watchbell 1.2.2 → 1.2.4

package/server/.next/server/chunks/src_lib_001zhbfd1zeuk._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[247730,r=>{var e=r.i(530385),t=r.i(93321),n=r.i(351674),i=r.i(548734),l=r.i(837137),o=r.i(556987);async function s(){let[r,s]=await Promise.all([(0,i.f)().select({id:l.resources.id,kind:l.resources.kind,name:l.resources.name,firstSeenAt:l.resources.firstSeenAt,parentId:l.resources.parentId,team:n.B`${l.resources.meta}->>'teamSlug'`}).from(l.resources).where((0,t.y)(l.resources.kind,["app","supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"])).orderBy((0,e.M)(l.resources.firstSeenAt),(0,e.M)(l.resources.id)).limit(2e3),(0,i.f)().select({id:l.accounts.id,label:l.accounts.label,createdAt:l.accounts.createdAt}).from(l.accounts).orderBy((0,e.M)(l.accounts.createdAt),(0,e.M)(l.accounts.id)).limit(200)]);return(0,o.n)(r,s)}r.s(["f",0,s])},751263,r=>{var e=r.i(760417);function t(r,t){return"string"==typeof r&&r!==t&&(0,e.c)(r)?r:null}let n=/^[0-9a-f]{7,40}$/i;function i(r){if(!r||"object"!=typeof r||Array.isArray(r))return null;let t="string"==typeof r.ref&&(0,e.c)(r.ref)?r.ref:null;if("string"==typeof r.ref&&!t)return null;let i="string"==typeof r.sha&&n.test(r.sha)?r.sha:null,l="string"==typeof r.at&&Number.isFinite(Date.parse(r.at))?r.at:null,o="string"==typeof r.id&&/^[A-Za-z0-9_-]{1,80}$/.test(r.id)?r.id:null,s={...i?{sha:i}:{},...l?{at:l}:{},...o?{id:o}:{}};return"git"===r.kind&&t?{kind:"git",ref:t,...s}:"cli"===r.kind?{kind:"cli",...t?{ref:t}:{},...s}:null}function l(r,n){let l=i(r?.productionSource);return l?.kind==="git"?l.ref:t(r?.productionBranch,n)??n??("string"==typeof r?.productionBranch&&(0,e.c)(r.productionBranch)?r.productionBranch:null)}function o(r,e,t){let n=i(r);if(!n)return null;let l=e??"a stale branch";return!n.at||t.getTime()-Date.parse(n.at)>18e5?`Watchbell can't confirm what production is built from (no reading in the last 30 minutes). Merging this PR could deploy ${l} to production and replace what is live.`:"cli"===n.kind?`Production was deployed from the CLI${e?`, not built from ${e}`:""}. Merging this PR would deploy ${l} to production and replace what is live.`:e&&n.ref!==e?`Production was built from ${n.ref}, not ${e}. Merging this PR would deploy ${e} to production and replace what is live.`:null}function s(r){let e=i(r?.productionSource);return e?.kind==="git"?e.ref:r?.productionBranch}r.s(["u",0,6e5,"a",0,function(r,t){let n=i(r?.productionSource),l=[];for(let i of[n?.kind==="git"?n.ref:null,r?.productionBranch,t])if(!("string"!=typeof i||!(0,e.c)(i)||l.includes(i))&&(l.push(i),i===t))break;return l},"q",0,l,"K",0,function(r){let e=i(r?.productionSource);return e?{productionSource:e}:{}},"i",0,t,"B",0,o,"g",0,function(r,e,t){let n=i(r);if(!n)return null;let s=o(r,l({productionSource:r,productionBranch:e},null),t);return{text:"git"===n.kind?`${n.ref} (git)`:n.ref?`CLI deploy (from ${n.ref})`:"CLI deploy",warning:s?`${s} Update PRs open as drafts for your approval and are never merged automatically.`:null}},"s",0,function(r){let t=r.branch&&(0,e.c)(r.branch)?r.branch:null,i=r.sha&&n.test(r.sha)?r.sha:null;return"cli"===r.source||!0===r.gitDirty||"cli"===r.branchFrom&&"git"!==r.source?{kind:"cli",...t?{ref:t}:{},...t&&i?{sha:i}:{}}:t?{kind:"git",ref:t,...i?{sha:i}:{}}:null},"O",0,i,"v",0,(r,e)=>(r?.kind??null)===(e?.kind??null)&&(r?.ref??null)===(e?.ref??null)&&(r?.sha??null)===(e?.sha??null)&&(r?.id??null)===(e?.id??null),"V",0,s,"w",0,function(r){let t=s(r),n=r?.productionBranch;return"string"==typeof n&&n!==t&&(0,e.c)(n)?n:null},"y",0,function(r,t,n=null){if(!r||"br"===n)return null;let i=/^br:([^:]+):/.exec(r);return i?(0,e.c)(i[1])?i[1]:null:t}])},188546,r=>{var e=r.i(26972),t=r.i(427221),n=r.i(83931),i=r.i(689963),l=r.i(811365);let o=e.z.object({notAfter:t.z.string().nullable(),issuer:t.z.string().nullable(),authorized:n.z.boolean().nullable(),error:t.z.string().nullable(),checkedAt:t.z.string()}),s=e.z.object({misconfigured:n.z.boolean(),configuredBy:t.z.string().nullable(),recommendedIps:i.z.array(t.z.string()).default([]),checkedAt:t.z.string()}),u=e.z.object({expiresAt:t.z.string().nullable(),registrar:t.z.string().nullable(),error:t.z.string().nullable(),checkedAt:t.z.string()}),a=e.z.object({id:t.z.string(),type:t.z.string(),name:t.z.string(),content:t.z.string(),proxied:n.z.boolean(),ttl:l.z.number(),comment:t.z.string().nullable()}),c=e.z.object({status:t.z.string().nullable(),paused:n.z.boolean(),nameServers:i.z.array(t.z.string()),accountId:t.z.string().nullable(),checkedAt:t.z.string().nullable()}),d=e.z.object({mode:t.z.string().nullable(),error:t.z.string().nullable()}),f=e.z.object({type:t.z.string(),status:t.z.string(),hosts:i.z.array(t.z.string()),expiresOn:t.z.string().nullable()}),g=(r,e)=>{let t=r.safeParse(e);return t.success?t.data:null},p=(r,e)=>Array.isArray(e)?e.flatMap(e=>{let t=r.safeParse(e);return t.success?[t.data]:[]}):[],z=r=>Array.isArray(r)?r.filter(r=>"string"==typeof r):[];r.s(["q",0,function(r){let e=r??{};return{tls:g(o,e.tls),vercel:g(s,e.vercel),rdap:g(u,e.rdap),records:p(a,e.records),recordsTruncated:!0===e.recordsTruncated,zone:g(c,e.zone),ssl:g(d,e.ssl),certs:p(f,e.certs),cfErrors:z(e.cfErrors),reasons:z(e.reasons)}},"n",0,function(r,e,t){let n=t.toISOString();return r.ok?{expiresAt:r.expiresAt,registrar:r.registrar,error:null,checkedAt:n}:{expiresAt:e?.expiresAt??null,registrar:e?.registrar??null,error:r.error,checkedAt:n}},"o",0,function(r,e,t){let n=t.toISOString();return r.ok?{notAfter:r.notAfter.toISOString(),issuer:r.issuer,authorized:r.authorized,error:null,checkedAt:n}:{notAfter:e?.notAfter??null,issuer:e?.issuer??null,authorized:null,error:r.error,checkedAt:n}}])}]})();
+
+//# sourceMappingURL=src_lib_001zhbfd1zeuk._.js.map

package/server/.next/server/chunks/src_lib_0eqv8l-v8d5ze._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[949663,912283,876808,747556,e=>{var t=e.i(927262),n=e.i(201516),r=e.i(273133),a=e.i(120213),s=e.i(84979),i=e.i(84877),l=e.i(679662);let o=/^v?(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;function d(e,t){let n=o.exec(e.trim()),r=o.exec(t.trim());return!!n&&!!r&&n[1]===r[1]&&("0"!==n[1]||n[2]===r[2])&&(0,i.f)(t,e)>=0}let u=/^Watch(?:bell|post): update (?:\S+ (?:to|ke) \S+|\d+ vulnerable packages) in ((?:[A-Za-z0-9._-]+\/){0,3}[A-Za-z0-9._-]+) \(/,c=e=>u.exec(e)?.[1]??null;e.s(["M",0,e=>`Lockfile tertinggal — jalankan npm install (${e.slice(0,5).join(", ")}${e.length>5?`, +${e.length-5}`:""}).`,"a",0,function(e,t,n){if(!e.length)return{ok:!1,why:"nothing"};let r=e.filter(e=>n.includes(e.severity)&&!("moderate"===e.severity&&e.dev));if(!r.length)return{ok:!1,why:"severity"};for(let e of r){let n=t.get(e.package);if(!n||!d(n,e.to))return{ok:!1,why:"major"}}return{ok:!0,upgrades:r}},"m",0,function(e,t){if(!t)return{deps:e,stale:[]};let n=[...Object.entries(t.dependencies).map(([e,t])=>[e,t,!1]),...Object.entries(t.optionalDependencies).map(([e,t])=>[e,t,!1]),...Object.entries(t.devDependencies).map(([e,t])=>[e,t,!0])],r=[...e],a=[];for(let[e,t,s]of n){let n=(0,l.Y)(t);if(!n||!(0,l.C)(n))continue;let o=r.filter(t=>t.name===e);!o.length||o.some(e=>(0,i.f)(e.version,n)>=0)||((r=r.filter(t=>t.name!==e)).push({name:e,version:n,dev:o.every(e=>e.dev)&&s}),a.push(e))}return{deps:r,stale:a}},"D",0,function(e){let t=new Map;for(let n of e){if(!n.direct)continue;let e=t.get(n.package);(!e||0>(0,i.f)(n.installedVersion,e))&&t.set(n.package,n.installedVersion)}return t},"U",0,function(e,t,n=null){for(let r of t){if(c(r.title)!==n)continue;let t=function(e){if(e.packages?.length)return e.packages;let t=/^Watch(?:bell|post): update (\S+) (?:to|ke) /.exec(e.title);return t?[t[1]]:"all"}(r);if("all"===t||e.some(e=>t.includes(e)))return r}return null},"J",0,d],912283);let p=["next","eslint-config-next"],f={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",LOW:"low",UNKNOWN:"unknown"};function m(e,t){if(!e||!(0,l.C)(e))return null;let n=t.map(e=>e.fixed).filter(t=>!!t&&(0,l.C)(t)&&(0,i.f)(t,e)>0);if(!n.length)return null;let r=n.filter(t=>d(e,t));return(r.length?r:n).reduce((e,t)=>(0,i.f)(t,e)>0?t:e)}function h(e,t){let n=m(e,t),r=n?t.map(e=>e.fixed).filter(e=>!!e&&(0,l.C)(e)&&(0,i.f)(e,n)>0):[],a=r.reduce((e,t)=>null===e||(0,i.f)(t,e)>0?t:e,null),o=a?` (${1===r.length?"one fix needs":"some fixes need"} Next.js ${a.split(".")[0]})`:"";return`Next.js ${e??"(unknown version)"} has ${(0,s.q)(t.length)} (${(0,s.N)(t).toLowerCase()}), ${n?`fixed in ${n}${o}`:"no fix yet"}.`}e.s(["P",0,h,"p",0,function(e){if(!e||"vulnerable"!==e.status||!e.findings.length||!e.version)return null;let t=m(e.version,e.findings);if(!t)return null;let n=f[(0,s.N)(e.findings)],r=[...new Set(e.findings.map(e=>e.id))],a=[...new Set(e.findings.flatMap(e=>e.cve?[e.cve]:[]))];return{from:e.version,to:t,upgrades:[{package:"next",to:t,vulnIds:r,cves:a,severity:n},{package:"eslint-config-next",to:t,vulnIds:[],cves:[],severity:n,companionOf:"next"}],installed:new Map(p.map(t=>[t,e.version]))}},"F",0,function(e){let t=e.find(e=>"next"===e.package&&!e.companionOf);return!t||e.some(e=>"eslint-config-next"===e.package)?e:[...e,{package:"eslint-config-next",to:t.to,vulnIds:[],cves:[],severity:t.severity,companionOf:"next"}]}],876808);let g=e=>Math.round(e).toLocaleString("en-US"),y=(e,t)=>Math.floor((e.getTime()-t.getTime())/864e5),k=(e,t)=>`${e} ${t}${1===e?"":"s"}`,w=e=>{try{let t=new URL(e);return`${t.host}${t.pathname}`}catch{return e}},v=e=>{try{return new URL(e).host}catch{return e}},b=e=>{try{return new URL(e).pathname}catch{return"/"}},I="Down · ",A=(e,t,n)=>({rule:e,subject:t,status:"unknown",resourceId:null,accountId:null,title:t,message:"",provider:null,sampleAt:null,...n}),$=e=>"firestore"===e.provider?"firebase":"d1"===e.provider?"cloudflare":e.provider,S=new Set(["turso","upstash","d1"]),V={MonitorDown:(e,t)=>e.monitors.map(e=>{let r=A("MonitorDown",e.id,{resourceId:e.appId,title:`${e.appName} ${"heartbeat"===e.kind?e.url:b(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt}),a=t??3;if("heartbeat"===e.kind){let t;return{...r,status:"err"===e.state?"firing":"ok"===e.state?"ok":"unknown",message:`${e.appName} \xb7 ${e.url}: ${t=e.lastError,t?.startsWith(I)?t.slice(I.length):"no ping in time"}.`}}return e.movedTo?{...r,status:"ok",message:`${v(e.url)} moved to ${e.movedTo}; MonitorDomainMoved takes over.`}:e.failStreak>=a?{...r,status:"firing",message:(0,n.H)(e)?`${w(e.url)} failed its check (${(0,n.H)(e)}) on ${a} consecutive checks.`:`${w(e.url)} returned ${e.lastStatus?`HTTP ${e.lastStatus}`:"no answer"} on ${a} consecutive checks.`}:{...r,status:0===e.failStreak&&e.lastCheckedAt?"ok":"unknown",message:`${w(e.url)} answers again.`}}),MonitorDomainMoved:e=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let t=A("MonitorDomainMoved",e.id,{resourceId:e.appId,title:`${e.appName} ${b(e.url)}`,provider:"vercel"});return e.movedTo?{...t,status:"firing",message:`${v(e.url)} is no longer a domain of ${e.appName}; production is on ${e.movedTo}.`}:{...t,status:"ok",message:`The monitor checks ${v(e.url)}, a domain of ${e.appName}.`}}),CollectorStale:(e,t)=>{let n=e.lastMinuteRunAt;return[A("CollectorStale","collector",{status:!n||e.now.getTime()-n.getTime()>(t??5)*6e4?"firing":"ok",title:"collector",message:n?`The last minute run finished ${g((e.now.getTime()-n.getTime())/6e4)} min ago.`:"The collector hasn't finished a run yet."})]},HighLatency:(e,t)=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let n=A("HighLatency",e.id,{resourceId:e.appId,title:`${e.appName} ${b(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt});if(e.checksLast10<5||null===e.p95Last10)return n;let r=t??1500;return{...n,status:e.p95Last10>r?"firing":"ok",message:`p95 ${g(e.p95Last10)} ms over the last 10 minutes (limit ${g(r)} ms).`}}),DeploymentFailed:e=>e.apps.map(e=>{let t=A("DeploymentFailed",e.id,{resourceId:e.id,title:e.name,provider:"vercel"}),n=e.latestProduction;return n?"error"===n.state?{...t,status:"firing",message:`Production deployment ${n.sha?n.sha.slice(0,7):"(no commit)"} failed.`}:{...t,status:"building"===n.state?"unknown":"ok"}:{...t,status:"ok"}}),DatabasePaused:e=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(e=>A("DatabasePaused",e.id,{resourceId:e.id,title:e.name,provider:"supabase",status:"unknown"===e.state?"unknown":"paused"===e.state?"firing":"ok",message:`Supabase project ${e.name} is paused.`})),CertExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=A("CertExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.tlsNotAfter)return r;let a=y(n.tlsNotAfter,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:`The TLS certificate of ${n.name} expires in ${k(a,"day")}.`}}),DomainExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=A("DomainExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.expiresAt)return r;let a=y(n.expiresAt,e.now);return{...r,status:a<(t??30)?"firing":"ok",message:`${n.name} expires in ${k(a,"day")}.`}}),StorageAlmostFull:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"!==e.provider).map(e=>{let n=A("StorageAlmostFull",e.id,{resourceId:e.id,title:e.name,provider:$(e)});if(null===e.sizeBytes||!e.sizeLimitBytes)return n;let r=e.sizeBytes/e.sizeLimitBytes*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} uses ${g(e.sizeBytes/1e6)} MB of ${g(e.sizeLimitBytes/1e6)} MB (${g(r)}%).`}}),NeonComputeHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"neon"===e.provider).map(e=>{let n=A("NeonComputeHigh",e.id,{resourceId:e.id,title:e.name,provider:"neon"});return null===e.cuHours?n:{...n,status:e.cuHours>(t??80)?"firing":"ok",message:`${e.name} used ${g(e.cuHours)} of ${g(e.cuLimit??100)} CU-hours this month.`}}),FirestoreQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"===e.provider).map(e=>{let n=A("FirestoreQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:"firebase"});if(e.quotaExhausted)return{...n,status:"firing",message:`${e.name} hit a Firestore quota (RESOURCE_EXHAUSTED).`};if(null===e.readsToday||!e.readsLimit)return!1===e.quotaExhausted?{...n,status:"ok"}:n;let r=e.readsToday/e.readsLimit*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} read ${g(e.readsToday)} of ${g(e.readsLimit)} documents today (${g(r)}%).`}}),AutoPauseRisk:(e,t)=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(n=>{let r=A("AutoPauseRisk",n.id,{resourceId:n.id,title:n.name,provider:"supabase"});if("paused"===n.state)return{...r,status:"ok"};if(!n.lastApiAt)return r;let a=Math.floor((e.now.getTime()-n.lastApiAt.getTime())/864e5);return{...r,status:a>=(t??4)?"firing":"ok",message:`No API traffic for ${k(a,"day")}. Supabase pauses free projects after about 7 days.`}}),DnsProxiedToVercel:e=>e.dns&&e.dns.map(e=>A("DnsProxiedToVercel",e.id,{resourceId:e.resourceId,title:e.name,provider:"cloudflare",status:e.proxied&&e.pointsToVercel?"firing":"ok",message:`${e.name} points to Vercel through the Cloudflare proxy. Vercel recommends DNS only.`})),DbQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>S.has(e.provider)).map(e=>{let n=A("DbQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:$(e)});return null==e.quotaPct?n:{...n,status:e.quotaPct>(t??80)?"firing":"ok",message:`${e.name}: ${e.quotaLabel??"usage"} at ${g(e.quotaPct)}% of the free plan.`}}),ComputeHigh:(e,t)=>e.compute?e.compute.map(n=>{let a=A("ComputeHigh",n.id,{resourceId:n.id,title:n.name,provider:"supabase",sampleAt:n.latest?new Date(n.latest.at):null}),s=(0,r.B)(n.latest,(0,r.V)(t),e.now);return null===s?a:{...a,status:s.length?"firing":"ok",message:s.length?`${n.name}: ${s.join(", ")}.`:`${n.name} compute is back under the limits.`}}):null,CredentialExpiring:(e,t)=>e.accounts.map(n=>{let r=A("CredentialExpiring",n.id,{accountId:n.id,title:`${n.provider} \xb7 ${n.label}`,provider:n.provider});if("drive"===n.provider&&"error"===n.status&&n.lastError?.includes("invalid_grant"))return{...r,status:"firing",message:"Google Drive access was removed (invalid_grant). Reconnect it."};if(!n.expiresAt)return{...r,status:"ok"};let a=y(n.expiresAt,e.now);return{...r,status:a<(t??14)?"firing":"ok",message:a<0?`The ${n.provider} credential ${n.label} has expired.`:`The ${n.provider} credential ${n.label} expires in ${k(a,"day")}.`}}),VulnerableDependency:e=>e.deps?e.deps.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=A("VulnerableDependency",t.appId,{resourceId:t.appId,title:n.name,provider:"github"});if(t.error)return[r];let s=(0,a.g)(t.vulns);return s?[{...r,status:"firing",message:(0,a.L)(t.vulns),..."critical"===s?{severity:"critical"}:{}}]:[{...r,status:"ok",message:`${n.name} has no moderate, high or critical dependency advisories.`}]}):null,FrameworkVulnerable:e=>e.frameworks?e.frameworks.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=A("FrameworkVulnerable",t.appId,{resourceId:t.appId,title:n.name});return"ok"===t.status?[{...r,status:"ok",message:`${n.name} runs Next.js ${t.version??"(unknown version)"} with no known advisories.`}]:"vulnerable"===t.status&&t.findings.length?[{...r,status:"firing",message:h(t.version,t.findings),..."CRITICAL"===(0,s.N)(t.findings)?{severity:"critical"}:{}}]:[r]}):null};e.s(["f",0,function(e,n,r){let a=[],s=new Set;for(let i of n){if(!i.enabled||r&&!r.includes(i.key)||!t._[i.key])continue;let n=V[i.key](e,i.threshold);n&&(s.add(i.key),a.push(...n))}return{observations:a,evaluated:s}}],949663);let x=["MonitorDown","HighLatency"],R=["telegram","discord","webhook","smtp"],D=e=>e.channels.some(e=>R.includes(e));function M(e,t){return t.collectorStale&&"CollectorStale"!==e.rule?"CollectorStale":e.resourceId&&x.includes(e.rule)?t.mutedApps.get(e.resourceId)??null:null}let T=(e,t)=>"critical"===t&&"warning"===e?"critical":e,B=(e,t)=>e.silencedUntilResolved||null!==e.silencedUntil&&e.silencedUntil.getTime()>t.getTime(),N=(e,t)=>`${e}|${t}`;e.s(["f",0,function(e,n,r,a,s){let i={open:[],touch:[],resolve:[]},l=new Map(a.map(e=>[e.key,e])),o=new Map(n.map(e=>[N(e.rule,e.subject),e])),d=new Set(e.map(e=>N(e.ruleKey,e.subject))),u=e=>i.resolve.push({id:e.id,pending:e.notifiedOpen?"resolve":null});for(let n of e){let e=l.get(n.ruleKey),a=o.get(N(n.ruleKey,n.subject));if(!e||!e.enabled){i.resolve.push({id:n.id,pending:null});continue}if(!r.has(n.ruleKey))continue;if(!a){i.resolve.push({id:n.id,pending:null});continue}if("unknown"===a.status)continue;let d=a.provider?s.incidents.get(a.provider)??null:null;if("firing"===a.status){let t=M(a,s),r=n.notifiedOpen&&null!==n.lastNotifiedAt&&s.now.getTime()-n.lastNotifiedAt.getTime()>=216e5,l={id:n.id,okStreak:0,lastSampleAt:a.sampleAt??n.lastSampleAt,lastSeenAt:s.now,message:a.message,causedBy:t,providerIncident:d},o=!n.notifiedOpen&&(!n.pendingSince||s.now.getTime()-n.pendingSince.getTime()>=216e5);(r||o)&&!B(n,s.now)&&!t&&null===n.pending&&D(e)&&(l.pending=r?"repeat":"open"),i.touch.push(l);continue}if(!t._[n.ruleKey].sampled||null===a.sampleAt){u(n);continue}if(!(null===n.lastSampleAt||a.sampleAt.getTime()>n.lastSampleAt.getTime()))continue;let c=n.okStreak+1;c>=2?u(n):i.touch.push({id:n.id,okStreak:c,lastSampleAt:a.sampleAt})}for(let e of n){if("firing"!==e.status||d.has(N(e.rule,e.subject))||s.maintenance.has(e.subject)||e.resourceId&&s.maintenance.has(e.resourceId))continue;let t=l.get(e.rule);if(!t)continue;let n=M(e,s);i.open.push({ruleKey:e.rule,subject:e.subject,resourceId:e.resourceId,accountId:e.accountId,severity:T(t.severity,e.severity),title:e.title,message:e.message,startedAt:s.now,lastSeenAt:s.now,lastSampleAt:e.sampleAt,causedBy:n,providerIncident:e.provider?s.incidents.get(e.provider)??null:null,pending:n||!D(t)?null:"open"})}return i}],747556)},708621,e=>{let t=["status","severity","rule","target","detail","cause","step","since","threshold"],n=["id","en"],r={en:"{status} · {severity} · {rule} · {target}\n{detail}\n{cause}\nNext step: {step}\nsince {since}",id:"{status} · {severity} · {rule} · {target}\n{detail}\n{cause}\nYang perlu kamu lakukan: {step}\nsejak {since}"},a=/\{([a-zA-Z_]+)\}/g,s=e=>e.replace(/\r\n?/g,"\n").replace(/[ \t]+$/gm,"").trim();function i(e){if(e.length>1e3)return`Keep it under ${1e3.toLocaleString("en-US")} characters.`;for(let[,n]of e.matchAll(a))if(!t.includes(n))return`{${n}} isn't a field. Use ${t.map(e=>`{${e}}`).join(", ")}.`;return null}e.s(["I",0,{en:"Test message: Watchbell's sentence about what it saw goes here.",id:"Pesan tes: di sini nanti kalimat Watchbell soal apa yang dilihatnya."},"z",0,"alerts.messageTemplates","i",0,n,"_",0,function(e){if(!e||"object"!=typeof e||Array.isArray(e))return{};let t={};for(let[r,a]of Object.entries(e)){if(!a||"object"!=typeof a)continue;let e={};for(let t of n){let n=a[t];"string"==typeof n&&n.trim()&&null===i(n)&&(e[t]=n)}Object.keys(e).length&&(t[r]=e)}return t},"l",0,function(e,t){return s(e).split("\n").flatMap(e=>{let n=[...e.matchAll(a)].map(e=>e[1]).filter(e=>Object.hasOwn(t,e));return n.length&&n.every(e=>!t[e].trim())?[]:[e.replace(a,(e,n)=>Object.hasOwn(t,n)?t[n]:e)]}).join("\n").replace(/\n{3,}/g,"\n\n").trim()},"F",0,function(e,t){let n="string"==typeof e?s(e):"";return n&&n!==r[t]?n:null},"m",0,i])},455317,71575,569057,930270,e=>{var t=e.i(93321),n=e.i(530385),r=e.i(351674),a=e.i(548734),s=e.i(837137),i=e.i(927262),l=e.i(949663),o=e.i(747556),d=e.i(708621),u=e.i(519051),c=e.i(160147),p=e.i(245710);function f(e,t){return"1h"===e?{silencedUntil:new Date(t.getTime()+36e5),silencedUntilResolved:!1}:{silencedUntil:null,silencedUntilResolved:!0}}e.s(["_",0,[["critical","Critical"],["warning","Warning"],["info","Info"]],"O",0,function(e,t){return e.silencedUntilResolved?{state:"off",text:"Silenced until resolved"}:e.silencedUntil&&e.silencedUntil.getTime()>t.getTime()?{state:"off",text:`Silenced until ${(0,p.U)(e.silencedUntil)}`}:"open"===e.pending||"repeat"===e.pending?{state:"build",text:"Sending…"}:e.causedBy&&!e.notifiedOpen?{state:"off",text:"Muted"}:e.lastNotifiedAt?{state:"ok",text:`Sent ${(0,p.U)(e.lastNotifiedAt)}`}:{state:"off",text:"Digest only"}},"G",0,function(e){return e.enabled?e.firing?{state:"err",text:`Firing \xb7 ${e.firing}`}:e.hasData?{state:"off",text:"Inactive"}:{state:"unknown",text:"No data yet"}:{state:"off",text:"Disabled"}},"A",0,f,"M",0,function(e,t){let n=Math.max(1,Math.round((t.getTime()-e.getTime())/6e4));if(n<60)return`${n} min`;let r=Math.floor(n/60);return r<24?