@fnndsc/porter 0.2.0

package/README.md

@@ -0,0 +1,19 @@
+# @fnndsc/porter
+
+PORTER is the mise display manager — gdm to ARGUS's desktop. It logs an operator into one CUBE, finds or starts their calypso session on this host, and shows their browser to ARGUS under `/s/<key>/`, holding the attach token so the browser never does.
+
+Design log: [`docs/porter.adoc`](docs/porter.adoc).
+
+```sh
+PORTER_CUBE_URL=https://cube.example.org/api/v1/ porter
+open http://localhost:4180/login          # the door: log in, land on the session
+curl -s -c jar -X POST localhost:4180/login -H 'content-type: application/json' -d '{"username":"chris","password":"…"}'
+curl -b jar -N localhost:4180/boot/<key>
+```
+
+```sh
+npm install -g @fnndsc/porter        # brings chell, calypso and argus beneath it
+PORTER_CUBE_URL=https://cube.example.org/api/v1/ porter
+```
+
+Or from the checkout: `make porter CUBE_URL=…`. Deployment (systemd, env file, Caddyfile) in [`deploy/`](deploy/).

package/dist/app.d.ts

@@ -0,0 +1,97 @@
+/**
+ * @file The porter's routes: the door, the boot, and the session behind it.
+ *
+ * - `GET /login` — the door: a username and a password, nothing else.
+ * - `POST /login` — the password goes to CUBE once and comes back a token;
+ *   the token starts (or joins) that identity's session; the browser is
+ *   given a signed cookie naming the session. A session already up is
+ *   entered at once; one that has to boot is watched from the greet, which
+ *   the door answers with immediately — a browser is never held for a
+ *   boot. A JSON caller gets the mount and the state (`attached` or
+ *   `starting`) instead of a redirect. Every login checks the password
+ *   even when the session is up: a berth proves the daemon, not the human.
+ * - `GET /greet/<key>` — the greeter: the brain awake and the boot rows
+ *   arriving, until `ready` hands the browser to the session.
+ * - `GET /greeter/brain.js`, `/greeter/ansi.js` — the wire package's own
+ *   modules, served from where they are installed, so the greeter draws
+ *   the brain and the rows from the same source the console does.
+ * - `POST /logout` — the cookie is cleared; the session lives on.
+ * - `GET /boot/<key>` — the session's boot as it happens, server-sent, one
+ *   event per line the daemon wrote, ending with `ready` or `failed`.
+ * - `/s/<key>/…` — the session itself: the argus page and its assets, the
+ *   `/vfs` byte route, and the WebSocket wire, proxied to the daemon on
+ *   loopback. The attach token is put on the proxied `/vfs` query and the
+ *   proxied upgrade URL by the porter; the browser never holds it.
+ *
+ * The cookie gates everything under `/s/` and `/boot/`: a browser reaches
+ * only the session its cookie names, and a request with none is sent to the
+ * door. TLS is somebody else's — a caddy, an ingress — and `trustProxy`
+ * lets the porter learn from them that the page came over it.
+ *
+ * @module
+ */
+import { type FastifyInstance } from 'fastify';
+import type { PorterConfig } from './config.js';
+import type { SessionHost, Berth } from './host/sessionHost.js';
+import { SessionRegistry } from './registry.js';
+import { type TokenMint } from './cube/auth.js';
+/** What the routes are built over. */
+export interface PorterAppOptions {
+    config: PorterConfig;
+    host: SessionHost;
+    /** How a password becomes a token; CUBE's `auth-token/` by default. */
+    mint?: (cubeUrl: string, username: string, password: string) => Promise<TokenMint>;
+    /** Fastify's logger switch. */
+    logger?: boolean;
+    /** One line per thing the door does, for the porter's own terminal. */
+    log?: (line: string) => void;
+    /** How often the idle sweep runs, in ms; a minute by default. */
+    sweepMs?: number;
+}
+/** A porter application: the Fastify instance and the registry behind it. */
+export interface PorterApp {
+    app: FastifyInstance;
+    registry: SessionRegistry;
+}
+/**
+ * The upstream base for a berth: its `ws://host:port` as `http://`.
