@fastybird/smart-panel-backend 1.1.0-alpha.3 → 1.1.0-alpha.4

package/dist/plugins/remote-access-tailscale/services/tailscale-login.service.js

@@ -19,8 +19,10 @@ const config_1 = require("@nestjs/config");
 const logger_1 = require("../../../common/logger");
 const config_utils_1 = require("../../../common/utils/config.utils");
 const remote_access_tailscale_constants_1 = require("../remote-access-tailscale.constants");
+const remote_access_tailscale_exceptions_1 = require("../remote-access-tailscale.exceptions");
 const tailscale_cli_service_1 = require("./tailscale-cli.service");
 const tailscale_node_managed_service_1 = require("./tailscale-node-managed.service");
+const ACTIONABLE_REQUIREMENT_CODES = ['operator-granted', 'daemon-active'];
 function extractJsonObjects(buffer) {
     const objects = [];
     let depth = 0;
@@ -96,6 +98,7 @@ let TailscaleLoginService = class TailscaleLoginService {
         return this.loginInteractively();
     }
     async logout() {
+        await this.assertActionable();
         this.stopPendingLogin();
         try {
             await this.cli.logout();
@@ -111,9 +114,19 @@ let TailscaleLoginService = class TailscaleLoginService {
         return this.currentStatus();
     }
     async resetPreferences() {
+        await this.assertActionable();
         await this.cli.up(['--reset', ...this.buildManagedFlags()]);
         return this.currentStatus();
     }
+    async assertActionable() {
+        const requirements = await this.nodeManagedService.refreshRequirements('status-read');
+        for (const code of ACTIONABLE_REQUIREMENT_CODES) {
+            const requirement = requirements.find((candidate) => candidate.code === code);
+            if (requirement && !requirement.satisfied) {
+                throw new remote_access_tailscale_exceptions_1.TailscaleRequirementUnsatisfiedException(requirement);
+            }
+        }
+    }
     getPendingInteractiveAuth() {
         if (!this.pending?.authUrl) {
             return null;
@@ -132,6 +145,7 @@ let TailscaleLoginService = class TailscaleLoginService {
     async loginWithAuthKey(authKey) {
         this.keyedLoginInFlight = true;
         try {
+            await this.assertActionable();
             const keyFilePath = await this.writeAuthKeyFile(authKey);
             try {
                 await this.runUpToCompletion([`--auth-key=file:${keyFilePath}`, '--timeout=120s', ...this.buildManagedFlags()], remote_access_tailscale_constants_1.TAILSCALE_LOGIN_AUTH_KEY_TIMEOUT_MS);
@@ -150,9 +164,16 @@ let TailscaleLoginService = class TailscaleLoginService {
             this.keyedLoginInFlight = false;
         }
     }
-    loginInteractively() {
+    async loginInteractively() {
+        if (this.pending) {
+            return { state: 'pending-auth', authUrl: this.pending.authUrl, qr: this.pending.qr };
+        }
+        await this.assertActionable();
         if (this.pending) {
-            return Promise.resolve({ state: 'pending-auth', authUrl: this.pending.authUrl, qr: this.pending.qr });
+            return { state: 'pending-auth', authUrl: this.pending.authUrl, qr: this.pending.qr };
+        }
+        if (this.keyedLoginInFlight) {
+            throw new TailscaleLoginInProgressException('A Tailscale sign-in with an auth key is currently in progress. Wait for it to finish before starting an interactive sign-in.');
         }
         const child = this.cli.spawnUp(['--json', '--timeout=10m', ...this.buildManagedFlags()]);
         child.stderr.resume();

package/dist/plugins/remote-access-tailscale/services/tailscale-login.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"tailscale-login.service.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/services/tailscale-login.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAqDA,gDA4CC;AAhGD,6CAAyC;AACzC,+CAAiE;AACjE,yCAAiC;AAEjC,2CAA0D;AAC1D,2CAAoE;AAEpE,mDAA+D;AAC/D,qEAAiE;AAEjE,4FAM8C;AAE9C,mEAAiF;AACjF,qFAA+E;AAiC/E,SAAgB,kBAAkB,CAAC,MAAc;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvB,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACzB,QAAQ,GAAG,KAAK,CAAC;YAClB,CAAC;YAED,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,KAAK,GAAG,CAAC,CAAC;YACX,CAAC;YAED,KAAK,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAE/B,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACX,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;AACpD,CAAC;AAQD,MAAa,iCAAkC,SAAQ,KAAK;IAC3D,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACjD,CAAC;CACD;AALD,8EAKC;AAGD,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAkClD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAOjC,YACkB,GAAwB,EACxB,kBAA+C,EAC/C,iBAAoC;QAFpC,QAAG,GAAH,GAAG,CAAqB;QACxB,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,sBAAiB,GAAjB,iBAAiB,CAAmB;QATrC,WAAM,GAAG,IAAA,8BAAqB,EAAC,uEAAmC,EAAE,uBAAuB,CAAC,CAAC;QAEtG,YAAO,GAAmC,IAAI,CAAC;QAE/C,uBAAkB,GAAG,KAAK,CAAC;IAMhC,CAAC;IAEJ,KAAK,CAAC,YAAY;QACjB,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC3B,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,MAAM,IAAI,iCAAiC,CAC1C,qGAAqG,CACrG,CAAC;YACH,CAAC;YAQD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExB,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,iCAAiC,CAC1C,8HAA8H,CAC9H,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM;QACX,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAKhB,IAAI,KAAK,YAAY,yCAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,gBAAgB;QAKrB,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAGD,yBAAyB;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC/D,CAAC;IAOD,gBAAgB;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE9C,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAI7C