`${r} h ${n%60} min`:`${Math.floor(r/24)} d ${r%24} h`}],71575);var m=e.i(639271),h=e.i(656298),g=e.i(688275),y=e.i(893893),k=e.i(672319),w=e.i(188546),v=e.i(233711);async function b(){let[e]=await (0,a.f)().select({at:s.collectorRuns.finishedAt}).from(s.collectorRuns).where((0,t.b)((0,t.E)(s.collectorRuns.finishedAt),(0,t.y)(s.collectorRuns.trigger,["cron_job_org","qstash","manual"]))).orderBy((0,n.A)(s.collectorRuns.finishedAt)).limit(1);return e?.at??null}async function I(){let[e]=await (0,a.f)().select({at:s.collectorRuns.finishedAt}).from(s.collectorRuns).where((0,t.b)((0,t.E)(s.collectorRuns.finishedAt),(0,t.y)(s.collectorRuns.trigger,["cron_job_org","manual"]))).orderBy((0,n.A)(s.collectorRuns.finishedAt)).limit(1);return e?.at??null}e.s(["D",0,b,"d",0,I],569057);var A=e.i(367247),$=e.i(436357),S=e.i(912283),V=e.i(358179),x=e.i(492665),R=e.i(683439),D=e.i(679662),M=e.i(852539),T=e.i(33135),B=e.i(533957);let N="OpsConsole-Deps/1.0 (+https://watchbell.west-solutions.web.id)";async function j(e,t,n,r){let a=r.deadline-Date.now();if(a<500)return{ok:!1,error:"No time left for OSV.dev"};let s=AbortSignal.timeout(a);return P(e,{method:"POST",headers:{"content-type":"application/json","user-agent":N},body:JSON.stringify(t),signal:s},n,s,r)}async function C(e,t,n){let r=n.deadline-Date.now();if(r<500)return{ok:!1,error:"No time left for OSV.dev"};let a=AbortSignal.timeout(Math.min(r,8e3));return P(e,{method:"GET",headers:{"user-agent":N},signal:a},t,a,n)}async function P(e,t,n,r,a){let s;try{s=await (a.fetch??fetch)(e,{...t,redirect:"error",cache:"no-store"})}catch(e){return{ok:!1,error:(0,B.t)(e)?"OSV.dev didn't answer in time":"Couldn't reach OSV.dev"}}if(!s.ok)return await s.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${s.status}`};try{let{bytes:e,truncated:t}=await (0,T.z)(s,n,(0,T.X)(r));if(t)return{ok:!1,error:"OSV.dev sent too large an answer"};return{ok:!0,body:JSON.parse(new TextDecoder().decode(e))}}catch(e){return{ok:!1,error:(0,B.t)(e)?"OSV.dev didn't answer in time":"OSV.dev sent an answer we couldn't read"}}}async function O(e,t){let n=[];for(let r of(0,M.f)(e)){let e=await j(M.n,r,4194304,t);if(!e.ok)return e;let a=(0,M.j)(e.body,r.queries.length);if(!a)return{ok:!1,error:"OSV.dev sent an answer we couldn't read"};n.push(...a)}return{ok:!0,ids:n}}async function L(e,t){let n=[...new Set(e)].filter(M.G);if(n.length>300)return{ok:!1,error:`Too many advisories to read in one scan (${n.length})`};let r=new Map,a=null;for(let e=0;e<n.length&&!a;e+=8)await Promise.all(n.slice(e,e+8).map(async e=>{let n=await C(`${M.W}${encodeURIComponent(e)}`,1048576,t),s=n.ok?(0,M.O)(n.body):null;s?r.set(e,s):a??=n.ok?"OSV.dev sent an advisory we couldn't read":n.error}));return a?{ok:!1,error:a}:{ok:!0,map:r}}var z=e.i(521050),U=e.i(120213),E=e.i(689963),_=e.i(26972),H=e.i(427221),q=e.i(811365),K=e.i(760417);let F=E.z.array(_.z.object({name:H.z.string(),type:H.z.string(),sha:H.z.string(),size:q.z.number().optional()}));async function J(e,t,n,r={},a=null){if(!(0,K.M)(t)||!(0,K.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or ref."};if(null!==a&&(0,z.Q)(a)!==a)return{ok:!1,kind:"format",error:"That isn't a folder in a repository."};let s=a?a.split("/").map(encodeURIComponent).join("/"):"",i=await (0,K.j)(`/repos/${(0,K.f)(t)}/contents/${s}?ref=${encodeURIComponent(n)}`,e,r);if(!i.ok)return i;let l=F.safeParse(i.data);return l.success?{ok:!0,data:l.data.filter(e=>"file"===e.type&&/^[0-9a-f]{40}$/.test(e.sha)).map(e=>({name:e.name,sha:e.sha,size:e.size??0}))}:{ok:!1,kind:"format",error:"GitHub answered the file list in a format the console doesn't recognise."}}async function G(e,t,n,r={}){if(!(0,K.M)(t)||!(0,K.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or branch."};let a=await (0,K.j)(`/repos/${(0,K.f)(t)}/git/ref/heads/${n.split("/").map(encodeURIComponent).join("/")}`,e,r);return a.ok?{ok:!0,data:!0}:"missing"===a.kind?{ok:!0,data:!1}:a}function W(e,t,n,r,a,s={}){return(0,K.V)(e,t,n,r,a,s)}async function Z(e,t,n={}){if(!(0,K.M)(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let r=await (0,K.j)(`/repos/${(0,K.f)(t)}/dependabot/alerts?state=open&ecosystem=npm&per_page=100`,e,n);if(!r.ok)return"scope"===r.kind||"missing"===r.kind?{ok:!0,data:{denied:!0}}:r;let a=(0,U.E)(r.data);return a?{ok:!0,data:{alerts:a}}:{ok:!1,kind:"format",error:"GitHub answered the Dependabot alerts in a format the console doesn't recognise."}}var Q=e.i(751263);async function Y(){let[e]=await (0,a.f)().select().from(s.accounts).where((0,t.u)(s.accounts.provider,"github")).orderBy((0,n.M)(s.accounts.createdAt)).limit(1);if(!e)return{error:"GitHub isn't connected."};let r=(0,V.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,x.f)().OPS_ENCRYPTION_KEY);return r?{token:r,accountId:e.id}:{error:"Can't read the stored GitHub credential. Replace it on Connections."}}async function X(){let[e]=await (0,a.f)().select({value:s.settings.value}).from(s.settings).where((0,t.u)(s.settings.key,"deps.scanAll")).limit(1);return e?.value===!0}let ee=e=>{let t=(0,Q.w)(e);return{dir:(0,z.Q)((e??{}).rootDirectory),unsupported:(0,z.l)((e??{}).rootDirectoryUnsupported),branch:(0,Q.i)((0,Q.V)(e),null),...t?{fallback:t}:{}}};async function et(e){let n=[...new Set(e.filter(R.f))],r=new Map;if(!n.length)return r;let i=await (0,a.f)().select({repoId:s.appRepos.repoId,name:s.resources.name,monitored:s.resources.monitored,meta:s.resources.meta}).from(s.appRepos).innerJoin(s.resources,(0,t.u)(s.resources.id,s.appRepos.appId)).where((0,t.b)((0,t.y)(s.appRepos.repoId,n),(0,t.M)(s.resources.goneAt))).limit(1e3);for(let e of(i.sort((e,t)=>Number(!!t.monitored)-Number(!!e.monitored)||(e.name<t.name?-1:+(e.name>t.name))),i))r.has(e.repoId)||r.set(e.repoId,ee(e.meta));return r}async function en(){let e={id:s.githubRepos.id,fullName:s.githubRepos.fullName,defaultBranch:s.githubRepos.defaultBranch,scannedAt:s.dependencyScans.scannedAt},n=(0,t.b)((0,t.M)(s.githubRepos.goneAt),(0,t.u)(s.githubRepos.archived,!1)),r=await X()?await (0,a.f)().select(e).from(s.githubRepos).leftJoin(s.dependencyScans,(0,t.u)(s.dependencyScans.repoId,s.githubRepos.id)).where(n).limit(500):await (0,a.f)().selectDistinct(e).from(s.appRepos).innerJoin(s.githubRepos,(0,t.u)(s.githubRepos.id,s.appRepos.repoId)).leftJoin(s.dependencyScans,(0,t.u)(s.dependencyScans.repoId,s.githubRepos.id)).where(n).limit(500),i=r.length?await et(r.map(e=>e.id)):new Map;return(0,U.M)(r.map(e=>{let t=i.get(e.id);return{...e,rootDir:t?.dir??null,rootDirUnsupported:t?.unsupported??null,prodBranch:t?.branch??null,...t?.fallback?{prodFallback:t.fallback}:{}}}))}let er=(e,t)=>e.length>t?`${e.slice(0,t-1)}…`:e;async function ea(e,t){let n=new Date;await (0,a.f)().insert(s.dependencyScans).values({repoId:e,...t,updatedAt:n}).onConflictDoUpdate({target:s.dependencyScans.repoId,set:{...t,updatedAt:n}})}async function es(e){return(0,a.f)().select({id:s.dependencyVulns.id,package:s.dependencyVulns.package,installedVersion:s.dependencyVulns.installedVersion,vulnId:s.dependencyVulns.vulnId,severity:s.dependencyVulns.severity,fixedVersion:s.dependencyVulns.fixedVersion,summary:s.dependencyVulns.summary,aliases:s.dependencyVulns.aliases,dev:s.dependencyVulns.dev,direct:s.dependencyVulns.direct,source:s.dependencyVulns.source}).from(s.dependencyVulns).where((0,t.b)((0,t.u)(s.dependencyVulns.repoId,e),(0,t.M)(s.dependencyVulns.resolvedAt))).limit(2e3)}function ei(e,t){for(let n of D.a){let r=e.find(e=>e.name===n.path);if(r)return{path:(0,z.H)(t,n.path),kind:n.kind,sha:r.sha}}return null}async function el(e,n,r,i={}){let l=()=>({...i,timeoutMs:Math.max(1e3,Math.min(r-Date.now(),1e4))}),o=async e=>(await ea(n.id,{error:er(e,300),scannedAt:new Date}).catch(()=>void 0),{status:"failed",error:e}),d=n.defaultBranch??"HEAD",u=null;for(let t of[n.prodBranch,n.prodFallback]){if(t&&t===n.defaultBranch)break;let r=(0,Q.i)(t,n.defaultBranch);if(!r)continue;let a=await G(e,n.fullName,r,l());if(!a.ok)return o(a.error);if(a.data){u=r;break}}let c=null!==u;u&&(d=u);let p=c?`Scanned ${u}, the branch production is built from.`:null,f=(0,z.Q)(n.rootDir),m=f?null:(0,z.l)(n.rootDirUnsupported),h=m?`The Vercel Root Directory "${m}" couldn't be used (Watchbell reads plain folder names, at most 4 deep); scanned the repository root.`:null,g=await J(e,n.fullName,d,l(),f);if(!g.ok)return o(f&&"missing"===g.kind?`The folder ${(0,z.x)(f)} isn't in ${n.fullName} on ${d}.`:g.error);let y=ei(g.data,f),k=g.data.find(e=>"package.json"===e.name)??null,w=!1,v=null;if(f&&k&&!y){let t=await J(e,n.fullName,d,l());if(!t.ok)return o(t.error);w=null!==(y=ei(v=t.data,null))}let b=y?y.sha:k?`pkg:${k.sha}`:null,I=b&&f?`${f}:${b}${w&&k?`+${k.sha}`:""}`:b&&m?`odd:${b}`:b,A=I&&c?`br:${u}:${I}`:I,[$]=await (0,a.f)().select().from(s.dependencyScans).where((0,t.u)(s.dependencyScans.repoId,n.id)).limit(1),V=new Date;if(!(0,U.U)($??null,A,V,i.force))return{status:"unchanged"};if(!A){let e=await es(n.id);return e.length&&await (0,a.f)().update(s.dependencyVulns).set({resolvedAt:V}).where((0,t.y)(s.dependencyVulns.id,e.map(e=>e.id))),await ea(n.id,{lockfilePath:null,lockfileSha:null,packageCount:0,scannedAt:V,queriedAt:V,error:null,note:er([p,h,`No package.json or lockfile ${f?"in":"at"} ${(0,z.x)(f)}.`].filter(Boolean).join(" "),300)}),{status:"scanned",vulns:0,packages:0,note:"no package.json"}}let x=(0,z.H)(f,"package.json"),R=k?await W(e,n.fullName,x,d,K.$,l()):null;if(R&&!R.ok)return o(R.error);let T=R?.ok&&R.data?(0,D.b)(R.data):null,B=null,N="package-json",j=w&&y?`Scanned ${(0,z.x)(f)} with the repository root's ${y.path} (workspaces).`:null;if(y){if(2e3>r-Date.now())return o("Time budget used before the lockfile was read; the next run tries again.");let t=await W(e,n.fullName,y.path,d,0xf00000,{...i,timeoutMs:Math.max(1e3,Math.min(r-Date.now(),2e4))});if(!t.ok)return o(t.error);let a=!0;if(w&&f&&t.data&&!(0,z.p)(y.kind,t.data,f)){let t=v?.some(e=>"package.json"===e.name)?await W(e,n.fullName,"package.json",d,K.$,l()):null;if(t&&!t.ok)return o(t.error);a=(0,z.F)(t?.data??null,f)}a?(B=t.data?(0,D.D)(y.kind,t.data):null,N=y.kind,B||(j=[j,`${y.path} couldn't be read; the versions come from package.json ranges (approximate).`].filter(Boolean).join(" "))):(j=`The repository root's ${y.path} isn't a workspace that includes ${f}, so the versions come from ${x} ranges (approximate).`,y=null)}if(B){let e=(0,S.m)(B,T);B=e.deps,e.stale.length&&(j=[j,(0,S.M)(e.stale)].filter(Boolean).join(" "))}else B=T?(0,D.e)(T):[],N="package-json",j??=y?null:"No lockfile: the versions come from package.json ranges (approximate).";let C=await es(n.id),P=[];if(B.length){let e=await O(B,{fetch:i.fetch,deadline:r});if(!e.ok)return o(e.error);let t=(0,U.A)(C,!0===i.force),n=await L((0,U.z)(B,e.ids,t),{fetch:i.fetch,deadline:r});if(!n.ok)return o(n.error);P=(0,M.i)(B,e.ids,n.map,t)}if(r-Date.now()>1500){let t=await Z(e,n.fullName,l());t.ok&&"alerts"in t.data?P=(0,U.R)(P,t.data.alerts,B):t.ok&&(j=[j,"Dependabot alerts aren't readable with this token (optional: Dependabot alerts: Read)."].filter(Boolean).join(" "))}let E=(0,U.h)(C,P,(0,D.K)(T));j=[p,h,j].filter(Boolean).join(" ")||null;let _=new Date;return await (0,a.f)().transaction(async e=>{for(let r of(E.insert.length&&await e.insert(s.dependencyVulns).values(E.insert.map(e=>({repoId:n.id,package:e.package,installedVersion:e.installedVersion,vulnId:e.vulnId,aliases:e.aliases,severity:e.severity,fixedVersion:e.fixedVersion,summary:e.summary,direct:e.direct,dev:e.dev,source:e.source,firstSeenAt:_,lastSeenAt:_}))).onConflictDoNothing(),E.update))await e.update(s.dependencyVulns).set({severity:r.severity,fixedVersion:r.fixedVersion,summary:r.summary,aliases:r.aliases,dev:r.dev,direct:r.direct,lastSeenAt:_}).where((0,t.u)(s.dependencyVulns.id,r.id));E.resolve.length&&await e.update(s.dependencyVulns).set({resolvedAt:_}).where((0,t.b)((0,t.y)(s.dependencyVulns.id,E.resolve),(0,t.M)(s.dependencyVulns.resolvedAt))),await e.insert(s.dependencyScans).values({repoId:n.id,lockfilePath:y?.path??(k?x:null),lockfileSha:A,packageCount:B.length,scannedAt:_,queriedAt:_,error:null,note:j?er(j,300):null,updatedAt:_}).onConflictDoUpdate({target:s.dependencyScans.repoId,set:{lockfilePath:y?.path??(k?x:null),lockfileSha:A,packageCount:B.length,scannedAt:_,queriedAt:_,error:null,note:j?er(j,300):null,updatedAt:_}})}),{status:"scanned",vulns:E.insert.length+E.update.length,packages:B.length,note:"package-json"===N?j:null}}async function eo(e,n={}){var r,i;let l,o,d,u,c=await Y();if("error"in c)return{error:c.error};let{first:p,only:f,skip:m,...h}=n,g=(r=await en(),l=(i={first:p,only:f,skip:m}).only?new Set(i.only):null,o=new Set(i.skip??[]),d=(l?r.filter(e=>l.has(e.id)):r).filter(e=>!o.has(e.id)),u=new Set(i.first??[]),[...d.filter(e=>u.has(e.id)),...d.filter(e=>!u.has(e.id))]),y={scanned:0,unchanged:0,failed:[],left:0,done:[],listed:g.map(e=>e.id)};for(let[t,n]of g.entries()){if(e-Date.now()<4e3){y.left=g.length-t;break}y.done.push(n.id);try{let t=await el(c.token,n,e,h);"scanned"===t.status?y.scanned++:"unchanged"===t.status?y.unchanged++:y.failed.push(`${n.fullName}: ${t.error}`)}catch(e){y.failed.push(`${n.fullName}: ${e instanceof Error?e.name:"error"}`)}}return await (0,a.f)().delete(s.dependencyVulns).where((0,t.b)((0,t.E)(s.dependencyVulns.resolvedAt),(0,t.S)(s.dependencyVulns.resolvedAt,new Date(Date.now()-7776e6)))).catch(()=>void 0),y}let ed=async()=>(await (0,a.f)().select({id:s.accounts.id}).from(s.accounts).where((0,t.u)(s.accounts.provider,"github")).limit(1)).length>0;async function eu(e,n,r={}){let i,l,o,{marked:d,onlyMarked:u}=n;if(!await ed())return{problem:null,settled:[...d],done:[],complete:!0};let c=d.filter(R.f),p=c.length?await (0,a.f)().select({appId:s.appRepos.appId,repoId:s.appRepos.repoId}).from(s.appRepos).where((0,t.y)(s.appRepos.appId,c)).limit(5*c.length):[],f=[...new Set(p.map(e=>e.repoId))],m=e=>p.filter(t=>t.appId===e).map(e=>e.repoId),h=d.filter(e=>!m(e).length);if(u&&!f.length)return{problem:null,settled:[...d],done:[],complete:!0};if(e-Date.now()<4e3)return{problem:null,settled:h,done:[],complete:!1};let g=(n.skip??[]).filter(e=>!f.includes(e)),y=await eo(e,{...r,first:f,...u?{only:f}:{skip:g}});if("error"in y){let e;return{problem:(e=y.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:y.error,settled:[...d],done:[],complete:!0}}let k=new Set([...y.done,...f.filter(e=>!y.listed.includes(e))]);return{problem:(i=y.failed.filter(e=>!/didn't answer in time|no time left|time budget|rate limit/i.test(e)),(l=y.failed.length-i.length+(y.left??0))&&console.info(`deps: ${l} repositor${1===l?"y":"ies"} wait for the next run`),o=i.slice(0,3),i.length>3&&o.push(`+${i.length-3} more`),o.length?o.join("; "):null),settled:d.filter(e=>m(e).every(e=>k.has(e))),done:y.done,complete:0===y.left}}async function ec(e){let r={repo:null,scan:null,vulns:[],writeConnected:!1};if(!(0,R.f)(e))return r;let[i]=await (0,a.f)().select({id:s.githubRepos.id,fullName:s.githubRepos.fullName}).from(s.appRepos).innerJoin(s.githubRepos,(0,t.u)(s.githubRepos.id,s.appRepos.repoId)).where((0,t.u)(s.appRepos.appId,e)).limit(1);if(!i)return r;let[[l],o,[d]]=await Promise.all([(0,a.f)().select({scannedAt:s.dependencyScans.scannedAt,lockfilePath:s.dependencyScans.lockfilePath,packageCount:s.dependencyScans.packageCount,error:s.dependencyScans.error,note:s.dependencyScans.note}).from(s.dependencyScans).where((0,t.u)(s.dependencyScans.repoId,i.id)).limit(1),(0,a.f)().select({package:s.dependencyVulns.package,installedVersion:s.dependencyVulns.installedVersion,vulnId:s.dependencyVulns.vulnId,severity:s.dependencyVulns.severity,fixedVersion:s.dependencyVulns.fixedVersion,summary:s.dependencyVulns.summary,aliases:s.dependencyVulns.aliases,dev:s.dependencyVulns.dev,direct:s.dependencyVulns.direct,firstSeenAt:s.dependencyVulns.firstSeenAt}).from(s.dependencyVulns).where((0,t.b)((0,t.u)(s.dependencyVulns.repoId,i.id),(0,t.M)(s.dependencyVulns.resolvedAt))).limit(2e3),(0,a.f)().select({id:s.accounts.id}).from(s.accounts).where((0,t.u)(s.accounts.provider,"github_write")).limit(1)]);o.sort((e,t)=>(0,U.t)(e.severity)-(0,U.t)(t.severity)||(e.package<t.package?-1:+(e.package>t.package))||(e.vulnId<t.vulnId?-1:1));let u=await (0,a.f)().select({number:s.dependencyPrs.number,stage:s.dependencyPrs.stage,stageText:s.dependencyPrs.stageText,openedAt:s.dependencyPrs.openedAt}).from(s.dependencyPrs).where((0,t.b)((0,t.u)(s.dependencyPrs.repoId,i.id),(0,t.B)(s.dependencyPrs.openedAt,new Date(Date.now()-12096e5)))).orderBy((0,n.A)(s.dependencyPrs.openedAt)).limit(5).catch(()=>[]);return{repo:i,scan:l??null,vulns:o,writeConnected:!!d,prs:(u??[]).map(e=>({...e,fullName:i.fullName}))}}async function ep(e,n={}){if(!(0,R.f)(e))return{ok:!1,error:"That app no longer exists."};let[i]=await (0,a.f)().select({app:s.resources.name,id:s.githubRepos.id,fullName:s.githubRepos.fullName,defaultBranch:s.githubRepos.defaultBranch,goneAt:s.githubRepos.goneAt,meta:s.resources.meta}).from(s.appRepos).innerJoin(s.githubRepos,(0,t.u)(s.githubRepos.id,s.appRepos.repoId)).innerJoin(s.resources,(0,t.u)(s.resources.id,s.appRepos.appId)).where((0,t.u)(s.appRepos.appId,e)).limit(1);if(!i)return{ok:!1,error:"Link a repository first."};if(i.goneAt)return{ok:!1,error:"That repository is no longer shared with the GitHub token."};let l=await Y();if("error"in l)return{ok:!1,error:l.error};let o=ee(i.meta),d=await el(l.token,{id:i.id,fullName:i.fullName,defaultBranch:i.defaultBranch,scannedAt:null,rootDir:o.dir,rootDirUnsupported:o.unsupported,prodBranch:o.branch,prodFallback:o.fallback??null},Date.now()+4e4,{...n,force:!0});if("failed"===d.status)return{ok:!1,error:`The scan failed: ${d.error}`};let[u]=await (0,a.f)().select({n:r.B`count(*)::int`}).from(s.dependencyVulns).where((0,t.b)((0,t.u)(s.dependencyVulns.repoId,i.id),(0,t.M)(s.dependencyVulns.resolvedAt))),c=u?.n??0;return{ok:!0,app:i.app,repo:i.fullName,vulns:c,message:c?`${c} known vulnerabilit${1===c?"y":"ies"} in ${d.packages??0} packages.`:`No known vulnerabilities in ${d.packages??0} packages.`}}async function ef(e){let n=e.filter(R.f);if(!n.length)return[];let r=await (0,a.f)().select({appId:s.appRepos.appId,repoId:s.appRepos.repoId,error:s.dependencyScans.error}).from(s.appRepos).innerJoin(s.dependencyScans,(0,t.u)(s.dependencyScans.repoId,s.appRepos.repoId)).where((0,t.b)((0,t.y)(s.appRepos.appId,n),(0,t.E)(s.dependencyScans.scannedAt)));if(!r.length)return[];let i=await (0,a.f)().select({repoId:s.dependencyVulns.repoId,package:s.dependencyVulns.package,installedVersion:s.dependencyVulns.installedVersion,fixedVersion:s.dependencyVulns.fixedVersion,severity:s.dependencyVulns.severity,summary:s.dependencyVulns.summary,dev:s.dependencyVulns.dev,direct:s.dependencyVulns.direct}).from(s.dependencyVulns).where((0,t.b)((0,t.y)(s.dependencyVulns.repoId,[...new Set(r.map(e=>e.repoId))]),(0,t.M)(s.dependencyVulns.resolvedAt))).limit(1e4);return r.map(e=>({appId:e.appId,repoId:e.repoId,error:e.error,vulns:i.filter(t=>t.repoId===e.repoId).map(e=>({package:e.package,installedVersion:e.installedVersion,fixedVersion:e.fixedVersion,severity:e.severity,summary:e.summary,dev:e.dev,direct:e.direct}))}))}async function em(e,n=new Set){let i=e.filter(R.f),l=new Map;if(!i.length)return l;let o=await (0,a.f)().select({appId:s.appRepos.appId,repoId:s.appRepos.repoId}).from(s.appRepos).where((0,t.y)(s.appRepos.appId,i));if(!o.length)return l;let d=await (0,a.f)().select({repoId:s.dependencyVulns.repoId,package:s.dependencyVulns.package,installedVersion:s.dependencyVulns.installedVersion,fixedVersion:s.dependencyVulns.fixedVersion,vulnId:s.dependencyVulns.vulnId,aliases:s.dependencyVulns.aliases,severity:s.dependencyVulns.severity,direct:s.dependencyVulns.direct}).from(s.dependencyVulns).where((0,t.b)((0,t.y)(s.dependencyVulns.repoId,[...new Set(o.map(e=>e.repoId))]),(0,t.M)(s.dependencyVulns.resolvedAt),(0,t.u)(s.dependencyVulns.direct,!0),(0,t.E)(s.dependencyVulns.fixedVersion))).limit(2e3),u=d.some(e=>"next"===e.package)?new Set((await (0,a.f)().selectDistinct({appId:s.dependencyPrs.appId}).from(s.dependencyPrs).where((0,t.b)((0,t.y)(s.dependencyPrs.appId,i),(0,t.$)(s.dependencyPrs.stage,["merged","closed"]),(0,t.B)(s.dependencyPrs.openedAt,new Date(Date.now()-12096e5)),r.B`${s.dependencyPrs.packages} @> '["next"]'::jsonb`)).limit(i.length)).map(e=>e.appId)):new Set;for(let e of o){let t=n.has(e.appId)||u.has(e.appId);(0,U.B)(d.filter(n=>n.repoId===e.repoId&&!(t&&"next"===n.package))).length&&l.set(e.appId,e.repoId)}return l}e.s(["o",0,12e3,"d",0,4e3,"j",0,ec,"O",0,eu,"C",0,em,"a",0,ef,"h",0,ep],930270);var eh=e.i(242605);async function eg(){return(0,a.f)().select({appId:s.links.fromResourceId,dbId:s.links.toResourceId}).from(s.links).where((0,t.u)(s.links.kind,"uses_db")).limit(500)}async function ey(e){let i=(0,t.b)((0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt)),[l,o,d,u,c]=await Promise.all([I(),b(),(0,a.f)().select({m:s.monitors,appName:s.resources.name,appMeta:s.resources.meta}).from(s.monitors).innerJoin(s.resources,(0,t.u)(s.resources.id,s.monitors.resourceId)).where((0,t.b)(i,(0,t.u)(s.monitors.paused,!1),(0,t.u)(s.monitors.ownerPaused,!1))),(0,a.f)().select({id:s.resources.id,name:s.resources.name,meta:s.resources.meta}).from(s.resources).where((0,t.b)(i,(0,t.u)(s.resources.kind,"app"))),(0,a.f)().select({id:s.accounts.id,provider:s.accounts.provider,label:s.accounts.label,expiresAt:s.accounts.expiresAt,status:s.accounts.status,lastError:s.accounts.lastError}).from(s.accounts)]),p=d.map(e=>e.m.id),f=p.length?await (0,a.f)().select({id:s.checks.monitorId,n:r.B`count(*)::int`,p95:r.B`percentile_cont(0.95) within group (order by ${s.checks.latencyMs})::float8`}).from(s.checks).where((0,t.b)((0,t.y)(s.checks.monitorId,p),(0,t.B)(s.checks.at,new Date(e.getTime()-6e5)),(0,t.u)(s.checks.inMaintenance,!1))).groupBy(s.checks.monitorId):[],S=u.map(e=>e.id),V=S.length?await (0,a.f)().selectDistinctOn([s.deployments.resourceId],{appId:s.deployments.resourceId,state:s.deployments.state,sha:s.deployments.commitSha,createdAt:s.deployments.createdAtProvider}).from(s.deployments).where((0,t.b)((0,t.y)(s.deployments.resourceId,S),(0,t.u)(s.deployments.target,"production"))).orderBy(s.deployments.resourceId,(0,n.A)(s.deployments.createdAtProvider)):[],x=await (0,a.f)().select({id:s.resources.id,name:s.resources.name,kind:s.resources.kind,state:s.snapshots.state,data:s.snapshots.data}).from(s.resources).innerJoin(s.snapshots,(0,t.u)(s.snapshots.resourceId,s.resources.id)).where((0,t.b)(i,(0,t.y)(s.resources.kind,["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"]))),R=e=>x.filter(t=>t.kind===e),D=x.filter(e=>["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"].includes(e.kind)),M=R("zone"),T=R("domain"),B=await eg(),N=await (0,A.Y)().catch(()=>null),j=S.length?await ef(S).catch(()=>null):null,C=S.length?await (0,eh.F)(S).catch(()=>null):null;return{now:e,lastMinuteRunAt:l,lastAnyRunAt:o,monitors:d.map(({m:e,appName:t,appMeta:n})=>{let r=f.find(t=>t.id===e.id),a="heartbeat"===e.kind;return{id:e.id,appId:e.resourceId,appName:t,url:a?e.name??"heartbeat":e.url,kind:a?"heartbeat":"http",state:e.state,failStreak:e.failStreak,lastStatus:e.lastStatus,lastError:e.lastError,lastCheckedAt:e.lastCheckedAt,p95Last10:r?.p95??null,checksLast10:r?.n??0,movedTo:a?null:(0,$.u)(e.url,{name:t,meta:n},u.filter(t=>t.id!