9router 0.4.25 → 0.4.27

package/app/.next/server/chunks/8367.js

@@ -2,8 +2,8 @@
     certutil -delstore Root ${j(p)} 2>$null | Out-Null
     $exit = & certutil -addstore Root ${j(a)} 2>&1
     if ($LASTEXITCODE -ne 0) { throw "certutil exit $LASTEXITCODE" }
-  `;try{await i(b),k("\uD83D\uDD10 Cert: ✅ installed to Windows Root store")}catch(a){throw Error(`Failed to install certificate: ${a.message}`)}}async function u(a,b){let c=q(b).replace(/:/g,""),d=`security delete-certificate -Z "${c}" /Library/Keychains/System.keychain`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from system keychain")}catch(a){throw Error("Failed to uninstall certificate")}}async function v(){let a=`certutil -delstore Root ${j(p)}`;try{await i(a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Windows Root store")}catch(a){throw Error(`Failed to uninstall certificate: ${a.message}`)}}async function w(a,b){if(!h())return void k(`🔐 Cert: cannot install to system store without sudo — trust this file on clients: ${b}`);let c=`${o}/9router-root-ca.crt`,d=`cp "${b}" "${c}" && (update-ca-certificates 2>/dev/null || update-ca-trust 2>/dev/null || true)`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ installed to Linux trust store")}catch(a){throw Error("Certificate install failed")}}async function x(a){if(!h())return;let b=`${o}/9router-root-ca.crt`,c=`rm -f "${b}" && (update-ca-certificates 2>/dev/null || update-ca-trust 2>/dev/null || true)`;try{await g(c,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Linux trust store")}catch(a){throw Error("Failed to uninstall certificate")}}a.exports={installCert:async function a(a,b){if(!d.existsSync(b))throw Error(`Certificate file not found: ${b}`);await r(b)?k("\uD83D\uDD10 Cert: already trusted ✅"):m?await t(b):n?await s(a,b):await w(a,b)},uninstallCert:async function a(a,b){await r(b)?m?await v():n?await u(a,b):await x(a):k("\uD83D\uDD10 Cert: not found in system store")},checkCertInstalled:r}},37770:(a,b,c)=>{c.d(b,{CG:()=>d.CG,Dj:()=>d.Dj,Fh:()=>d.Fh,Iq:()=>d.Iq,K1:()=>d.K1,KJ:()=>d.KJ,L:()=>d.L,L9:()=>d.L9,Lh:()=>d.Lh,Mc:()=>d.Mc,OM:()=>d.OM,PX:()=>d.PX,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Uv:()=>d.Uv,VT:()=>d.VT,XW:()=>d.XW,Xx:()=>d.Xx,Yd:()=>d.Yd,ZO:()=>d.ZO,bI:()=>d.bI,c:()=>d.c,ek:()=>d.ek,fK:()=>d.fK,fv:()=>d.fv,getProviderConnections:()=>d.P,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,iE:()=>d.iE,jd:()=>d.jd,mt:()=>d.mt,o5:()=>d.o5,oG:()=>d.oG,op:()=>d.op,r4:()=>d.r4,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.rj,uv:()=>d.uv,yF:()=>d.yF,yg:()=>d.yg,zP:()=>d.zP});var d=c(51412)},50514:(a,b,c)=>{let{exec:d,spawn:e,execSync:f}=c(79646),g=c(33873),h=c(29021),i=c(21820),j=c(91645),k=c(55591),l=c(55511),{addDNSEntry:m,removeDNSEntry:n,removeAllDNSEntries:o,removeAllDNSEntriesSync:p,checkAllDNSStatus:q,TOOL_HOSTS:r,isSudoAvailable:s,isSudoPasswordRequired:t}=c(98012),{isAdmin:u}=c(55757),v="win32"===process.platform,w="darwin"===process.platform,{generateCert:x}=c(6021),{installCert:y,uninstallCert:z}=c(28059),{isCertExpired:A}=c(89998),{DATA_DIR:B,MITM_DIR:C}=c(17893),{log:D,err:E}=c(93741),F="http://127.0.0.1:20128";function G(a){return null==a||""===a?"''":`'${String(a).replace(/'/g,"'\\''")}'`}async function H(){if(!Z)return F;try{let a=await Z(),b=a&&null!=a.mitmRouterBaseUrl?String(a.mitmRouterBaseUrl).trim():"";if(!b)return F;let c=new URL(b);if("http:"!==c.protocol&&"https:"!