+ *
+ * @param berth - The berth.
+ * @returns The daemon's HTTP origin.
+ */
+export declare function berthHttp_of(berth: Berth): string;
+/**
+ * The path to hand the daemon for a request under a session's mount, the
+ * token added where the daemon wants it.
+ *
+ * @param rest - The path after `/s/<key>/`, query included.
+ * @param token - The session's attach token.
+ * @returns The upstream path, always beginning with `/`.
+ */
+export declare function upstreamPath_build(rest: string, token: string): string;
+/**
+ * Splits a request URL under `/s/` into its key and the rest.
+ *
+ * @param url - The request URL, query included.
+ * @returns The key and the rest (beginning with `/`), or null when the URL
+ *   is not under `/s/<key>/`.
+ */
+export declare function mountUrl_split(url: string): {
+    key: string;
+    rest: string;
+} | null;
+/**
+ * The session key a cookie header names, once its signature is checked.
+ *
+ * @param cookieHeader - The raw `Cookie` header, or undefined.
+ * @param secret - The door's signing secret.
+ * @returns The key, or null when there is no cookie or its signature fails.
+ */
+export declare function cookieKey_read(cookieHeader: string | undefined, secret: string): string | null;
+/**
+ * Builds the porter's routes over a host and a config.
+ *
+ * @param options - The config, the session host, and the seams a test replaces.
+ * @returns The application, not yet listening.
+ */
+export declare function porterApp_build(options: PorterAppOptions): Promise<PorterApp>;

package/dist/app.js

@@ -0,0 +1,338 @@
+/**
+ * @file The porter's routes: the door, the boot, and the session behind it.
+ *
+ * - `GET /login` — the door: a username and a password, nothing else.
+ * - `POST /login` — the password goes to CUBE once and comes back a token;
+ *   the token starts (or joins) that identity's session; the browser is
+ *   given a signed cookie naming the session. A session already up is
+ *   entered at once; one that has to boot is watched from the greet, which
+ *   the door answers with immediately — a browser is never held for a
+ *   boot. A JSON caller gets the mount and the state (`attached` or
+ *   `starting`) instead of a redirect. Every login checks the password
+ *   even when the session is up: a berth proves the daemon, not the human.
+ * - `GET /greet/<key>` — the greeter: the brain awake and the boot rows
+ *   arriving, until `ready` hands the browser to the session.
+ * - `GET /greeter/brain.js`, `/greeter/ansi.js` — the wire package's own
+ *   modules, served from where they are installed, so the greeter draws
+ *   the brain and the rows from the same source the console does.
+ * - `POST /logout` — the cookie is cleared; the session lives on.
+ * - `GET /boot/<key>` — the session's boot as it happens, server-sent, one
+ *   event per line the daemon wrote, ending with `ready` or `failed`.
+ * - `/s/<key>/…` — the session itself: the argus page and its assets, the
+ *   `/vfs` byte route, and the WebSocket wire, proxied to the daemon on
+ *   loopback. The attach token is put on the proxied `/vfs` query and the
+ *   proxied upgrade URL by the porter; the browser never holds it.
+ *
+ * The cookie gates everything under `/s/` and `/boot/`: a browser reaches
+ * only the session its cookie names, and a request with none is sent to the
+ * door. TLS is somebody else's — a caddy, an ingress — and `trustProxy`
+ * lets the porter learn from them that the page came over it.
+ *
+ * @module
+ */
+import Fastify from 'fastify';
+import fastifyCookie, { unsign as cookie_unsign } from '@fastify/cookie';
+import fastifyFormbody from '@fastify/formbody';
+import replyFrom from '@fastify/reply-from';
+import { z } from 'zod';
+import { connect as net_connect } from 'node:net';
+import { identity_normalise } from '@fnndsc/calypso/berth';
+import { SessionRegistry } from './registry.js';
+import { cubeToken_mint } from './cube/auth.js';
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { DOOR_COOKIE, doorCookie_options } from './door.js';
+import { loginPage_render, greetPage_render } from './greeter.js';
+import { idleSweep_run } from './sweep.js';
+const loginSchema = z.object({
+    username: z.string().min(1),
+    password: z.string().min(1),
+});
+/**
+ * The upstream base for a berth: its `ws://host:port` as `http://`.