==e.resourceId),{lastError:e.lastError})?.to??null}}),apps:u.map(e=>{let t=V.find(t=>t.appId===e.id);return{id:e.id,name:e.name,latestProduction:t?{state:t.state,sha:t.sha,createdAt:t.createdAt}:null}}),accounts:c,dbs:D.length?D.map(t=>(function(e,t){let n={id:e.id,name:e.name,state:e.state,sizeBytes:null,sizeLimitBytes:null,lastApiAt:null,cuHours:null,cuLimit:null,readsToday:null,readsLimit:null,quotaExhausted:null};if("supabase_project"===e.kind){let t=(0,y.k)(y.B,e.data),r=(0,v.Z)(t.lastTrafficAt),a=(0,v.Z)(t.trafficAt),s=r??(a&&!t.trafficError?new Date(a.getTime()-6048e5):null);return{...n,provider:"supabase",sizeBytes:t.sizeBytes??null,sizeLimitBytes:k.R,lastApiAt:s}}if("neon_project"===e.kind){let t=(0,y.k)(y.s,e.data),r=(t.branches??[]).map(e=>e.logicalSize).filter(e=>"number"==typeof e);return{...n,provider:"neon",cuHours:null==t.computeSeconds?null:t.computeSeconds/3600,cuLimit:g.a.cuHours,sizeBytes:r.length?r.reduce((e,t)=>e+t,0):null,sizeLimitBytes:g.a.storageBytes}}if("firestore"===e.kind){let r=(0,y.k)(y.w,e.data),a=(0,v.Z)(r.opsAt),s=null!=r.reads&&a&&a.getTime()>=(0,h.a)(t).getTime()?r.reads:null,i=null!=r.latencyMs||null!=r.pingError;return{...n,provider:"firestore",readsToday:s,readsLimit:h.T.reads,quotaExhausted:i?"RESOURCE_EXHAUSTED"===r.pingReason:null}}if("turso_database"===e.kind){let r=(0,y.k)(y.N,e.data),a=(0,m.u)((0,m.G)(r,t));return{...n,provider:"turso",sizeBytes:r.orgStorageBytes??null,sizeLimitBytes:m.g.storageBytes,quotaPct:a?.pct??null,quotaLabel:a?`${a.label} ${a.text}`:null}}if("upstash_redis"===e.kind){let r=(0,y.k)(y.e,e.data),a=(0,m.u)((0,m.$)(r,t));return{...n,provider:"upstash",sizeBytes:r.storageBytes??null,sizeLimitBytes:m.W.storageBytes,quotaPct:a?.pct??null,quotaLabel:a?`${a.label} ${a.text}`:null}}if("d1_database"===e.kind){let r=(0,y.k)(y.x,e.data),a=(0,m.u)((0,m.I)(r,t));return{...n,provider:"d1",sizeBytes:r.sizeBytes??null,sizeLimitBytes:m.M.dbBytes,quotaPct:a?.pct??null,quotaLabel:a?`${a.label} ${a.text}`:null}}return null})(t,e)).filter(e=>null!==e):null,domains:M.length||T.length?[...M.map(e=>({id:e.id,name:e.name,tlsNotAfter:null,expiresAt:(0,v.Z)((0,w.q)(e.data).rdap?.expiresAt)})),...T.map(e=>({id:e.id,name:e.name,tlsNotAfter:(0,v.Z)((0,w.q)(e.data).tls?.notAfter),expiresAt:null}))]:null,dns:function(e,t){let n=e.filter(e=>Array.isArray(e.data.records));if(!n.length)return null;let r=e.map(e=>e.name),a=[];for(let e of n){let n=t.filter(t=>(0,v.J)(t.name,r)===e.name.toLowerCase().replace(/\.$/,"")),s=[...new Set(n.flatMap(e=>(0,w.q)(e.data).vercel?.recommendedIps??[]))];for(let t of(0,w.q)(e.data).records){if(!(0,v.l)(t,s))continue;let r=t.name.toLowerCase().replace(/\.$/,""),i=n.find(e=>e.name.toLowerCase().replace(/\.$/,"")===r);a.push({id:`${e.id}:${t.id}`,resourceId:i?.id??e.id,name:t.name,proxied:t.proxied,pointsToVercel:!0})}}return a}(M,T),links:B,compute:N,deps:j&&j.length?j:null,frameworks:C&&C.length?C:null}}var ek=e.i(714530),ew=e.i(396667);let ev={vercel:"Vercel",supabase:"Supabase",neon:"Neon",cloudflare:"Cloudflare",firebase:"Firebase",gcp:"Google Cloud"};async function eb(){return(await (0,a.f)().select().from(s.alertRules)).filter(e=>(0,i.h)(e.key)).map(e=>({key:e.key,severity:e.severity,threshold:e.threshold,enabled:e.enabled,channels:e.channels}))}async function eI(e,n={}){let[r,d,p,f,m,h]=await Promise.all([ey(e),eb(),(0,a.f)().select().from(s.alerts).where((0,t.M)(s.alerts.resolvedAt)),(0,a.f)().select({provider:s.providerStatus.provider,state:s.providerStatus.state}).from(s.providerStatus),(0,ek.w)(),(0,ew.I)()]),g=new Map(r.accounts.map(e=>[e.id,e.provider])),y=p.filter(e=>!(0,c.O)(h,e.ruleKey,e.accountId?g.get(e.accountId):null)),k=(0,l.f)(r,d,n.only),w=k.evaluated,v=k.observations.filter(e=>!(0,c.O)(h,e.rule,e.provider)),b=d.find(e=>"CollectorStale"===e.key),I=void 0===r.lastAnyRunAt?r.lastMinuteRunAt:r.lastAnyRunAt,A=!!b?.enabled&&(!I||e.getTime()-I.getTime()>(b.threshold??5)*6e4),$=new Map((r.dbs??[]).filter(e=>"paused"===e.state).map(e=>[e.id,e.name])),S=new Map(r.links.filter(e=>$.has(e.dbId)).map(e=>[e.appId,`DatabasePaused \xb7 ${$.get(e.dbId)}`])),V=new Map(f.filter(e=>"warn"===e.state||"err"===e.state).map(e=>["gcp"===e.provider?"firebase":e.provider,ev[e.provider]??e.provider])),x=(0,u.u)(m,r.monitors.map(e=>({id:e.id,appId:e.appId})),e,r.apps.map(e=>e.id)),R=y.filter(e=>(0,i.h)(e.ruleKey)).map(e=>({id:e.id,ruleKey:e.ruleKey,subject:e.subject,okStreak:e.okStreak,lastSampleAt:e.lastSampleAt,silencedUntil:e.silencedUntil,silencedUntilResolved:e.silencedUntilResolved,notifiedOpen:e.notifiedOpen,lastNotifiedAt:e.lastNotifiedAt,pending:e.pending,pendingSince:e.pendingSince})),D=(0,o.f)(R,v,w,d,{now:e,collectorStale:A,mutedApps:S,incidents:V,maintenance:x});return D.open.length||D.touch.length||D.resolve.length?(await (0,a.f)().transaction(async n=>{for(let t of D.open)await n.insert(s.alerts).values({...t,pendingSince:t.pending?e:null}).onConflictDoNothing();for(let r of D.touch){let{id:a,pending:i,...l}=r;await n.update(s.alerts).set({...l,...i?{pending:i,pendingSince:e}:{}}).where((0,t.b)((0,t.u)(s.alerts.id,a),(0,t.M)(s.alerts.resolvedAt)))}for(let r of D.resolve)await n.update(s.alerts).set({resolvedAt:e,pending:r.pending,pendingSince:r.pending?e:null}).where((0,t.b)((0,t.u)(s.alerts.id,r.id),(0,t.M)(s.alerts.resolvedAt)))}),{opened:D.open.length,resolved:D.resolve.length}):{opened:0,resolved:0}}async function eA(){let[e,n]=await Promise.all([(0,ew.I)(),(0,a.f)().select({ruleKey:s.alerts.ruleKey,provider:s.accounts.provider,n:r.B`count(*)::int`}).from(s.alerts).leftJoin(s.accounts,(0,t.u)(s.accounts.id,s.alerts.accountId)).where((0,t.b)((0,t.M)(s.alerts.resolvedAt),(0,t.y)(s.alerts.severity,["critical","warning"]))).groupBy(s.alerts.ruleKey,s.accounts.provider)]);return n.reduce((t,n)=>t+((0,c.O)(e,n.ruleKey,n.provider)?0:Number(n.n)),0)}let e$=r.B`case ${s.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`;async function eS(e=new Set){return(await (0,a.f)().select({a:s.alerts,name:s.resources.name,kind:s.resources.kind}).from(s.alerts).leftJoin(s.resources,(0,t.u)(s.resources.id,s.alerts.resourceId)).where((0,t.b)((0,t.M)(s.alerts.resolvedAt),(0,ew.s)(e))).orderBy(e$,(0,n.A)(s.alerts.startedAt)).limit(200)).map(({a:e,name:t,kind:n})=>({...e,resourceName:t??null,resourceKind:n??null}))}async function eV(){return eS(await (0,ew.I)())}async function ex(e){return(await (0,a.f)().select({id:s.alerts.id,ruleKey:s.alerts.ruleKey,severity:s.alerts.severity,title:s.alerts.title,resourceId:s.alerts.resourceId,startedAt:s.alerts.startedAt,resolvedAt:s.alerts.resolvedAt}).from(s.alerts).where((0,t.b)((0,t.E)(s.alerts.resolvedAt),(0,t.B)(s.alerts.resolvedAt,new Date(e.getTime()-6048e5)))).orderBy((0,n.A)(s.alerts.resolvedAt)).limit(50)).flatMap(e=>e.resolvedAt?[{...e,resolvedAt:e.resolvedAt}]:[])}async function eR(){let[e,n,l]=await Promise.all([eb(),(0,a.f)().select({key:s.alerts.ruleKey,n:r.B`count(*)::int`}).from(s.alerts).where((0,t.M)(s.alerts.resolvedAt)).groupBy(s.alerts.ruleKey),(0,a.f)().select({kind:s.resources.kind}).from(s.resources).innerJoin(s.snapshots,(0,t.u)(s.snapshots.resourceId,s.resources.id)).where((0,t.b)((0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt))).groupBy(s.resources.kind)]),o=new Set(l.map(e=>e.kind)),d={databases:["supabase_project","neon_project","firestore"].some(e=>o.has(e)),domains:o.has("domain")||o.has("zone"),dns:o.has("zone")};return i.u.flatMap(t=>{let r=e.find(e=>e.key===t);if(!r)return[];let a=i._[t].needs;return[{rule:r,firing:n.find(e=>e.key===t)?.n??0,hasData:null===a||d[a]}]})}async function eD(e,n,r,i){let l="off"===n?{silencedUntil:null,silencedUntilResolved:!1,silencedBy:null}:{...f(n,i),silencedBy:r},[o]=await (0,a.f)().update(s.alerts).set(l).where((0,t.b)((0,t.u)(s.alerts.id,e),(0,t.M)(s.alerts.resolvedAt))).returning({ruleKey:s.alerts.ruleKey,title:s.alerts.title,resourceId:s.alerts.resourceId});return o??null}async function eM(e,n){return(await (0,a.f)().update(s.alertRules).set({...n,updatedAt:new Date}).where((0,t.u)(s.alertRules.key,e)).returning({key:s.alertRules.key})).length>0}async function eT(){try{let[e]=await (0,a.f)().select({value:s.settings.value}).from(s.settings).where((0,t.u)(s.settings.key,d.z)).limit(1);return(0,d._)(e?.value)}catch{return{}}}async function eB(e,t){let n=await eT();Object.keys(t).length?n[e]=t:delete n[e],await (0,a.f)().insert(s.settings).values({key:d.z,value:n}).onConflictDoUpdate({target:s.settings.key,set:{value:n,updatedAt:new Date}})}e.s(["$",0,eI,"q",0,eS,"I",0,ex,"i",0,eV,"X",0,eA,"w",0,eT,"y",0,eR,"z",0,eM,"_",0,eB,"N",0,eD],455317)}]})();
+
+//# sourceMappingURL=src_lib_0eqv8l-v8d5ze._.js.map

package/server/.next/server/chunks/src_lib_0glcfed-uogyd._.js

@@ -1,3 +1,3 @@
-module.exports=[286165,e=>{e.v(s=>Promise.all(["server/chunks/src_0dxbyz8iemj_5._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js","server/chunks/src_lib_data_telegram-bot-db_ts_1t81y-y57-0s-._.js","server/chunks/[root-of-the-server]__0vdm37x30hr6p._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/node_modules_drizzle-orm_0p2-_xghnn-0j._.js","server/chunks/_004c7-39glldb._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/_18p-vw2zmdx9f._.js"].map(s=>e.l(s))).then(()=>s(692697)))},102690,e=>{e.v(s=>Promise.all(["server/chunks/src_lib_notify_env_ts_1dn77cxuokc3w._.js"].map(s=>e.l(s))).then(()=>s(96658)))},541346,e=>{e.v(s=>Promise.all(["server/chunks/[root-of-the-server]__00aao65ocl0um._.js","server/chunks/_10vh_l3hht4_3._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js"].map(s=>e.l(s))).then(()=>s(501424)))},678571,e=>{"use strict";var s=e.i(541211),r=e.i(501424);let _=e=>new Promise(s=>{setTimeout(s,e).unref?.()});async function t(){let[{notifyEnv:s},r,_,{updateDeps:t},{handleUpdate:l}]=await Promise.all([e.A(102690),e.A(541346),e.A(286165),e.A(46799),e.A(994168)]);return{token:async()=>s().telegramToken,enabled:_.webhookOn,offset:{read:_.readPollOffset,write:_.writePollOffset},getUpdates:r.getUpdates,handle:async e=>l(e,await t())}}e.s(["startTelegramPoller",0,function(e){let l=!1;return(async()=>{let o=e??await t(),n=o.sleep??_;for(;!l;)try{let e=await o.enabled()?await o.token():null;if(!e){await n(1e4);continue}let _=await o.getUpdates(e,await o.offset.read());if(!_.ok){if(_.conflict){console.warn("telegram poll: Telegram has a webhook set; turn approvals on in Alerts → Notifications to switch this install to polling"),await n(6e4);continue}console.warn(`telegram poll: getUpdates failed: ${_.error}`),await n(1e4);continue}for(let e of _.updates){if(l)break;let _=e?.update_id,t=(0,r.parseUpdate)(e);if(t)try{await o.handle(t)}catch(e){console.warn(`telegram poll: handling an update failed: ${(0,s.logCause)(e)}`)}"number"==typeof _&&await o.offset.write(_+1)}}catch(e){console.warn(`telegram poll: loop error: ${(0,s.logCause)(e)}`),await n(1e4)}})().catch(e=>console.warn(`telegram poll: could not start: ${(0,s.logCause)(e)}`)),{stop:()=>{l=!0}}}])},994168,e=>{e.v(s=>Promise.all(["server/chunks/src_0hx0sol2clocu._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/src_lib_notify_lang_ts_1r2w02ctaky7e._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/[root-of-the-server]__0vdm37x30hr6p._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/_18p-vw2zmdx9f._.js","server/chunks/node_modules_drizzle-orm_0p2-_xghnn-0j._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js","server/chunks/_004c7-39glldb._.js"].map(s=>e.l(s))).then(()=>s(341575)))},46799,e=>{e.v(s=>Promise.all(["server/chunks/src_1u-olt84z63rx._.js","server/chunks/src_lib_rate-limit_ts_1ahtm4quu2rri._.js","server/chunks/src_lib_time_ts_1a27wp71yhgti._.js","server/chunks/_1i8u10u8nrzy2._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/src_lib_data_telegram-bot-db_ts_1t81y-y57-0s-._.js","server/chunks/_1-pw7jw52sbti._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/src_lib_local-auth_sessions-db_ts_1spok9ccfxeam._.js","server/chunks/[root-of-the-server]__1cpee8xi1ig3-._.js","server/chunks/_0nmfe_o9yhlh2._.js","server/chunks/src_lib_notify_lang_ts_1r2w02ctaky7e._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/_1e_rbkrukj0x9._.js","server/chunks/node_modules_drizzle-orm_1hvomr2ymp14o._.js","server/chunks/_1mwb214-ablfo._.js","server/chunks/node_modules_next_dist_1i-_xribpwttd._.js","server/chunks/_004c7-39glldb._.js","server/chunks/_18p-vw2zmdx9f._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js","server/chunks/src_lib_view_databases_ts_0fdc7jkjvyrxi._.js"].map(s=>e.l(s))).then(()=>s(112115)))}];
+module.exports=[286165,e=>{e.v(s=>Promise.all(["server/chunks/src_0dxbyz8iemj_5._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js","server/chunks/src_lib_data_telegram-bot-db_ts_1t81y-y57-0s-._.js","server/chunks/[root-of-the-server]__0vdm37x30hr6p._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/node_modules_drizzle-orm_0p2-_xghnn-0j._.js","server/chunks/_004c7-39glldb._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/_18p-vw2zmdx9f._.js"].map(s=>e.l(s))).then(()=>s(692697)))},102690,e=>{e.v(s=>Promise.all(["server/chunks/src_lib_notify_env_ts_1dn77cxuokc3w._.js"].map(s=>e.l(s))).then(()=>s(96658)))},541346,e=>{e.v(s=>Promise.all(["server/chunks/[root-of-the-server]__00aao65ocl0um._.js","server/chunks/_10vh_l3hht4_3._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js"].map(s=>e.l(s))).then(()=>s(501424)))},678571,e=>{"use strict";var s=e.i(541211),r=e.i(501424);let _=e=>new Promise(s=>{setTimeout(s,e).unref?.()});async function t(){let[{notifyEnv:s},r,_,{updateDeps:t},{handleUpdate:l}]=await Promise.all([e.A(102690),e.A(541346),e.A(286165),e.A(46799),e.A(994168)]);return{token:async()=>s().telegramToken,enabled:_.webhookOn,offset:{read:_.readPollOffset,write:_.writePollOffset},getUpdates:r.getUpdates,handle:async e=>l(e,await t())}}e.s(["startTelegramPoller",0,function(e){let l=!1;return(async()=>{let n=e??await t(),o=n.sleep??_;for(;!l;)try{let e=await n.enabled()?await n.token():null;if(!e){await o(1e4);continue}let _=await n.getUpdates(e,await n.offset.read());if(!_.ok){if(_.conflict){console.warn("telegram poll: Telegram has a webhook set; turn approvals on in Alerts → Notifications to switch this install to polling"),await o(6e4);continue}console.warn(`telegram poll: getUpdates failed: ${_.error}`),await o(1e4);continue}for(let e of _.updates){if(l)break;let _=e?.update_id,t=(0,r.parseUpdate)(e);if(t)try{await n.handle(t)}catch(e){console.warn(`telegram poll: handling an update failed: ${(0,s.logCause)(e)}`)}"number"==typeof _&&await n.offset.write(_+1)}}catch(e){console.warn(`telegram poll: loop error: ${(0,s.logCause)(e)}`),await o(1e4)}})().catch(e=>console.warn(`telegram poll: could not start: ${(0,s.logCause)(e)}`)),{stop:()=>{l=!0}}}])},994168,e=>{e.v(s=>Promise.all(["server/chunks/src_0hx0sol2clocu._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/src_lib_notify_lang_ts_1r2w02ctaky7e._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/[root-of-the-server]__0vdm37x30hr6p._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/_18p-vw2zmdx9f._.js","server/chunks/node_modules_drizzle-orm_0p2-_xghnn-0j._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js","server/chunks/_004c7-39glldb._.js"].map(s=>e.l(s))).then(()=>s(341575)))},46799,e=>{e.v(s=>Promise.all(["server/chunks/src_1u-olt84z63rx._.js","server/chunks/src_lib_rate-limit_ts_1ahtm4quu2rri._.js","server/chunks/src_lib_local-auth_sessions-db_ts_1spok9ccfxeam._.js","server/chunks/_1i8u10u8nrzy2._.js","server/chunks/_0ofzzim090ezo._.js","server/chunks/src_lib_notify_lang_ts_1r2w02ctaky7e._.js","server/chunks/src_lib_time_ts_1a27wp71yhgti._.js","server/chunks/_06gv0srpbf_lk._.js","server/chunks/src_lib_view_databases_ts_0fdc7jkjvyrxi._.js","server/chunks/[root-of-the-server]__1cpee8xi1ig3-._.js","server/chunks/node_modules_next_dist_1i-_xribpwttd._.js","server/chunks/src_lib_notify_telegram-bot_ts_18y40dkchmcqd._.js","server/chunks/src_db_client_ts_10ccz2djmlpbs._.js","server/chunks/src_lib_data_telegram-bot-db_ts_1t81y-y57-0s-._.js","server/chunks/_0nmfe_o9yhlh2._.js","server/chunks/_0tz4o-qufnu3l._.js","server/chunks/_1e_rbkrukj0x9._.js","server/chunks/_0nt4ifc48vl34._.js","server/chunks/node_modules_drizzle-orm_1hvomr2ymp14o._.js","server/chunks/_18p-vw2zmdx9f._.js","server/chunks/node_modules_drizzle-orm_pg-core_db_0yjenkrjkvb-b.js"].map(s=>e.l(s))).then(()=>s(112115)))}];
 
 //# sourceMappingURL=src_lib_0glcfed-uogyd._.js.map

package/server/.next/server/chunks/{src_lib_206j7lyff31-g._.js → src_lib_0k_aposzvy1c8._.js}

@@ -1,6 +1,6 @@
-(()=>{"use strict";module.exports=[658266,618127,211256,e=>{var t=e.i(278619),n=e.i(959408),r=e.i(867274),s=e.i(413230),a=e.i(7494),i=e.i(250474),o=e.i(90801),l=e.i(32391);let u=["next","eslint-config-next"],d={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",LOW:"low",UNKNOWN:"unknown"};function c(e,t){if(!e||!(0,l.C)(e))return null;let n=t.map(e=>e.fixed).filter(t=>!!t&&(0,l.C)(t)&&(0,i.f)(t,e)>0);if(!n.length)return null;let r=n.filter(t=>(0,o.J)(e,t));return(r.length?r:n).reduce((e,t)=>(0,i.f)(t,e)>0?t:e)}function p(e,t){let n=c(e,t),r=n?t.map(e=>e.fixed).filter(e=>!!e&&(0,l.C)(e)&&(0,i.f)(e,n)>0):[],s=r.reduce((e,t)=>null===e||(0,i.f)(t,e)>0?t:e,null),o=s?` (${1===r.length?"one fix needs":"some fixes need"} Next.js ${s.split(".")[0]})`:"";return`Next.js ${e??"(unknown version)"} has ${(0,a.q)(t.length)} (${(0,a.N)(t).toLowerCase()}), ${n?`fixed in ${n}${o}`:"no fix yet"}.`}e.s(["P",0,p,"p",0,function(e){if(!e||"vulnerable"!==e.status||!e.findings.length||!e.version)return null;let t=c(e.version,e.findings);if(!t)return null;let n=d[(0,a.N)(e.findings)],r=[...new Set(e.findings.map(e=>e.id))],s=[...new Set(e.findings.flatMap(e=>e.cve?[e.cve]:[]))];return{from:e.version,to:t,upgrades:[{package:"next",to:t,vulnIds:r,cves:s,severity:n},{package:"eslint-config-next",to:t,vulnIds:[],cves:[],severity:n,companionOf:"next"}],installed:new Map(u.map(t=>[t,e.version]))}},"F",0,function(e){let t=e.find(e=>"next"===e.package&&!e.companionOf);return!t||e.some(e=>"eslint-config-next"===e.package)?e:[...e,{package:"eslint-config-next",to:t.to,vulnIds:[],cves:[],severity:t.severity,companionOf:"next"}]}],618127);let f=e=>Math.round(e).toLocaleString("en-US"),m=(e,t)=>Math.floor((e.getTime()-t.getTime())/864e5),h=(e,t)=>`${e} ${t}${1===e?"":"s"}`,g=e=>{try{let t=new URL(e);return`${t.host}${t.pathname}`}catch{return e}},y=e=>{try{return new URL(e).host}catch{return e}},v=e=>{try{return new URL(e).pathname}catch{return"/"}},k="Down · ",w=(e,t,n)=>({rule:e,subject:t,status:"unknown",resourceId:null,accountId:null,title:t,message:"",provider:null,sampleAt:null,...n}),b=e=>"firestore"===e.provider?"firebase":"d1"===e.provider?"cloudflare":e.provider,$=new Set(["turso","upstash","d1"]),A={MonitorDown:(e,t)=>e.monitors.map(e=>{let r=w("MonitorDown",e.id,{resourceId:e.appId,title:`${e.appName} ${"heartbeat"===e.kind?e.url:v(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt}),s=t??3;if("heartbeat"===e.kind){let t;return{...r,status:"err"===e.state?"firing":"ok"===e.state?"ok":"unknown",message:`${e.appName} \xb7 ${e.url}: ${t=e.lastError,t?.startsWith(k)?t.slice(k.length):"no ping in time"}.`}}return e.movedTo?{...r,status:"ok",message:`${y(e.url)} moved to ${e.movedTo}; MonitorDomainMoved takes over.`}:e.failStreak>=s?{...r,status:"firing",message:(0,n.H)(e)?`${g(e.url)} failed its check (${(0,n.H)(e)}) on ${s} consecutive checks.`:`${g(e.url)} returned ${e.lastStatus?`HTTP ${e.lastStatus}`:"no answer"} on ${s} consecutive checks.`}:{...r,status:0===e.failStreak&&e.lastCheckedAt?"ok":"unknown",message:`${g(e.url)} answers again.`}}),MonitorDomainMoved:e=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let t=w("MonitorDomainMoved",e.id,{resourceId:e.appId,title:`${e.appName} ${v(e.url)}`,provider:"vercel"});return e.movedTo?{...t,status:"firing",message:`${y(e.url)} is no longer a domain of ${e.appName}; production is on ${e.movedTo}.`}:{...t,status:"ok",message:`The monitor checks ${y(e.url)}, a domain of ${e.appName}.`}}),CollectorStale:(e,t)=>{let n=e.lastMinuteRunAt;return[w("CollectorStale","collector",{status:!n||e.now.getTime()-n.getTime()>(t??5)*6e4?"firing":"ok",title:"collector",message:n?`The last minute run finished ${f((e.now.getTime()-n.getTime())/6e4)} min ago.`:"The collector hasn't finished a run yet."})]},HighLatency:(e,t)=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let n=w("HighLatency",e.id,{resourceId:e.appId,title:`${e.appName} ${v(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt});if(e.checksLast10<5||null===e.p95Last10)return n;let r=t??1500;return{...n,status:e.p95Last10>r?"firing":"ok",message:`p95 ${f(e.p95Last10)} ms over the last 10 minutes (limit ${f(r)} ms).`}}),DeploymentFailed:e=>e.apps.map(e=>{let t=w("DeploymentFailed",e.id,{resourceId:e.id,title:e.name,provider:"vercel"}),n=e.latestProduction;return n?"error"===n.state?{...t,status:"firing",message:`Production deployment ${n.sha?n.sha.slice(0,7):"(no commit)"} failed.`}:{...t,status:"building"===n.state?"unknown":"ok"}:{...t,status:"ok"}}),DatabasePaused:e=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(e=>w("DatabasePaused",e.id,{resourceId:e.id,title:e.name,provider:"supabase",status:"unknown"===e.state?"unknown":"paused"===e.state?"firing":"ok",message:`Supabase project ${e.name} is paused.`})),CertExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("CertExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.tlsNotAfter)return r;let s=m(n.tlsNotAfter,e.now);return{...r,status:s<(t??14)?"firing":"ok",message:`The TLS certificate of ${n.name} expires in ${h(s,"day")}.`}}),DomainExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("DomainExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.expiresAt)return r;let s=m(n.expiresAt,e.now);return{...r,status:s<(t??30)?"firing":"ok",message:`${n.name} expires in ${h(s,"day")}.`}}),StorageAlmostFull:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"!