children:a.summary})]})]})}})})]})}],718064)}]})();
 
 //# sourceMappingURL=src_0p0fk07bj9gpq._.js.map

package/server/.next/server/chunks/ssr/src_0ph020gy78gi9._.js

@@ -1,3 +1,3 @@
-(()=>{"use strict";module.exports=[630718,a=>{var b=a.i(187924),c=a.i(218024),d=a.i(572131),e=a.i(823292),f=a.i(405050);let g=(0,f.createServerReference)("60ac2fa6a2d11f6df092c72f15fc4c8f31c20df9fc",f.callServer,void 0,f.findSourceMapURL,"approveCreateAction"),h=(0,f.createServerReference)("406d20b064b7623f41d79629ea46be19fbfb679858",f.callServer,void 0,f.findSourceMapURL,"rejectCreateAction");var i=a.i(771378),j=a.i(611619),k=a.i(619089),l=a.i(507504),m=a.i(814574),n=a.i(486583);let o=new Set(["requested","approved","running"]),p=a=>o.has(a.status);var q=a.i(147474),r=a.i(368114);let s={requested:"Waiting for approval",approved:"Approved",running:"Creating…",done:"Created",failed:"Failed",rejected:"Rejected",expired:"Expired"};function t({items:a,owner:c,focus:d,quiet:e}){let f=(0,i.useMask)();return(0,b.jsx)("ul",{className:"divide-y divide-line",children:a.map(a=>{var g;let h;return(0,b.jsxs)("li",{id:`create-${a.id}`,className:(0,r.f)("flex flex-wrap items-center gap-x-3 gap-y-1.5 px-[18px] py-2.5",e&&"py-2 text-[13px]",d===a.id&&"bg-brand-soft"),children:[(0,b.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,b.jsx)("b",{className:(0,r.f)("font-medium",e&&"text-ink-soft"),children:n.S[a.type]}),(0,b.jsx)(k.E,{children:n.E[a.type]}),(0,b.jsx)("span",{className:(0,r.f)("text-[12.5px]","failed"===a.status?"text-err":"text-ink-soft"),children:s[a.status]})]}),(0,b.jsx)("p",{className:"font-mono text-[12.5px] text-ink-soft [overflow-wrap:anywhere]",children:f("text",a.summary)}),"requested"===a.status&&(0,b.jsxs)("p",{className:"text-[12px] text-ink-faint",children:[a.mine?"You asked":"Another member asked"," · expires ",(g=new Date(a.expiresAt),h=(0,q.e)(g),`${h.day} ${h.month} ${h.year}, ${(0,q.U)(g)}`)]}),a.error&&"requested"!==a.status&&(0,b.jsx)("p",{className:"text-[12.5px] text-err",children:f("text",a.error)}),a.result?.id&&"done"===a.status&&(0,b.jsxs)("p",{className:"text-[12px] text-ink-faint",children:["Created: ",(0,b.jsx)("span",{className:"font-mono",children:f("text",a.result.id)}),"firebase-pending"===a.result.note?" · Firebase still needs adding in the Firebase console":""]})]}),c&&"requested"===a.status&&(0,b.jsxs)("div",{className:"flex gap-1.5",children:[(0,b.jsx)(u,{item:a}),(0,b.jsx)(v,{item:a})]})]},a.id)})})}function u({item:a}){return(0,b.jsx)(j.f,{trigger:(0,b.jsx)(k.K,{size:"sm",children:"Reject"}),title:`Reject this ${n.S[a.type]}?`,body:"Nothing is created. The person who asked can ask again.",cta:"Reject",onConfirm:async()=>{let b=await h(a.id);return b.ok?{ok:!0,message:b.message??"Rejected."