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAEzD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,iBAAiB,CAC3B,CAAC,mBAAmB,WAAW,EAAE,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,EACjF,uEAAmC,CACnC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAIhB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;oBAC5E,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBAGV,MAAM,IAAA,aAAE,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACjC,CAAC;IACF,CAAC;IAEO,kBAAkB;QACzB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAGlB,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACvG,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAEzF,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,cAAc,GAAG,KAAK,CAAC;YAO3B,MAAM,aAAa,GAAG,CAAC,MAA4B,EAAQ,EAAE;gBAC5D,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,uBAAuB,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,YAAY,GAAG,CAAC,KAAY,EAAQ,EAAE;gBAC3C,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,uBAAuB,CAAC,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,uBAAuB,GAAG,GAAS,EAAE;gBAC1C,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9D,CAAC,CAAC;YAEF,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;gBAChG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;YAC1E,CAAC,EAAE,0EAAsC,CAAC,CAAC;YAI3C,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YAYxB,MAAM,uBAAuB,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,6IAA6I,CAC7I,CAAC;gBACF,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1C,CAAC,EAAE,0EAAsC,CAAC,CAAC;YAE3C,uBAAuB,CAAC,KAAK,EAAE,EAAE,CAAC;YAElC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;YAEpD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAGzC,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAE9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAElE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;gBAE3B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC3B,IAAI,MAA4B,CAAC;oBAEjC,IAAI,CAAC;wBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACR,SAAS;oBACV,CAAC;oBAED,IAAI,CAAC,cAAc,EAAE,CAAC;wBACrB,cAAc,GAAG,IAAI,CAAC;wBAItB,YAAY,CAAC,uBAAuB,CAAC,CAAC;wBAEtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;4BACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gCAClB,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;gCACtC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;4BAC7B,CAAC;4BAED,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;wBAClF,CAAC;6BAAM,CAAC;4BAGP,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BACxB,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;yBAAM,CAAC;wBAKP,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,CAAC;gBACF,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,uBAAuB,EAAE,CAAC;gBAC3B,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAE7D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,iBAAiB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;QAEzD,OAAO,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAGO,cAAc;QACrB,MAAM,OAAO,GAAG,IAAA,0BAAW,EAAS,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAEnG,OAAO,IAAA,gBAAI,EAAC,OAAO,EAAE,yDAAqB,CAAC,CAAC;IAC7C,CAAC;IAWO,KAAK,CAAC,wBAAwB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAElC,IAAI,OAAiB,CAAC;QAEtB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0EAA0E,EAAE;oBAC7F,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;YAED,OAAO;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACV,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4EAA4E,KAAK,EAAE,CAAC,CAAC;YACxG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,KAAK,EAAE,EAAE;oBAC/E,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAElC,MAAM,IAAA,gBAAK,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,YAAY,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;QAE3D,IAAI,CAAC;YAGJ,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAMhB,MAAM,IAAA,aAAE,EAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAE3D,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAGO,iBAAiB,CAAC,IAAc,EAAE,SAAiB;QAC1D,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAErC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAEtB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,SAAS,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAEhB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC5B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;gBACX,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;gBACvE,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AAjaY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCASW,2CAAmB;QACJ,4DAA2B;QAC5B,sBAAiB;GAV1C,qBAAqB,CAiajC"}
+{"version":3,"file":"tailscale-login.service.js","sourceRoot":"","sources":["../../../../src/plugins/remote-access-tailscale/services/tailscale-login.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAyDA,gDA4CC;AApGD,6CAAyC;AACzC,+CAAiE;AACjE,yCAAiC;AAEjC,2CAA0D;AAC1D,2CAAoE;AAEpE,mDAA+D;AAC/D,qEAAiE;AAEjE,4FAM8C;AAC9C,8FAAiG;AAEjG,mEAAiF;AACjF,qFAA+E;AAG/E,MAAM,4BAA4B,GAAG,CAAC,kBAAkB,EAAE,eAAe,CAAU,CAAC;AAiCpF,SAAgB,kBAAkB,CAAC,MAAc;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAEvB,IAAI,QAAQ,EAAE,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,KAAK,CAAC;YACjB,CAAC;iBAAM,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBACzB,QAAQ,GAAG,KAAK,CAAC;YAClB,CAAC;YAED,SAAS;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjB,KAAK,GAAG,CAAC,CAAC;YACX,CAAC;YAED,KAAK,EAAE,CAAC;QACT,CAAC;aAAM,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACzB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAE/B,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACX,UAAU,GAAG,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;AACpD,CAAC;AAQD,MAAa,iCAAkC,SAAQ,KAAK;IAC