==e.provider).map(e=>{let n=w("StorageAlmostFull",e.id,{resourceId:e.id,title:e.name,provider:b(e)});if(null===e.sizeBytes||!e.sizeLimitBytes)return n;let r=e.sizeBytes/e.sizeLimitBytes*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} uses ${f(e.sizeBytes/1e6)} MB of ${f(e.sizeLimitBytes/1e6)} MB (${f(r)}%).`}}),NeonComputeHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"neon"===e.provider).map(e=>{let n=w("NeonComputeHigh",e.id,{resourceId:e.id,title:e.name,provider:"neon"});return null===e.cuHours?n:{...n,status:e.cuHours>(t??80)?"firing":"ok",message:`${e.name} used ${f(e.cuHours)} of ${f(e.cuLimit??100)} CU-hours this month.`}}),FirestoreQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"===e.provider).map(e=>{let n=w("FirestoreQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:"firebase"});if(e.quotaExhausted)return{...n,status:"firing",message:`${e.name} hit a Firestore quota (RESOURCE_EXHAUSTED).`};if(null===e.readsToday||!e.readsLimit)return!1===e.quotaExhausted?{...n,status:"ok"}:n;let r=e.readsToday/e.readsLimit*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} read ${f(e.readsToday)} of ${f(e.readsLimit)} documents today (${f(r)}%).`}}),AutoPauseRisk:(e,t)=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(n=>{let r=w("AutoPauseRisk",n.id,{resourceId:n.id,title:n.name,provider:"supabase"});if("paused"===n.state)return{...r,status:"ok"};if(!n.lastApiAt)return r;let s=Math.floor((e.now.getTime()-n.lastApiAt.getTime())/864e5);return{...r,status:s>=(t??4)?"firing":"ok",message:`No API traffic for ${h(s,"day")}. Supabase pauses free projects after about 7 days.`}}),DnsProxiedToVercel:e=>e.dns&&e.dns.map(e=>w("DnsProxiedToVercel",e.id,{resourceId:e.resourceId,title:e.name,provider:"cloudflare",status:e.proxied&&e.pointsToVercel?"firing":"ok",message:`${e.name} points to Vercel through the Cloudflare proxy. Vercel recommends DNS only.`})),DbQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>$.has(e.provider)).map(e=>{let n=w("DbQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:b(e)});return null==e.quotaPct?n:{...n,status:e.quotaPct>(t??80)?"firing":"ok",message:`${e.name}: ${e.quotaLabel??"usage"} at ${f(e.quotaPct)}% of the free plan.`}}),ComputeHigh:(e,t)=>e.compute?e.compute.map(n=>{let s=w("ComputeHigh",n.id,{resourceId:n.id,title:n.name,provider:"supabase",sampleAt:n.latest?new Date(n.latest.at):null}),a=(0,r.B)(n.latest,(0,r.V)(t),e.now);return null===a?s:{...s,status:a.length?"firing":"ok",message:a.length?`${n.name}: ${a.join(", ")}.`:`${n.name} compute is back under the limits.`}}):null,CredentialExpiring:(e,t)=>e.accounts.map(n=>{let r=w("CredentialExpiring",n.id,{accountId:n.id,title:`${n.provider} \xb7 ${n.label}`,provider:n.provider});if("drive"===n.provider&&"error"===n.status&&n.lastError?.includes("invalid_grant"))return{...r,status:"firing",message:"Google Drive access was removed (invalid_grant). Reconnect it."};if(!n.expiresAt)return{...r,status:"ok"};let s=m(n.expiresAt,e.now);return{...r,status:s<(t??14)?"firing":"ok",message:s<0?`The ${n.provider} credential ${n.label} has expired.`:`The ${n.provider} credential ${n.label} expires in ${h(s,"day")}.`}}),VulnerableDependency:e=>e.deps?e.deps.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("VulnerableDependency",t.appId,{resourceId:t.appId,title:n.name,provider:"github"});if(t.error)return[r];let a=(0,s.g)(t.vulns);return a?[{...r,status:"firing",message:(0,s.L)(t.vulns),..."critical"===a?{severity:"critical"}:{}}]:[{...r,status:"ok",message:`${n.name} has no moderate, high or critical dependency advisories.`}]}):null,FrameworkVulnerable:e=>e.frameworks?e.frameworks.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("FrameworkVulnerable",t.appId,{resourceId:t.appId,title:n.name});return"ok"===t.status?[{...r,status:"ok",message:`${n.name} runs Next.js ${t.version??"(unknown version)"} with no known advisories.`}]:"vulnerable"===t.status&&t.findings.length?[{...r,status:"firing",message:p(t.version,t.findings),..."CRITICAL"===(0,a.N)(t.findings)?{severity:"critical"}:{}}]:[r]}):null};e.s(["f",0,function(e,n,r){let s=[],a=new Set;for(let i of n){if(!i.enabled||r&&!r.includes(i.key)||!t._[i.key])continue;let n=A[i.key](e,i.threshold);n&&(a.add(i.key),s.push(...n))}return{observations:s,evaluated:a}}],658266);let I=["MonitorDown","HighLatency"],S=["telegram","discord"],x=e=>e.channels.some(e=>S.includes(e));function V(e,t){return t.collectorStale&&"CollectorStale"!==e.rule?"CollectorStale":e.resourceId&&I.includes(e.rule)?t.mutedApps.get(e.resourceId)??null:null}let D=(e,t)=>"critical"===t&&"warning"===e?"critical":e,R=(e,t)=>e.silencedUntilResolved||null!==e.silencedUntil&&e.silencedUntil.getTime()>t.getTime(),M=(e,t)=>`${e}|${t}`;e.s(["f",0,function(e,n,r,s,a){let i={open:[],touch:[],resolve:[]},o=new Map(s.map(e=>[e.key,e])),l=new Map(n.map(e=>[M(e.rule,e.subject),e])),u=new Set(e.map(e=>M(e.ruleKey,e.subject))),d=e=>i.resolve.push({id:e.id,pending:e.notifiedOpen?"resolve":null});for(let n of e){let e=o.get(n.ruleKey),s=l.get(M(n.ruleKey,n.subject));if(!e||!e.enabled){i.resolve.push({id:n.id,pending:null});continue}if(!r.has(n.ruleKey))continue;if(!s){i.resolve.push({id:n.id,pending:null});continue}if("unknown"===s.status)continue;let u=s.provider?a.incidents.get(s.provider)??null:null;if("firing"===s.status){let t=V(s,a),r=n.notifiedOpen&&null!==n.lastNotifiedAt&&a.now.getTime()-n.lastNotifiedAt.getTime()>=216e5,o={id:n.id,okStreak:0,lastSampleAt:s.sampleAt??n.lastSampleAt,lastSeenAt:a.now,message:s.message,causedBy:t,providerIncident:u},l=!n.notifiedOpen&&(!n.pendingSince||a.now.getTime()-n.pendingSince.getTime()>=216e5);(r||l)&&!R(n,a.now)&&!t&&null===n.pending&&x(e)&&(o.pending=r?"repeat":"open"),i.touch.push(o);continue}if(!t._[n.ruleKey].sampled||null===s.sampleAt){d(n);continue}if(!(null===n.lastSampleAt||s.sampleAt.getTime()>n.lastSampleAt.getTime()))continue;let c=n.okStreak+1;c>=2?d(n):i.touch.push({id:n.id,okStreak:c,lastSampleAt:s.sampleAt})}for(let e of n){if("firing"!==e.status||u.has(M(e.rule,e.subject))||a.maintenance.has(e.subject)||e.resourceId&&a.maintenance.has(e.resourceId))continue;let t=o.get(e.rule);if(!t)continue;let n=V(e,a);i.open.push({ruleKey:e.rule,subject:e.subject,resourceId:e.resourceId,accountId:e.accountId,severity:D(t.severity,e.severity),title:e.title,message:e.message,startedAt:a.now,lastSeenAt:a.now,lastSampleAt:e.sampleAt,causedBy:n,providerIncident:e.provider?a.incidents.get(e.provider)??null:null,pending:n||!x(t)?null:"open"})}return i}],211256)},582748,e=>{var t=e.i(89491),n=e.i(960063),r=e.i(800366),s=e.i(326003),a=e.i(843448),i=e.i(647006),o=e.i(328203);e.s(["d",0,function(e,i){let l={id:e.id,name:e.name,state:e.state,sizeBytes:null,sizeLimitBytes:null,lastApiAt:null,cuHours:null,cuLimit:null,readsToday:null,readsLimit:null,quotaExhausted:null};if("supabase_project"===e.kind){let t=(0,s.k)(s.B,e.data),n=(0,o.Z)(t.lastTrafficAt),r=(0,o.Z)(t.trafficAt),i=n??(r&&!t.trafficError?new Date(r.getTime()-6048e5):null);return{...l,provider:"supabase",sizeBytes:t.sizeBytes??null,sizeLimitBytes:a.R,lastApiAt:i}}if("neon_project"===e.kind){let t=(0,s.k)(s.s,e.data),n=(t.branches??[]).map(e=>e.logicalSize).filter(e=>"number"==typeof e);return{...l,provider:"neon",cuHours:null==t.computeSeconds?null:t.computeSeconds/3600,cuLimit:r.a.cuHours,sizeBytes:n.length?n.reduce((e,t)=>e+t,0):null,sizeLimitBytes:r.a.storageBytes}}if("firestore"===e.kind){let t=(0,s.k)(s.w,e.data),r=(0,o.Z)(t.opsAt),a=null!=t.reads&&r&&r.getTime()>=(0,n.a)(i).getTime()?t.reads:null,u=null!=t.latencyMs||null!=t.pingError;return{...l,provider:"firestore",readsToday:a,readsLimit:n.T.reads,quotaExhausted:u?"RESOURCE_EXHAUSTED"===t.pingReason:null}}if("turso_database"===e.kind){let n=(0,s.k)(s.N,e.data),r=(0,t.u)((0,t.G)(n,i));return{...l,provider:"turso",sizeBytes:n.orgStorageBytes??null,sizeLimitBytes:t.g.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("upstash_redis"===e.kind){let n=(0,s.k)(s.e,e.data),r=(0,t.u)((0,t.$)(n,i));return{...l,provider:"upstash",sizeBytes:n.storageBytes??null,sizeLimitBytes:t.W.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("d1_database"===e.kind){let n=(0,s.k)(s.x,e.data),r=(0,t.u)((0,t.I)(n,i));return{...l,provider:"d1",sizeBytes:n.sizeBytes??null,sizeLimitBytes:t.M.dbBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}return null},"S",0,function(e,t){let n=e.filter(e=>Array.isArray(e.data.records));if(!n.length)return null;let r=e.map(e=>e.name),s=[];for(let e of n){let n=t.filter(t=>(0,o.J)(t.name,r)===e.name.toLowerCase().replace(/\.$/,"")),a=[...new Set(n.flatMap(e=>(0,i.q)(e.data).vercel?.recommendedIps??[]))];for(let t of(0,i.q)(e.data).records){if(!(0,o.l)(t,a))continue;let r=t.name.toLowerCase().replace(/\.$/,""),i=n.find(e=>e.name.toLowerCase().replace(/\.$/,"")===r);s.push({id:`${e.id}:${t.id}`,resourceId:i?.id??e.id,name:t.name,proxied:t.proxied,pointsToVercel:!0})}}return s},"r",0,function(e,t){return e.length||t.length?[...e.map(e=>({id:e.id,name:e.name,tlsNotAfter:null,expiresAt:(0,o.Z)((0,i.q)(e.data).rdap?.expiresAt)})),...t.map(e=>({id:e.id,name:e.name,tlsNotAfter:(0,o.Z)((0,i.q)(e.data).tls?.notAfter),expiresAt:null}))]:null}])},485647,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),s=e.i(924924),a=e.i(618916),i=e.i(582748),o=e.i(794713),l=e.i(662860),u=e.i(764766),d=e.i(433609),c=e.i(800523);async function p(){return(0,s.f)().select({appId:a.links.fromResourceId,dbId:a.links.toResourceId}).from(a.links).where((0,t.u)(a.links.kind,"uses_db")).limit(500)}async function f(e){let f=(0,t.b)((0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt)),[m,h,g,y,v]=await Promise.all([(0,o.d)(),(0,o.D)(),(0,s.f)().select({m:a.monitors,appName:a.resources.name,appMeta:a.resources.meta}).from(a.monitors).innerJoin(a.resources,(0,t.u)(a.resources.id,a.monitors.resourceId)).where((0,t.b)(f,(0,t.u)(a.monitors.paused,!1),(0,t.u)(a.monitors.ownerPaused,!1))),(0,s.f)().select({id:a.resources.id,name:a.resources.name,meta:a.resources.meta}).from(a.resources).where((0,t.b)(f,(0,t.u)(a.resources.kind,"app"))),(0,s.f)().select({id:a.accounts.id,provider:a.accounts.provider,label:a.accounts.label,expiresAt:a.accounts.expiresAt,status:a.accounts.status,lastError:a.accounts.lastError}).from(a.accounts)]),k=g.map(e=>e.m.id),w=k.length?await (0,s.f)().select({id:a.checks.monitorId,n:r.B`count(*)::int`,p95:r.B`percentile_cont(0.95) within group (order by ${a.checks.latencyMs})::float8`}).from(a.checks).where((0,t.b)((0,t.y)(a.checks.monitorId,k),(0,t.B)(a.checks.at,new Date(e.getTime()-6e5)),(0,t.u)(a.checks.inMaintenance,!1))).groupBy(a.checks.monitorId):[],b=y.map(e=>e.id),$=b.length?await (0,s.f)().selectDistinctOn([a.deployments.resourceId],{appId:a.deployments.resourceId,state:a.deployments.state,sha:a.deployments.commitSha,createdAt:a.deployments.createdAtProvider}).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,b),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,n.A)(a.deployments.createdAtProvider)):[],A=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,kind:a.resources.kind,state:a.snapshots.state,data:a.snapshots.data}).from(a.resources).innerJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).where((0,t.b)(f,(0,t.y)(a.resources.kind,["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"]))),I=e=>A.filter(t=>t.kind===e),S=A.filter(e=>["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"].includes(e.kind)),x=I("zone"),V=I("domain"),D=await p(),R=await (0,l.Y)().catch(()=>null),M=b.length?await (0,d.a)(b).catch(()=>null):null,B=b.length?await (0,c.F)(b).catch(()=>null):null;return{now:e,lastMinuteRunAt:m,lastAnyRunAt:h,monitors:g.map(({m:e,appName:t,appMeta:n})=>{let r=w.find(t=>t.id===e.id),s="heartbeat"===e.kind;return{id:e.id,appId:e.resourceId,appName:t,url:s?e.name??"heartbeat":e.url,kind:s?"heartbeat":"http",state:e.state,failStreak:e.failStreak,lastStatus:e.lastStatus,lastError:e.lastError,lastCheckedAt:e.lastCheckedAt,p95Last10:r?.p95??null,checksLast10:r?.n??0,movedTo:s?null:(0,u.u)(e.url,{name:t,meta:n},y.filter(t=>t.id!==e.resourceId),{lastError:e.lastError})?.to??null}}),apps:y.map(e=>{let t=$.find(t=>t.appId===e.id);return{id:e.id,name:e.name,latestProduction:t?{state:t.state,sha:t.sha,createdAt:t.createdAt}:null}}),accounts:v,dbs:S.length?S.map(t=>(0,i.d)(t,e)).filter(e=>null!==e):null,domains:(0,i.r)(x,V),dns:(0,i.S)(x,V),links:D,compute:R,deps:M&&M.length?M:null,frameworks:B&&B.length?B:null}}e.s(["f",0,f])},532148,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),s=e.i(924924),a=e.i(618916),i=e.i(278619),o=e.i(658266),l=e.i(211256),u=e.i(275426),d=e.i(154491),c=e.i(485647),p=e.i(739886),f=e.i(111970);let m={vercel:"Vercel",supabase:"Supabase",neon:"Neon",cloudflare:"Cloudflare",firebase:"Firebase",gcp:"Google Cloud"};async function h(){return(await (0,s.f)().select().from(a.alertRules)).filter(e=>(0,i.h)(e.key)).map(e=>({key:e.key,severity:e.severity,threshold:e.threshold,enabled:e.enabled,channels:e.channels}))}async function g(e,n={}){let[r,y,v,k,w,b]=await Promise.all([(0,c.f)(e),h(),(0,s.f)().select().from(a.alerts).where((0,t.M)(a.alerts.resolvedAt)),(0,s.f)().select({provider:a.providerStatus.provider,state:a.providerStatus.state}).from(a.providerStatus),(0,p.f)(),(0,f.I)()]),$=new Map(r.accounts.map(e=>[e.id,e.provider])),A=v.filter(e=>!(0,d.O)(b,e.ruleKey,e.accountId?$.get(e.accountId):null)),I=(0,o.f)(r,y,n.only),S=I.evaluated,x=I.observations.filter(e=>!(0,d.O)(b,e.rule,e.provider)),V=y.find(e=>"CollectorStale"===e.key),D=void 0===r.lastAnyRunAt?r.lastMinuteRunAt:r.lastAnyRunAt,R=!!V?.enabled&&(!D||e.getTime()-D.getTime()>(V.threshold??5)*6e4),M=new Map((r.dbs??[]).filter(e=>"paused"===e.state).map(e=>[e.id,e.name])),B=new Map(r.links.filter(e=>M.has(e.dbId)).map(e=>[e.appId,`DatabasePaused \xb7 ${M.get(e.dbId)}`])),T=new Map(k.filter(e=>"warn"===e.state||"err"===e.state).map(e=>["gcp"===e.provider?"firebase":e.provider,m[e.provider]??e.provider])),C=(0,u.u)(w,r.monitors.map(e=>({id:e.id,appId:e.appId})),e,r.apps.map(e=>e.id)),E=A.filter(e=>(0,i.h)(e.ruleKey)).map(e=>({id:e.id,ruleKey:e.ruleKey,subject:e.subject,okStreak:e.okStreak,lastSampleAt:e.lastSampleAt,silencedUntil:e.silencedUntil,silencedUntilResolved:e.silencedUntilResolved,notifiedOpen:e.notifiedOpen,lastNotifiedAt:e.lastNotifiedAt,pending:e.pending,pendingSince:e.pendingSince})),_=(0,l.f)(E,x,S,y,{now:e,collectorStale:R,mutedApps:B,incidents:T,maintenance:C});return _.open.length||_.touch.length||_.resolve.length?(await (0,s.f)().transaction(async n=>{for(let t of _.open)await n.insert(a.alerts).values({...t,pendingSince:t.pending?e:null}).onConflictDoNothing();for(let r of _.touch){let{id:s,pending:i,...o}=r;await n.update(a.alerts).set({...o,...i?{pending:i,pendingSince:e}:{}}).where((0,t.b)((0,t.u)(a.alerts.id,s),(0,t.M)(a.alerts.resolvedAt)))}for(let r of _.resolve)await n.update(a.alerts).set({resolvedAt:e,pending:r.pending,pendingSince:r.pending?e:null}).where((0,t.b)((0,t.u)(a.alerts.id,r.id),(0,t.M)(a.alerts.resolvedAt)))}),{opened:_.open.length,resolved:_.resolve.length}):{opened:0,resolved:0}}let y=r.B`case ${a.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`;async function v(e=new Set){return(await (0,s.f)().select({a:a.alerts,name:a.resources.name,kind:a.resources.kind}).from(a.alerts).leftJoin(a.resources,(0,t.u)(a.resources.id,a.alerts.resourceId)).where((0,t.b)((0,t.M)(a.alerts.resolvedAt),(0,f.s)(e))).orderBy(y,(0,n.A)(a.alerts.startedAt)).limit(200)).map(({a:e,name:t,kind:n})=>({...e,resourceName:t??null,resourceKind:n??null}))}async function k(){return v(await (0,f.I)())}async function w(e){return(await (0,s.f)().select({id:a.alerts.id,ruleKey:a.alerts.ruleKey,severity:a.alerts.severity,title:a.alerts.title,resourceId:a.alerts.resourceId,startedAt:a.alerts.startedAt,resolvedAt:a.alerts.resolvedAt}).from(a.alerts).where((0,t.b)((0,t.E)(a.alerts.resolvedAt),(0,t.B)(a.alerts.resolvedAt,new Date(e.getTime()-6048e5)))).orderBy((0,n.A)(a.alerts.resolvedAt)).limit(50)).flatMap(e=>e.resolvedAt?[{...e,resolvedAt:e.resolvedAt}]:[])}e.s(["$",0,g,"q",0,v,"I",0,w,"i",0,k])},433609,751762,970465,800523,e=>{var t=e.i(90801),n=e.i(875225),r=e.i(349129),s=e.i(518899),a=e.i(924924),i=e.i(618916),o=e.i(921991),l=e.i(547499),u=e.i(479301),d=e.i(32391),c=e.i(804581),p=e.i(891262),f=e.i(581321),m=e.i(413230),h=e.i(455744),g=e.i(971724),y=e.i(105954),v=e.i(206033),k=e.i(455037);let w=h.z.array(g.z.object({name:y.z.string(),type:y.z.string(),sha:y.z.string(),size:v.z.number().optional()}));async function b(e,t,n,r={},s=null){if(!(0,k.M)(t)||!(0,k.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or ref."};if(null!==s&&(0,f.Q)(s)!==s)return{ok:!1,kind:"format",error:"That isn't a folder in a repository."};let a=s?s.split("/").map(encodeURIComponent).join("/"):"",i=await (0,k.j)(`/repos/${(0,k.f)(t)}/contents/${a}?ref=${encodeURIComponent(n)}`,e,r);if(!i.ok)return i;let o=w.safeParse(i.data);return o.success?{ok:!0,data:o.data.filter(e=>"file"===e.type&&/^[0-9a-f]{40}$/.test(e.sha)).map(e=>({name:e.name,sha:e.sha,size:e.size??0}))}:{ok:!1,kind:"format",error:"GitHub answered the file list in a format the console doesn't recognise."}}async function $(e,t,n,r={}){if(!(0,k.M)(t)||!(0,k.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or branch."};let s=await (0,k.j)(`/repos/${(0,k.f)(t)}/git/ref/heads/${n.split("/").map(encodeURIComponent).join("/")}`,e,r);return s.ok?{ok:!0,data:!0}:"missing"===s.kind?{ok:!0,data:!1}:s}function A(e,t,n,r,s,a={}){return(0,k.V)(e,t,n,r,s,a)}async function I(e,t,n={}){if(!(0,k.M)(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let r=await (0,k.j)(`/repos/${(0,k.f)(t)}/dependabot/alerts?state=open&ecosystem=npm&per_page=100`,e,n);if(!r.ok)return"scope"===r.kind||"missing"===r.kind?{ok:!0,data:{denied:!0}}:r;let s=(0,m.E)(r.data);return s?{ok:!0,data:{alerts:s}}:{ok:!1,kind:"format",error:"GitHub answered the Dependabot alerts in a format the console doesn't recognise."}}var S=e.i(502240);async function x(){let[e]=await (0,a.f)().select().from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).orderBy((0,r.M)(i.accounts.createdAt)).limit(1);if(!e)return{error:"GitHub isn't connected."};let t=(0,o.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,l.f)().OPS_ENCRYPTION_KEY);return t?{token:t,accountId:e.id}:{error:"Can't read the stored GitHub credential. Replace it on Connections."}}async function V(){let[e]=await (0,a.f)().select({value:i.settings.value}).from(i.settings).where((0,n.u)(i.settings.key,"deps.scanAll")).limit(1);return e?.value===!0}let D=e=>{let t=(0,S.w)(e);return{dir:(0,f.Q)((e??{}).rootDirectory),unsupported:(0,f.l)((e??{}).rootDirectoryUnsupported),branch:(0,S.i)((0,S.V)(e),null),...t?{fallback:t}:{}}};async function R(e){let t=[...new Set(e.filter(u.f))],r=new Map;if(!t.length)return r;let s=await (0,a.f)().select({repoId:i.appRepos.repoId,name:i.resources.name,monitored:i.resources.monitored,meta:i.resources.meta}).from(i.appRepos).innerJoin(i.resources,(0,n.u)(i.resources.id,i.appRepos.appId)).where((0,n.b)((0,n.y)(i.appRepos.repoId,t),(0,n.M)(i.resources.goneAt))).limit(1e3);for(let e of(s.sort((e,t)=>Number(!!t.monitored)-Number(!!e.monitored)||(e.name<t.name?-1:+(e.name>t.name))),s))r.has(e.repoId)||r.set(e.repoId,D(e.meta));return r}async function M(){let e={id:i.githubRepos.id,fullName:i.githubRepos.fullName,defaultBranch:i.githubRepos.defaultBranch,scannedAt:i.dependencyScans.scannedAt},t=(0,n.b)((0,n.M)(i.githubRepos.goneAt),(0,n.u)(i.githubRepos.archived,!1)),r=await V()?await (0,a.f)().select(e).from(i.githubRepos).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500):await (0,a.f)().selectDistinct(e).from(i.appRepos).innerJoin(i.githubRepos,(0,n.u)(i.githubRepos.id,i.appRepos.repoId)).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500),s=r.length?await R(r.map(e=>e.id)):new Map;return(0,m.M)(r.map(e=>{let t=s.get(e.id);return{...e,rootDir:t?.dir??null,rootDirUnsupported:t?.unsupported??null,prodBranch:t?.branch??null,...t?.fallback?{prodFallback:t.fallback}:{}}}))}let B=(e,t)=>e.length>t?`${e.slice(0,t-1)}…`:e;async function T(e,t){let n=new Date;await (0,a.f)().insert(i.dependencyScans).values({repoId:e,...t,updatedAt:n}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{...t,updatedAt:n}})}async function C(e){return(0,a.f)().select({id:i.dependencyVulns.id,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,vulnId:i.dependencyVulns.vulnId,severity:i.dependencyVulns.severity,fixedVersion:i.dependencyVulns.fixedVersion,summary:i.dependencyVulns.summary,aliases:i.dependencyVulns.aliases,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct,source:i.dependencyVulns.source}).from(i.dependencyVulns).where((0,n.b)((0,n.u)(i.dependencyVulns.repoId,e),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(2e3)}function E(e,t){for(let n of d.a){let r=e.find(e=>e.name===n.path);if(r)return{path:(0,f.H)(t,n.path),kind:n.kind,sha:r.sha}}return null}async function _(e,r,s,o={}){let l=()=>({...o,timeoutMs:Math.max(1e3,Math.min(s-Date.now(),1e4))}),u=async e=>(await T(r.id,{error:B(e,300),scannedAt:new Date}).catch(()=>void 0),{status:"failed",error:e}),h=r.defaultBranch??"HEAD",g=null;for(let t of[r.prodBranch,r.prodFallback]){if(t&&t===r.defaultBranch)break;let n=(0,S.i)(t,r.defaultBranch);if(!n)continue;let s=await $(e,r.fullName,n,l());if(!s.ok)return u(s.error);if(s.data){g=n;break}}let y=null!==g;g&&(h=g);let v=y?`Scanned ${g}, the branch production is built from.`:null,w=(0,f.Q)(r.rootDir),x=w?null:(0,f.l)(r.rootDirUnsupported),V=x?`The Vercel Root Directory "${x}" couldn't be used (Watchbell reads plain folder names, at most 4 deep); scanned the repository root.`:null,D=await b(e,r.fullName,h,l(),w);if(!D.ok)return u(w&&"missing"===D.kind?`The folder ${(0,f.x)(w)} isn't in ${r.fullName} on ${h}.`:D.error);let R=E(D.data,w),M=D.data.find(e=>"package.json"===e.name)??null,N=!1,j=null;if(w&&M&&!R){let t=await b(e,r.fullName,h,l());if(!t.ok)return u(t.error);N=null!==(R=E(j=t.data,null))}let O=R?R.sha:M?`pkg:${M.sha}`:null,L=O&&w?`${w}:${O}${N&&M?`+${M.sha}`:""}`:O&&x?`odd:${O}`:O,z=L&&y?`br:${g}:${L}`:L,[P]=await (0,a.f)().select().from(i.dependencyScans).where((0,n.u)(i.dependencyScans.repoId,r.id)).limit(1),H=new Date;if(!(0,m.U)(P??null,z,H,o.force))return{status:"unchanged"};if(!z){let e=await C(r.id);return e.length&&await (0,a.f)().update(i.dependencyVulns).set({resolvedAt:H}).where((0,n.y)(i.dependencyVulns.id,e.map(e=>e.id))),await T(r.id,{lockfilePath:null,lockfileSha:null,packageCount:0,scannedAt:H,queriedAt:H,error:null,note:B([v,V,`No package.json or lockfile ${w?"in":"at"} ${(0,f.x)(w)}.