==c.protocol)return F;return b.replace(/\/+$/,"")}catch{return F}}let I=g.join(C,".mitm.pid"),J=[5e3,1e4,2e4,3e4,6e4],K=0,L=0,M=!1;function N(){if(process.env.MITM_SERVER_PATH)return process.env.MITM_SERVER_PATH;let a=g.join(__dirname,"server.js");if(h.existsSync(a))return a;let b=g.join(process.cwd(),"src","mitm","server.js");if(h.existsSync(b))return b;let c=g.join(process.cwd(),"..","src","mitm","server.js");return h.existsSync(c)?c:b}function O(a){try{if(!a||!h.existsSync(a)||!a.includes(`${g.sep}node_modules${g.sep}`))return a;let b=g.join(B,"runtime","mitm"),c=g.join(b,"server.js");if(h.existsSync(c))try{if(h.statSync(a).size===h.statSync(c).size)return c}catch{}return h.mkdirSync(b,{recursive:!0}),h.copyFileSync(a,c),c}catch(b){try{D(`[MITM] runtime copy failed: ${b.message}`)}catch{}return a}}let P=O(N()),Q="aes-256-gcm",R="9router-mitm-pwd",S=null,T=null;function U(){return globalThis.__mitmSudoPassword||null}function V(a){globalThis.__mitmSudoPassword=a}function W(a){try{return process.kill(a,0),!0}catch(a){return"EACCES"===a.code}}function X(a,b=!1,e=null){if(v)d(`taskkill ${b?"/F ":""}/PID ${a}`,{windowsHide:!0},()=>{});else{let f=b?"SIGKILL":"SIGTERM",g=`pkill -${f} -P ${a} 2>/dev/null; kill -${f} ${a} 2>/dev/null`;if(e||s()){let{execWithPassword:a}=c(98012);a(g,e||"").catch(()=>d(g,{windowsHide:!0},()=>{}))}else d(g,{windowsHide:!0},()=>{})}}function Y(){try{let{machineIdSync:a}=c(20243),b=a();return l.createHash("sha256").update(b+R).digest()}catch{return l.createHash("sha256").update(R).digest()}}let Z=null,$=null;async function _(a,b){if($)try{let c,d,e,f,g,h={mitmEnabled:a};b&&(c=Y(),d=l.randomBytes(12),e=l.createCipheriv(Q,c,d),f=Buffer.concat([e.update(b,"utf8"),e.final()]),g=e.getAuthTag(),h.mitmSudoEncrypted=`${d.toString("hex")}:${g.toString("hex")}:${f.toString("hex")}`),await $(h)}catch(a){E(`Failed to save settings: ${a.message}`)}}async function aa(){if($)try{await $({mitmSudoEncrypted:null})}catch(a){E(`Failed to clear encrypted password: ${a.message}`)}}async function ab(){if(!Z)return null;try{let a=await Z();if(!a.mitmSudoEncrypted)return null;return function(a){try{let[b,c,d]=a.split(":");if(!b||!c||!d)return null;let e=Y(),f=l.createDecipheriv(Q,e,Buffer.from(b,"hex"));return f.setAuthTag(Buffer.from(c,"hex")),f.update(Buffer.from(d,"hex"))+f.final("utf8")}catch{return null}}(a.mitmSudoEncrypted)}catch{return null}}async function ac(a,b){if($&&Z)try{let c={...(await Z()).dnsToolEnabled||{},[a]:b};await $({dnsToolEnabled:c})}catch(a){E(`Failed to save DNS state: ${a.message}`)}}async function ad(){if(!Z)return{};try{return(await Z()).dnsToolEnabled||{}}catch{return{}}}async function ae(a){let b=await ad(),c=a||U()||await ab();for(let[a,d]of Object.entries(b))if(d&&r[a])try{await m(a,c)}catch(b){E(`DNS ${a}: restore failed — ${b.message}`)}}async function af(){return v?u():!(!u()&&t())||!!(U()||await ab())}function ag(a){return new Promise(a=>{v?d('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{windowsHide:!0},(b,c)=>{if(b)return a(null);let e=parseInt(c.trim(),10);if(!e||e<=4)return a(null);d(`tasklist /FI "PID eq ${e}" /FO CSV /NH`,{windowsHide:!0},(b,c)=>{let d=c?.match(/"([^"]+)"/);a({pid:e,name:d?d[1]:"unknown"})})}):d("lsof -nP -iTCP:443 -sTCP:LISTEN -t",{windowsHide:!0},(b,c)=>{if(b||!c?.trim())return a(null);let e=parseInt(c.trim().split("\n")[0],10);if(!e||isNaN(e))return a(null);d(`ps -p ${e} -o comm=`,{windowsHide:!0},(b,c)=>{a({pid:e,name:c?.trim()||"unknown"})})})})}async function ah(a){if(S&&!S.killed){try{S.kill("SIGKILL")}catch{}S=null,T=null}try{if(h.existsSync(I)){let b=parseInt(h.readFileSync(I,"utf-8").trim(),10);b&&W(b)&&(X(b,!0,a),await new Promise(a=>setTimeout(a,500))),h.unlinkSync(I)}}catch{}if(!v&&P)try{let b=P.replace(/'/g,"'\\''");if(a||s()){let{execWithPassword:d}=c(98012);await d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,a||"").catch(()=>{})}else d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,{windowsHide:!0},()=>{});await new Promise(a=>setTimeout(a,500))}catch{}}async function ai(){let a=null!