3D,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IACjD,CAAC;CACD;AALD,8EAKC;AAGD,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAkClD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAOjC,YACkB,GAAwB,EACxB,kBAA+C,EAC/C,iBAAoC;QAFpC,QAAG,GAAH,GAAG,CAAqB;QACxB,uBAAkB,GAAlB,kBAAkB,CAA6B;QAC/C,sBAAiB,GAAjB,iBAAiB,CAAmB;QATrC,WAAM,GAAG,IAAA,8BAAqB,EAAC,uEAAmC,EAAE,uBAAuB,CAAC,CAAC;QAEtG,YAAO,GAAmC,IAAI,CAAC;QAE/C,uBAAkB,GAAG,KAAK,CAAC;IAMhC,CAAC;IAEJ,KAAK,CAAC,YAAY;QACjB,MAAM,IAAI,CAAC,wBAAwB,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAO3B,IAAI,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,MAAM,IAAI,iCAAiC,CAC1C,qGAAqG,CACrG,CAAC;YACH,CAAC;YAQD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAExB,OAAO,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,iCAAiC,CAC1C,8HAA8H,CAC9H,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAKhB,IAAI,KAAK,YAAY,yCAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBACxE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACP,MAAM,KAAK,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,gBAAgB;QACrB,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAM9B,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAE5D,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7B,CAAC;IAWO,KAAK,CAAC,gBAAgB;QAC7B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;QAEtF,KAAK,MAAM,IAAI,IAAI,4BAA4B,EAAE,CAAC;YACjD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAE9E,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;gBAC3C,MAAM,IAAI,6EAAwC,CAAC,WAAW,CAAC,CAAC;YACjE,CAAC;QACF,CAAC;IACF,CAAC;IAGD,yBAAyB;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC/D,CAAC;IAOD,gBAAgB;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAE9C,YAAY,CAAC,aAAa,CAAC,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAI7C,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QAE/B,IAAI,CAAC;YAKJ,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE9B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAEzD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,iBAAiB,CAC3B,CAAC,mBAAmB,WAAW,EAAE,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,EACjF,uEAAmC,CACnC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAIhB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;oBAC5E,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;oBAAS,CAAC;gBAGV,MAAM,IAAA,aAAE,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;QACjC,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC/B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAIlB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACtF,CAAC;QAID,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAQ9B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,iCAAiC,CAC1C,8HAA8H,CAC9H,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;QAEzF,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAEtB,OAAO,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,cAAc,GAAG,KAAK,CAAC;YAO3B,MAAM,aAAa,GAAG,CAAC,MAA4B,EAAQ,EAAE;gBAC5D,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,uBAAuB,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,CAAC,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,YAAY,GAAG,CAAC,KAAY,EAAQ,EAAE;gBAC3C,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,uBAAuB,CAAC,CAAC;gBACtC,MAAM,CAAC,KAAK,CAAC,CAAC;YACf,CAAC,CAAC;YAEF,MAAM,uBAAuB,GAAG,GAAS,EAAE;gBAC1C,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9D,CAAC,CAAC;YAEF,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;gBAChG,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC,CAAC;YAC1E,CAAC,EAAE,0EAAsC,CAAC,CAAC;YAI3C,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC;YAYxB,MAAM,uBAAuB,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,6IAA6I,CAC7I,CAAC;gBACF,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAC1C,CAAC,EAAE,0EAAsC,CAAC,CAAC;YAE3C,uBAAuB,CAAC,KAAK,EAAE,EAAE,CAAC;YAElC,IAAI,CAAC,OAAO,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC;YAEpD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAGzC,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAE9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAElE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;gBAE3B,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC3B,IAAI,MAA4B,CAAC;oBAEjC,IAAI,CAAC;wBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;oBAClD,CAAC;oBAAC,MAAM,CAAC;wBACR,SAAS;oBACV,CAAC;oBAED,IAAI,CAAC,cAAc,EAAE,CAAC;wBACrB,cAAc,GAAG,IAAI,CAAC;wBAItB,YAAY,CAAC,uBAAuB,CAAC,CAAC;wBAEtC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;4BACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gCAClB,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;gCACtC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;4BAC7B,CAAC;4BAED,aAAa,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;wBAClF,CAAC;6BAAM,CAAC;4BAGP,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BACxB,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;yBAAM,CAAC;wBAKP,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACzB,CAAC;gBACF,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,YAAY,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACzE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBACxB,IAAI,IAAI,CAAC,OAAO,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;oBACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,uBAAuB,EAAE,CAAC;gBAC3B,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAE7D,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;IAEO,iBAAiB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,eAAe,EAAE,CAAC;QAEzD,OAAO,IAAI,CAAC,kBAAkB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAGO,cAAc;QACrB,MAAM,OAAO,GAAG,IAAA,0BAAW,EAAS,IAAI,CAAC,iBAAiB,EAAE,aAAa,EAAE,sBAAsB,CAAC,CAAC;QAEnG,OAAO,IAAA,gBAAI,EAAC,OAAO,EAAE,yDAAqB,CAAC,CAAC;IAC7C,CAAC;IAWO,KAAK,CAAC,wBAAwB;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAElC,IAAI,OAAiB,CAAC;QAEtB,IAAI,CAAC;YACJ,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0EAA0E,EAAE;oBAC7F,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;YAED,OAAO;QACR,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACV,CAAC;YAED,IAAI,CAAC;gBACJ,MAAM,IAAA,aAAE,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAE5C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4EAA4E,KAAK,EAAE,CAAC,CAAC;YACxG,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,KAAK,EAAE,EAAE;oBAC/E,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC/D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,OAAe;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAElC,MAAM,IAAA,gBAAK,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,YAAY,IAAA,wBAAU,GAAE,MAAM,CAAC,CAAC;QAE3D,IAAI,CAAC;YAGJ,MAAM,IAAA,oBAAS,EAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAMhB,MAAM,IAAA,aAAE,EAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAE3D,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAGO,iBAAiB,CAAC,IAAc,EAAE,SAAiB;QAC1D,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAErC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAEtB,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACtB,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,SAAS,KAAK,CAAC,CAAC,CAAC;YAC3E,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAEhB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC7B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;YAEH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC5B,IAAI,OAAO,EAAE,CAAC;oBACb,OAAO;gBACR,CAAC;gBAED,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBAEpB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;oBAChB,OAAO,EAAE,CAAC;gBACX,CAAC;qBAAM,CAAC;oBACP,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC;gBACvE,CAAC;YACF,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AA3dY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCASW,2CAAmB;QACJ,4DAA2B;QAC5B,sBAAiB;GAV1C,qBAAqB,CA2djC"}

package/dist/plugins/remote-access-tailscale/services/tailscale-node-managed.service.d.ts

@@ -10,11 +10,17 @@ import { TailscaleCliService } from './tailscale-cli.service';
 import { TailscaleServeService } from './tailscale-serve.service';
 import { TailscaleStatusMapperService } from './tailscale-status-mapper.service';
 export type TailscaleRequirementCode = 'platform-supported' | 'binary-installed' | 'daemon-active' | 'operator-granted' | 'version-supported';
+export interface TailscaleRequirementRemedy {
+    commands: string[];
+    note: string | null;
+}
 export interface TailscaleRequirement {
     code: TailscaleRequirementCode;
     satisfied: boolean;
     message: string;
+    remedy: TailscaleRequirementRemedy | null;
 }
+export type TailscaleRequirementRefreshReason = 'start' | 'permission-denied' | 'setup-complete' | 'status-read' | 'periodic';
 export declare function compareTailscaleVersions(a: string, b: string): number;
 export declare class TailscaleNodeManagedService extends BaseManagedExtensionService {
     private readonly cli;
@@ -33,10 +39,16 @@ export declare class TailscaleNodeManagedService extends BaseManagedExtensionSer
     readonly activationPolicy: "owner-enabled";
     private pollTimer;
     private lastStatus;
+    private lastError;
     private pluginConfig;
+    private requirementsCache;
+    private requirementsRefreshedAt;
+    private lastServeConvergeDenied;
     constructor(cli: TailscaleCliService, mapper: TailscaleStatusMapperService, configService: ConfigService, nestConfigService: NestConfigService, platformService: PlatformService, eventEmitter: EventEmitter2, serveService: TailscaleServeService);
     start(): Promise<void>;
     stop(): Promise<void>;
+    private isStopFailureTolerated;
+    private emitStatus;
     onConfigChanged(): Promise<ConfigChangeResult>;
     isHealthy(): Promise<boolean>;
     factoryReset(): Promise<{
@@ -44,11 +56,25 @@ export declare class TailscaleNodeManagedService extends BaseManagedExtensionSer
         reason?: string;
     }>;
     evaluateRequirements(): Promise<TailscaleRequirement[]>;
+    getRequirements(): TailscaleRequirement[];
+    refreshRequirements(reason: TailscaleRequirementRefreshReason): Promise<TailscaleRequirement[]>;
+    private requirementsSatisfied;
+    private evaluateRequirementsLive;
+    private unevaluatedRequirement;
+    private attachRemedies;
+    private finalizeRequirement;
+    private buildRemedy;
+    private buildInstallRemedy;
+    private runSetupScriptPrintPlan;
     computeStatus(): Promise<RemoteAccessProviderStatus>;
+    private computeStatusWithRawStatus;
+    private convergeServe;
     private evaluatePlatformSupported;
     private evaluateBinaryAndVersion;
     private evaluateDaemonActive;
     private evaluateOperatorGranted;
+    private evaluateOperatorGrantedViaProbe;
+    private buildOperatorRequirement;
     private getStatusOrNull;
     private isSystemdUnitActive;
     private isPollable;

package/dist/plugins/remote-access-tailscale/services/tailscale-node-managed.service.js

@@ -16,6 +16,7 @@ exports.TailscaleNodeManagedService = void 0;
 exports.compareTailscaleVersions = compareTailscaleVersions;
 const node_child_process_1 = require("node:child_process");
 const os_1 = __importDefault(require("os"));
+const path_1 = require("path");
 const common_1 = require("@nestjs/common");
 const config_1 = require("@nestjs/config");
 const event_emitter_1 = require("@nestjs/event-emitter");
@@ -28,9 +29,15 @@ const platform_service_1 = require("../../../modules/platform/services/platform.