`].filter(Boolean).join(" "),300)}),{status:"scanned",vulns:0,packages:0,note:"no package.json"}}let U=(0,f.H)(w,"package.json"),q=M?await A(e,r.fullName,U,h,k.$,l()):null;if(q&&!q.ok)return u(q.error);let W=q?.ok&&q.data?(0,d.b)(q.data):null,F=null,K="package-json",J=N&&R?`Scanned ${(0,f.x)(w)} with the repository root's ${R.path} (workspaces).`:null;if(R){if(2e3>s-Date.now())return u("Time budget used before the lockfile was read; the next run tries again.");let t=await A(e,r.fullName,R.path,h,0xf00000,{...o,timeoutMs:Math.max(1e3,Math.min(s-Date.now(),2e4))});if(!t.ok)return u(t.error);let n=!0;if(N&&w&&t.data&&!(0,f.p)(R.kind,t.data,w)){let t=j?.some(e=>"package.json"===e.name)?await A(e,r.fullName,"package.json",h,k.$,l()):null;if(t&&!t.ok)return u(t.error);n=(0,f.F)(t?.data??null,w)}n?(F=t.data?(0,d.D)(R.kind,t.data):null,K=R.kind,F||(J=[J,`${R.path} couldn't be read; the versions come from package.json ranges (approximate).`].filter(Boolean).join(" "))):(J=`The repository root's ${R.path} isn't a workspace that includes ${w}, so the versions come from ${U} ranges (approximate).`,R=null)}if(F){let e=(0,t.m)(F,W);F=e.deps,e.stale.length&&(J=[J,(0,t.M)(e.stale)].filter(Boolean).join(" "))}else F=W?(0,d.e)(W):[],K="package-json",J??=R?null:"No lockfile: the versions come from package.json ranges (approximate).";let Z=await C(r.id),G=[];if(F.length){let e=await (0,p.K)(F,{fetch:o.fetch,deadline:s});if(!e.ok)return u(e.error);let t=(0,m.A)(Z,!0===o.force),n=await (0,p.J)((0,m.z)(F,e.ids,t),{fetch:o.fetch,deadline:s});if(!n.ok)return u(n.error);G=(0,c.i)(F,e.ids,n.map,t)}if(s-Date.now()>1500){let t=await I(e,r.fullName,l());t.ok&&"alerts"in t.data?G=(0,m.R)(G,t.data.alerts,F):t.ok&&(J=[J,"Dependabot alerts aren't readable with this token (optional: Dependabot alerts: Read)."].filter(Boolean).join(" "))}let Y=(0,m.h)(Z,G,(0,d.K)(W));J=[v,V,J].filter(Boolean).join(" ")||null;let Q=new Date;return await (0,a.f)().transaction(async e=>{for(let t of(Y.insert.length&&await e.insert(i.dependencyVulns).values(Y.insert.map(e=>({repoId:r.id,package:e.package,installedVersion:e.installedVersion,vulnId:e.vulnId,aliases:e.aliases,severity:e.severity,fixedVersion:e.fixedVersion,summary:e.summary,direct:e.direct,dev:e.dev,source:e.source,firstSeenAt:Q,lastSeenAt:Q}))).onConflictDoNothing(),Y.update))await e.update(i.dependencyVulns).set({severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,aliases:t.aliases,dev:t.dev,direct:t.direct,lastSeenAt:Q}).where((0,n.u)(i.dependencyVulns.id,t.id));Y.resolve.length&&await e.update(i.dependencyVulns).set({resolvedAt:Q}).where((0,n.b)((0,n.y)(i.dependencyVulns.id,Y.resolve),(0,n.M)(i.dependencyVulns.resolvedAt))),await e.insert(i.dependencyScans).values({repoId:r.id,lockfilePath:R?.path??(M?U:null),lockfileSha:z,packageCount:F.length,scannedAt:Q,queriedAt:Q,error:null,note:J?B(J,300):null,updatedAt:Q}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{lockfilePath:R?.path??(M?U:null),lockfileSha:z,packageCount:F.length,scannedAt:Q,queriedAt:Q,error:null,note:J?B(J,300):null,updatedAt:Q}})}),{status:"scanned",vulns:Y.insert.length+Y.update.length,packages:F.length,note:"package-json"===K?J:null}}async function N(e,t={}){var r,s;let o,l,u,d,c=await x();if("error"in c)return{error:c.error};let{first:p,only:f,skip:m,...h}=t,g=(r=await M(),o=(s={first:p,only:f,skip:m}).only?new Set(s.only):null,l=new Set(s.skip??[]),u=(o?r.filter(e=>o.has(e.id)):r).filter(e=>!l.has(e.id)),d=new Set(s.first??[]),[...u.filter(e=>d.has(e.id)),...u.filter(e=>!d.has(e.id))]),y={scanned:0,unchanged:0,failed:[],left:0,done:[],listed:g.map(e=>e.id)};for(let[t,n]of g.entries()){if(e-Date.now()<4e3){y.left=g.length-t;break}y.done.push(n.id);try{let t=await _(c.token,n,e,h);"scanned"===t.status?y.scanned++:"unchanged"===t.status?y.unchanged++:y.failed.push(`${n.fullName}: ${t.error}`)}catch(e){y.failed.push(`${n.fullName}: ${e instanceof Error?e.name:"error"}`)}}return await (0,a.f)().delete(i.dependencyVulns).where((0,n.b)((0,n.E)(i.dependencyVulns.resolvedAt),(0,n.S)(i.dependencyVulns.resolvedAt,new Date(Date.now()-7776e6)))).catch(()=>void 0),y}let j=async()=>(await (0,a.f)().select({id:i.accounts.id}).from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).limit(1)).length>0;function O(e){let t=e.failed.filter(e=>!/didn't answer in time|no time left|time budget|rate limit/i.test(e)),n=e.failed.length-t.length+(e.left??0);n&&console.info(`deps: ${n} repositor${1===n?"y":"ies"} wait for the next run`);let r=t.slice(0,3);return t.length>3&&r.push(`+${t.length-3} more`),r.length?r.join("; "):null}async function L(e){if(!await j())return null;if(e-Date.now()<4e3)return console.info("deps: no time left today; the scan resumes tomorrow"),null;let t=await N(e);if("error"in t){let e;return(e=t.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:t.error}return O(t)}async function z(e,t,r={}){let{marked:s,onlyMarked:o}=t;if(!await j())return{problem:null,settled:[...s],done:[],complete:!0};let l=s.filter(u.f),d=l.length?await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,l)).limit(5*l.length):[],c=[...new Set(d.map(e=>e.repoId))],p=e=>d.filter(t=>t.appId===e).map(e=>e.repoId),f=s.filter(e=>!p(e).length);if(o&&!c.length)return{problem:null,settled:[...s],done:[],complete:!0};if(e-Date.now()<4e3)return{problem:null,settled:f,done:[],complete:!1};let m=(t.skip??[]).filter(e=>!c.includes(e)),h=await N(e,{...r,first:c,...o?{only:c}:{skip:m}});if("error"in h){let e;return{problem:(e=h.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:h.error,settled:[...s],done:[],complete:!0}}let g=new Set([...h.done,...c.filter(e=>!h.listed.includes(e))]);return{problem:O(h),settled:s.filter(e=>p(e).every(e=>g.has(e))),done:h.done,complete:0===h.left}}async function P(e){let t=e.filter(u.f);if(!t.length)return[];let r=await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId,error:i.dependencyScans.error}).from(i.appRepos).innerJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.appRepos.repoId)).where((0,n.b)((0,n.y)(i.appRepos.appId,t),(0,n.E)(i.dependencyScans.scannedAt)));if(!r.length)return[];let s=await (0,a.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,severity:i.dependencyVulns.severity,summary:i.dependencyVulns.summary,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(r.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(1e4);return r.map(e=>({appId:e.appId,repoId:e.repoId,error:e.error,vulns:s.filter(t=>t.repoId===e.repoId).map(e=>({package:e.package,installedVersion:e.installedVersion,fixedVersion:e.fixedVersion,severity:e.severity,summary:e.summary,dev:e.dev,direct:e.direct}))}))}async function H(e,t=new Set){let r=e.filter(u.f),o=new Map;if(!r.length)return o;let l=await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,r));if(!l.length)return o;let d=await (0,a.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,vulnId:i.dependencyVulns.vulnId,aliases:i.dependencyVulns.aliases,severity:i.dependencyVulns.severity,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(l.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt),(0,n.u)(i.dependencyVulns.direct,!0),(0,n.E)(i.dependencyVulns.fixedVersion))).limit(2e3),c=d.some(e=>"next"===e.package)?new Set((await (0,a.f)().selectDistinct({appId:i.dependencyPrs.appId}).from(i.dependencyPrs).where((0,n.b)((0,n.y)(i.dependencyPrs.appId,r),(0,n.$)(i.dependencyPrs.stage,["merged","closed"]),(0,n.B)(i.dependencyPrs.openedAt,new Date(Date.now()-12096e5)),s.B`${i.dependencyPrs.packages} @> '["next"]'::jsonb`)).limit(r.length)).map(e=>e.appId)):new Set;for(let e of l){let n=t.has(e.appId)||c.has(e.appId);(0,m.B)(d.filter(t=>t.repoId===e.repoId&&!(n&&"next"===t.package))).length&&o.set(e.appId,e.repoId)}return o}e.s(["R",0,4e4,"o",0,12e3,"d",0,4e3,"e",0,L,"O",0,z,"C",0,H,"a",0,P],433609);var U=e.i(442473);function q(e){let t=e instanceof Error&&e.cause instanceof Error?e.cause:e,n=(t instanceof Error?t.message:"").split("\n")[0].replace(/Bearer\s+\S+/gi,"Bearer [hidden]").trim()||"failed";return n.length>200?`${n.slice(0,200)}…`:n}e.s(["f",0,q],751762);var W=e.i(656083);let F=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,K="[\"'`]";function J(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let Z={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},G=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>Z[e]??Z[e.toLowerCase()]??e),Y=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${K}(${F})${K}`,"g"),Q=RegExp(String.raw`version\s*:\s*${K}(${F})${K}\s*,\s*appDir\s*:`,"g"),X=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${K}(${F})${K}`,"g"),ee=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,et=e=>e.replace(/[$]/g,"\\$");var en=e.i(267485);async function er(e,t,n={}){let r=n.deadline??1/0,s=n.now??(()=>new Date),a=e=>Math.floor(Math.min(e,r)-Date.now()),i=Date.now()+15e3;if(0>=a(i))return null;let o=(e,n)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:n,checkedAt:s()}),l=(e,t)=>(0,U.K)(e,{maxBytes:3145728,timeoutMs:a(i),lookup:n.lookup,fetch:n.fetch,userAgent:"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)",sameOrigin:t}),u=await l(`https://${e}/`,"www");if(!u.ok&&u.error===U.l)return o("unknown","the site redirects to another host");if(!u.ok||200!==u.status)return Date.now()>=r?null:o("error",`Couldn't load the site: ${u.ok?`HTTP ${u.status}`:u.error}`);let d=(function(e,t){let n;try{n=new URL(t)}catch{return[]}let r=new Set,s=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(G(t[2].trim()),n)}catch{continue}if("https:"===e.protocol&&e.origin===n.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!r.has(e.href))){var a;r.add(e.href),s.push({href:e.href,rank:(a=e.pathname,/\/main-app[-.]/.test(a)?0:/\/(main|app-index)[-.]/.test(a)?1:/\/(webpack|polyfills|framework)[-.]/.test(a)?3:2),i:s.length})}}return s.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(u.body,u.url).slice(0,12);if(0===d.length)return o("unknown",u.body.includes("/_next/")?"version not exposed":"not a Next.js site");let c=null,p=0,f=!1;for(let e of d){if(0>=a(i)){f=!0;break}let t=await l(e,!0);if(t.ok&&200===t.status&&(p++,c=function(e){for(let t of e.matchAll(Y))if(J(t[1]))return t[1];for(let t of[Q,X])for(let n of e.matchAll(t))if(J(n[1]))return n[1];for(let t of e.matchAll(ee)){let n=t[1]??"version",r=RegExp(String.raw`(?:^|[^\w$.])${et(n)}\s*=\s*${K}(${F})${K}`,"g"),s=null;for(let n of e.matchAll(r)){if((n.index??0)>=(t.index??0))break;s=n[1]}if(s&&J(s))return s}return null}(t.body)))break}if(!c)return Date.now()>=r?null:f||0>=a(i)?o("error","Reading the site's scripts took longer than 15 s"):0===p?o("error","Couldn't load the site's scripts"):o("unknown","version not exposed");let m=a(Date.now()+1e4);if(m<=0)return null;let h=await (0,en.y)(c,{timeoutMs:m,fetch:n.fetch});return h.ok?{version:c,status:h.findings.length?"vulnerable":"ok",findings:h.findings,reason:null,checkedAt:s()}:Date.now()>=r?null:o("error",h.error)}e.s(["y",0,35e3,"P",0,er,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var es=e.i(7494),ea=e.i(764766),ei=e.i(195191),eo=e.i(146394);function el(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function eu(e={}){let t=e.only;if(t&&!t.length)return[];let r=e.first??[],o=e.skip??[],l=await (0,a.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta,sec:i.appSecurity}).from(i.resources).leftJoin(i.appSecurity,(0,n.u)(i.appSecurity.resourceId,i.resources.id)).where((0,n.b)((0,n.u)(i.resources.kind,"app"),(0,n.u)(i.resources.monitored,!0),(0,n.M)(i.resources.goneAt),t?(0,n.y)(i.resources.id,t):void 0,o.length?(0,n.$)(i.resources.id,[...o]):void 0)).orderBy(...r.length?[s.B`case when ${(0,n.y)(i.resources.id,r)} then 0 else 1 end`]:[],s.B`${i.appSecurity.checkedAt} asc nulls first`,i.resources.name).limit(eo.O.apps);if(!l.length)return[];r.length&&l.sort((e,t)=>Number(!r.includes(e.id))-Number(!r.includes(t.id)));let u=await (0,a.f)().select({resourceId:i.monitors.resourceId,url:i.monitors.url}).from(i.monitors).where((0,n.y)(i.monitors.resourceId,l.map(e=>e.id))).orderBy(i.monitors.createdAt).limit(eo.O.monitors);return l.map(e=>({id:e.id,name:e.name,prev:e.sec?el(e.sec):null,host:(0,ea.Y)(e.meta)?.primaryDomain??(0,ei.m)(e.name,u.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function ed(e,t){await (0,a.f)().transaction(async r=>{await r.execute(s.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[a]=await r.select().from(i.appSecurity).where((0,n.u)(i.appSecurity.resourceId,e.id)).limit(1),o=a?el(a):null;if(o&&o.checkedAt.getTime()>=t.checkedAt.getTime())return;let l="unknown"===t.status||"error"===t.status?{...t,version:o?o.version:t.version,findings:o?o.findings:t.findings}:t,u={framework:"next",version:l.version,status:l.status,findings:l.findings,reason:l.reason,checkedAt:l.checkedAt};await r.insert(i.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:i.appSecurity.resourceId,set:u,setWhere:s.B`${i.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,es.t)(e.name,o,l);d&&await (0,W.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:l.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],r)})}async function ec(e,t={}){let n=await eu(t),r=0,s=0,a=[],i=[],o=[];return await (0,U.P)(n,3,async t=>{if(e-Date.now()<3e3)return void s++;o.push(t.id);try{let n=await er(t.host,t.prev,{deadline:e});if(!n)return void s++;await ed(t,n),r++,i.push(t.id)}catch(e){a.push(`${t.name}: ${q(e)}`),i.push(t.id)}}),{checked:r,skipped:s,failed:a,done:i,listed:n.map(e=>e.id),started:o}}async function ep(e){let t=e.filter(u.f);return t.length?(await (0,a.f)().select().from(i.appSecurity).where((0,n.y)(i.appSecurity.resourceId,t)).limit(t.length)).map(e=>{let t=el(e);return{appId:e.resourceId,version:t.version,status:t.status,findings:t.findings}}):[]}e.s(["F",0,ep,"h",0,ec,"Z",0,el],800523)},111970,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(347540),s=e.i(924924),a=e.i(473283),i=e.i(618916),o=e.i(659846),l=e.i(154491),u=e.i(960049);let d=["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"],c=e=>{if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}},p=(0,r.cache)(async()=>{let e=n.B.join(d.map(e=>n.B`${e}`),n.B`, `),t=await (0,s.f)().execute(n.B`select
+(()=>{"use strict";module.exports=[658266,618127,211256,e=>{var t=e.i(278619),n=e.i(959408),r=e.i(867274),s=e.i(413230),a=e.i(7494),i=e.i(250474),o=e.i(90801),l=e.i(32391);let u=["next","eslint-config-next"],d={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",LOW:"low",UNKNOWN:"unknown"};function c(e,t){if(!e||!(0,l.C)(e))return null;let n=t.map(e=>e.fixed).filter(t=>!!t&&(0,l.C)(t)&&(0,i.f)(t,e)>0);if(!n.length)return null;let r=n.filter(t=>(0,o.J)(e,t));return(r.length?r:n).reduce((e,t)=>(0,i.f)(t,e)>0?t:e)}function p(e,t){let n=c(e,t),r=n?t.map(e=>e.fixed).filter(e=>!!e&&(0,l.C)(e)&&(0,i.f)(e,n)>0):[],s=r.reduce((e,t)=>null===e||(0,i.f)(t,e)>0?t:e,null),o=s?` (${1===r.length?"one fix needs":"some fixes need"} Next.js ${s.split(".")[0]})`:"";return`Next.js ${e??"(unknown version)"} has ${(0,a.q)(t.length)} (${(0,a.N)(t).toLowerCase()}), ${n?`fixed in ${n}${o}`:"no fix yet"}.`}e.s(["P",0,p,"p",0,function(e){if(!e||"vulnerable"!==e.status||!e.findings.length||!e.version)return null;let t=c(e.version,e.findings);if(!t)return null;let n=d[(0,a.N)(e.findings)],r=[...new Set(e.findings.map(e=>e.id))],s=[...new Set(e.findings.flatMap(e=>e.cve?[e.cve]:[]))];return{from:e.version,to:t,upgrades:[{package:"next",to:t,vulnIds:r,cves:s,severity:n},{package:"eslint-config-next",to:t,vulnIds:[],cves:[],severity:n,companionOf:"next"}],installed:new Map(u.map(t=>[t,e.version]))}},"F",0,function(e){let t=e.find(e=>"next"===e.package&&!e.companionOf);return!t||e.some(e=>"eslint-config-next"===e.package)?e:[...e,{package:"eslint-config-next",to:t.to,vulnIds:[],cves:[],severity:t.severity,companionOf:"next"}]}],618127);let f=e=>Math.round(e).toLocaleString("en-US"),m=(e,t)=>Math.floor((e.getTime()-t.getTime())/864e5),h=(e,t)=>`${e} ${t}${1===e?"":"s"}`,g=e=>{try{let t=new URL(e);return`${t.host}${t.pathname}`}catch{return e}},y=e=>{try{return new URL(e).host}catch{return e}},v=e=>{try{return new URL(e).pathname}catch{return"/"}},k="Down · ",w=(e,t,n)=>({rule:e,subject:t,status:"unknown",resourceId:null,accountId:null,title:t,message:"",provider:null,sampleAt:null,...n}),b=e=>"firestore"===e.provider?"firebase":"d1"===e.provider?"cloudflare":e.provider,$=new Set(["turso","upstash","d1"]),A={MonitorDown:(e,t)=>e.monitors.map(e=>{let r=w("MonitorDown",e.id,{resourceId:e.appId,title:`${e.appName} ${"heartbeat"===e.kind?e.url:v(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt}),s=t??3;if("heartbeat"===e.kind){let t;return{...r,status:"err"===e.state?"firing":"ok"===e.state?"ok":"unknown",message:`${e.appName} \xb7 ${e.url}: ${t=e.lastError,t?.startsWith(k)?t.slice(k.length):"no ping in time"}.`}}return e.movedTo?{...r,status:"ok",message:`${y(e.url)} moved to ${e.movedTo}; MonitorDomainMoved takes over.`}:e.failStreak>=s?{...r,status:"firing",message:(0,n.H)(e)?`${g(e.url)} failed its check (${(0,n.H)(e)}) on ${s} consecutive checks.`:`${g(e.url)} returned ${e.lastStatus?`HTTP ${e.lastStatus}`:"no answer"} on ${s} consecutive checks.`}:{...r,status:0===e.failStreak&&e.lastCheckedAt?"ok":"unknown",message:`${g(e.url)} answers again.`}}),MonitorDomainMoved:e=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let t=w("MonitorDomainMoved",e.id,{resourceId:e.appId,title:`${e.appName} ${v(e.url)}`,provider:"vercel"});return e.movedTo?{...t,status:"firing",message:`${y(e.url)} is no longer a domain of ${e.appName}; production is on ${e.movedTo}.`}:{...t,status:"ok",message:`The monitor checks ${y(e.url)}, a domain of ${e.appName}.`}}),CollectorStale:(e,t)=>{let n=e.lastMinuteRunAt;return[w("CollectorStale","collector",{status:!n||e.now.getTime()-n.getTime()>(t??5)*6e4?"firing":"ok",title:"collector",message:n?`The last minute run finished ${f((e.now.getTime()-n.getTime())/6e4)} min ago.`:"The collector hasn't finished a run yet."})]},HighLatency:(e,t)=>e.monitors.filter(e=>"http"===e.kind).map(e=>{let n=w("HighLatency",e.id,{resourceId:e.appId,title:`${e.appName} ${v(e.url)}`,provider:"vercel",sampleAt:e.lastCheckedAt});if(e.checksLast10<5||null===e.p95Last10)return n;let r=t??1500;return{...n,status:e.p95Last10>r?"firing":"ok",message:`p95 ${f(e.p95Last10)} ms over the last 10 minutes (limit ${f(r)} ms).`}}),DeploymentFailed:e=>e.apps.map(e=>{let t=w("DeploymentFailed",e.id,{resourceId:e.id,title:e.name,provider:"vercel"}),n=e.latestProduction;return n?"error"===n.state?{...t,status:"firing",message:`Production deployment ${n.sha?n.sha.slice(0,7):"(no commit)"} failed.`}:{...t,status:"building"===n.state?"unknown":"ok"}:{...t,status:"ok"}}),DatabasePaused:e=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(e=>w("DatabasePaused",e.id,{resourceId:e.id,title:e.name,provider:"supabase",status:"unknown"===e.state?"unknown":"paused"===e.state?"firing":"ok",message:`Supabase project ${e.name} is paused.`})),CertExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("CertExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.tlsNotAfter)return r;let s=m(n.tlsNotAfter,e.now);return{...r,status:s<(t??14)?"firing":"ok",message:`The TLS certificate of ${n.name} expires in ${h(s,"day")}.`}}),DomainExpiringSoon:(e,t)=>e.domains&&e.domains.map(n=>{let r=w("DomainExpiringSoon",n.id,{resourceId:n.id,title:n.name,provider:"cloudflare"});if(!n.expiresAt)return r;let s=m(n.expiresAt,e.now);return{...r,status:s<(t??30)?"firing":"ok",message:`${n.name} expires in ${h(s,"day")}.`}}),StorageAlmostFull:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"!==e.provider).map(e=>{let n=w("StorageAlmostFull",e.id,{resourceId:e.id,title:e.name,provider:b(e)});if(null===e.sizeBytes||!e.sizeLimitBytes)return n;let r=e.sizeBytes/e.sizeLimitBytes*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} uses ${f(e.sizeBytes/1e6)} MB of ${f(e.sizeLimitBytes/1e6)} MB (${f(r)}%).`}}),NeonComputeHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"neon"===e.provider).map(e=>{let n=w("NeonComputeHigh",e.id,{resourceId:e.id,title:e.name,provider:"neon"});return null===e.cuHours?n:{...n,status:e.cuHours>(t??80)?"firing":"ok",message:`${e.name} used ${f(e.cuHours)} of ${f(e.cuLimit??100)} CU-hours this month.`}}),FirestoreQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>"firestore"===e.provider).map(e=>{let n=w("FirestoreQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:"firebase"});if(e.quotaExhausted)return{...n,status:"firing",message:`${e.name} hit a Firestore quota (RESOURCE_EXHAUSTED).`};if(null===e.readsToday||!e.readsLimit)return!1===e.quotaExhausted?{...n,status:"ok"}:n;let r=e.readsToday/e.readsLimit*100;return{...n,status:r>(t??80)?"firing":"ok",message:`${e.name} read ${f(e.readsToday)} of ${f(e.readsLimit)} documents today (${f(r)}%).`}}),AutoPauseRisk:(e,t)=>e.dbs&&e.dbs.filter(e=>"supabase"===e.provider).map(n=>{let r=w("AutoPauseRisk",n.id,{resourceId:n.id,title:n.name,provider:"supabase"});if("paused"===n.state)return{...r,status:"ok"};if(!n.lastApiAt)return r;let s=Math.floor((e.now.getTime()-n.lastApiAt.getTime())/864e5);return{...r,status:s>=(t??4)?"firing":"ok",message:`No API traffic for ${h(s,"day")}. Supabase pauses free projects after about 7 days.`}}),DnsProxiedToVercel:e=>e.dns&&e.dns.map(e=>w("DnsProxiedToVercel",e.id,{resourceId:e.resourceId,title:e.name,provider:"cloudflare",status:e.proxied&&e.pointsToVercel?"firing":"ok",message:`${e.name} points to Vercel through the Cloudflare proxy. Vercel recommends DNS only.`})),DbQuotaHigh:(e,t)=>e.dbs&&e.dbs.filter(e=>$.has(e.provider)).map(e=>{let n=w("DbQuotaHigh",e.id,{resourceId:e.id,title:e.name,provider:b(e)});return null==e.quotaPct?n:{...n,status:e.quotaPct>(t??80)?"firing":"ok",message:`${e.name}: ${e.quotaLabel??"usage"} at ${f(e.quotaPct)}% of the free plan.`}}),ComputeHigh:(e,t)=>e.compute?e.compute.map(n=>{let s=w("ComputeHigh",n.id,{resourceId:n.id,title:n.name,provider:"supabase",sampleAt:n.latest?new Date(n.latest.at):null}),a=(0,r.B)(n.latest,(0,r.V)(t),e.now);return null===a?s:{...s,status:a.length?"firing":"ok",message:a.length?`${n.name}: ${a.join(", ")}.`:`${n.name} compute is back under the limits.