==S&&!S.killed,b=T;if(!a)try{if(h.existsSync(I)){let c=parseInt(h.readFileSync(I,"utf-8").trim(),10);c&&W(c)?(a=!0,b=c):h.unlinkSync(I)}}catch{}let d=q(),e=g.join(C,"rootCA.crt"),f=h.existsSync(e),{checkCertInstalled:i}=c(28059),j=!!f&&await i(e);return{running:a,pid:b,certExists:f,certTrusted:j,dnsStatus:d}}async function aj(a){if(M)return;if(Date.now()-L>=6e4&&(K=0),K>=5)return void E("Max restart attempts reached. Giving up.");let b=J[Math.min(K,J.length-1)];K++,M=!0,D(`Restarting in ${b/1e3}s... (${K}/5)`),await new Promise(a=>setTimeout(a,b));try{let b=Z?await Z():null;if(b&&!b.mitmEnabled){D("MITM disabled, skipping restart"),M=!1;return}let c=U()||await ab();if(!c&&!v){E("No cached password, cannot auto-restart"),M=!1;return}await al(a,c),D("\uD83D\uDD04 Restarted successfully"),K=0,M=!1}catch(b){E(`Restart attempt ${K}/5 failed: ${b.message}`),M=!1,aj(a)}}async function ak(a,b){if(a&&a.pid){if(v)try{f(`powershell -NonInteractive -WindowStyle Hidden -Command "Stop-Process -Id ${a.pid} -Force -ErrorAction SilentlyContinue"`,{windowsHide:!0})}catch{}else try{let{execWithPassword:d}=c(98012);b||s()?await d(`kill -9 ${a.pid}`,b||""):f(`kill -9 ${a.pid}`,{windowsHide:!0})}catch{}await new Promise(a=>setTimeout(a,800))}}async function al(a,b,d=!1){if(!S||S.killed)try{if(h.existsSync(I)){let a=parseInt(h.readFileSync(I,"utf-8").trim(),10);if(a&&W(a))return T=a,D(`♻️ Reusing existing process (PID: ${a})`),await _(!0,b),b&&V(b),{running:!0,pid:a};h.unlinkSync(I)}}catch{}if(S&&!S.killed)throw Error("MITM server is already running");if(await ah(b),!v){let a=await new Promise(a=>{let b=j.createServer();b.once("error",b=>{"EADDRINUSE"===b.code?a("in-use"):a("no-permission")}),b.once("listening",()=>{b.close(()=>a("free"))}),b.listen(443,"127.0.0.1")});if("in-use"===a||"no-permission"===a){let a=await ag(b);if(a){let c=a.name.includes("/")?a.name.split("/").filter(Boolean).pop():a.name;if(d)D(`Killing process on port 443 (PID ${a.pid}, name=${c})...`),await ak(a,b);else{let b=Error(`Port 443 is already in use by "${c}" (PID ${a.pid}).`);throw b.code="PORT_443_BUSY",b.portOwner={pid:a.pid,name:c},b}}}}let l=g.join(C,"rootCA.crt"),m=g.join(C,"rootCA.key"),n=h.existsSync(l)&&h.existsSync(m);if(!n||A(l)){if(n){D("\uD83D\uDD10 Cert expired — uninstalling old cert...");let a=b||U()||await ab();try{await z(a,l)}catch{}}D("\uD83D\uDD10 Generating Root CA..."),await x()}let{checkCertInstalled:o}=c(28059),p=await o(l),r=!v&&!w&&!s();if(p)D("\uD83D\uDD10 Cert: already trusted ✅");else{D("\uD83D\uDD10 Cert: not trusted → installing...");let a=b||U()||await ab();if(r)D(`🔐 Cert: skipping system trust (no sudo). Install ${l} as a trusted CA on machines that use this proxy.`);else{if(!a&&t())throw Error("Sudo password required to install Root CA certificate");try{await y(a,l),D("\uD83D\uDD10 Cert: ✅ trusted")}catch(a){throw Error(`Failed to trust certificate: ${a.message}`)}}}let u=P;if((!u||!h.existsSync(u))&&(D(`[MITM] server.js missing at ${u} → recopying`),!(u=O(N()))||!h.existsSync(u)))throw Error(`MITM server.js not found at ${u}. Reinstall 9router.`);let B=await H();if(D(`🚀 Starting server... (router: ${B})`),v){let c=await ag(b);if(c)if(d)D(`Killing process on port 443 (PID ${c.pid}, name=${c.name})...`),await ak(c,b);else{let a=Error(`Port 443 is already in use by "${c.name}" (PID ${c.pid}).`);throw a.code="PORT_443_BUSY",a.portOwner={pid:c.pid,name:c.name},a}S=e(process.execPath,[u],{detached:!1,windowsHide:!0,stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:B}}),$&&await $({mitmCertInstalled:!0}).catch(()=>{})}else s()?((S=e("sudo",["-S","-E","sh","-c",[`HOME=${G(i.homedir())}`,`ROUTER_API_KEY=${G(a)}`,`MITM_ROUTER_BASE=${G(B)}`,"NODE_ENV=production",G(process.execPath),G(u)].join(" ")],{detached:!1,windowsHide:!0,stdio:["pipe","pipe","pipe"]})).stdin.write(`${b}