}:{ok:!1,message:b.error}}})}function v({item:a}){let[c,e]=(0,d.useState)(!1);return(0,l.useHoldRefresh)(c),(0,b.jsxs)(m.N,{open:c,onOpenChange:e,children:[(0,b.jsx)(m.a,{render:(0,b.jsx)(k.K,{size:"sm",variant:"primary"}),children:"Approve…"}),(0,b.jsx)(m.d,{className:"gap-0 p-0 sm:max-w-[560px]",showCloseButton:!1,children:c&&(0,b.jsx)(w,{item:a,onDone:()=>e(!1)})})]})}function w({item:a,onDone:c}){let f=(0,i.useMask)(),[h,j]=(0,d.useState)(""),[l,o]=(0,d.useState)(null),[p,q]=(0,d.useState)(null),[r,s]=(0,d.useState)(null),[t,u]=(0,d.useTransition)();return p?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("div",{className:"px-[18px] pb-2 pt-4",children:[(0,b.jsx)(m.F,{className:"text-base",children:"Copy the database password now"}),(0,b.jsxs)(m.C,{className:"mt-0.5 text-[13px] text-ink-soft",children:[r," It is shown only here, only once."]})]}),(0,b.jsxs)("div",{className:"px-[18px] pt-1.5",children:[(0,b.jsx)(x,{value:p}),(0,b.jsx)("div",{className:"mb-3",children:(0,b.jsx)(k.M,{tone:"warning",title:"The console doesn't keep it",children:"Save it in your password manager. If it's lost, reset it in Supabase → Project settings → Database."})})]}),(0,b.jsx)("div",{className:"flex justify-end gap-2 border-t border-line px-[18px] py-3",children:(0,b.jsx)(k.K,{variant:"primary",onClick:()=>{q(null),c()},children:"I've saved it"})})]}):(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("div",{className:"px-[18px] pb-2 pt-4",children:[(0,b.jsx)(m.F,{className:"text-base",children:f("text",`Create ${n.S[a.type]} ${a.confirmName}?`)}),(0,b.jsxs)(m.C,{className:"mt-0.5 text-[13px] text-ink-soft",children:["The console checks the free tier at ",n.E[a.type]," again now, then makes one create call. ",(0,n.d)(a.type)]})]}),(0,b.jsxs)("div",{className:"px-[18px] pt-2",children:[(0,b.jsx)("p",{className:"mb-3 rounded-md border border-line bg-sunken px-3 py-2 font-mono text-[12.5px] [overflow-wrap:anywhere]",children:f("text",a.summary)}),(0,b.jsx)(k.O,{id:`ap-${a.id}`,label:(0,b.jsxs)(b.Fragment,{children:["Type ",(0,b.jsx)("span",{className:"font-mono",children:f("text",a.confirmName)})," to approve"]}),error:l??void 0,children:(0,b.jsx)("input",{id:`ap-${a.id}`,className:k.S,value:h,autoComplete:"off",spellCheck:!1,onChange:a=>j(a.target.value)})})]}),(0,b.jsxs)("div",{className:"flex justify-end gap-2 border-t border-line px-[18px] py-3",children:[(0,b.jsx)(k.K,{onClick:c,disabled:t,children:"Cancel"}),(0,b.jsx)(k.K,{variant:"primary",onClick:function(){u(async()=>{try{let b=await g(a.id,h);if(!b.ok)return o(f("text",b.error));o(null),b.data?.secret?(q(b.data.secret),s(f("text",b.message??"Created."))):(e.c.success(f("text",b.message??"Created.")),c())}catch{o("Something went wrong. Check the provider's dashboard before trying again.")}})},disabled:t||h.trim()!==a.confirmName,children:t?"Checking and creating…":"Approve and create"})]})]})}function x({value:a}){let[f,g]=(0,d.useState)(!1),{shot:h}=(0,i.usePrivacy)(),[j,l]=(0,d.useState)(!1);return(0,b.jsxs)("div",{className:"mb-3 flex items-center gap-2 rounded-md border border-line-strong bg-sunken px-3 py-2",children:[h&&!j?