`}}):null,CredentialExpiring:(e,t)=>e.accounts.map(n=>{let r=w("CredentialExpiring",n.id,{accountId:n.id,title:`${n.provider} \xb7 ${n.label}`,provider:n.provider});if("drive"===n.provider&&"error"===n.status&&n.lastError?.includes("invalid_grant"))return{...r,status:"firing",message:"Google Drive access was removed (invalid_grant). Reconnect it."};if(!n.expiresAt)return{...r,status:"ok"};let s=m(n.expiresAt,e.now);return{...r,status:s<(t??14)?"firing":"ok",message:s<0?`The ${n.provider} credential ${n.label} has expired.`:`The ${n.provider} credential ${n.label} expires in ${h(s,"day")}.`}}),VulnerableDependency:e=>e.deps?e.deps.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("VulnerableDependency",t.appId,{resourceId:t.appId,title:n.name,provider:"github"});if(t.error)return[r];let a=(0,s.g)(t.vulns);return a?[{...r,status:"firing",message:(0,s.L)(t.vulns),..."critical"===a?{severity:"critical"}:{}}]:[{...r,status:"ok",message:`${n.name} has no moderate, high or critical dependency advisories.`}]}):null,FrameworkVulnerable:e=>e.frameworks?e.frameworks.flatMap(t=>{let n=e.apps.find(e=>e.id===t.appId);if(!n)return[];let r=w("FrameworkVulnerable",t.appId,{resourceId:t.appId,title:n.name});return"ok"===t.status?[{...r,status:"ok",message:`${n.name} runs Next.js ${t.version??"(unknown version)"} with no known advisories.`}]:"vulnerable"===t.status&&t.findings.length?[{...r,status:"firing",message:p(t.version,t.findings),..."CRITICAL"===(0,a.N)(t.findings)?{severity:"critical"}:{}}]:[r]}):null};e.s(["f",0,function(e,n,r){let s=[],a=new Set;for(let i of n){if(!i.enabled||r&&!r.includes(i.key)||!t._[i.key])continue;let n=A[i.key](e,i.threshold);n&&(a.add(i.key),s.push(...n))}return{observations:s,evaluated:a}}],658266);let I=["MonitorDown","HighLatency"],S=["telegram","discord","webhook","smtp"],x=e=>e.channels.some(e=>S.includes(e));function V(e,t){return t.collectorStale&&"CollectorStale"!==e.rule?"CollectorStale":e.resourceId&&I.includes(e.rule)?t.mutedApps.get(e.resourceId)??null:null}let D=(e,t)=>"critical"===t&&"warning"===e?"critical":e,R=(e,t)=>e.silencedUntilResolved||null!==e.silencedUntil&&e.silencedUntil.getTime()>t.getTime(),M=(e,t)=>`${e}|${t}`;e.s(["f",0,function(e,n,r,s,a){let i={open:[],touch:[],resolve:[]},o=new Map(s.map(e=>[e.key,e])),l=new Map(n.map(e=>[M(e.rule,e.subject),e])),u=new Set(e.map(e=>M(e.ruleKey,e.subject))),d=e=>i.resolve.push({id:e.id,pending:e.notifiedOpen?"resolve":null});for(let n of e){let e=o.get(n.ruleKey),s=l.get(M(n.ruleKey,n.subject));if(!e||!e.enabled){i.resolve.push({id:n.id,pending:null});continue}if(!r.has(n.ruleKey))continue;if(!s){i.resolve.push({id:n.id,pending:null});continue}if("unknown"===s.status)continue;let u=s.provider?a.incidents.get(s.provider)??null:null;if("firing"===s.status){let t=V(s,a),r=n.notifiedOpen&&null!==n.lastNotifiedAt&&a.now.getTime()-n.lastNotifiedAt.getTime()>=216e5,o={id:n.id,okStreak:0,lastSampleAt:s.sampleAt??n.lastSampleAt,lastSeenAt:a.now,message:s.message,causedBy:t,providerIncident:u},l=!n.notifiedOpen&&(!n.pendingSince||a.now.getTime()-n.pendingSince.getTime()>=216e5);(r||l)&&!R(n,a.now)&&!t&&null===n.pending&&x(e)&&(o.pending=r?"repeat":"open"),i.touch.push(o);continue}if(!t._[n.ruleKey].sampled||null===s.sampleAt){d(n);continue}if(!(null===n.lastSampleAt||s.sampleAt.getTime()>n.lastSampleAt.getTime()))continue;let c=n.okStreak+1;c>=2?d(n):i.touch.push({id:n.id,okStreak:c,lastSampleAt:s.sampleAt})}for(let e of n){if("firing"!==e.status||u.has(M(e.rule,e.subject))||a.maintenance.has(e.subject)||e.resourceId&&a.maintenance.has(e.resourceId))continue;let t=o.get(e.rule);if(!t)continue;let n=V(e,a);i.open.push({ruleKey:e.rule,subject:e.subject,resourceId:e.resourceId,accountId:e.accountId,severity:D(t.severity,e.severity),title:e.title,message:e.message,startedAt:a.now,lastSeenAt:a.now,lastSampleAt:e.sampleAt,causedBy:n,providerIncident:e.provider?a.incidents.get(e.provider)??null:null,pending:n||!x(t)?null:"open"})}return i}],211256)},582748,e=>{var t=e.i(89491),n=e.i(960063),r=e.i(800366),s=e.i(326003),a=e.i(843448),i=e.i(647006),o=e.i(328203);e.s(["d",0,function(e,i){let l={id:e.id,name:e.name,state:e.state,sizeBytes:null,sizeLimitBytes:null,lastApiAt:null,cuHours:null,cuLimit:null,readsToday:null,readsLimit:null,quotaExhausted:null};if("supabase_project"===e.kind){let t=(0,s.k)(s.B,e.data),n=(0,o.Z)(t.lastTrafficAt),r=(0,o.Z)(t.trafficAt),i=n??(r&&!t.trafficError?new Date(r.getTime()-6048e5):null);return{...l,provider:"supabase",sizeBytes:t.sizeBytes??null,sizeLimitBytes:a.R,lastApiAt:i}}if("neon_project"===e.kind){let t=(0,s.k)(s.s,e.data),n=(t.branches??[]).map(e=>e.logicalSize).filter(e=>"number"==typeof e);return{...l,provider:"neon",cuHours:null==t.computeSeconds?null:t.computeSeconds/3600,cuLimit:r.a.cuHours,sizeBytes:n.length?n.reduce((e,t)=>e+t,0):null,sizeLimitBytes:r.a.storageBytes}}if("firestore"===e.kind){let t=(0,s.k)(s.w,e.data),r=(0,o.Z)(t.opsAt),a=null!=t.reads&&r&&r.getTime()>=(0,n.a)(i).getTime()?t.reads:null,u=null!=t.latencyMs||null!=t.pingError;return{...l,provider:"firestore",readsToday:a,readsLimit:n.T.reads,quotaExhausted:u?"RESOURCE_EXHAUSTED"===t.pingReason:null}}if("turso_database"===e.kind){let n=(0,s.k)(s.N,e.data),r=(0,t.u)((0,t.G)(n,i));return{...l,provider:"turso",sizeBytes:n.orgStorageBytes??null,sizeLimitBytes:t.g.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("upstash_redis"===e.kind){let n=(0,s.k)(s.e,e.data),r=(0,t.u)((0,t.$)(n,i));return{...l,provider:"upstash",sizeBytes:n.storageBytes??null,sizeLimitBytes:t.W.storageBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}if("d1_database"===e.kind){let n=(0,s.k)(s.x,e.data),r=(0,t.u)((0,t.I)(n,i));return{...l,provider:"d1",sizeBytes:n.sizeBytes??null,sizeLimitBytes:t.M.dbBytes,quotaPct:r?.pct??null,quotaLabel:r?`${r.label} ${r.text}`:null}}return null},"S",0,function(e,t){let n=e.filter(e=>Array.isArray(e.data.records));if(!n.length)return null;let r=e.map(e=>e.name),s=[];for(let e of n){let n=t.filter(t=>(0,o.J)(t.name,r)===e.name.toLowerCase().replace(/\.$/,"")),a=[...new Set(n.flatMap(e=>(0,i.q)(e.data).vercel?.recommendedIps??[]))];for(let t of(0,i.q)(e.data).records){if(!(0,o.l)(t,a))continue;let r=t.name.toLowerCase().replace(/\.$/,""),i=n.find(e=>e.name.toLowerCase().replace(/\.$/,"")===r);s.push({id:`${e.id}:${t.id}`,resourceId:i?.id??e.id,name:t.name,proxied:t.proxied,pointsToVercel:!0})}}return s},"r",0,function(e,t){return e.length||t.length?[...e.map(e=>({id:e.id,name:e.name,tlsNotAfter:null,expiresAt:(0,o.Z)((0,i.q)(e.data).rdap?.expiresAt)})),...t.map(e=>({id:e.id,name:e.name,tlsNotAfter:(0,o.Z)((0,i.q)(e.data).tls?.notAfter),expiresAt:null}))]:null}])},293857,e=>{let t=["status","severity","rule","target","detail","cause","step","since","threshold"],n=["id","en"],r=/\{([a-zA-Z_]+)\}/g;e.s(["I",0,{en:"Test message: Watchbell's sentence about what it saw goes here.",id:"Pesan tes: di sini nanti kalimat Watchbell soal apa yang dilihatnya."},"z",0,"alerts.messageTemplates","_",0,function(e){if(!e||"object"!=typeof e||Array.isArray(e))return{};let s={};for(let[a,i]of Object.entries(e)){if(!i||"object"!=typeof i)continue;let e={};for(let s of n){let n=i[s];"string"==typeof n&&n.trim()&&null===function(e){if(e.length>1e3)return`Keep it under ${1e3.toLocaleString("en-US")} characters.`;for(let[,n]of e.matchAll(r))if(!t.includes(n))return`{${n}} isn't a field. Use ${t.map(e=>`{${e}}`).join(", ")}.`;return null}(n)&&(e[s]=n)}Object.keys(e).length&&(s[a]=e)}return s},"l",0,function(e,t){return e.replace(/\r\n?/g,"\n").replace(/[ \t]+$/gm,"").trim().split("\n").flatMap(e=>{let n=[...e.matchAll(r)].map(e=>e[1]).filter(e=>Object.hasOwn(t,e));return n.length&&n.every(e=>!t[e].trim())?[]:[e.replace(r,(e,n)=>Object.hasOwn(t,n)?t[n]:e)]}).join("\n").replace(/\n{3,}/g,"\n\n").trim()}])},485647,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),s=e.i(924924),a=e.i(618916),i=e.i(582748),o=e.i(794713),l=e.i(662860),u=e.i(764766),d=e.i(433609),c=e.i(800523);async function p(){return(0,s.f)().select({appId:a.links.fromResourceId,dbId:a.links.toResourceId}).from(a.links).where((0,t.u)(a.links.kind,"uses_db")).limit(500)}async function f(e){let f=(0,t.b)((0,t.u)(a.resources.monitored,!0),(0,t.M)(a.resources.goneAt)),[m,h,g,y,v]=await Promise.all([(0,o.d)(),(0,o.D)(),(0,s.f)().select({m:a.monitors,appName:a.resources.name,appMeta:a.resources.meta}).from(a.monitors).innerJoin(a.resources,(0,t.u)(a.resources.id,a.monitors.resourceId)).where((0,t.b)(f,(0,t.u)(a.monitors.paused,!1),(0,t.u)(a.monitors.ownerPaused,!1))),(0,s.f)().select({id:a.resources.id,name:a.resources.name,meta:a.resources.meta}).from(a.resources).where((0,t.b)(f,(0,t.u)(a.resources.kind,"app"))),(0,s.f)().select({id:a.accounts.id,provider:a.accounts.provider,label:a.accounts.label,expiresAt:a.accounts.expiresAt,status:a.accounts.status,lastError:a.accounts.lastError}).from(a.accounts)]),k=g.map(e=>e.m.id),w=k.length?await (0,s.f)().select({id:a.checks.monitorId,n:r.B`count(*)::int`,p95:r.B`percentile_cont(0.95) within group (order by ${a.checks.latencyMs})::float8`}).from(a.checks).where((0,t.b)((0,t.y)(a.checks.monitorId,k),(0,t.B)(a.checks.at,new Date(e.getTime()-6e5)),(0,t.u)(a.checks.inMaintenance,!1))).groupBy(a.checks.monitorId):[],b=y.map(e=>e.id),$=b.length?await (0,s.f)().selectDistinctOn([a.deployments.resourceId],{appId:a.deployments.resourceId,state:a.deployments.state,sha:a.deployments.commitSha,createdAt:a.deployments.createdAtProvider}).from(a.deployments).where((0,t.b)((0,t.y)(a.deployments.resourceId,b),(0,t.u)(a.deployments.target,"production"))).orderBy(a.deployments.resourceId,(0,n.A)(a.deployments.createdAtProvider)):[],A=await (0,s.f)().select({id:a.resources.id,name:a.resources.name,kind:a.resources.kind,state:a.snapshots.state,data:a.snapshots.data}).from(a.resources).innerJoin(a.snapshots,(0,t.u)(a.snapshots.resourceId,a.resources.id)).where((0,t.b)(f,(0,t.y)(a.resources.kind,["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database","zone","domain"]))),I=e=>A.filter(t=>t.kind===e),S=A.filter(e=>["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"].includes(e.kind)),x=I("zone"),V=I("domain"),D=await p(),R=await (0,l.Y)().catch(()=>null),M=b.length?await (0,d.a)(b).catch(()=>null):null,B=b.length?await (0,c.F)(b).catch(()=>null):null;return{now:e,lastMinuteRunAt:m,lastAnyRunAt:h,monitors:g.map(({m:e,appName:t,appMeta:n})=>{let r=w.find(t=>t.id===e.id),s="heartbeat"===e.kind;return{id:e.id,appId:e.resourceId,appName:t,url:s?e.name??"heartbeat":e.url,kind:s?"heartbeat":"http",state:e.state,failStreak:e.failStreak,lastStatus:e.lastStatus,lastError:e.lastError,lastCheckedAt:e.lastCheckedAt,p95Last10:r?.p95??null,checksLast10:r?.n??0,movedTo:s?null:(0,u.u)(e.url,{name:t,meta:n},y.filter(t=>t.id!==e.resourceId),{lastError:e.lastError})?.to??null}}),apps:y.map(e=>{let t=$.find(t=>t.appId===e.id);return{id:e.id,name:e.name,latestProduction:t?{state:t.state,sha:t.sha,createdAt:t.createdAt}:null}}),accounts:v,dbs:S.length?S.map(t=>(0,i.d)(t,e)).filter(e=>null!==e):null,domains:(0,i.r)(x,V),dns:(0,i.S)(x,V),links:D,compute:R,deps:M&&M.length?M:null,frameworks:B&&B.length?B:null}}e.s(["f",0,f])},532148,e=>{var t=e.i(875225),n=e.i(349129),r=e.i(518899),s=e.i(924924),a=e.i(618916),i=e.i(278619),o=e.i(658266),l=e.i(211256),u=e.i(293857),d=e.i(275426),c=e.i(154491),p=e.i(485647),f=e.i(739886),m=e.i(111970);let h={vercel:"Vercel",supabase:"Supabase",neon:"Neon",cloudflare:"Cloudflare",firebase:"Firebase",gcp:"Google Cloud"};async function g(){return(await (0,s.f)().select().from(a.alertRules)).filter(e=>(0,i.h)(e.key)).map(e=>({key:e.key,severity:e.severity,threshold:e.threshold,enabled:e.enabled,channels:e.channels}))}async function y(e,n={}){let[r,u,v,k,w,b]=await Promise.all([(0,p.f)(e),g(),(0,s.f)().select().from(a.alerts).where((0,t.M)(a.alerts.resolvedAt)),(0,s.f)().select({provider:a.providerStatus.provider,state:a.providerStatus.state}).from(a.providerStatus),(0,f.f)(),(0,m.I)()]),$=new Map(r.accounts.map(e=>[e.id,e.provider])),A=v.filter(e=>!(0,c.O)(b,e.ruleKey,e.accountId?$.get(e.accountId):null)),I=(0,o.f)(r,u,n.only),S=I.evaluated,x=I.observations.filter(e=>!(0,c.O)(b,e.rule,e.provider)),V=u.find(e=>"CollectorStale"===e.key),D=void 0===r.lastAnyRunAt?r.lastMinuteRunAt:r.lastAnyRunAt,R=!!V?.enabled&&(!D||e.getTime()-D.getTime()>(V.threshold??5)*6e4),M=new Map((r.dbs??[]).filter(e=>"paused"===e.state).map(e=>[e.id,e.name])),B=new Map(r.links.filter(e=>M.has(e.dbId)).map(e=>[e.appId,`DatabasePaused \xb7 ${M.get(e.dbId)}`])),T=new Map(k.filter(e=>"warn"===e.state||"err"===e.state).map(e=>["gcp"===e.provider?"firebase":e.provider,h[e.provider]??e.provider])),C=(0,d.u)(w,r.monitors.map(e=>({id:e.id,appId:e.appId})),e,r.apps.map(e=>e.id)),j=A.filter(e=>(0,i.h)(e.ruleKey)).map(e=>({id:e.id,ruleKey:e.ruleKey,subject:e.subject,okStreak:e.okStreak,lastSampleAt:e.lastSampleAt,silencedUntil:e.silencedUntil,silencedUntilResolved:e.silencedUntilResolved,notifiedOpen:e.notifiedOpen,lastNotifiedAt:e.lastNotifiedAt,pending:e.pending,pendingSince:e.pendingSince})),_=(0,l.f)(j,x,S,u,{now:e,collectorStale:R,mutedApps:B,incidents:T,maintenance:C});return _.open.length||_.touch.length||_.resolve.length?(await (0,s.f)().transaction(async n=>{for(let t of _.open)await n.insert(a.alerts).values({...t,pendingSince:t.pending?e:null}).onConflictDoNothing();for(let r of _.touch){let{id:s,pending:i,...o}=r;await n.update(a.alerts).set({...o,...i?{pending:i,pendingSince:e}:{}}).where((0,t.b)((0,t.u)(a.alerts.id,s),(0,t.M)(a.alerts.resolvedAt)))}for(let r of _.resolve)await n.update(a.alerts).set({resolvedAt:e,pending:r.pending,pendingSince:r.pending?e:null}).where((0,t.b)((0,t.u)(a.alerts.id,r.id),(0,t.M)(a.alerts.resolvedAt)))}),{opened:_.open.length,resolved:_.resolve.length}):{opened:0,resolved:0}}let v=r.B`case ${a.alerts.severity} when 'critical' then 0 when 'warning' then 1 else 2 end`;async function k(e=new Set){return(await (0,s.f)().select({a:a.alerts,name:a.resources.name,kind:a.resources.kind}).from(a.alerts).leftJoin(a.resources,(0,t.u)(a.resources.id,a.alerts.resourceId)).where((0,t.b)((0,t.M)(a.alerts.resolvedAt),(0,m.s)(e))).orderBy(v,(0,n.A)(a.alerts.startedAt)).limit(200)).map(({a:e,name:t,kind:n})=>({...e,resourceName:t??null,resourceKind:n??null}))}async function w(){return k(await (0,m.I)())}async function b(e){return(await (0,s.f)().select({id:a.alerts.id,ruleKey:a.alerts.ruleKey,severity:a.alerts.severity,title:a.alerts.title,resourceId:a.alerts.resourceId,startedAt:a.alerts.startedAt,resolvedAt:a.alerts.resolvedAt}).from(a.alerts).where((0,t.b)((0,t.E)(a.alerts.resolvedAt),(0,t.B)(a.alerts.resolvedAt,new Date(e.getTime()-6048e5)))).orderBy((0,n.A)(a.alerts.resolvedAt)).limit(50)).flatMap(e=>e.resolvedAt?[{...e,resolvedAt:e.resolvedAt}]:[])}async function $(){try{let[e]=await (0,s.f)().select({value:a.settings.value}).from(a.settings).where((0,t.u)(a.settings.key,u.z)).limit(1);return(0,u._)(e?.value)}catch{return{}}}e.s(["$",0,y,"q",0,k,"I",0,b,"i",0,w,"w",0,$])},433609,751762,970465,800523,e=>{var t=e.i(90801),n=e.i(875225),r=e.i(349129),s=e.i(518899),a=e.i(924924),i=e.i(618916),o=e.i(921991),l=e.i(547499),u=e.i(479301),d=e.i(32391),c=e.i(804581),p=e.i(891262),f=e.i(581321),m=e.i(413230),h=e.i(455744),g=e.i(971724),y=e.i(105954),v=e.i(206033),k=e.i(455037);let w=h.z.array(g.z.object({name:y.z.string(),type:y.z.string(),sha:y.z.string(),size:v.z.number().optional()}));async function b(e,t,n,r={},s=null){if(!(0,k.M)(t)||!(0,k.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or ref."};if(null!==s&&(0,f.Q)(s)!==s)return{ok:!1,kind:"format",error:"That isn't a folder in a repository."};let a=s?s.split("/").map(encodeURIComponent).join("/"):"",i=await (0,k.j)(`/repos/${(0,k.f)(t)}/contents/${a}?ref=${encodeURIComponent(n)}`,e,r);if(!i.ok)return i;let o=w.safeParse(i.data);return o.success?{ok:!0,data:o.data.filter(e=>"file"===e.type&&/^[0-9a-f]{40}$/.test(e.sha)).map(e=>({name:e.name,sha:e.sha,size:e.size??0}))}:{ok:!1,kind:"format",error:"GitHub answered the file list in a format the console doesn't recognise."}}async function $(e,t,n,r={}){if(!(0,k.M)(t)||!(0,k.c)(n))return{ok:!1,kind:"format",error:"That isn't a repository name or branch."};let s=await (0,k.j)(`/repos/${(0,k.f)(t)}/git/ref/heads/${n.split("/").map(encodeURIComponent).join("/")}`,e,r);return s.ok?{ok:!0,data:!0}:"missing"===s.kind?{ok:!0,data:!1}:s}function A(e,t,n,r,s,a={}){return(0,k.V)(e,t,n,r,s,a)}async function I(e,t,n={}){if(!(0,k.M)(t))return{ok:!1,kind:"format",error:"That isn't a repository name."};let r=await (0,k.j)(`/repos/${(0,k.f)(t)}/dependabot/alerts?state=open&ecosystem=npm&per_page=100`,e,n);if(!r.ok)return"scope"===r.kind||"missing"===r.kind?{ok:!0,data:{denied:!0}}:r;let s=(0,m.E)(r.data);return s?{ok:!0,data:{alerts:s}}:{ok:!1,kind:"format",error:"GitHub answered the Dependabot alerts in a format the console doesn't recognise."}}var S=e.i(502240);async function x(){let[e]=await (0,a.f)().select().from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).orderBy((0,r.M)(i.accounts.createdAt)).limit(1);if(!e)return{error:"GitHub isn't connected."};let t=(0,o.V)({ciphertext:e.credentialCiphertext,iv:e.credentialIv},(0,l.f)().OPS_ENCRYPTION_KEY);return t?{token:t,accountId:e.id}:{error:"Can't read the stored GitHub credential. Replace it on Connections."}}async function V(){let[e]=await (0,a.f)().select({value:i.settings.value}).from(i.settings).where((0,n.u)(i.settings.key,"deps.scanAll")).limit(1);return e?.value===!0}let D=e=>{let t=(0,S.w)(e);return{dir:(0,f.Q)((e??{}).rootDirectory),unsupported:(0,f.l)((e??{}).rootDirectoryUnsupported),branch:(0,S.i)((0,S.V)(e),null),...t?{fallback:t}:{}}};async function R(e){let t=[...new Set(e.filter(u.f))],r=new Map;if(!t.length)return r;let s=await (0,a.f)().select({repoId:i.appRepos.repoId,name:i.resources.name,monitored:i.resources.monitored,meta:i.resources.meta}).from(i.appRepos).innerJoin(i.resources,(0,n.u)(i.resources.id,i.appRepos.appId)).where((0,n.b)((0,n.y)(i.appRepos.repoId,t),(0,n.M)(i.resources.goneAt))).limit(1e3);for(let e of(s.sort((e,t)=>Number(!!t.monitored)-Number(!!e.monitored)||(e.name<t.name?-1:+(e.name>t.name))),s))r.has(e.repoId)||r.set(e.repoId,D(e.meta));return r}async function M(){let e={id:i.githubRepos.id,fullName:i.githubRepos.fullName,defaultBranch:i.githubRepos.defaultBranch,scannedAt:i.dependencyScans.scannedAt},t=(0,n.b)((0,n.M)(i.githubRepos.goneAt),(0,n.u)(i.githubRepos.archived,!1)),r=await V()?await (0,a.f)().select(e).from(i.githubRepos).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500):await (0,a.f)().selectDistinct(e).from(i.appRepos).innerJoin(i.githubRepos,(0,n.u)(i.githubRepos.id,i.appRepos.repoId)).leftJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.githubRepos.id)).where(t).limit(500),s=r.length?await R(r.map(e=>e.id)):new Map;return(0,m.M)(r.map(e=>{let t=s.get(e.id);return{...e,rootDir:t?.dir??null,rootDirUnsupported:t?.unsupported??null,prodBranch:t?.branch??null,...t?.fallback?{prodFallback:t.fallback}:{}}}))}let B=(e,t)=>e.length>t?`${e.slice(0,t-1)}…`:e;async function T(e,t){let n=new Date;await (0,a.f)().insert(i.dependencyScans).values({repoId:e,...t,updatedAt:n}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{...t,updatedAt:n}})}async function C(e){return(0,a.f)().select({id:i.dependencyVulns.id,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,vulnId:i.dependencyVulns.vulnId,severity:i.dependencyVulns.severity,fixedVersion:i.dependencyVulns.fixedVersion,summary:i.dependencyVulns.summary,aliases:i.dependencyVulns.aliases,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct,source:i.dependencyVulns.source}).from(i.dependencyVulns).where((0,n.b)((0,n.u)(i.dependencyVulns.repoId,e),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(2e3)}function j(e,t){for(let n of d.a){let r=e.find(e=>e.name===n.path);if(r)return{path:(0,f.H)(t,n.path),kind:n.kind,sha:r.sha}}return null}async function _(e,r,s,o={}){let l=()=>({...o,timeoutMs:Math.max(1e3,Math.min(s-Date.now(),1e4))}),u=async e=>(await T(r.id,{error:B(e,300),scannedAt:new Date}).catch(()=>void 0),{status:"failed",error:e}),h=r.defaultBranch??"HEAD",g=null;for(let t of[r.prodBranch,r.prodFallback]){if(t&&t===r.defaultBranch)break;let n=(0,S.i)(t,r.defaultBranch);if(!n)continue;let s=await $(e,r.fullName,n,l());if(!s.ok)return u(s.error);if(s.data){g=n;break}}let y=null!==g;g&&(h=g);let v=y?`Scanned ${g}, the branch production is built from.`:null,w=(0,f.Q)(r.rootDir),x=w?null:(0,f.l)(r.rootDirUnsupported),V=x?`The Vercel Root Directory "${x}" couldn't be used (Watchbell reads plain folder names, at most 4 deep); scanned the repository root.`:null,D=await b(e,r.fullName,h,l(),w);if(!D.ok)return u(w&&"missing"===D.kind?`The folder ${(0,f.x)(w)} isn't in ${r.fullName} on ${h}.`:D.error);let R=j(D.data,w),M=D.data.find(e=>"package.json"===e.name)??null,E=!1,O=null;if(w&&M&&!R){let t=await b(e,r.fullName,h,l());if(!t.ok)return u(t.error);E=null!==(R=j(O=t.data,null))}let N=R?R.sha:M?`pkg:${M.sha}`:null,z=N&&w?`${w}:${N}${E&&M?`+${M.sha}`:""}`:N&&x?`odd:${N}`:N,L=z&&y?`br:${g}:${z}`:z,[P]=await (0,a.f)().select().from(i.dependencyScans).where((0,n.u)(i.dependencyScans.repoId,r.id)).limit(1),H=new Date;if(!(0,m.U)(P??null,L,H,o.force))return{status:"unchanged"};if(!L){let e=await C(r.id);return e.length&&await (0,a.f)().update(i.dependencyVulns).set({resolvedAt:H}).where((0,n.y)(i.dependencyVulns.id,e.map(e=>e.id))),await T(r.id,{lockfilePath:null,lockfileSha:null,packageCount:0,scannedAt:H,queriedAt:H,error:null,note:B([v,V,`No package.json or lockfile ${w?"in":"at"} ${(0,f.x)(w)}.`].filter(Boolean).join(" "),300)}),{status:"scanned",vulns:0,packages:0,note:"no package.json"}}let U=(0,f.H)(w,"package.json"),q=M?await A(e,r.fullName,U,h,k.$,l()):null;if(q&&!q.ok)return u(q.error);let W=q?.ok&&q.data?(0,d.b)(q.data):null,F=null,K="package-json",J=E&&R?`Scanned ${(0,f.x)(w)} with the repository root's ${R.path} (workspaces).`:null;if(R){if(2e3>s-Date.now())return u("Time budget used before the lockfile was read; the next run tries again.");let t=await A(e,r.fullName,R.path,h,0xf00000,{...o,timeoutMs:Math.max(1e3,Math.min(s-Date.now(),2e4))});if(!t.ok)return u(t.error);let n=!0;if(E&&w&&t.data&&!(0,f.p)(R.kind,t.data,w)){let t=O?.some(e=>"package.json"===e.name)?await A(e,r.fullName,"package.json",h,k.$,l()):null;if(t&&!t.ok)return u(t.error);n=(0,f.F)(t?.data??null,w)}n?(F=t.data?(0,d.D)(R.kind,t.data):null,K=R.kind,F||(J=[J,`${R.path} couldn't be read; the versions come from package.json ranges (approximate).