-`),S.stdin.end()):S=e(process.execPath,[u],{detached:!1,windowsHide:!0,stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:B}});S&&(T=S.pid,h.writeFileSync(I,String(T)),L=Date.now());let F=null;S&&(S.stdout.on("data",a=>{process.stdout.write(a)}),S.stderr.on("data",a=>{let b=a.toString().trim();b&&(v||!b.includes("Password:")&&!b.includes("password for"))&&(E(b),F=b),!v&&(b.includes("incorrect password")||b.includes("no password was provided"))&&(V(null),aa(),M=!0)}),S.on("exit",b=>{D(`Server exited (code: ${b})`),S=null,T=null;try{h.unlinkSync(I)}catch{}0===b||M||aj(a)}));let J=await function(a=443){return new Promise(b=>{let c=Date.now()+8e3,d=()=>{let e=k.request({hostname:"127.0.0.1",port:a,path:"/_mitm_health",method:"GET",rejectUnauthorized:!1},a=>{let c="";a.on("data",a=>{c+=a}),a.on("end",()=>{try{let a=JSON.parse(c);b(!0===a.ok?{ok:!0,pid:a.pid||null}:null)}catch{b(null)}})});e.on("error",()=>{Date.now()<c?setTimeout(d,500):b(null)}),e.end()};d()})}(443);if(!J){if(S&&!S.killed){try{S.kill()}catch{}S=null}let a=function(){try{if(v){let a=f('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{encoding:"utf8",windowsHide:!0}).trim(),b=parseInt(a,10);if(b&&b>4){let a=f(`tasklist /FI "PID eq ${b}" /FO CSV /NH`,{encoding:"utf8",windowsHide:!0}).match(/"([^"]+)"/);if(a)return a[1].replace(".exe","")}}else{let a=f("lsof -i :443",{encoding:"utf8",windowsHide:!0}).trim().split("\n");if(a.length>1)return a[1].split(/\s+/)[0]}}catch{}return null}(),b=a?` Port 443 already in use by ${a}.`:"",c=F||`Check sudo password or port 443 access.${b}`;throw Error(`MITM server failed to start. ${c}`)}for(let[a,b]of($&&await $({mitmCertInstalled:!0}).catch(()=>{}),D(`✅ Server healthy (PID: ${T||J.pid})`),Object.entries(q())))D(`🌐 DNS ${a}: ${b?"✅ active":"❌ inactive"}`);return await _(!0,b),b&&V(b),{running:!0,pid:T}}async function am(a){M=!0,K=0,D("⏹ Stopping server...");let b=S,d=b&&!b.killed?b.pid:(()=>{try{return parseInt(h.readFileSync(I,"utf-8").trim(),10)}catch{return null}})();if(d&&W(d)&&(D(`Killing server (PID: ${d})...`),X(d,!1,a),await new Promise(a=>setTimeout(a,1e3)),W(d)&&X(d,!0,a)),S=null,T=null,v){let a=g.join(process.env.SystemRoot||"C:\\Windows","System32","drivers","etc","hosts"),b=Object.values(r).flat();try{let{isAdmin:d,runElevatedPowerShell:e,quotePs:f}=c(55757);if(d()){let d=h.readFileSync(a,"utf8"),e=d.split(/\r?\n/).filter(a=>!b.some(b=>a.includes(b))).join("\r\n").replace(/[\r\n\s]+$/g,"")+"\r\n";e!==d&&h.writeFileSync(a,e,"utf8");try{c(79646).execSync("ipconfig /flushdns",{windowsHide:!0,stdio:"ignore"})}catch{}D("\uD83C\uDF10 DNS: ✅ all tool hosts removed")}else{let c=b.map(f).join(","),d=`