 const remote_access_constants_1 = require("../../../modules/remote-access/remote-access.constants");
 const config_model_1 = require("../models/config.model");
 const remote_access_tailscale_constants_1 = require("../remote-access-tailscale.constants");
+const remote_access_tailscale_exceptions_1 = require("../remote-access-tailscale.exceptions");
 const tailscale_cli_service_1 = require("./tailscale-cli.service");
 const tailscale_serve_service_1 = require("./tailscale-serve.service");
 const tailscale_status_mapper_service_1 = require("./tailscale-status-mapper.service");
+const TAILSCALE_REQUIREMENTS_PERIODIC_REFRESH_MS = 5 * 60 * 1000;
+const TAILSCALE_PRINT_PLAN_TIMEOUT_MS = 2_000;
+const OPERATOR_GRANTED_SATISFIED_MESSAGE = 'The smart-panel operator is granted.';
+const TAILSCALE_DOCUMENTATION_URL = 'https://smart-panel.fastybird.com/docs';
+const TAILSCALE_VENDOR_DOWNLOAD_URL = 'https://tailscale.com/download/linux';
 function compareTailscaleVersions(a, b) {
     const toParts = (v) => v.split('.').map((segment) => parseInt(segment, 10) || 0);
     const partsA = toParts(a);
@@ -60,7 +67,11 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
         this.activationPolicy = 'owner-enabled';
         this.pollTimer = null;
         this.lastStatus = null;
+        this.lastError = null;
         this.pluginConfig = null;
+        this.requirementsCache = null;
+        this.requirementsRefreshedAt = 0;
+        this.lastServeConvergeDenied = false;
     }
     async start() {
         await this.withLock(async () => {
@@ -72,8 +83,8 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
             const config = this.getPluginConfig();
             this.logger.log('Starting Tailscale node service');
             try {
-                const requirements = await this.evaluateRequirements();
-                if (requirements.every((requirement) => requirement.satisfied)) {
+                const requirements = await this.refreshRequirements('start');
+                if (this.requirementsSatisfied(requirements)) {
                     const status = await this.getStatusOrNull();
                     if (status && this.mapper.hasExistingKey(status)) {
                         await this.cli.set(this.buildPreferenceFlags(config));
@@ -82,9 +93,17 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
                 }
             }
             catch (error) {
+                if (error instanceof tailscale_cli_service_1.TailscaleCliError && error.kind === 'permission-denied') {
+                    await this.refreshRequirements('permission-denied').catch(() => undefined);
+                }
                 this.logger.warn('Failed to bring the Tailscale node up during start; the poller keeps reporting live status.', {
                     message: error instanceof Error ? error.message : String(error),
                 });
+                await this.emitStatus().catch((emitError) => {
+                    this.logger.debug('Failed to emit status after a failed start', {
+                        message: emitError instanceof Error ? emitError.message : String(emitError),
+                    });
+                });
             }
             this.schedulePoll(0);
             this.state = 'started';
@@ -100,16 +119,41 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
             this.clearPoll();
             try {
                 await this.cli.down();
+                this.state = 'stopped';
             }
             catch (error) {
-                this.logger.debug('tailscale down failed while stopping (safe to ignore if the node was already down)', {
-                    message: error instanceof Error ? error.message : String(error),
-                });
+                if (await this.isStopFailureTolerated(error)) {
+                    this.logger.debug('tailscale down failed while stopping (safe to ignore if the node was already down)', {
+                        message: error instanceof Error ? error.message : String(error),
+                    });
+                    this.state = 'stopped';
+                }
+                else {
+                    const message = error instanceof Error ? error.message : String(error);
+                    this.state = 'error';
+                    this.lastError = message;
+                    this.logger.error('Failed to stop the Tailscale node service', { message });
+                    await this.emitStatus();
+                    throw new remote_access_tailscale_exceptions_1.TailscaleNodeStopFailedException(message);
+                }
             }
-            this.state = 'stopped';
+            await this.emitStatus();
             this.logger.log('Tailscale node service stopped');
         });
     }
+    async isStopFailureTolerated(error) {
+        if (error instanceof tailscale_cli_service_1.TailscaleCliError &&
+            (error.kind === 'needs-login' || error.kind === 'daemon-down' || error.kind === 'not-installed')) {
+            return true;
+        }
+        const status = await this.getStatusOrNull();
+        return status?.BackendState === 'Stopped';
+    }
+    async emitStatus() {
+        const status = await this.computeStatus();
+        this.lastStatus = status;
+        this.eventEmitter.emit(remote_access_constants_1.EventType.PROVIDER_STATUS, status);
+    }
     async onConfigChanged() {