`].filter(Boolean).join(" "))):(J=`The repository root's ${R.path} isn't a workspace that includes ${w}, so the versions come from ${U} ranges (approximate).`,R=null)}if(F){let e=(0,t.m)(F,W);F=e.deps,e.stale.length&&(J=[J,(0,t.M)(e.stale)].filter(Boolean).join(" "))}else F=W?(0,d.e)(W):[],K="package-json",J??=R?null:"No lockfile: the versions come from package.json ranges (approximate).";let Z=await C(r.id),G=[];if(F.length){let e=await (0,p.K)(F,{fetch:o.fetch,deadline:s});if(!e.ok)return u(e.error);let t=(0,m.A)(Z,!0===o.force),n=await (0,p.J)((0,m.z)(F,e.ids,t),{fetch:o.fetch,deadline:s});if(!n.ok)return u(n.error);G=(0,c.i)(F,e.ids,n.map,t)}if(s-Date.now()>1500){let t=await I(e,r.fullName,l());t.ok&&"alerts"in t.data?G=(0,m.R)(G,t.data.alerts,F):t.ok&&(J=[J,"Dependabot alerts aren't readable with this token (optional: Dependabot alerts: Read)."].filter(Boolean).join(" "))}let Y=(0,m.h)(Z,G,(0,d.K)(W));J=[v,V,J].filter(Boolean).join(" ")||null;let Q=new Date;return await (0,a.f)().transaction(async e=>{for(let t of(Y.insert.length&&await e.insert(i.dependencyVulns).values(Y.insert.map(e=>({repoId:r.id,package:e.package,installedVersion:e.installedVersion,vulnId:e.vulnId,aliases:e.aliases,severity:e.severity,fixedVersion:e.fixedVersion,summary:e.summary,direct:e.direct,dev:e.dev,source:e.source,firstSeenAt:Q,lastSeenAt:Q}))).onConflictDoNothing(),Y.update))await e.update(i.dependencyVulns).set({severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,aliases:t.aliases,dev:t.dev,direct:t.direct,lastSeenAt:Q}).where((0,n.u)(i.dependencyVulns.id,t.id));Y.resolve.length&&await e.update(i.dependencyVulns).set({resolvedAt:Q}).where((0,n.b)((0,n.y)(i.dependencyVulns.id,Y.resolve),(0,n.M)(i.dependencyVulns.resolvedAt))),await e.insert(i.dependencyScans).values({repoId:r.id,lockfilePath:R?.path??(M?U:null),lockfileSha:L,packageCount:F.length,scannedAt:Q,queriedAt:Q,error:null,note:J?B(J,300):null,updatedAt:Q}).onConflictDoUpdate({target:i.dependencyScans.repoId,set:{lockfilePath:R?.path??(M?U:null),lockfileSha:L,packageCount:F.length,scannedAt:Q,queriedAt:Q,error:null,note:J?B(J,300):null,updatedAt:Q}})}),{status:"scanned",vulns:Y.insert.length+Y.update.length,packages:F.length,note:"package-json"===K?J:null}}async function E(e,t={}){var r,s;let o,l,u,d,c=await x();if("error"in c)return{error:c.error};let{first:p,only:f,skip:m,...h}=t,g=(r=await M(),o=(s={first:p,only:f,skip:m}).only?new Set(s.only):null,l=new Set(s.skip??[]),u=(o?r.filter(e=>o.has(e.id)):r).filter(e=>!l.has(e.id)),d=new Set(s.first??[]),[...u.filter(e=>d.has(e.id)),...u.filter(e=>!d.has(e.id))]),y={scanned:0,unchanged:0,failed:[],left:0,done:[],listed:g.map(e=>e.id)};for(let[t,n]of g.entries()){if(e-Date.now()<4e3){y.left=g.length-t;break}y.done.push(n.id);try{let t=await _(c.token,n,e,h);"scanned"===t.status?y.scanned++:"unchanged"===t.status?y.unchanged++:y.failed.push(`${n.fullName}: ${t.error}`)}catch(e){y.failed.push(`${n.fullName}: ${e instanceof Error?e.name:"error"}`)}}return await (0,a.f)().delete(i.dependencyVulns).where((0,n.b)((0,n.E)(i.dependencyVulns.resolvedAt),(0,n.S)(i.dependencyVulns.resolvedAt,new Date(Date.now()-7776e6)))).catch(()=>void 0),y}let O=async()=>(await (0,a.f)().select({id:i.accounts.id}).from(i.accounts).where((0,n.u)(i.accounts.provider,"github")).limit(1)).length>0;function N(e){let t=e.failed.filter(e=>!/didn't answer in time|no time left|time budget|rate limit/i.test(e)),n=e.failed.length-t.length+(e.left??0);n&&console.info(`deps: ${n} repositor${1===n?"y":"ies"} wait for the next run`);let r=t.slice(0,3);return t.length>3&&r.push(`+${t.length-3} more`),r.length?r.join("; "):null}async function z(e){if(!await O())return null;if(e-Date.now()<4e3)return console.info("deps: no time left today; the scan resumes tomorrow"),null;let t=await E(e);if("error"in t){let e;return(e=t.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:t.error}return N(t)}async function L(e,t,r={}){let{marked:s,onlyMarked:o}=t;if(!await O())return{problem:null,settled:[...s],done:[],complete:!0};let l=s.filter(u.f),d=l.length?await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,l)).limit(5*l.length):[],c=[...new Set(d.map(e=>e.repoId))],p=e=>d.filter(t=>t.appId===e).map(e=>e.repoId),f=s.filter(e=>!p(e).length);if(o&&!c.length)return{problem:null,settled:[...s],done:[],complete:!0};if(e-Date.now()<4e3)return{problem:null,settled:f,done:[],complete:!1};let m=(t.skip??[]).filter(e=>!c.includes(e)),h=await E(e,{...r,first:c,...o?{only:c}:{skip:m}});if("error"in h){let e;return{problem:(e=h.error,/didn't answer in time|no time left|time budget|rate limit/i.test(e))?null:h.error,settled:[...s],done:[],complete:!0}}let g=new Set([...h.done,...c.filter(e=>!h.listed.includes(e))]);return{problem:N(h),settled:s.filter(e=>p(e).every(e=>g.has(e))),done:h.done,complete:0===h.left}}async function P(e){let t=e.filter(u.f);if(!t.length)return[];let r=await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId,error:i.dependencyScans.error}).from(i.appRepos).innerJoin(i.dependencyScans,(0,n.u)(i.dependencyScans.repoId,i.appRepos.repoId)).where((0,n.b)((0,n.y)(i.appRepos.appId,t),(0,n.E)(i.dependencyScans.scannedAt)));if(!r.length)return[];let s=await (0,a.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,severity:i.dependencyVulns.severity,summary:i.dependencyVulns.summary,dev:i.dependencyVulns.dev,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(r.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt))).limit(1e4);return r.map(e=>({appId:e.appId,repoId:e.repoId,error:e.error,vulns:s.filter(t=>t.repoId===e.repoId).map(e=>({package:e.package,installedVersion:e.installedVersion,fixedVersion:e.fixedVersion,severity:e.severity,summary:e.summary,dev:e.dev,direct:e.direct}))}))}async function H(e,t=new Set){let r=e.filter(u.f),o=new Map;if(!r.length)return o;let l=await (0,a.f)().select({appId:i.appRepos.appId,repoId:i.appRepos.repoId}).from(i.appRepos).where((0,n.y)(i.appRepos.appId,r));if(!l.length)return o;let d=await (0,a.f)().select({repoId:i.dependencyVulns.repoId,package:i.dependencyVulns.package,installedVersion:i.dependencyVulns.installedVersion,fixedVersion:i.dependencyVulns.fixedVersion,vulnId:i.dependencyVulns.vulnId,aliases:i.dependencyVulns.aliases,severity:i.dependencyVulns.severity,direct:i.dependencyVulns.direct}).from(i.dependencyVulns).where((0,n.b)((0,n.y)(i.dependencyVulns.repoId,[...new Set(l.map(e=>e.repoId))]),(0,n.M)(i.dependencyVulns.resolvedAt),(0,n.u)(i.dependencyVulns.direct,!0),(0,n.E)(i.dependencyVulns.fixedVersion))).limit(2e3),c=d.some(e=>"next"===e.package)?new Set((await (0,a.f)().selectDistinct({appId:i.dependencyPrs.appId}).from(i.dependencyPrs).where((0,n.b)((0,n.y)(i.dependencyPrs.appId,r),(0,n.$)(i.dependencyPrs.stage,["merged","closed"]),(0,n.B)(i.dependencyPrs.openedAt,new Date(Date.now()-12096e5)),s.B`${i.dependencyPrs.packages} @> '["next"]'::jsonb`)).limit(r.length)).map(e=>e.appId)):new Set;for(let e of l){let n=t.has(e.appId)||c.has(e.appId);(0,m.B)(d.filter(t=>t.repoId===e.repoId&&!(n&&"next"===t.package))).length&&o.set(e.appId,e.repoId)}return o}e.s(["R",0,4e4,"o",0,12e3,"d",0,4e3,"e",0,z,"O",0,L,"C",0,H,"a",0,P],433609);var U=e.i(442473);function q(e){let t=e instanceof Error&&e.cause instanceof Error?e.cause:e,n=(t instanceof Error?t.message:"").split("\n")[0].replace(/Bearer\s+\S+/gi,"Bearer [hidden]").trim()||"failed";return n.length>200?`${n.slice(0,200)}…`:n}e.s(["f",0,q],751762);var W=e.i(656083);let F=String.raw`\d+\.\d+\.\d+(?:-[0-9A-Za-z.]+)?`,K="[\"'`]";function J(e){let t=/^(\d+)\.\d+\.\d+(?:-[0-9A-Za-z.]+)?$/.exec(e);return null!==t&&Number(t[1])>=9&&1e3>Number(t[1])}let Z={"&amp;":"&","&quot;":'"',"&#39;":"'","&#x27;":"'","&#x2F;":"/","&#47;":"/"},G=e=>e.replace(/&(?:amp|quot|#39|#x27|#x2F|#47);/gi,e=>Z[e]??Z[e.toLowerCase()]??e),Y=RegExp(String.raw`\bnext\s*=\s*\{\s*version\s*:\s*${K}(${F})${K}`,"g"),Q=RegExp(String.raw`version\s*:\s*${K}(${F})${K}\s*,\s*appDir\s*:`,"g"),X=RegExp(String.raw`appDir\s*:\s*[^,{}()]{1,16},\s*version\s*:\s*${K}(${F})${K}`,"g"),ee=/\bnext\s*=\s*\{\s*version\s*(?::\s*([A-Za-z_$][\w$]*)\s*)?[,}]/g,et=e=>e.replace(/[$]/g,"\\$");var en=e.i(267485);async function er(e,t,n={}){let r=n.deadline??1/0,s=n.now??(()=>new Date),a=e=>Math.floor(Math.min(e,r)-Date.now()),i=Date.now()+15e3;if(0>=a(i))return null;let o=(e,n)=>({version:t?.version??null,status:e,findings:t?.findings??[],reason:n,checkedAt:s()}),l=(e,t)=>(0,U.K)(e,{maxBytes:3145728,timeoutMs:a(i),lookup:n.lookup,fetch:n.fetch,userAgent:"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)",sameOrigin:t}),u=await l(`https://${e}/`,"www");if(!u.ok&&u.error===U.l)return o("unknown","the site redirects to another host");if(!u.ok||200!==u.status)return Date.now()>=r?null:o("error",`Couldn't load the site: ${u.ok?`HTTP ${u.status}`:u.error}`);let d=(function(e,t){let n;try{n=new URL(t)}catch{return[]}let r=new Set,s=[];for(let t of e.matchAll(/<script\b[^>]*?\ssrc\s*=\s*(["'])(.*?)\1/gi)){let e;try{e=new URL(G(t[2].trim()),n)}catch{continue}if("https:"===e.protocol&&e.origin===n.origin&&e.pathname.startsWith("/_next/static/")&&(e.hash="",!r.has(e.href))){var a;r.add(e.href),s.push({href:e.href,rank:(a=e.pathname,/\/main-app[-.]/.test(a)?0:/\/(main|app-index)[-.]/.test(a)?1:/\/(webpack|polyfills|framework)[-.]/.test(a)?3:2),i:s.length})}}return s.sort((e,t)=>e.rank-t.rank||e.i-t.i).map(e=>e.href)})(u.body,u.url).slice(0,12);if(0===d.length)return o("unknown",u.body.includes("/_next/")?"version not exposed":"not a Next.js site");let c=null,p=0,f=!1;for(let e of d){if(0>=a(i)){f=!0;break}let t=await l(e,!0);if(t.ok&&200===t.status&&(p++,c=function(e){for(let t of e.matchAll(Y))if(J(t[1]))return t[1];for(let t of[Q,X])for(let n of e.matchAll(t))if(J(n[1]))return n[1];for(let t of e.matchAll(ee)){let n=t[1]??"version",r=RegExp(String.raw`(?:^|[^\w$.])${et(n)}\s*=\s*${K}(${F})${K}`,"g"),s=null;for(let n of e.matchAll(r)){if((n.index??0)>=(t.index??0))break;s=n[1]}if(s&&J(s))return s}return null}(t.body)))break}if(!c)return Date.now()>=r?null:f||0>=a(i)?o("error","Reading the site's scripts took longer than 15 s"):0===p?o("error","Couldn't load the site's scripts"):o("unknown","version not exposed");let m=a(Date.now()+1e4);if(m<=0)return null;let h=await (0,en.y)(c,{timeoutMs:m,fetch:n.fetch});return h.ok?{version:c,status:h.findings.length?"vulnerable":"ok",findings:h.findings,reason:null,checkedAt:s()}:Date.now()>=r?null:o("error",h.error)}e.s(["y",0,35e3,"P",0,er,"F",0,function(e,t){return Math.min(t+35e3,e+55e3)}],970465);var es=e.i(7494),ea=e.i(764766),ei=e.i(195191),eo=e.i(146394);function el(e){return{version:e.version,status:e.status,findings:Array.isArray(e.findings)?e.findings:[],reason:e.reason,checkedAt:e.checkedAt}}async function eu(e={}){let t=e.only;if(t&&!t.length)return[];let r=e.first??[],o=e.skip??[],l=await (0,a.f)().select({id:i.resources.id,name:i.resources.name,meta:i.resources.meta,sec:i.appSecurity}).from(i.resources).leftJoin(i.appSecurity,(0,n.u)(i.appSecurity.resourceId,i.resources.id)).where((0,n.b)((0,n.u)(i.resources.kind,"app"),(0,n.u)(i.resources.monitored,!0),(0,n.M)(i.resources.goneAt),t?(0,n.y)(i.resources.id,t):void 0,o.length?(0,n.$)(i.resources.id,[...o]):void 0)).orderBy(...r.length?[s.B`case when ${(0,n.y)(i.resources.id,r)} then 0 else 1 end`]:[],s.B`${i.appSecurity.checkedAt} asc nulls first`,i.resources.name).limit(eo.O.apps);if(!l.length)return[];r.length&&l.sort((e,t)=>Number(!r.includes(e.id))-Number(!r.includes(t.id)));let u=await (0,a.f)().select({resourceId:i.monitors.resourceId,url:i.monitors.url}).from(i.monitors).where((0,n.y)(i.monitors.resourceId,l.map(e=>e.id))).orderBy(i.monitors.createdAt).limit(eo.O.monitors);return l.map(e=>({id:e.id,name:e.name,prev:e.sec?el(e.sec):null,host:(0,ea.Y)(e.meta)?.primaryDomain??(0,ei.m)(e.name,u.filter(t=>t.resourceId===e.id).map(e=>e.url))}))}async function ed(e,t){await (0,a.f)().transaction(async r=>{await r.execute(s.B`select pg_advisory_xact_lock(hashtext(${`app_security:${e.id}`}))`);let[a]=await r.select().from(i.appSecurity).where((0,n.u)(i.appSecurity.resourceId,e.id)).limit(1),o=a?el(a):null;if(o&&o.checkedAt.getTime()>=t.checkedAt.getTime())return;let l="unknown"===t.status||"error"===t.status?{...t,version:o?o.version:t.version,findings:o?o.findings:t.findings}:t,u={framework:"next",version:l.version,status:l.status,findings:l.findings,reason:l.reason,checkedAt:l.checkedAt};await r.insert(i.appSecurity).values({resourceId:e.id,...u}).onConflictDoUpdate({target:i.appSecurity.resourceId,set:u,setWhere:s.B`${i.appSecurity.checkedAt} < excluded.checked_at`});let d=(0,es.t)(e.name,o,l);d&&await (0,W.f)([{type:"system",kind:d.kind,message:d.message,detail:d.detail,resourceId:e.id,at:l.checkedAt,reason:"ok"===d.kind?"NextClean":"NextVulnerable"}],r)})}async function ec(e,t={}){let n=await eu(t),r=0,s=0,a=[],i=[],o=[];return await (0,U.P)(n,3,async t=>{if(e-Date.now()<3e3)return void s++;o.push(t.id);try{let n=await er(t.host,t.prev,{deadline:e});if(!n)return void s++;await ed(t,n),r++,i.push(t.id)}catch(e){a.push(`${t.name}: ${q(e)}`),i.push(t.id)}}),{checked:r,skipped:s,failed:a,done:i,listed:n.map(e=>e.id),started:o}}async function ep(e){let t=e.filter(u.f);return t.length?(await (0,a.f)().select().from(i.appSecurity).where((0,n.y)(i.appSecurity.resourceId,t)).limit(t.length)).map(e=>{let t=el(e);return{appId:e.resourceId,version:t.version,status:t.status,findings:t.findings}}):[]}e.s(["F",0,ep,"h",0,ec,"Z",0,el],800523)},111970,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(347540),s=e.i(924924),a=e.i(473283),i=e.i(618916),o=e.i(659846),l=e.i(154491),u=e.i(960049);let d=["supabase_project","neon_project","firestore","turso_database","upstash_redis","d1_database"],c=e=>{if("string"!=typeof e)return e;try{return JSON.parse(e)}catch{return null}},p=(0,r.cache)(async()=>{let e=n.B.join(d.map(e=>n.B`${e}`),n.B`, `),t=await (0,s.f)().execute(n.B`select
     (select coalesce(jsonb_agg(distinct ${i.accounts.provider}::text), '[]'::jsonb) from ${i.accounts}) as providers,
     exists(select 1 from ${i.resources} where ${i.resources.kind}::text in (${e}) and ${i.resources.goneAt} is null) as databases,
     ${(0,u.W)()} as off`),[r]=(0,a.f)(t),p=c(r?.providers);return{providers:(Array.isArray(p)?p:[]).filter(e=>o.f.includes(e)),databases:r?.databases===!0||r?.databases==="t",off:(0,l.N)(c(r?.off))}});async function f(){try{return(0,l.I)((await p()).off)}catch{return new Set}}e.s(["s",0,function(e){let r=function(e){if(!e.size)return;let{ruleKeys:r,providers:s}=(0,l.s)(e),a=[];if(r.length&&a.push(n.B`${i.alerts.ruleKey} in (${n.B.join(r.map(e=>n.B`${e}`),n.B`, `)})`),s.length){let e=n.B.join(s.map(e=>n.B`${e}`),n.B`, `);a.push(n.B`(${i.alerts.ruleKey} = 'CredentialExpiring' and ${i.alerts.accountId} in (select ${i.accounts.id} from ${i.accounts} where ${i.accounts.provider}::text in (${e})))`)}return a.length?(0,t.F)(...a):void 0}(e);return r?(0,t.R)(r):void 0},"I",0,f])},960049,e=>{var t=e.i(875225),n=e.i(518899),r=e.i(924924),s=e.i(618916);e.i(154491);var a=e.i(273083);let i={checks:[3,7,14],rollupsHourly:[60,90,180],storedLogs:[3,7,14],deployments:[30,45,60,90],events:[60,90,180],alerts:[60,90,180],collectorRuns:[7,14,30],recommendationDismissals:[30,90,180]},o=Object.keys(i),l=(e,t)=>"number"==typeof t&&i[e].includes(t);async function u(e){let[n]=await (0,r.f)().select({value:s.settings.value}).from(s.settings).where((0,t.u)(s.settings.key,e)).limit(1);return n?.value??null}let d=async()=>(function(e){let t={...a.f};if(!e||"object"!=typeof e)return t;for(let n of o){let r=e[n];l(n,r)&&(t[n]=r)}return t})(await u("retention.days"));e.s(["l",0,()=>u("notify.language"),"J",0,d,"W",0,()=>n.B`(select ${s.settings.value} from ${s.settings} where ${s.settings.key} = ${"sections.off"})`],960049)},662860,e=>{var t=e.i(875225),n=e.i(924924),r=e.i(755776),s=e.i(618916),a=e.i(921991),i=e.i(867274),o=e.i(547499);let l="Supabase Metrics API",u=null,d={fetchMetrics:async function e(t,n,r={}){let s;if(!("string"==typeof t&&/^[a-z0-9]{8,40}$/.test(t)))return{ok:!1,kind:"format",error:"That isn't a Supabase project ref."};let a=r.timeoutMs??8e3;try{s=await (r.fetch??fetch)(`https://${t}.supabase.co/customer/v1/privileged/metrics`,{headers:{Authorization:`Basic ${Buffer.from(`service_role:${n}`).toString("base64")}`,Accept:"text/plain"},signal:AbortSignal.timeout(a),cache:"no-store",redirect:"manual"})}catch(e){return{ok:!1,kind:"transient",error:e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name)?`${l} didn't answer within ${Math.round(a/1e3)} seconds.`:`Couldn't reach the ${l}.`}}if(401===s.status||403===s.status)return{ok:!1,kind:"auth",status:s.status,error:`Supabase rejected the metrics key (${s.status}). Replace it with a current Secret API key.`};if(404===s.status)return{ok:!1,kind:"missing",status:404,error:"Supabase has no metrics endpoint for this project (404)."};if(429===s.status)return{ok:!1,kind:"transient",status:429,retryAfterS:60,error:`${l} says there were too many requests.`};if(!s.ok)return{ok:!1,kind:"transient",status:s.status,error:`${l} returned an error (${s.status}).`};let i=await s.text().catch(()=>null);return null===i||i.length>4e6||!/^(#|[A-Za-z_:])/m.test(i)?{ok:!1,kind:"format",error:`${l} answered in a format the console doesn't recognise.`}:{ok:!0,data:i}},key:()=>(0,o.f)().OPS_ENCRYPTION_KEY},c=e=>e instanceof Error?e.name:"unknown";async function p(e,a,o=d){if(!(0,i.T)(e,u))return null;u=e.getTime();let l=0,f=0;try{for(let{k:i,ref:u,state:d}of(await (0,n.f)().select({k:r.A,ref:s.resources.externalId,state:s.snapshots.state}).from(r.A).innerJoin(s.resources,(0,t.u)(s.resources.id,r.A.resourceId)).leftJoin(s.snapshots,(0,t.u)(s.snapshots.resourceId,s.resources.id)).where((0,t.b)((0,t.u)(s.resources.kind,"supabase_project"),(0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt))).limit(20))){let t=a-Date.now()-500;if(t<1e3)break;try{await m(i,u,d,e,Math.min(8e3,t),o)?l++:f++}catch(e){f++,console.warn("supabase-metrics: one project failed:",c(e))}}await (0,n.f)().delete(r.l).where((0,t.S)(r.l.hour,new Date(e.getTime()-24*i.x*36e5)))}catch(e){console.warn("supabase-metrics failed:",c(e))}return{scraped:l,failed:f}}async function f(e,s,a){return await (0,n.f)().update(r.A).set({lastTryAt:s,lastError:a.slice(0,300)}).where((0,t.u)(r.A.resourceId,e)),!1}async function m(e,s,o,l,u,d){if("paused"===o)return f(e.resourceId,l,"The project is paused.");let c=(0,a.V)({ciphertext:e.keyCiphertext,iv:e.keyIv},d.key());if(!c)return f(e.resourceId,l,"The stored key can't be read. Add it again.");let p=await d.fetchMetrics(s,c,{timeoutMs:u});if(!p.ok)return f(e.resourceId,l,p.error);let m=(0,i.E)(e.latest??null,(0,i.c)((0,i.a)(p.data),s),l);await (0,n.f)().update(r.A).set({latest:m,lastTryAt:l,lastOkAt:l,lastError:null}).where((0,t.u)(r.A.resourceId,e.resourceId));let h=(0,i.b)(l),[g]=await (0,n.f)().select().from(r.l).where((0,t.b)((0,t.u)(r.l.resourceId,e.resourceId),(0,t.u)(r.l.hour,h))).limit(1),y=(0,i.n)(g??null,m);return await (0,n.f)().insert(r.l).values({resourceId:e.resourceId,hour:h,...y}).onConflictDoUpdate({target:[r.l.resourceId,r.l.hour],set:y}),!0}async function h(){let e=await (0,n.f)().select({id:s.resources.id,name:s.resources.name,latest:r.A.latest}).from(r.A).innerJoin(s.resources,(0,t.u)(s.resources.id,r.A.resourceId)).where((0,t.b)((0,t.u)(s.resources.kind,"supabase_project"),(0,t.u)(s.resources.monitored,!0),(0,t.M)(s.resources.goneAt))).limit(20);return e.length?e.map(e=>({id:e.id,name:e.name,latest:e.latest??null})):null}e.s(["Y",0,h,"E",0,p],662860)},89491,e=>{let t={databases:100,storageBytes:0x140000000,rowsRead:5e8,rowsWritten:1e7},n={storageBytes:262144e3,monthlyCommands:5e5,monthlyBandwidthBytes:0x280000000},r={databases:10,dbBytes:524288e3,accountBytes:0x140000000,rowsReadPerDay:5e6,rowsWrittenPerDay:1e5},s=(e,t)=>Math.round(e/t*1e3)/10,a=(e,t)=>!!e&&e.slice(0,7)===t.toISOString().slice(0,7);e.s(["M",0,r,"g",0,t,"W",0,n,"I",0,function(e,t){let n=e.usageDay===t.toISOString().slice(0,10);return[...n&&null!=e.accountRowsRead?[{label:"Rows read today",pct:s(e.accountRowsRead,r.rowsReadPerDay),text:"of 5M (account)",kind:"quota"}]:[],...n&&null!=e.accountRowsWritten?[{label:"Rows written today",pct:s(e.accountRowsWritten,r.rowsWrittenPerDay),text:"of 100k (account)",kind:"quota"}]:[],...null!=e.sizeBytes?[{label:"Size",pct:s(e.sizeBytes,r.dbBytes),text:"of 500 MB",kind:"storage"}]:[]]},"c",0,function(e){return(e.accountRowsRead??0)>=r.rowsReadPerDay?{state:"err",label:"Daily rows-read limit reached"}:(e.accountRowsWritten??0)>=r.rowsWrittenPerDay?{state:"err",label:"Daily rows-written limit reached"}:{state:"ok",label:"Available"}},"u",0,function(e){return e.filter(e=>"quota"===e.kind&&null!==e.pct).sort((e,t)=>(t.pct??0)-(e.pct??0))[0]??null},"G",0,function(e,n){return a(e.usageAt,n)?[...null!=e.orgRowsRead?[{label:"Rows read",pct:s(e.orgRowsRead,t.rowsRead),text:"of 500M this month (org)",kind:"quota"}]:[],...null!=e.orgRowsWritten?[{label:"Rows written",pct:s(e.orgRowsWritten,t.rowsWritten),text:"of 10M this month (org)",kind:"quota"}]:[],...null!=e.orgStorageBytes?[{label:"Storage",pct:s(e.orgStorageBytes,t.storageBytes),text:"of 5 GB (org)",kind:"storage"}]:[]]:[]},"h",0,function(e){return e.blockReads||e.orgBlockedReads?{state:"err",label:"Reads blocked"}:e.blockWrites||e.orgBlockedWrites?{state:"err",label:"Writes blocked"}:{state:"ok",label:"Available"}},"$",0,function(e,t){let r=a(e.statsAt,t);return[...r&&null!=e.monthlyRequests?[{label:"Commands",pct:s(e.monthlyRequests,n.monthlyCommands),text:"of 500k this month",kind:"quota"}]:[],...r&&null!=e.monthlyBandwidthBytes?[{label:"Bandwidth",pct:s(e.monthlyBandwidthBytes,n.monthlyBandwidthBytes),text:"of 10 GB this month",kind:"quota"}]:[],...null!=e.storageBytes?[{label:"Data size",pct:s(e.storageBytes,n.storageBytes),text:"of 250 MB",kind:"storage"}]:[]]},"t",0,function(e){let t=(e??"").toLowerCase();return"active"===t?{state:"ok",label:"Active"}:t.includes("suspend")||t.includes("block")||t.includes("disabled")?{state:"err",label:"Suspended"}:t.includes("delet")?{state:"off",label:"Deleting"}:{state:"unknown",label:e?`State: ${e}`:"Unknown"}}])},960063,e=>{e.s(["T",0,{reads:5e4,writes:2e4,deletes:2e4},"g",0,function(e){var t;if(e.ok)return e.data.noDatabase?{state:"off",label:"No Firestore database"}:{state:"ok",label:`Reachable \xb7 ${e.data.latencyMs} ms`};return"RESOURCE_EXHAUSTED"===(t=e).reason?{state:"err",label:"Daily quota used up"}:"SERVICE_DISABLED"===t.reason?