+  `;try{await i(b),k("\uD83D\uDD10 Cert: ✅ installed to Windows Root store")}catch(a){throw Error(`Failed to install certificate: ${a.message}`)}}async function u(a,b){let c=q(b).replace(/:/g,""),d=`security delete-certificate -Z "${c}" /Library/Keychains/System.keychain`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from system keychain")}catch(a){throw Error("Failed to uninstall certificate")}}async function v(){let a=`certutil -delstore Root ${j(p)}`;try{await i(a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Windows Root store")}catch(a){throw Error(`Failed to uninstall certificate: ${a.message}`)}}async function w(a,b){if(!h())return void k(`🔐 Cert: cannot install to system store without sudo — trust this file on clients: ${b}`);let c=`${o}/9router-root-ca.crt`,d=`cp "${b}" "${c}" && (update-ca-certificates 2>/dev/null || update-ca-trust 2>/dev/null || true)`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ installed to Linux trust store")}catch(a){throw Error("Certificate install failed")}}async function x(a){if(!h())return;let b=`${o}/9router-root-ca.crt`,c=`rm -f "${b}" && (update-ca-certificates 2>/dev/null || update-ca-trust 2>/dev/null || true)`;try{await g(c,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Linux trust store")}catch(a){throw Error("Failed to uninstall certificate")}}a.exports={installCert:async function a(a,b){if(!d.existsSync(b))throw Error(`Certificate file not found: ${b}`);await r(b)?k("\uD83D\uDD10 Cert: already trusted ✅"):m?await t(b):n?await s(a,b):await w(a,b)},uninstallCert:async function a(a,b){await r(b)?m?await v():n?await u(a,b):await x(a):k("\uD83D\uDD10 Cert: not found in system store")},checkCertInstalled:r}},37770:(a,b,c)=>{c.d(b,{CG:()=>d.CG,Dj:()=>d.Dj,Fh:()=>d.Fh,Iq:()=>d.Iq,K1:()=>d.K1,KJ:()=>d.KJ,L:()=>d.L,L9:()=>d.L9,Lh:()=>d.Lh,Mc:()=>d.Mc,OM:()=>d.OM,PX:()=>d.PX,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Uv:()=>d.Uv,VT:()=>d.VT,XW:()=>d.XW,Xx:()=>d.Xx,Yd:()=>d.Yd,ZO:()=>d.ZO,bI:()=>d.bI,c:()=>d.c,ek:()=>d.ek,fK:()=>d.fK,fv:()=>d.fv,getProviderConnections:()=>d.P,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,iE:()=>d.iE,jd:()=>d.jd,mt:()=>d.mt,o5:()=>d.o5,oG:()=>d.oG,op:()=>d.op,r4:()=>d.r4,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.rj,uv:()=>d.uv,yF:()=>d.yF,yg:()=>d.yg,zP:()=>d.zP});var d=c(51412)},50514:(a,b,c)=>{let{exec:d,spawn:e,execSync:f}=c(79646),g=c(33873),h=c(29021),i=c(21820),j=c(91645),k=c(55591),l=c(55511),{addDNSEntry:m,removeDNSEntry:n,removeAllDNSEntries:o,removeAllDNSEntriesSync:p,checkAllDNSStatus:q,TOOL_HOSTS:r,isSudoAvailable:s,isSudoPasswordRequired:t}=c(98012),{isAdmin:u}=c(55757),v="win32"===process.platform,w="darwin"===process.platform,{generateCert:x}=c(6021),{installCert:y,uninstallCert:z}=c(28059),{isCertExpired:A}=c(89998),{DATA_DIR:B,MITM_DIR:C}=c(17893),{log:D,err:E}=c(93741),F="http://localhost:20128";function G(a){return null==a||""===a?"''":`'${String(a).replace(/'/g,"'\\''")}'`}async function H(){if(!Z)return F;try{let a=await Z(),b=a&&null!=a.mitmRouterBaseUrl?String(a.mitmRouterBaseUrl).trim():"";if(!b)return F;let c=new URL(b);if("http:"!==c.protocol&&"https:"!==c.protocol)return F;return b.replace(/\/+$/,"")}catch{return F}}let I=g.join(C,".mitm.pid"),J=[5e3,1e4,2e4,3e4,6e4],K=0,L=0,M=!1;function N(){if(process.env.MITM_SERVER_PATH)return process.env.MITM_SERVER_PATH;let a=g.join(__dirname,"server.js");if(h.existsSync(a))return a;let b=g.join(process.cwd(),"src","mitm","server.js");if(h.existsSync(b))return b;let c=g.join(process.cwd(),"..","src","mitm","server.js");return h.existsSync(c)?c:b}function O(a){try{if(!a||!h.existsSync(a)||!a.includes(`${g.sep}node_modules${g.sep}`))return a;let b=g.join(B,"runtime","mitm"),c=g.join(b,"server.js");if(h.existsSync(c))try{if(h.statSync(a).size===h.statSync(c).size)return c}catch{}return h.mkdirSync(b,{recursive:!0}),h.copyFileSync(a,c),c}catch(b){try{D(`[MITM] runtime copy failed: ${b.message}`)}catch{}return a}}let P=O(N()),Q="aes-256-gcm",R="9router-mitm-pwd",S=null,T=null;function U(){return globalThis.