+ *
+ * @param berth - The berth.
+ * @returns The daemon's HTTP origin.
+ */
+export function berthHttp_of(berth) {
+    return berth.url.replace(/^ws/, 'http');
+}
+/**
+ * The path to hand the daemon for a request under a session's mount, the
+ * token added where the daemon wants it.
+ *
+ * @param rest - The path after `/s/<key>/`, query included.
+ * @param token - The session's attach token.
+ * @returns The upstream path, always beginning with `/`.
+ */
+export function upstreamPath_build(rest, token) {
+    const path = rest.startsWith('/') ? rest : `/${rest}`;
+    const cut = path.indexOf('?');
+    const pathname = cut === -1 ? path : path.slice(0, cut);
+    const query = new URLSearchParams(cut === -1 ? '' : path.slice(cut + 1));
+    if (pathname === '/vfs' || pathname === '/') {
+        // The byte route is token-gated; the wire's upgrade lands on `/`.
+        query.set('token', token);
+    }
+    const text = query.toString();
+    return text.length > 0 ? `${pathname}?${text}` : pathname;
+}
+/**
+ * Splits a request URL under `/s/` into its key and the rest.
+ *
+ * @param url - The request URL, query included.
+ * @returns The key and the rest (beginning with `/`), or null when the URL
+ *   is not under `/s/<key>/`.
+ */
+export function mountUrl_split(url) {
+    const match = /^\/s\/([0-9a-f]{16})(\/.*)?$/.exec(url);
+    if (match === null)
+        return null;
+    return { key: match[1] ?? '', rest: match[2] ?? '/' };
+}
+/**
+ * The session key a cookie header names, once its signature is checked.
+ *
+ * @param cookieHeader - The raw `Cookie` header, or undefined.
+ * @param secret - The door's signing secret.
+ * @returns The key, or null when there is no cookie or its signature fails.
+ */
+export function cookieKey_read(cookieHeader, secret) {
+    if (cookieHeader === undefined)
+        return null;
+    // The one cookie wanted, out of a header that may carry any number: the
+    // plugin parses only for a request it decorated, and an upgrade has none.
+    let raw;
+    for (const part of cookieHeader.split(';')) {
+        const cut = part.indexOf('=');
+        if (cut === -1)
+            continue;
+        if (part.slice(0, cut).trim() !== DOOR_COOKIE)
+            continue;
+        try {
+            raw = decodeURIComponent(part.slice(cut + 1).trim());
+        }
+        catch {
+            return null;
+        }
+        break;
+    }
+    if (raw === undefined)
+        return null;
+    const checked = cookie_unsign(raw, secret);
+    return checked.valid && checked.value !== null && /^[0-9a-f]{16}$/.test(checked.value) ? checked.value : null;
+}
+/** Whether a request would rather be answered in JSON than sent somewhere. */
+function request_wantsJson(request) {
+    const contentType = String(request.headers['content-type'] ?? '');
+    const accept = String(request.headers.accept ?? '');
+    return contentType.includes('application/json') || (accept.includes('application/json') && !accept.includes('text/html'));
+}
+/**
+ * Builds the porter's routes over a host and a config.
+ *
+ * @param options - The config, the session host, and the seams a test replaces.
+ * @returns The application, not yet listening.
+ */
+export async function porterApp_build(options) {
+    const { config, host } = options;
+    const mint = options.mint ?? cubeToken_mint;
+    const registry = new SessionRegistry();
+    const app = Fastify({ logger: options.logger ?? false, trustProxy: true });
+    // A porter restarted adopts the sessions its predecessor started: their
+    // berths are in the state directory, and a cookie that names one still
+    // opens it, because the key is the identity's and not this process's.