(0,b.jsx)("button",{type:"button",className:"min-w-0 flex-1 text-left text-[13px] text-ink-soft",onClick:()=>l(!0),children:"Hidden in screenshot mode. Click to show it."}):(0,b.jsx)("code",{className:"min-w-0 flex-1 select-all font-mono text-[13px] [overflow-wrap:anywhere]",children:a}),(0,b.jsxs)(k.K,{size:"sm",onClick:()=>{navigator.clipboard.writeText(a).then(()=>g(!0),()=>e.c.error("Copy didn't work; select the text and copy it."))},children:[(0,b.jsx)(c.f,{size:14,"aria-hidden":!0,className:"mr-1 inline"}),f?"Copied":"Copy"]})]})}a.s(["CreateRequestList",0,function({items:a,owner:c,focus:d,title:e="Waiting for approval"}){let{pending:f,finished:g}={pending:a.filter(p),finished:a.filter(a=>!p(a))};if(!f.length&&!g.length)return null;let h=f.filter(a=>"requested"===a.status).length;return(0,b.jsxs)(b.Fragment,{children:[f.length>0&&(0,b.jsx)(k.N,{title:e,meta:h?`${h} waiting`:void 0,flush:!0,children:(0,b.jsx)(t,{items:f,owner:c,focus:d})}),g.length>0&&(0,b.jsx)(k.N,{title:"Recent requests",flush:!0,children:(0,b.jsx)(t,{items:g,owner:!1,focus:d,quiet:!0})})]})}],630718)},486583,a=>{let b={dns_record:"Cloudflare",neon_branch:"Neon",supabase_project:"Supabase",firebase_project:"Firebase"};a.s(["E",0,b,"S",0,{dns_record:"DNS record",neon_branch:"Neon branch",supabase_project:"Supabase project",firebase_project:"Firebase project"},"d",0,a=>`The console can't remove this later; remove it in ${b[a]}'s dashboard.`])}]})();
+(()=>{"use strict";module.exports=[630718,a=>{var b=a.i(187924),c=a.i(218024),d=a.i(572131),e=a.i(823292),f=a.i(405050);let g=(0,f.createServerReference)("60df084ede3892662d10dfb5a127a6cd49f290a9c6",f.callServer,void 0,f.findSourceMapURL,"approveCreateAction"),h=(0,f.createServerReference)("40a0f1c16158925783c3c8ee3f1a5cc75fc474b696",f.callServer,void 0,f.findSourceMapURL,"rejectCreateAction");var i=a.i(771378),j=a.i(611619),k=a.i(619089),l=a.i(507504),m=a.i(814574),n=a.i(486583);let o=new Set(["requested","approved","running"]),p=a=>o.has(a.status);var q=a.i(147474),r=a.i(368114);let s={requested:"Waiting for approval",approved:"Approved",running:"Creating…",done:"Created",failed:"Failed",rejected:"Rejected",expired:"Expired"};function t({items:a,owner:c,focus:d,quiet:e}){let f=(0,i.useMask)();return(0,b.jsx)("ul",{className:"divide-y divide-line",children:a.map(a=>{var g;let h;return(0,b.jsxs)("li",{id:`create-${a.id}`,className:(0,r.f)("flex flex-wrap items-center gap-x-3 gap-y-1.5 px-[18px] py-2.5",e&&"py-2 text-[13px]",d===a.id&&"bg-brand-soft"),children:[(0,b.jsxs)("div",{className:"min-w-0 flex-1",children:[(0,b.jsxs)("div",{className:"flex flex-wrap items-center gap-2",children:[(0,b.jsx)("b",{className:(0,r.f)("font-medium",e&&"text-ink-soft"),children:n.S[a.type]}),(0,b.jsx)(k.E,{children:n.E[a.type]}),(0,b.jsx)("span",{className:(0,r.f)("text-[12.5px]","failed"===a.status?"text-err":"text-ink-soft"),children:s[a.status]})]}),(0,b.jsx)("p",{className:"font-mono text-[12.5px] text-ink-soft [overflow-wrap:anywhere]",children:f("text",a.summary)}),"requested"===a.status&&(0,b.jsxs)("p",{className:"text-[12px] text-ink-faint",children:[a.mine?"You asked":"Another member asked"," · expires ",(g=new Date(a.expiresAt),h=(0,q.e)(g),`${h.day} ${h.month} ${h.year}, ${(0,q.U)(g)}`)]}),a.error&&"requested"!