__mitmSudoPassword||null}function V(a){globalThis.__mitmSudoPassword=a}function W(a){try{return process.kill(a,0),!0}catch(a){return"EACCES"===a.code}}function X(a,b=!1,e=null){if(v)d(`taskkill ${b?"/F ":""}/PID ${a}`,{windowsHide:!0},()=>{});else{let f=b?"SIGKILL":"SIGTERM",g=`pkill -${f} -P ${a} 2>/dev/null; kill -${f} ${a} 2>/dev/null`;if(e||s()){let{execWithPassword:a}=c(98012);a(g,e||"").catch(()=>d(g,{windowsHide:!0},()=>{}))}else d(g,{windowsHide:!0},()=>{})}}function Y(){try{let{machineIdSync:a}=c(20243),b=a();return l.createHash("sha256").update(b+R).digest()}catch{return l.createHash("sha256").update(R).digest()}}let Z=null,$=null;async function _(a,b){if($)try{let c,d,e,f,g,h={mitmEnabled:a};b&&(c=Y(),d=l.randomBytes(12),e=l.createCipheriv(Q,c,d),f=Buffer.concat([e.update(b,"utf8"),e.final()]),g=e.getAuthTag(),h.mitmSudoEncrypted=`${d.toString("hex")}:${g.toString("hex")}:${f.toString("hex")}`),await $(h)}catch(a){E(`Failed to save settings: ${a.message}`)}}async function aa(){if($)try{await $({mitmSudoEncrypted:null})}catch(a){E(`Failed to clear encrypted password: ${a.message}`)}}async function ab(){if(!Z)return null;try{let a=await Z();if(!a.mitmSudoEncrypted)return null;return function(a){try{let[b,c,d]=a.split(":");if(!b||!c||!d)return null;let e=Y(),f=l.createDecipheriv(Q,e,Buffer.from(b,"hex"));return f.setAuthTag(Buffer.from(c,"hex")),f.update(Buffer.from(d,"hex"))+f.final("utf8")}catch{return null}}(a.mitmSudoEncrypted)}catch{return null}}async function ac(a,b){if($&&Z)try{let c={...(await Z()).dnsToolEnabled||{},[a]:b};await $({dnsToolEnabled:c})}catch(a){E(`Failed to save DNS state: ${a.message}`)}}async function ad(){if(!Z)return{};try{return(await Z()).dnsToolEnabled||{}}catch{return{}}}async function ae(a){let b=await ad(),c=a||U()||await ab();for(let[a,d]of Object.entries(b))if(d&&r[a])try{await m(a,c)}catch(b){E(`DNS ${a}: restore failed — ${b.message}`)}}async function af(){return v?u():!(!u()&&t())||!!(U()||await ab())}function ag(a){return new Promise(a=>{v?d('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{windowsHide:!0},(b,c)=>{if(b)return a(null);let e=parseInt(c.trim(),10);if(!e||e<=4)return a(null);d(`tasklist /FI "PID eq ${e}" /FO CSV /NH`,{windowsHide:!0},(b,c)=>{let d=c?.match(/"([^"]+)"/);a({pid:e,name:d?d[1]:"unknown"})})}):d("lsof -nP -iTCP:443 -sTCP:LISTEN -t",{windowsHide:!0},(b,c)=>{if(b||!c?.trim())return a(null);let e=parseInt(c.trim().split("\n")[0],10);if(!e||isNaN(e))return a(null);d(`ps -p ${e} -o comm=`,{windowsHide:!0},(b,c)=>{a({pid:e,name:c?.trim()||"unknown"})})})})}async function ah(a){if(S&&!S.killed){try{S.kill("SIGKILL")}catch{}S=null,T=null}try{if(h.existsSync(I)){let b=parseInt(h.readFileSync(I,"utf-8").trim(),10);b&&W(b)&&(X(b,!0,a),await new Promise(a=>setTimeout(a,500))),h.unlinkSync(I)}}catch{}if(!v&&P)try{let b=P.replace(/'/g,"'\\''");if(a||s()){let{execWithPassword:d}=c(98012);await d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,a||"").catch(()=>{})}else d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,{windowsHide:!0},()=>{});await new Promise(a=>setTimeout(a,500))}catch{}}async function ai(){let a=null!==S&&!S.killed,b=T;if(!a)try{if(h.existsSync(I)){let c=parseInt(h.readFileSync(I,"utf-8").trim(),10);c&&W(c)?