+    for (const sighting of await host.sessions_adopt()) {
+        if (!sighting.alive)
+            continue;
+        const user = sighting.identity.slice(0, sighting.identity.indexOf('@'));
+        registry.note(sighting.identity, user, sighting.berth);
+        options.log?.(`adopted ${user}'s session at ${sighting.berth.url}`);
+    }
+    await app.register(fastifyCookie, { secret: config.secret });
+    await app.register(fastifyFormbody);
+    await app.register(replyFrom);
+    /** The key the request's cookie names, or null. */
+    const key_ofRequest = (request) => cookieKey_read(request.headers.cookie, config.secret);
+    app.get('/healthz', async () => ({ ok: true, cube: config.cubeUrl, sessions: registry.all().length }));
+    app.get('/', async (request, reply) => {
+        const key = key_ofRequest(request);
+        const entry = key === null ? null : registry.get(key);
+        await reply.redirect(entry === null ? '/login' : `/s/${entry.key}/?door`, 302);
+    });
+    app.get('/login', async (request, reply) => {
+        const reason = request.query.reason;
+        void reply.type('text/html; charset=utf-8');
+        return loginPage_render(config.cubeUrl, typeof reason === 'string' && reason.length > 0 ? reason : null);
+    });
+    app.post('/login', async (request, reply) => {
+        const wantsJson = request_wantsJson(request);
+        const refuse = async (status, reason) => wantsJson ? reply.code(status).send({ error: reason }) : reply.redirect(`/login?reason=${encodeURIComponent(reason)}`, 303);
+        const parsed = loginSchema.safeParse(request.body);
+        if (!parsed.success) {
+            return refuse(400, 'a username and a password are required');
+        }
+        const { username, password } = parsed.data;
+        const minted = await mint(config.cubeUrl, username, password);
+        if (minted.token === null) {
+            return refuse(401, minted.reason ?? 'refused');
+        }
+        const identity = identity_normalise(username, config.cubeUrl);
+        const found = await host.find(identity);
+        const key = registry.key_of(identity);
+        void reply.setCookie(DOOR_COOKIE, key, doorCookie_options(config.cookieHours, request.protocol === 'https'));
+        if (found !== null) {
+            registry.note(identity, username, found);
+            options.log?.(`attached ${username} to the session up at ${found.url}`);
+            return wantsJson ? { key, mount: `/s/${key}/`, state: 'attached' } : reply.redirect(`/s/${key}/?door`, 303);
+        }
+        // The boot is watched, not waited for: the door answers now, and the
+        // greet follows the rows until the berth answers. The berth reaches the
+        // registry when the boot ends, so the mount refuses until then.
+        registry.pending_note(identity, username);
+        host.spawn_begin(identity, username, config.cubeUrl, minted.token);
+        options.log?.(`starting a session for ${username}`);
+        return wantsJson ? { key, mount: `/s/${key}/`, state: 'starting' } : reply.redirect(`/greet/${key}`, 303);
+    });
+    app.get('/greet/:key', async (request, reply) => {
+        const key = request.params.key;
+        if (key_ofRequest(request) !== key) {
+            return reply.redirect('/login', 302);
+        }
+        void reply.type('text/html; charset=utf-8');
+        return greetPage_render(config.cubeUrl, key);
+    });
+    // The greeter's two modules: the wire package's own, from where they are
+    // installed. Read once; a porter does not restart for a menu upgrade.