         const previous = this.pluginConfig;
         this.pluginConfig = null;
@@ -133,19 +177,22 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
             return { restartRequired: true };
         }
         try {
-            const requirements = await this.evaluateRequirements();
-            if (requirements.every((requirement) => requirement.satisfied)) {
+            const requirements = await this.refreshRequirements('start');
+            if (this.requirementsSatisfied(requirements)) {
                 const status = await this.getStatusOrNull();
                 if (status && this.mapper.hasExistingKey(status)) {
                     await this.cli.set(this.buildPreferenceFlags(next));
                     const port = this.getBackendPort();
                     if (this.mapper.map(status, { port }).state === 'connected') {
-                        await this.serveService.apply(next, port, status);
+                        await this.convergeServe(next, port, status);
                     }
                 }
             }
         }
         catch (error) {
+            if (error instanceof tailscale_cli_service_1.TailscaleCliError && error.kind === 'permission-denied') {
+                await this.refreshRequirements('permission-denied').catch(() => undefined);
+            }
             this.logger.warn('Failed to apply changed Tailscale preferences', {
                 message: error instanceof Error ? error.message : String(error),
             });
@@ -153,6 +200,9 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
         return { restartRequired: false };
     }
     async isHealthy() {
+        if (!this.requirementsSatisfied(this.getRequirements())) {
+            return false;
+        }
         try {
             const status = await this.cli.getStatus();
             return status.BackendState === 'Running' && status.Self?.Online === true;
@@ -175,14 +225,34 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
         }
     }
     async evaluateRequirements() {
+        return this.refreshRequirements('status-read');
+    }
+    getRequirements() {
+        return this.requirementsCache ?? [];
+    }
+    async refreshRequirements(reason) {
+        if (reason === 'periodic' &&
+            this.requirementsCache &&
+            Date.now() - this.requirementsRefreshedAt < TAILSCALE_REQUIREMENTS_PERIODIC_REFRESH_MS) {
+            return this.requirementsCache;
+        }
+        const requirements = await this.evaluateRequirementsLive();
+        this.requirementsCache = requirements;
+        this.requirementsRefreshedAt = Date.now();
+        return requirements;
+    }
+    requirementsSatisfied(requirements) {
+        return requirements.length > 0 && requirements.every((requirement) => requirement.satisfied);
+    }
+    async evaluateRequirementsLive() {
         const platform = await this.evaluatePlatformSupported();
         if (!platform.satisfied) {
             return [
-                platform,
-                { code: 'binary-installed', satisfied: false, message: UNEVALUATED_MESSAGE },
-                { code: 'daemon-active', satisfied: false, message: UNEVALUATED_MESSAGE },
-                { code: 'operator-granted', satisfied: false, message: UNEVALUATED_MESSAGE },
-                { code: 'version-supported', satisfied: false, message: UNEVALUATED_MESSAGE },
+                await this.finalizeRequirement(platform),
+                this.unevaluatedRequirement('binary-installed'),
+                this.unevaluatedRequirement('daemon-active'),
+                this.unevaluatedRequirement('operator-granted'),
+                this.unevaluatedRequirement('version-supported'),
             ];
         }
         const [{ binary, version }, daemonActive, operatorGranted] = await Promise.all([
@@ -190,41 +260,153 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
             this.evaluateDaemonActive(),
             this.evaluateOperatorGranted(),
         ]);
-        return [platform, binary, daemonActive, operatorGranted, version];
+        return this.attachRemedies([platform, binary, daemonActive, operatorGranted, version]);
+    }
+    unevaluatedRequirement(code) {
+        return { code, satisfied: false, message: UNEVALUATED_MESSAGE, remedy: null };
+    }
+    async attachRemedies(requirements) {
+        let installRemedyPromise = null;
+        const getInstallRemedy = () => {
+            installRemedyPromise ??= this.buildInstallRemedy();
+            return installRemedyPromise;
+        };
+        return Promise.all(requirements.map((requirement) => this.finalizeRequirement(requirement, getInstallRemedy)));
+    }
+    async finalizeRequirement(requirement, getInstallRemedy) {
+        if (requirement.satisfied) {
+            return { ...requirement, remedy: null };
+        }
+        const remedy = getInstallRemedy && (requirement.code === 'binary-installed' || requirement.code === 'version-supported')
+            ? await getInstallRemedy()
+            : await this.buildRemedy(requirement.code);
+        return { ...requirement, remedy };
+    }
+    async buildRemedy(code) {
+        const serviceUser = os_1.default.userInfo().username;
+        switch (code) {
+            case 'binary-installed':
+            case 'version-supported':
+                return this.buildInstallRemedy();
+            case 'daemon-active':