(a=!0,b=c):h.unlinkSync(I)}}catch{}let d=q(),e=g.join(C,"rootCA.crt"),f=h.existsSync(e),{checkCertInstalled:i}=c(28059),j=!!f&&await i(e);return{running:a,pid:b,certExists:f,certTrusted:j,dnsStatus:d}}async function aj(a){if(M)return;if(Date.now()-L>=6e4&&(K=0),K>=5)return void E("Max restart attempts reached. Giving up.");let b=J[Math.min(K,J.length-1)];K++,M=!0,D(`Restarting in ${b/1e3}s... (${K}/5)`),await new Promise(a=>setTimeout(a,b));try{let b=Z?await Z():null;if(b&&!b.mitmEnabled){D("MITM disabled, skipping restart"),M=!1;return}let c=U()||await ab();if(!c&&!v){E("No cached password, cannot auto-restart"),M=!1;return}await al(a,c),D("\uD83D\uDD04 Restarted successfully"),K=0,M=!1}catch(b){E(`Restart attempt ${K}/5 failed: ${b.message}`),M=!1,aj(a)}}async function ak(a,b){if(a&&a.pid){if(v)try{f(`powershell -NonInteractive -WindowStyle Hidden -Command "Stop-Process -Id ${a.pid} -Force -ErrorAction SilentlyContinue"`,{windowsHide:!0})}catch{}else try{let{execWithPassword:d}=c(98012);b||s()?await d(`kill -9 ${a.pid}`,b||""):f(`kill -9 ${a.pid}`,{windowsHide:!0})}catch{}await new Promise(a=>setTimeout(a,800))}}async function al(a,b,d=!1){if(!S||S.killed)try{if(h.existsSync(I)){let a=parseInt(h.readFileSync(I,"utf-8").trim(),10);if(a&&W(a))return T=a,D(`♻️ Reusing existing process (PID: ${a})`),await _(!0,b),b&&V(b),{running:!0,pid:a};h.unlinkSync(I)}}catch{}if(S&&!S.killed)throw Error("MITM server is already running");if(await ah(b),!v){let a=await new Promise(a=>{let b=j.createServer();b.once("error",b=>{"EADDRINUSE"===b.code?a("in-use"):a("no-permission")}),b.once("listening",()=>{b.close(()=>a("free"))}),b.listen(443,"127.0.0.1")});if("in-use"===a||"no-permission"===a){let a=await ag(b);if(a){let c=a.name.includes("/")?a.name.split("/").filter(Boolean).pop():a.name;if(d)D(`Killing process on port 443 (PID ${a.pid}, name=${c})...`),await ak(a,b);else{let b=Error(`Port 443 is already in use by "${c}" (PID ${a.pid}).`);throw b.code="PORT_443_BUSY",b.portOwner={pid:a.pid,name:c},b}}}}let l=g.join(C,"rootCA.crt"),m=g.join(C,"rootCA.key"),n=h.existsSync(l)&&h.existsSync(m);if(!n||A(l)){if(n){D("\uD83D\uDD10 Cert expired — uninstalling old cert...");let a=b||U()||await ab();try{await z(a,l)}catch{}}D("\uD83D\uDD10 Generating Root CA..."),await x()}let{checkCertInstalled:o}=c(28059),p=await o(l),r=!v&&!w&&!s();if(p)D("\uD83D\uDD10 Cert: already trusted ✅");else{D("\uD83D\uDD10 Cert: not trusted → installing...");let a=b||U()||await ab();if(r)D(`🔐 Cert: skipping system trust (no sudo). Install ${l} as a trusted CA on machines that use this proxy.`);else{if(!a&&t())throw Error("Sudo password required to install Root CA certificate");try{await y(a,l),D("\uD83D\uDD10 Cert: ✅ trusted")}catch(a){throw Error(`Failed to trust certificate: ${a.message}`)}}}let u=P;if((!u||!h.existsSync(u))&&(D(`[MITM] server.js missing at ${u} → recopying`),!(u=O(N()))||!h.existsSync(u)))throw Error(`MITM server.js not found at ${u}. Reinstall 9router.`);let B=await H();if(D(`🚀 Starting server... (router: ${B})`),v){let c=await ag(b);if(c)if(d)D(`Killing process on port 443 (PID ${c.pid}, name=${c.name})...`),await ak(c,b);else{let a=Error(`Port 443 is already in use by "${c.name}" (PID ${c.pid}).`);throw a.code="PORT_443_BUSY",a.portOwner={pid:c.pid,name:c.name},a}S=e(process.execPath,[u],{detached:!1,windowsHide:!0,cwd:i.tmpdir(),stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:B}}),$&&await $({mitmCertInstalled:!0}).catch(()=>{})}else s()?((S=e("sudo",["-S","-E","sh","-c",[`HOME=${G(i.homedir())}`,`ROUTER_API_KEY=${G(a)}`,`MITM_ROUTER_BASE=${G(B)}`,"NODE_ENV=production",G(process.execPath),G(u)].join(" ")],{detached:!1,windowsHide:!0,stdio:["pipe","pipe","pipe"]})).stdin.write(`${b}