==a.status&&(0,b.jsx)("p",{className:"text-[12.5px] text-err",children:f("text",a.error)}),a.result?.id&&"done"===a.status&&(0,b.jsxs)("p",{className:"text-[12px] text-ink-faint",children:["Created: ",(0,b.jsx)("span",{className:"font-mono",children:f("text",a.result.id)}),"firebase-pending"===a.result.note?" · Firebase still needs adding in the Firebase console":""]})]}),c&&"requested"===a.status&&(0,b.jsxs)("div",{className:"flex gap-1.5",children:[(0,b.jsx)(u,{item:a}),(0,b.jsx)(v,{item:a})]})]},a.id)})})}function u({item:a}){return(0,b.jsx)(j.f,{trigger:(0,b.jsx)(k.K,{size:"sm",children:"Reject"}),title:`Reject this ${n.S[a.type]}?`,body:"Nothing is created. The person who asked can ask again.",cta:"Reject",onConfirm:async()=>{let b=await h(a.id);return b.ok?{ok:!0,message:b.message??"Rejected."}:{ok:!1,message:b.error}}})}function v({item:a}){let[c,e]=(0,d.useState)(!1);return(0,l.useHoldRefresh)(c),(0,b.jsxs)(m.N,{open:c,onOpenChange:e,children:[(0,b.jsx)(m.a,{render:(0,b.jsx)(k.K,{size:"sm",variant:"primary"}),children:"Approve…"}),(0,b.jsx)(m.d,{className:"gap-0 p-0 sm:max-w-[560px]",showCloseButton:!1,children:c&&(0,b.jsx)(w,{item:a,onDone:()=>e(!1)})})]})}function w({item:a,onDone:c}){let f=(0,i.useMask)(),[h,j]=(0,d.useState)(""),[l,o]=(0,d.useState)(null),[p,q]=(0,d.useState)(null),[r,s]=(0,d.useState)(null),[t,u]=(0,d.useTransition)();return p?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("div",{className:"px-[18px] pb-2 pt-4",children:[(0,b.jsx)(m.F,{className:"text-base",children:"Copy the database password now"}),(0,b.jsxs)(m.C,{className:"mt-0.5 text-[13px] text-ink-soft",children:[r," It is shown only here, only once."]})]}),(0,b.jsxs)("div",{className:"px-[18px] pt-1.5",children:[(0,b.jsx)(x,{value:p}),(0,b.jsx)("div",{className:"mb-3",children:(0,b.jsx)(k.M,{tone:"warning",title:"The console doesn't keep it",children:"Save it in your password manager. If it's lost, reset it in Supabase → Project settings → Database."})})]}),(0,b.jsx)("div",{className:"flex justify-end gap-2 border-t border-line px-[18px] py-3",children:(0,b.jsx)(k.K,{variant:"primary",onClick:()=>{q(null),c()},children:"I've saved it"})})]}):(0,b.jsxs)(b.Fragment,{children:[(0,b.jsxs)("div",{className:"px-[18px] pb-2 pt-4",children:[(0,b.jsx)(m.F,{className:"text-base",children:f("text",`Create ${n.S[a.type]} ${a.confirmName}?