+    const greeterModules = {
+        'brain.js': readFileSync(fileURLToPath(import.meta.resolve('@fnndsc/menu/logo')), 'utf-8'),
+        'ansi.js': readFileSync(fileURLToPath(import.meta.resolve('@fnndsc/menu/ansi')), 'utf-8'),
+    };
+    app.get('/greeter/:name', async (request, reply) => {
+        const name = request.params.name;
+        const source = greeterModules[name];
+        if (source === undefined) {
+            return reply.code(404).send({ error: 'no such greeter module' });
+        }
+        void reply.type('text/javascript; charset=utf-8');
+        return source;
+    });
+    app.post('/logout', async (request, reply) => {
+        void reply.clearCookie(DOOR_COOKIE, { path: '/' });
+        return request_wantsJson(request) ? { ok: true } : reply.redirect('/login', 303);
+    });
+    app.get('/boot/:key', async (request, reply) => {
+        const key = request.params.key;
+        if (key_ofRequest(request) !== key) {
+            await reply.code(401).send({ error: 'this browser was not let in to that session' });
+            return;
+        }
+        const identity = registry.identity_of(key);
+        if (identity === null) {
+            await reply.code(404).send({ error: 'no session behind that key' });
+            return;
+        }
+        reply.raw.writeHead(200, {
+            'Content-Type': 'text/event-stream',
+            'Cache-Control': 'no-cache',
+            Connection: 'keep-alive',
+        });
+        const event_send = (name, data) => {
+            reply.raw.write(`event: ${name}\ndata: ${JSON.stringify(data)}\n\n`);
+        };
+        const followed = host.boot_follow(identity, {
+            line: (line) => event_send('line', line),
+            done: (state, reason) => {
+                void registry.settle(identity, host).then(() => {
+                    event_send(state, { reason: reason ?? null });
+                    reply.raw.end();
+                });
+            },
+        });
+        if (followed === null) {
+            // A session this porter found rather than started has no boot to
+            // show: it is up, which is the only thing a greeter needs to hear.
+            event_send('ready', { reason: null });
+            reply.raw.end();
+            return;
+        }
+        for (const line of followed.report.lines)
+            event_send('line', line);
+        if (followed.report.state !== 'booting') {
+            await registry.settle(identity, host);
+            event_send(followed.report.state, { reason: followed.report.reason ?? null });
+            reply.raw.end();
+            return;
+        }
+        request.raw.once('close', () => followed.release());
+    });
+    // The session itself, over HTTP: the page, its assets, and /vfs.
+    app.all('/s/:key/*', async (request, reply) => {
+        const split = mountUrl_split(request.url);
+        if (split === null || key_ofRequest(request) !== split.key) {
+            return reply.redirect('/login', 302);
+        }
+        const entry = registry.get(split.key);
+        if (entry === null) {
+            return reply.code(404).send({ error: 'no session behind that key' });
+        }
+        registry.activity_note(entry.key);
+        return reply.from(upstreamPath_build(split.rest, entry.berth.token), {
+            getUpstream: () => berthHttp_of(entry.berth),
+        });
+    });
+    app.all('/s/:key', async (request, reply) => {
+        // The mount without its slash: the page's relative addresses need the
+        // directory, so send the browser to it.
+        const key = request.params.key;
+        await reply.redirect(`/s/${key}/`, 302);
+    });
+    // The session's wire: the upgrade is relayed byte for byte to the daemon,
+    // with the token on the upgrade URL, which the daemon reads.
+    app.addHook('onReady', async () => {
+        app.server.on('upgrade', (request, socket, head) => {
+            const split = mountUrl_split(request.url ?? '/');
+            const entry = split === null ? null : registry.get(split.key);
+            if (split === null || entry === null || cookieKey_read(request.headers.cookie, config.secret) !== split.key) {
+                socket.destroy();
+                return;
+            }
+            const target = new URL(entry.berth.url);
+            // A wire open is a surface on the session; the idle sweep never ends
+            // a session with one, however quiet it is.
+            registry.wire_count(entry.key, 1);
+            let counted = true;
+            const wire_release = () => {
+                if (!counted)
+                    return;
+                counted = false;
+                registry.wire_count(entry.key, -1);
+            };
+            socket.once('close', wire_release);
+            const upstream = net_connect(Number(target.port), target.hostname, () => {
+                const path = upstreamPath_build(split.rest, entry.berth.token);
+                const lines = [`${request.method ?? 'GET'} ${path} HTTP/1.1`];
+                for (const [name, value] of Object.entries(request.headers)) {
+                    lines.push(`${name}: ${Array.isArray(value) ? value.join(', ') : value ?? ''}`);
+                }
+                upstream.write(`${lines.join('\r\n')}\r\n\r\n`);
+                if (head.length > 0)
+                    upstream.write(head);
+                socket.pipe(upstream);
+                upstream.pipe(socket);
+            });
+            upstream.on('error', () => { socket.destroy(); });
+            upstream.once('close', () => { wire_release(); socket.destroy(); });
+            socket.on('error', () => { upstream.destroy(); });
+        });
+        // The idle sweep, once a minute for as long as the porter listens.