+                return { commands: ['sudo systemctl enable --now tailscaled'], note: null };
+            case 'operator-granted':
+                return { commands: [`sudo tailscale set --operator=${serviceUser}`], note: null };
+            case 'platform-supported':
+            default:
+                return { commands: [], note: TAILSCALE_DOCUMENTATION_URL };
+        }
+    }
+    async buildInstallRemedy() {
+        try {
+            const stdout = await this.runSetupScriptPrintPlan('install');
+            const lines = stdout
+                .split('\n')
+                .map((line) => line.trim())
+                .filter((line) => line.length > 0);
+            if (lines.length === 0) {
+                return { commands: [], note: TAILSCALE_VENDOR_DOWNLOAD_URL };
+            }
+            return {
+                commands: lines.map((line) => (line.includes('|') ? line : `sudo ${line}`)),
+                note: null,
+            };
+        }
+        catch (error) {
+            this.logger.debug('Failed to build the install remedy from tailscale-setup.sh --print-plan', {
+                message: error instanceof Error ? error.message : String(error),
+            });
+            return { commands: [], note: TAILSCALE_VENDOR_DOWNLOAD_URL };
+        }
+    }
+    runSetupScriptPrintPlan(step) {
+        const script = (0, path_1.join)(__dirname, '..', 'scripts', 'tailscale-setup.sh');
+        return new Promise((resolve, reject) => {
+            (0, node_child_process_1.execFile)('bash', [script, '--print-plan', `--step=${step}`], { timeout: TAILSCALE_PRINT_PLAN_TIMEOUT_MS }, (error, stdout) => {
+                if (error) {
+                    reject(error);
+                    return;
+                }
+                resolve(stdout ?? '');
+            });
+        });
     }
     async computeStatus() {
+        return (await this.computeStatusWithRawStatus()).status;
+    }
+    async computeStatusWithRawStatus() {
+        if (this.state === 'stopped' || this.state === 'stopping') {
+            return { status: this.buildStatus('disconnected', 'The node service is stopped.'), raw: null };
+        }
+        if (this.state === 'error') {
+            return { status: this.buildStatus('error', this.lastError ?? 'The Tailscale node service failed.'), raw: null };
+        }
         const platform = await this.evaluatePlatformSupported();
         if (!platform.satisfied) {
-            return this.buildStatus('unsupported', platform.message);
+            return { status: this.buildStatus('unsupported', platform.message), raw: null };
         }
         try {
             const status = await this.cli.getStatus();
             const port = this.getBackendPort();
-            const mapped = this.mapper.map(status, { port });
             const postureAdvisories = this.buildPostureAdvisories(status);
+            const requirements = await this.refreshRequirements('periodic');
+            const operatorRequirement = requirements.find((requirement) => requirement.code === 'operator-granted');
+            if (operatorRequirement && !operatorRequirement.satisfied) {
+                return {
+                    status: this.buildStatus('setup-required', operatorRequirement.message, {}, [], [], [
+                        ...postureAdvisories,
+                        { code: 'operator-not-granted', severity: 'critical', message: operatorRequirement.message },
+                    ]),
+                    raw: status,
+                };
+            }
+            const mapped = this.mapper.map(status, { port });
             if (mapped.state !== 'connected') {
-                return this.buildStatus(mapped.state, mapped.message, mapped.details, mapped.proxyAddresses, mapped.endpoints, postureAdvisories);
+                return {
+                    status: this.buildStatus(mapped.state, mapped.message, mapped.details, mapped.proxyAddresses, mapped.endpoints, postureAdvisories),
+                    raw: status,
+                };
             }
             const config = this.getPluginConfig();
-            const serveResult = await this.serveService.apply(config, port, status);
-            return this.buildStatus(mapped.state, mapped.message, mapped.details, [...mapped.proxyAddresses, ...serveResult.proxyAddresses], [...mapped.endpoints, ...serveResult.endpoints], [...postureAdvisories, ...serveResult.advisories]);
+            const serveResult = await this.serveService.read(config, port, status);
+            return {
+                status: this.buildStatus(mapped.state, mapped.message, mapped.details, [...mapped.proxyAddresses, ...serveResult.proxyAddresses], [...mapped.endpoints, ...serveResult.endpoints], [...postureAdvisories, ...serveResult.advisories]),
+                raw: status,
+            };
         }
         catch (error) {
             if (error instanceof tailscale_cli_service_1.TailscaleCliError) {
                 switch (error.kind) {
                     case 'not-installed':
-                        return this.buildStatus('not-installed', 'Tailscale is not installed.');
+                        return { status: this.buildStatus('not-installed', 'Tailscale is not installed.'), raw: null };
                     case 'permission-denied':
-                        return this.buildStatus('setup-required', 'The smart-panel operator has not been granted on tailscaled.');