+`),S.stdin.end()):S=e(process.execPath,[u],{detached:!1,windowsHide:!0,cwd:i.tmpdir(),stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:B}});S&&(T=S.pid,h.writeFileSync(I,String(T)),L=Date.now());let F=null;S&&(S.stdout.on("data",a=>{process.stdout.write(a)}),S.stderr.on("data",a=>{let b=a.toString().trim();b&&(v||!b.includes("Password:")&&!b.includes("password for"))&&(E(b),F=b),!v&&(b.includes("incorrect password")||b.includes("no password was provided"))&&(V(null),aa(),M=!0)}),S.on("exit",b=>{D(`Server exited (code: ${b})`),S=null,T=null;try{h.unlinkSync(I)}catch{}0===b||M||aj(a)}));let J=await function(a=443){return new Promise(b=>{let c=Date.now()+8e3,d=()=>{let e=k.request({hostname:"127.0.0.1",port:a,path:"/_mitm_health",method:"GET",rejectUnauthorized:!1},a=>{let c="";a.on("data",a=>{c+=a}),a.on("end",()=>{try{let a=JSON.parse(c);b(!0===a.ok?{ok:!0,pid:a.pid||null}:null)}catch{b(null)}})});e.on("error",()=>{Date.now()<c?setTimeout(d,500):b(null)}),e.end()};d()})}(443);if(!J){if(S&&!S.killed){try{S.kill()}catch{}S=null}let a=function(){try{if(v){let a=f('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{encoding:"utf8",windowsHide:!0}).trim(),b=parseInt(a,10);if(b&&b>4){let a=f(`tasklist /FI "PID eq ${b}" /FO CSV /NH`,{encoding:"utf8",windowsHide:!0}).match(/"([^"]+)"/);if(a)return a[1].replace(".exe","")}}else{let a=f("lsof -i :443",{encoding:"utf8",windowsHide:!0}).trim().split("\n");if(a.length>1)return a[1].split(/\s+/)[0]}}catch{}return null}(),b=a?` Port 443 already in use by ${a}.`:"",c=F||`Check sudo password or port 443 access.${b}`;throw Error(`MITM server failed to start. ${c}`)}for(let[a,b]of($&&await $({mitmCertInstalled:!0}).catch(()=>{}),D(`✅ Server healthy (PID: ${T||J.pid})`),Object.entries(q())))D(`🌐 DNS ${a}: ${b?"✅ active":"❌ inactive"}`);return await _(!0,b),b&&V(b),{running:!0,pid:T}}async function am(a){M=!0,K=0,D("⏹ Stopping server...");let b=S,d=b&&!b.killed?b.pid:(()=>{try{return parseInt(h.readFileSync(I,"utf-8").trim(),10)}catch{return null}})();if(d&&W(d)&&(D(`Killing server (PID: ${d})...`),X(d,!1,a),await new Promise(a=>setTimeout(a,1e3)),W(d)&&X(d,!0,a)),S=null,T=null,v){let a=g.join(process.env.SystemRoot||"C:\\Windows","System32","drivers","etc","hosts"),b=Object.values(r).flat();try{let{isAdmin:d,runElevatedPowerShell:e,quotePs:f}=c(55757);if(d()){let d=h.readFileSync(a,"utf8"),e=d.split(/\r?\n/).filter(a=>!b.some(b=>a.includes(b))).join("\r\n").replace(/[\r\n\s]+$/g,"")+"\r\n";e!==d&&h.writeFileSync(a,e,"utf8");try{c(79646).execSync("ipconfig /flushdns",{windowsHide:!0,stdio:"ignore"})}catch{}D("\uD83C\uDF10 DNS: ✅ all tool hosts removed")}else{let c=b.map(f).join(","),d=`
           $hosts = @(${c})
           $lines = Get-Content -LiteralPath ${f(a)}
           $filtered = $lines | Where-Object {

package/app/.next/server/middleware-build-manifest.js

@@ -1 +1 @@
-globalThis.__BUILD_MANIFEST={polyfillFiles:["static/chunks/polyfills-42372ed130431b0a.js"],devFiles:[],lowPriorityFiles:["static/kiS7vH5c59DJK3b2ti1jN/_buildManifest.js","static/kiS7vH5c59DJK3b2ti1jN/_ssgManifest.js"],rootMainFiles:["static/chunks/webpack-86e40ea2022f394c.js","static/chunks/c7879cf7-255d52e3eda24cb7.js","static/chunks/5158-4b48a3595c794bbc.js","static/chunks/main-app-2c8be355ba1c4e93.js"],rootMainFilesTree:{},pages:{"/_app":[]}};
+globalThis.__BUILD_MANIFEST={polyfillFiles:["static/chunks/polyfills-42372ed130431b0a.js"],devFiles:[],lowPriorityFiles:["static/eJ_F0cODdJRrmD-63IF09/_buildManifest.js","static/eJ_F0cODdJRrmD-63IF09/_ssgManifest.js"],rootMainFiles:["static/chunks/webpack-86e40ea2022f394c.js","static/chunks/c7879cf7-255d52e3eda24cb7.js","static/chunks/5158-4b48a3595c794bbc.js","static/chunks/main-app-2c8be355ba1c4e93.js"],rootMainFilesTree:{},pages:{"/_app":[]}};