{state:"err",label:"Firestore API is off in this project"}:"scope"===t.kind||"PERMISSION_DENIED"===t.reason||"scope"===t.reason?{state:"err",label:"No access: needs datastore.viewer"}:{state:"unknown",label:"Unknown"}},"a",0,function(e){let t=new Intl.DateTimeFormat("en-US",{timeZone:"America/Los_Angeles",hour:"numeric",minute:"numeric",second:"numeric",hourCycle:"h23"}).formatToParts(e),n=e=>Number(t.find(t=>t.type===e)?.value??0),r=(3600*n("hour")+60*n("minute")+n("second"))*1e3+e.getUTCMilliseconds();return new Date(e.getTime()-r)}])},90801,e=>{var t=e.i(250474),n=e.i(32391);let r=/^v?(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;function s(e,n){let s=r.exec(e.trim()),a=r.exec(n.trim());return!!s&&!!a&&s[1]===a[1]&&("0"!==s[1]||s[2]===a[2])&&(0,t.f)(n,e)>=0}let a=/^Watch(?:bell|post): update (?:\S+ (?:to|ke) \S+|\d+ vulnerable packages) in ((?:[A-Za-z0-9._-]+\/){0,3}[A-Za-z0-9._-]+) \(/,i=e=>a.exec(e)?.[1]??null;e.s(["M",0,e=>`Lockfile tertinggal — jalankan npm install (${e.slice(0,5).join(", ")}${e.length>5?`, +${e.length-5}`:""}).`,"a",0,function(e,t,n){if(!e.length)return{ok:!1,why:"nothing"};let r=e.filter(e=>n.includes(e.severity)&&!("moderate"===e.severity&&e.dev));if(!r.length)return{ok:!1,why:"severity"};for(let e of r){let n=t.get(e.package);if(!n||!s(n,e.to))return{ok:!1,why:"major"}}return{ok:!0,upgrades:r}},"m",0,function(e,r){if(!r)return{deps:e,stale:[]};let s=[...Object.entries(r.dependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.optionalDependencies).map(([e,t])=>[e,t,!1]),...Object.entries(r.devDependencies).map(([e,t])=>[e,t,!0])],a=[...e],i=[];for(let[e,r,o]of s){let s=(0,n.Y)(r);if(!s||!(0,n.C)(s))continue;let l=a.filter(t=>t.name===e);!l.length||l.some(e=>(0,t.f)(e.version,s)>=0)||((a=a.filter(t=>t.name!==e)).push({name:e,version:s,dev:l.every(e=>e.dev)&&o}),i.push(e))}return{deps:a,stale:i}},"D",0,function(e){let n=new Map;for(let r of e){if(!r.direct)continue;let e=n.get(r.package);(!e||0>(0,t.f)(r.installedVersion,e))&&n.set(r.package,r.installedVersion)}return n},"U",0,function(e,t,n=null){for(let r of t){if(i(r.title)!==n)continue;let t=function(e){if(e.packages?.length)return e.packages;let t=/^Watch(?:bell|post): update (\S+) (?:to|ke) /.exec(e.title);return t?[t[1]]:"all"}(r);if("all"===t||e.some(e=>t.includes(e)))return r}return null},"J",0,s])},32391,e=>{let t=/^(?:@[a-z0-9][a-z0-9._~-]*\/)?[a-z0-9._~-][a-z0-9._~-]*$/i,n=/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/,r=e=>e.length<=214&&t.test(e),s=e=>e.length<=100&&n.test(e),a=e=>"object"==typeof e&&null!==e&&!Array.isArray(e);function i(e){let t=new Map;for(let n of e){if(!r(n.name)||!s(n.version))continue;let e=`${n.name}@${n.version}`,a=t.get(e);if(a?a.dev=a.dev&&n.dev:t.set(e,{...n}),t.size>=1e4)break}return[...t.values()].sort((e,t)=>e.name===t.name?e.version<t.version?-1:1:e.name<t.name?-1:1)}function o(e){try{return JSON.parse(e)}catch{return null}}let l=e=>{let t=e.lastIndexOf("node_modules/");return t<0?null:e.slice(t+13)||null},u=e=>e.trim().replace(/^['"]|['"]$/g,""),d=e=>a(e)?Object.fromEntries(Object.entries(e).filter(e=>"string"==typeof e[1])):{};function c(e){let t=/^\s*(?:\^|~|>=|=|v)?\s*v?(\d+)(?:\.(\d+|x|\*))?(?:\.(\d+|x|\*))?(-[0-9A-Za-z.-]+)?\s*$/.exec(e);if(!t)return null;let n=e=>e&&/^\d+$/.test(e)?e:"0";return`${t[1]}.${n(t[2])}.${n(t[3])}${t[4]??""}`}e.s(["a",0,[{path:"package-lock.json",kind:"npm"},{path:"npm-shrinkwrap.json",kind:"npm"},{path:"pnpm-lock.yaml",kind:"pnpm"},{path:"yarn.lock",kind:"yarn"},{path:"bun.lock",kind:"bun"}],"e",0,function(e){let t=[],n=(e,n)=>{for(let[r,s]of Object.entries(e)){let e=c(s);e&&t.push({name:r,version:e,dev:n})}};return n(e.dependencies,!1),n(e.optionalDependencies,!1),n(e.devDependencies,!0),i(t)},"K",0,function(e){return e?new Set([...Object.keys(e.dependencies),...Object.keys(e.devDependencies),...Object.keys(e.optionalDependencies)]):new Set},"L",0,r,"C",0,s,"Y",0,c,"D",0,function(e,t){switch(e){case"npm":let n=o(t);if(!a(n))return null;let s=[];if(a(n.packages)){for(let[e,t]of Object.entries(n.packages)){if(!e||!a(t)||!0===t.link||"string"!=typeof t.version)continue;let n="string"==typeof t.name&&e.includes("node_modules/")?t.name:l(e);n&&s.push({name:n,version:t.version,dev:!0===t.dev})}return i(s)}if(a(n.dependencies)){let e=(t,n)=>{if(!(n>40))for(let[r,i]of Object.entries(t))a(i)&&("string"==typeof i.version&&s.push({name:r,version:i.version,dev:!0===i.dev}),a(i.dependencies)&&e(i.dependencies,n+1))};return e(n.dependencies,0),i(s)}return null;case"pnpm":return function(e){let t=e.split(/\r?\n/);if(!t.some(e=>/^lockfileVersion:/.test(e)))return null;let n=[],s=!1,a=null;for(let e of t){if(/^\S/.test(e)){s=/^packages:\s*$/.test(e),a=null;continue}if(!s)continue;let t=/^ {2}(\S.*?):\s*$/.exec(e);if(t){let e=function(e){let t=u(e).replace(/^\//,""),n=t.indexOf("(");n>0&&(t=t.slice(0,n));let s=t.lastIndexOf("@");if(s>0&&!t.slice(s+1).includes("/")&&r(t.slice(0,s)))return{name:t.slice(0,s),version:t.slice(s+1).split("_")[0]};let a=t.lastIndexOf("/");return a<=0?null:{name:t.slice(0,a),version:t.slice(a+1).split("_")[0]}}(t[1]);(a=e?{...e,dev:!1}:null)&&n.push(a);continue}a&&/^ {4}dev: true\s*$/.test(e)&&(a.dev=!0)}return i(n)}(t);case"yarn":return function(e){let t=e.split(/\r?\n/),n=[],r=null,s=!1;for(let e of t){if(!e.trim()||e.trimStart().startsWith("#"))continue;if(/^\S/.test(e)){let t=e.replace(/:\s*$/,"");r=t.startsWith("__metadata")||/@(?:workspace|link|portal|file):/.test(t)?null:function(e){let t=u(e),n=t.indexOf("@",+!!t.startsWith("@"));return n>0?t.slice(0,n):null}(t.split(/,\s*/)[0]),s=!0;continue}let t=/^ {2}version:?\s+"?([^"\s]+)"?\s*$/.exec(e);t&&r&&(n.push({name:r,version:t[1],dev:!1}),r=null)}return s?i(n):null}(t);case"bun":let d=o(t.replace(/,(\s*[}\]])/g,"$1"));if(!a(d)||!a(d.packages))return null;let c=[];for(let e of Object.values(d.packages)){if(!Array.isArray(e)||"string"!=typeof e[0])continue;let t=e[0],n=t.lastIndexOf("@");n<=0||c.push({name:t.slice(0,n),version:t.slice(n+1),dev:!1})}return i(c)}},"b",0,function(e){let t=o(e);return a(t)?{dependencies:d(t.dependencies),devDependencies:d(t.devDependencies),optionalDependencies:d(t.optionalDependencies)}:null}])},891262,267485,e=>{var t=e.i(442473),n=e.i(7494),r=e.i(250474);let s=["CRITICAL","HIGH","MODERATE","LOW","UNKNOWN"],a=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),i=e=>Array.isArray(e)?e:[],o=e=>"string"==typeof e&&e?e:null,l=e=>a(e.package)&&"next"===e.package.name&&"npm"===e.package.ecosystem,u="OSV.dev sent an answer we couldn't read";async function d(e,f={}){let m=f.timeoutMs??1e4,h=f.maxBytes??2097152,g=AbortSignal.timeout(m),y=(0,t.X)(g),v=`OSV.dev didn't answer within ${p(m)}`,k=[],w=null;for(let n=0;n<3;n++){var b;let n,r;try{n=await (f.fetch??fetch)("https://api.osv.dev/v1/query",{method:"POST",headers:{"content-type":"application/json","user-agent":"OpsConsole-Security/1.0 (+https://watchbell.west-solutions.web.id)"},body:JSON.stringify({package:{name:"next",ecosystem:"npm"},version:e,...w?{page_token:w}:{}}),redirect:"error",cache:"no-store",signal:g})}catch(e){return{ok:!1,error:c(e)?v:"Couldn't reach OSV.dev"}}if(!n.ok)return await n.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${n.status}`};try{let{bytes:e,truncated:s}=await (0,t.z)(n,h,y);if(s)return{ok:!1,error:"OSV.dev sent too large an answer"};r=JSON.parse(new TextDecoder().decode(e))}catch(e){return{ok:!1,error:c(e)?v:u}}let s=a(b=r)?void 0===b.vulns?[]:Array.isArray(b.vulns)?b.vulns:null:null;if(null===s)return{ok:!1,error:u};if(k.push(...s),!(w=a(r)?o(r.next_page_token):null))break}let $=function(e,t){let u=[],d=0;for(let n of e){if(!a(n))continue;let e=o(n.id);e&&(d++,n.withdrawn||u.push({id:e.slice(0,64),cve:i(n.aliases).map(o).find(e=>!!e&&/^CVE-\d{4}-\d+$/.test(e))??null,summary:(o(n.summary)??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=a(e.database_specific)?o(e.database_specific.severity)?.toUpperCase():void 0;return"MEDIUM"===t?"MODERATE":s.includes(t??"")?t:"UNKNOWN"}(n),fixed:function(e,t){let n=null;for(let s of i(e))if(a(s)&&l(s))for(let e of i(s.ranges)){if(!a(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let s=null;for(let l of i(e.events)){if(!a(l))continue;let e=o(l.introduced),i=o(l.fixed);e?s=e:i&&null!==s?((0,r.f)(t,s)>=0&&0>(0,r.f)(t,i)&&(null===n||0>(0,r.f)(i,n))&&(n=i),s=null):(o(l.last_affected)||o(l.limit))&&(s=null)}}return n}(n.affected,t)}))}return e.length>0&&0===d?null:(0,n.I)(u).slice(0,50)}(k,e);return null===$?{ok:!1,error:u}:{ok:!0,findings:$}}let c=e=>e instanceof DOMException&&("TimeoutError"===e.name||"AbortError"===e.name),p=e=>e<1e3?`${e} ms`:`${Math.round(e/1e3)} s`;e.s(["y",0,d,"t",0,c],267485);var f=e.i(804581);let m="OpsConsole-Deps/1.0 (+https://watchbell.west-solutions.web.id)";async function h(e,t,n,r){let s=r.deadline-Date.now();if(s<500)return{ok:!1,error:"No time left for OSV.dev"};let a=AbortSignal.timeout(s);return y(e,{method:"POST",headers:{"content-type":"application/json","user-agent":m},body:JSON.stringify(t),signal:a},n,a,r)}async function g(e,t,n){let r=n.deadline-Date.now();if(r<500)return{ok:!1,error:"No time left for OSV.dev"};let s=AbortSignal.timeout(Math.min(r,8e3));return y(e,{method:"GET",headers:{"user-agent":m},signal:s},t,s,n)}async function y(e,n,r,s,a){let i;try{i=await (a.fetch??fetch)(e,{...n,redirect:"error",cache:"no-store"})}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"Couldn't reach OSV.dev"}}if(!i.ok)return await i.body?.cancel().catch(()=>void 0),{ok:!1,error:`OSV.dev answered HTTP ${i.status}`};try{let{bytes:e,truncated:n}=await (0,t.z)(i,r,(0,t.X)(s));if(n)return{ok:!1,error:"OSV.dev sent too large an answer"};return{ok:!0,body:JSON.parse(new TextDecoder().decode(e))}}catch(e){return{ok:!1,error:c(e)?"OSV.dev didn't answer in time":"OSV.dev sent an answer we couldn't read"}}}async function v(e,t){let n=[];for(let r of(0,f.f)(e)){let e=await h(f.n,r,4194304,t);if(!e.ok)return e;let s=(0,f.j)(e.body,r.queries.length);if(!s)return{ok:!1,error:"OSV.dev sent an answer we couldn't read"};n.push(...s)}return{ok:!0,ids:n}}async function k(e,t){let n=[...new Set(e)].filter(f.G);if(n.length>300)return{ok:!1,error:`Too many advisories to read in one scan (${n.length})`};let r=new Map,s=null;for(let e=0;e<n.length&&!s;e+=8)await Promise.all(n.slice(e,e+8).map(async e=>{let n=await g(`${f.W}${encodeURIComponent(e)}`,1048576,t),a=n.ok?(0,f.O)(n.body):null;a?r.set(e,a):s??=n.ok?"OSV.dev sent an advisory we couldn't read":n.error}));return s?{ok:!1,error:s}:{ok:!0,map:r}}e.s(["J",0,k,"K",0,v],891262)},804581,e=>{var t=e.i(250474);let n=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),r=e=>Array.isArray(e)?e:[],s=e=>"string"==typeof e&&e?e:null,a=e=>/^[A-Za-z0-9][A-Za-z0-9._:-]{1,63}$/.test(e),i={CRITICAL:"critical",HIGH:"high",MODERATE:"moderate",MEDIUM:"moderate",LOW:"low"},o=e=>e>=9?"critical":e>=7?"high":e>=4?"moderate":e>0?"low":"unknown",l=(e,t)=>n(e.package)&&e.package.name===t&&"npm"===e.package.ecosystem;e.s(["S",0,20,"n",0,"https://api.osv.dev/v1/querybatch","W",0,"https://api.osv.dev/v1/vulns/","h",0,200,"f",0,function(e){let t=[];for(let n=0;n<e.length;n+=1e3)t.push({queries:e.slice(n,n+1e3).map(e=>({package:{name:e.name,ecosystem:"npm"},version:e.version}))});return t},"i",0,function(e,a,i,o=new Map){let u=[];return e.forEach((e,d)=>{for(let c of a[d]??[]){let a=o.get(`${e.name}@${e.version}|${c}`);if(a){u.push({...a,dev:e.dev});continue}let d=i.get(c);d&&!d.withdrawn&&u.push({package:e.name,installedVersion:e.version,vulnId:d.id,aliases:d.aliases,severity:d.severity,fixedVersion:function(e,a,i){let o=null;for(let u of r(e))if(n(u)&&l(u,a))for(let e of r(u.ranges)){if(!n(e)||"SEMVER"!==e.type&&"ECOSYSTEM"!==e.type)continue;let a=null;for(let l of r(e.events)){if(!n(l))continue;let e=s(l.introduced),r=s(l.fixed);e?a=e:r&&null!==a?((0,t.f)(i,a)>=0&&0>(0,t.f)(i,r)&&(null===o||0>(0,t.f)(r,o))&&(o=r),a=null):(s(l.last_affected)||s(l.limit))&&(a=null)}}return o}(d.affected,e.name,e.version),summary:d.summary,dev:e.dev,source:"osv"})}}),u},"G",0,a,"O",0,function(e){if(!n(e))return null;let t=s(e.id);return t&&a(t)?{id:t,aliases:[...new Set(r(e.aliases).map(s).filter(e=>!!e&&a(e)))].slice(0,20),summary:(s(e.summary)??s(e.details)?.split(/\n/)[0]??"").replace(/\s+/g," ").trim().slice(0,200),severity:function(e){let t=n(e.database_specific)?s(e.database_specific.severity)?.toUpperCase():null;if(t&&i[t])return i[t];for(let t of r(e.severity)){if(!n(t)||"CVSS_V3"!==t.type&&"CVSS_V31"!==t.type)continue;let e=s(t.score)?function(e){let t,n=/^CVSS:3\.[01]\/(.+)$/.exec(e.trim());if(!n)return null;let r={};for(let e of n[1].split("/")){let[t,n]=e.split(":");t&&n&&(r[t]=n)}let s={N:.85,A:.62,L:.55,P:.2},a={L:.77,H:.44},i={N:.85,R:.62},o={H:.56,L:.22,N:0},l="C"===r.S,u=l?{N:.85,L:.68,H:.5}:{N:.85,L:.62,H:.27};if(![s[r.AV],a[r.AC],u[r.PR],i[r.UI],o[r.C],o[r.I],o[r.A]].every(e=>"number"==typeof e)||"U"!==r.S&&"C"!==r.S)return null;let d=1-(1-o[r.C])*(1-o[r.I])*(1-o[r.A]),c=l?7.52*(d-.029)-3.25*(d-.02)**15:6.42*d,p=8.22*s[r.AV]*a[r.AC]*u[r.PR]*i[r.UI];return c<=0?0:(t=Math.round(1e5*Math.min(l?1.08*(c+p):c+p,10)))%1e4==0?t/1e5:(Math.floor(t/1e4)+1)/10}(s(t.score)):null;if(null!==e)return o(e)}return(s(e.id)??"").startsWith("MAL-")?"critical":"unknown"}(e),withdrawn:!!s(e.withdrawn),affected:e.affected}:null},"j",0,function(e,t){return n(e)&&Array.isArray(e.results)&&e.results.length===t?e.results.map(e=>n(e)?r(e.vulns).map(e=>n(e)?s(e.id):null).filter(e=>!!e&&a(e)):[]):null}])},413230,e=>{var t=e.i(250474),n=e.i(32391),r=e.i(804581);let s=["critical","high","moderate","low","unknown"],a=e=>s.indexOf(e),i=e=>"object"==typeof e&&null!==e&&!Array.isArray(e),o=e=>"string"==typeof e&&e?e:null,l={critical:"critical",high:"high",medium:"moderate",moderate:"moderate",low:"low"},u=e=>`${e.package}@${e.installedVersion}|${e.vulnId}`,d=e=>{let t;return!e.dev&&(a(e.severity)<=a("high")||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))||"moderate"===e.severity&&!0===e.direct)};e.s(["g",0,function(e){let t=e.filter(d);return t.some(e=>{let t;return"critical"===e.severity||(t=e.summary,/\bRCE\b|remote code execution/i.test(t))})?"critical":t.length?"warning":null},"L",0,function(e){let t=e.filter(d),n=[...t].sort((e,t)=>a(e.severity)-a(t.severity)||(e.package<t.package?-1:1)),r=[];for(let e of n){let t=`${e.package} ${e.installedVersion}${e.fixedVersion?` → ${e.fixedVersion}`:" (no fix yet)"}`;r.includes(t)||r.push(t)}let s=new Set(t.map(e=>e.package)).size,i=function(e){let t={critical:0,high:0,moderate:0,low:0,unknown:0};for(let n of e)t[n.severity]++;return t}(t),o=["critical","high","moderate","low","unknown"].filter(e=>i[e]>0).map(e=>`${i[e]} ${e}`).join(", "),l=`${s} vulnerable package${1===s?"":"s"} (${o}): ${r.slice(0,4).join(", ")}${r.length>4?`, +${r.length-4} more`:""}.`;return l.length>300?`${l.slice(0,299)}…`:l},"z",0,function(e,t,n){let r=new Set;return e.forEach((e,s)=>{for(let a of t[s]??[])n.has(`${e.name}@${e.version}|${a}`)||r.add(a)}),[...r]},"A",0,function(e,t){let n=new Map;if(t)return n;for(let t of e)t.fixedVersion&&"dependabot"!==t.source&&n.set(u(t),{package:t.package,installedVersion:t.installedVersion,vulnId:t.vulnId,aliases:t.aliases,severity:t.severity,fixedVersion:t.fixedVersion,summary:t.summary,dev:t.dev,source:"osv"});return n},"R",0,function(e,n,r){let s=[...e];for(let e of n)if(!s.some(t=>t.package===e.package&&(t.vulnId===e.ghsaId||t.aliases.includes(e.ghsaId)||null!==e.cveId&&t.aliases.includes(e.cveId)))&&e.range)for(let n of r)n.name===e.package&&function(e,n){let r=n.split(",").map(e=>e.trim()).filter(Boolean);return!!r.length&&r.every(n=>{let r=/^(<=|>=|<|>|=)\s*v?(\S+)$/.exec(n);if(!r)return!1;let s=(0,t.f)(e,r[2]);return"<"===r[1]?s<0:"<="===r[1]?s<=0:">"===r[1]?s>0:">="===r[1]?s>=0:0===s})}(n.version,e.range)&&s.push({package:e.package,installedVersion:n.version,vulnId:e.ghsaId,aliases:e.cveId?[e.cveId]:[],severity:e.severity,fixedVersion:e.fixed,summary:e.summary,dev:e.dev||n.dev,source:"dependabot"});return s},"E",0,function(e){if(!Array.isArray(e))return null;let t=[];for(let s of e){if(!i(s)||"open"!==s.state||!i(s.dependency)||!i(s.security_advisory))continue;let e=i(s.dependency.package)&&"npm"===s.dependency.package.ecosystem?o(s.dependency.package.name):null,a=o(s.security_advisory.ghsa_id);if(!e||!(0,n.L)(e)||!a||!(0,r.G)(a))continue;let u=i(s.security_vulnerability)?s.security_vulnerability:{},d=i(u.first_patched_version)?o(u.first_patched_version.identifier):null,c=o(s.security_advisory.cve_id);t.push({package:e,ghsaId:a,cveId:c&&/^CVE-\d{4}-\d+$/.test(c)?c:null,summary:(o(s.security_advisory.summary)??"").replace(/\s+/g," ").trim().slice(0,r.h),severity:l[(o(u.severity)??o(s.security_advisory.severity)??"").toLowerCase()]??"unknown",range:o(u.vulnerable_version_range),fixed:d&&d.length<=100?d:null,dev:"development"===s.dependency.scope})}return t},"h",0,function(e,t,n){let s=new Map(e.map(e=>[u(e),e])),a=new Set,i={insert:[],update:[],resolve:[]};for(let e of t){let t=u(e);if(a.has(t))continue;a.add(t);let o={...e,aliases:e.aliases.slice(0,r.S),summary:e.summary.slice(0,r.h),direct:n.has(e.package)},l=s.get(t);l?i.update.push({id:l.id,severity:o.severity,fixedVersion:o.fixedVersion,summary:o.summary,aliases:o.aliases,dev:o.dev,direct:o.direct}):i.insert.push(o)}return i.resolve=e.filter(e=>!a.has(u(e))).map(e=>e.id),i},"U",0,function(e,t,n,r=!1){return!!r||!e||!e.scannedAt||(e.error?n.getTime()-e.scannedAt.getTime()>=72e6||e.lockfileSha!==t:e.lockfileSha!==t||!e.queriedAt||n.getTime()-e.queriedAt.getTime()>=6048e5)},"M",0,function(e){return[...e].sort((e,t)=>(e.scannedAt?.getTime()??-1)-(t.scannedAt?.getTime()??-1)||(e.id<t.id?-1:1))},"B",0,function(e){let n=new Map,r=new Set;for(let s of e){if(!s.direct||!s.fixedVersion||0>=(0,t.f)(s.fixedVersion,s.installedVersion))continue;!0!==s.dev&&r.add(s.package);let e=n.get(s.package)??{package:s.package,to:s.fixedVersion,vulnIds:[],cves:[],severity:s.severity};for(let n of((0,t.f)(s.fixedVersion,e.to)>0&&(e.to=s.fixedVersion),e.vulnIds.includes(s.vulnId)||e.vulnIds.push(s.vulnId),s.aliases))/^CVE-/.test(n)&&!e.cves.includes(n)&&e.cves.push(n);a(s.severity)<a(e.severity)&&(e.severity=s.severity),n.set(s.package,e)}for(let e of n.values())r.has(e.package)||(e.dev=!0);return[...n.values()].sort((e,t)=>a(e.severity)-a(t.severity)||(e.package<t.package?-1:1))}])},479301,e=>{let t=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;e.s(["f",0,e=>"string"==typeof e&&t.test(e)])},911191,e=>{let t=[[/(?:\b|(?<=%2F))hb(?:_|%5F)[0-9a-f]{32}\b/gi,"hb_[hidden]"],[/(\/api(?:\/|%2F)ping(?:\/|%2F))(?!hb_\[hidden\])[^/?#\s]+/gi,"$1[hidden]"],[/\b(postgres(?:ql)?|mysql|mongodb(?:\+srv)?|redis|rediss):\/\/\S+/gi,"$1://[hidden]"],[/\b(https?):\/\/[^\s/@:]+:[^\s/@]+@/gi,"$1://[hidden]@"],[/\b(Bearer|Basic)\s+[^\s"',;]+/gi,"$1 [hidden]"],[/\b((?:access_|refresh_|id_)?token|secret|password|passwd|pwd|api[_-]?key|apikey|authorization|cookie|session|private_key)(["']?\s*[:=]\s*["']?)(?!Bearer\b|Basic\b)([^\s"'&,;}]+)/gi,"$1$2[hidden]"],[/\beyJ[\w-]{8,}\.[\w-]{8,}\.[\w-]{8,}/g,"[jwt]"],[/\b[\w.+-]+@[\w-]+(?:\.[\w-]+)+\b/g,"[email]"],[/\b[A-Fa-f0-9]{40,}\b/g,"[redacted]"],[/\b(?=[A-Za-z0-9_-]*\d)(?=[A-Za-z0-9_-]*[A-Za-z])[A-Za-z0-9_-]{40,}\b/g,"[redacted]"]];function n(e,t){return e.length>t?`${e.slice(0,t-1)}…`:e}e.s(["l",0,n,"n",0,function(e){return null===e?null:n(e.split(/[?#]/)[0]||"/",512)},"h",0,function(e){return t.reduce((e,[t,n])=>e.replace(t,n),e)}])},659846,e=>{e.s(["f",0,["vercel","supabase","neon","firebase","turso","upstash","cloudflare","github","github_write"]],659846)},154491,e=>{let t=["home","hosting","database","devops","manage"],n=["hosting","database","devops"],r={vercel:"hosting",cloudflare:"hosting",supabase:"database",neon:"database",firebase:"database",turso:"database",upstash:"database",github:"devops",github_write:"devops"};function s(e){return Array.isArray(e)?t.filter(r=>"string"==typeof r&&t.includes(r)&&n.includes(r)&&e.includes(r)):[]}let a={MonitorDown:"hosting",HighLatency:"hosting",DeploymentFailed:"hosting",CertExpiringSoon:"hosting",DomainExpiringSoon:"hosting",DnsProxiedToVercel:"hosting",DatabasePaused:"database",StorageAlmostFull:"database",NeonComputeHigh:"database",FirestoreQuotaHigh:"database",AutoPauseRisk:"database",ComputeHigh:"database",DbQuotaHigh:"database",VulnerableDependency:"devops",FrameworkVulnerable:"hosting",MonitorDomainMoved:"hosting",CredentialExpiring:"account",CollectorStale:null},i=/^Log/;e.s(["D",0,r,"O",0,(e,t,n)=>{let s;if(!e.size)return!1;let o="account"===(s=a[t])?n?r[n]??null:null:void 0!==s?s:i.test(t)?"hosting":null;return null!==o&&e.has(o)},"N",0,s,"s",0,function(e){return{ruleKeys:Object.entries(a).filter(([,t])=>null!==t&&"account"!==t&&e.has(t)).map(([e])=>e),providers:Object.entries(r).filter(([,t])=>e.has(t)).map(([e])=>e)}},"I",0,e=>new Set(s(e))])},7494,e=>{let t={CRITICAL:4,HIGH:3,MODERATE:2,LOW:1,UNKNOWN:0};function n(e){return e.reduce((e,n)=>t[n.severity]>t[e]?n.severity:e,"UNKNOWN")}let r=e=>`${e} known vulnerabilit${1===e?"y":"ies"}`;e.s(["t",0,function(e,s,a){let i=new Set((s?.findings??[]).map(e=>e.id));if("vulnerable"===a.status&&a.findings.length>0){if(a.findings.every(e=>i.has(e.id)))return null;let s=n(a.findings);return{kind:t[s]>=t.HIGH?"err":"warn",message:`${e} runs Next.js ${a.version} with ${r(a.findings.length)} (${s.toLowerCase()})`,detail:a.findings.map(e=>e.id).join(", ").slice(0,1e3)}}return"ok"===a.status&&i.size>0?{kind:"ok",message:`${e} no longer has known Next.js vulnerabilities (now ${a.version})`,detail:null}:null},"I",0,function(e){return[...e].sort((e,n)=>t[n.severity]-t[e.severity]||(e.id<n.id?-1:+(e.id>n.id)))},"q",0,r,"N",0,n])},250474,e=>{function t(e){let[t,...n]=e.trim().split("-"),r=t.split(".").map(e=>Number.parseInt(e,10)||0);return{nums:[r[0]??0,r[1]??0,r[2]??0],pre:n.length?n.join("-").split("."):[]}}e.s(["f",0,function(e,n){let r=t(e),s=t(n);for(let e=0;e<3;e++)if(r.nums[e]!==s.nums[e])return r.nums[e]-s.nums[e];return function(e,t){if(!e.length||!t.length)return e.length?-1:+!!t.length;for(let n=0;n<Math.max(e.length,t.length);n++){if(void 0===e[n])return -1;if(void 0===t[n])return 1;let r=/^\d+$/.test(e[n])?Number(e[n]):null,s=/^\d+$/.test(t[n])?Number(t[n]):null;if(null!==r&&null!==s){if(r!==s)return r-s}else if(null!==r||null!==s)return null!==r?-1:1;else if(e[n]!==t[n])return e[n]<t[n]?-1:1}return 0}(r.pre,s.pre)}])}]})();
 
-//# sourceMappingURL=src_lib_206j7lyff31-g._.js.map
+//# sourceMappingURL=src_lib_0k_aposzvy1c8._.js.map