`)}),(0,b.jsxs)(m.C,{className:"mt-0.5 text-[13px] text-ink-soft",children:["The console checks the free tier at ",n.E[a.type]," again now, then makes one create call. ",(0,n.d)(a.type)]})]}),(0,b.jsxs)("div",{className:"px-[18px] pt-2",children:[(0,b.jsx)("p",{className:"mb-3 rounded-md border border-line bg-sunken px-3 py-2 font-mono text-[12.5px] [overflow-wrap:anywhere]",children:f("text",a.summary)}),(0,b.jsx)(k.O,{id:`ap-${a.id}`,label:(0,b.jsxs)(b.Fragment,{children:["Type ",(0,b.jsx)("span",{className:"font-mono",children:f("text",a.confirmName)})," to approve"]}),error:l??void 0,children:(0,b.jsx)("input",{id:`ap-${a.id}`,className:k.S,value:h,autoComplete:"off",spellCheck:!1,onChange:a=>j(a.target.value)})})]}),(0,b.jsxs)("div",{className:"flex justify-end gap-2 border-t border-line px-[18px] py-3",children:[(0,b.jsx)(k.K,{onClick:c,disabled:t,children:"Cancel"}),(0,b.jsx)(k.K,{variant:"primary",onClick:function(){u(async()=>{try{let b=await g(a.id,h);if(!b.ok)return o(f("text",b.error));o(null),b.data?.secret?(q(b.data.secret),s(f("text",b.message??"Created."))):(e.c.success(f("text",b.message??"Created.")),c())}catch{o("Something went wrong. Check the provider's dashboard before trying again.")}})},disabled:t||h.trim()!==a.confirmName,children:t?"Checking and creating…":"Approve and create"})]})]})}function x({value:a}){let[f,g]=(0,d.useState)(!1),{shot:h}=(0,i.usePrivacy)(),[j,l]=(0,d.useState)(!1);return(0,b.jsxs)("div",{className:"mb-3 flex items-center gap-2 rounded-md border border-line-strong bg-sunken px-3 py-2",children:[h&&!j?(0,b.jsx)("button",{type:"button",className:"min-w-0 flex-1 text-left text-[13px] text-ink-soft",onClick:()=>l(!0),children:"Hidden in screenshot mode. Click to show it."}):(0,b.jsx)("code",{className:"min-w-0 flex-1 select-all font-mono text-[13px] [overflow-wrap:anywhere]",children:a}),(0,b.jsxs)(k.K,{size:"sm",onClick:()=>{navigator.clipboard.writeText(a).then(()=>g(!0),()=>e.c.error("Copy didn't work; select the text and copy it."))},children:[(0,b.jsx)(c.f,{size:14,"aria-hidden":!0,className:"mr-1 inline"}),f?"Copied":"Copy"]})]})}a.s(["CreateRequestList",0,function({items:a,owner:c,focus:d,title:e="Waiting for approval"}){let{pending:f,finished:g}={pending:a.filter(p),finished:a.filter(a=>!p(a))};if(!f.length&&!g.length)return null;let h=f.filter(a=>"requested"===a.status).length;return(0,b.jsxs)(b.Fragment,{children:[f.length>0&&(0,b.jsx)(k.N,{title:e,meta:h?`${h} waiting`:void 0,flush:!0,children:(0,b.jsx)(t,{items:f,owner:c,focus:d})}),g.length>0&&(0,b.jsx)(k.N,{title:"Recent requests",flush:!0,children:(0,b.jsx)(t,{items:g,owner:!1,focus:d,quiet:!0})})]})}],630718)},486583,a=>{let b={dns_record:"Cloudflare",neon_branch:"Neon",supabase_project:"Supabase",firebase_project:"Firebase"};a.s(["E",0,b,"S",0,{dns_record:"DNS record",neon_branch:"Neon branch",supabase_project:"Supabase project",firebase_project:"Firebase project"},"d",0,a=>`The console can't remove this later; remove it in ${b[a]}'s dashboard.`])}]})();
 
 //# sourceMappingURL=src_0ph020gy78gi9._.js.map