+                        return {
+                            status: this.buildStatus('setup-required', 'The smart-panel operator has not been granted on tailscaled.'),
+                            raw: null,
+                        };
                     case 'daemon-down':
-                        return this.buildStatus('setup-required', 'The Tailscale daemon is not running.');
+                        return { status: this.buildStatus('setup-required', 'The Tailscale daemon is not running.'), raw: null };
                     default:
-                        return this.buildStatus('error', 'Failed to retrieve the Tailscale status.');
+                        return { status: this.buildStatus('error', 'Failed to retrieve the Tailscale status.'), raw: null };
                 }
             }
             throw error;
         }
     }
+    async convergeServe(config, port, status) {
+        const result = await this.serveService.converge(config, port, status);
+        if (result.permissionDenied) {
+            if (!this.lastServeConvergeDenied) {
+                this.lastServeConvergeDenied = true;
+                this.logger.warn('Tailscale Serve/Funnel mutation was denied — the smart-panel operator grant may have been revoked.');
+                await this.refreshRequirements('permission-denied').catch(() => undefined);
+            }
+        }
+        else {
+            this.lastServeConvergeDenied = false;
+        }
+        return result;
+    }
     async evaluatePlatformSupported() {
         const platformType = await this.platformService.getPlatformTypeAsync();
         if (platformType === platform_constants_1.PlatformType.RASPBERRY || platformType === platform_constants_1.PlatformType.GENERIC) {
@@ -291,19 +473,41 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
         };
     }
     async evaluateOperatorGranted() {
+        const serviceUser = os_1.default.userInfo().username;
         try {
-            await this.cli.getStatus();
-            return { code: 'operator-granted', satisfied: true, message: 'The smart-panel operator is granted.' };
+            const prefs = await this.cli.getPrefs();
+            return this.buildOperatorRequirement(prefs.OperatorUser === serviceUser, serviceUser);
         }
         catch (error) {
             if (error instanceof tailscale_cli_service_1.TailscaleCliError) {
-                if (error.kind === 'permission-denied') {
+                if (error.kind === 'daemon-down') {
                     return {
                         code: 'operator-granted',
                         satisfied: false,
-                        message: 'The smart-panel operator has not been granted; run setup again.',
+                        message: 'Cannot verify the operator grant while tailscaled is not running.',
                     };
                 }
+                if (error.kind === 'not-installed') {
+                    return {
+                        code: 'operator-granted',
+                        satisfied: false,
+                        message: 'Cannot verify the operator grant before Tailscale is installed.',
+                    };
+                }
+            }
+            return this.evaluateOperatorGrantedViaProbe(serviceUser);
+        }
+    }
+    async evaluateOperatorGrantedViaProbe(serviceUser) {
+        try {
+            await this.cli.set([`--operator=${serviceUser}`]);
+            return this.buildOperatorRequirement(true, serviceUser);
+        }
+        catch (error) {
+            if (error instanceof tailscale_cli_service_1.TailscaleCliError) {
+                if (error.kind === 'permission-denied') {
+                    return this.buildOperatorRequirement(false, serviceUser);
+                }
                 if (error.kind === 'daemon-down') {
                     return {
                         code: 'operator-granted',
@@ -322,6 +526,15 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
             return { code: 'operator-granted', satisfied: false, message: 'Failed to verify the operator grant.' };
         }
     }
+    buildOperatorRequirement(satisfied, serviceUser) {
+        return {
+            code: 'operator-granted',
+            satisfied,
+            message: satisfied
+                ? OPERATOR_GRANTED_SATISFIED_MESSAGE
+                : `The ${serviceUser} user is not the tailscaled operator. Run Set up, or on the device run \`sudo tailscale set --operator=${serviceUser}\`.`,
+        };
+    }
     async getStatusOrNull() {
         try {
             return await this.cli.getStatus();
@@ -362,10 +575,13 @@ let TailscaleNodeManagedService = class TailscaleNodeManagedService extends base
     }
     async pollTick() {
         try {
-            const status = await this.computeStatus();
+            const { status, raw } = await this.computeStatusWithRawStatus();
             if (!this.isPollable()) {
                 return;
             }
+            if (raw && status.state === 'connected' && this.requirementsSatisfied(this.getRequirements())) {
+                await this.convergeServe(this.getPluginConfig(), this.getBackendPort(), raw);
+            }
             if (this.hasStatusChanged(this.lastStatus, status)) {
                 this.lastStatus = status;
                 this.eventEmitter.emit(remote_access_constants_1.EventType.PROVIDER_STATUS, status);