+        const idleMs = config.idleHours * 3_600_000;
+        const sweep = setInterval(() => {
+            void idleSweep_run(registry, host, idleMs, options.log ?? (() => undefined));
+        }, options.sweepMs ?? 60_000);
+        sweep.unref();
+        app.addHook('onClose', async () => { clearInterval(sweep); });
+    });
+    return { app, registry };
+}
+//# sourceMappingURL=app.js.map

package/dist/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,OAAyE,MAAM,SAAS,CAAC;AAChG,OAAO,aAAa,EAAE,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,IAAI,WAAW,EAAe,MAAM,UAAU,CAAC;AAG/D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAG3D,OAAO,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,cAAc,EAAkB,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsB3C,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAY;IACvC,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAW,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,KAAK,GAAoB,IAAI,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QAC5C,kEAAkE;QAClE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAW,KAAK,CAAC,QAAQ,EAAE,CAAC;IACtC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAA4B,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAA4B,CAAC;IAC3G,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,YAAgC,EAAE,MAAc;IAC7E,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5C,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,GAAuB,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW;YAAE,SAAS;QACxD,IAAI,CAAC;YACH,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM;IACR,CAAC;IACD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAChH,CAAC;AAED,8EAA8E;AAC9E,SAAS,iBAAiB,CAAC,OAAuB;IAChD,MAAM,WAAW,GAAW,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAW,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC5D,OAAO,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAyB;IAC7D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;IAC5C,MAAM,QAAQ,GAAoB,IAAI,eAAe,EAAE,CAAC;IACxD,MAAM,GAAG,GAAoB,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5F,wEAAwE;IACxE,uEAAuE;IACvE,sEAAsE;IACtE,KAAK,MAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAW,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,iBAAiB,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAE9B,mDAAmD;IACnD,MAAM,aAAa,GAAG,CAAC,OAAuB,EAAiB,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAExH,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,IAA2D,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE9J,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACjF,MAAM,GAAG,GAAkB,aAAa,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAwB,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAmB,EAAE;QACxF,MAAM,MAAM,GAAa,OAAO,CAAC,KAA8B,CAAC,MAAM,CAAC;QACvE,KAAK,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,OAAO,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3G,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QAC1F,MAAM,SAAS,GAAY,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAE,MAAc,EAAoB,EAAE,CACxE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9H,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3C,MAAM,MAAM,GAAc,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,QAAQ,GAAW,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,KAAK,GAAiB,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtD,MAAM,GAAG,GAAW,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,KAAK,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC;QAC7G,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,QAAQ,yBAAyB,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACxE,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;QAC9G,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,gEAAgE;QAChE,QAAQ,CAAC,YAAY,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,EAAE,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACpD,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QAC9F,MAAM,GAAG,GAAY,OAAO,CAAC,MAA0B,CAAC,GAAG,CAAC;QAC5D,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,KAAK,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC5C,OAAO,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,yEAAyE;IACzE,sEAAsE;IACtE,MAAM,cAAc,GAA2B;QAC7C,UAAU,EAAE,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC;QAC1F,SAAS,EAAE,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,EAAE,OAAO,CAAC;KAC1F,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QACjG,MAAM,IAAI,GAAY,OAAO,CAAC,MAA2B,CAAC,IAAI,CAAC;QAC/D,MAAM,MAAM,GAAuB,cAAc,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,KAAK,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QAC3F,KAAK,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QAC1F,MAAM,GAAG,GAAY,OAAO,CAAC,MAA0B,CAAC,GAAG,CAAC;QAC5D,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAkB,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACpE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACvB,cAAc,EAAE,mBAAmB;YACnC,eAAe,EAAE,UAAU;YAC3B,UAAU,EAAE,YAAY;SACzB,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,IAAa,EAAQ,EAAE;YACvD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;YAC1C,IAAI,EAAE,CAAC,IAAc,EAAQ,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC;YACxD,IAAI,EAAE,CAAC,KAAyB,EAAE,MAAe,EAAQ,EAAE;gBACzD,KAAK,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAS,EAAE;oBACnD,UAAU,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;oBAC9C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,iEAAiE;YACjE,mEAAmE;YACnE,UAAU,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK;YAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACtC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;YAC9E,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,GAAS,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAoB,EAAE;QAC5F,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,GAAwB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YACnE,WAAW,EAAE,GAAW,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC;SACrD,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,OAAuB,EAAE,KAAmB,EAAiB,EAAE;QACvF,sEAAsE;QACtE,wCAAwC;QACxC,MAAM,GAAG,GAAY,OAAO,CAAC,MAA0B,CAAC,GAAG,CAAC;QAC5D,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,6DAA6D;IAC7D,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAmB,EAAE;QAC/C,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAwB,EAAE,MAAc,EAAE,IAAY,EAAQ,EAAE;YACxF,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YACjD,MAAM,KAAK,GAAwB,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,GAAG,EAAE,CAAC;gBAC5G,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAQ,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,qEAAqE;YACrE,2CAA2C;YAC3C,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAClC,IAAI,OAAO,GAAY,IAAI,CAAC;YAC5B,MAAM,YAAY,GAAG,GAAS,EAAE;gBAC9B,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrB,OAAO,GAAG,KAAK,CAAC;gBAChB,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAW,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAS,EAAE;gBACpF,MAAM,IAAI,GAAW,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAa,CAAC,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,CAAC;gBACxE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC5D,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,mEAAmE;QACnE,MAAM,MAAM,GAAW,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QACpD,MAAM,KAAK,GAAmB,WAAW,CAAC,GAAS,EAAE;YACnD,KAAK,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,GAAS,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC;QAC9B,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAmB,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,65 @@
+/** Everything a porter needs to know, resolved. */
+export interface PorterConfig {
+    /** The one CUBE this door serves, API base with its trailing slash. */
+    cubeUrl: string;
+    /** Where each identity's four directories live, one subtree per identity. */
+    stateDir: string;
+    /** The address the porter listens on; loopback unless a front says otherwise. */
+    host: string;
+    /** The port the porter listens on. */
+    port: number;
+    /** The chell entry to start a session with (`dist/index.js`). */
+    chellEntry: string;
+    /** What the door signs its cookie with. */
+    secret: string;
+    /** Whether the secret was made up at start: cookies die with this porter. */
+    secretGenerated: boolean;
+    /** How long a browser stays let in, in hours. */
+    cookieHours: number;
+    /** How long a session may stand with no surface on it before it is ended, in hours. */
+    idleHours: number;
+}
+/** The environment variables a porter reads, and no others. */
+export interface PorterEnv {
+    PORTER_CUBE_URL?: string;
+    PORTER_STATE_DIR?: string;
+    PORTER_HOST?: string;
+    PORTER_PORT?: string;
+    PORTER_CHELL?: string;
+    PORTER_SECRET?: string;
+    PORTER_COOKIE_HOURS?: string;
+    PORTER_IDLE_HOURS?: string;
+    XDG_STATE_HOME?: string;
+}
+/** The port a porter takes when told none. */
+export declare const PORTER_DEFAULT_PORT: number;
+/**
+ * How long a browser stays let in when the deployment does not say: a day,
+ * the same span an idle session lives, so a cookie and the session it
+ * names die together. CUBE's tokens carry no expiry of their own to follow.
+ */
+export declare const PORTER_DEFAULT_COOKIE_HOURS: number;
+/**
+ * How long a session stands with nobody on it before the porter ends it:
+ * a day, the same as the cookie, so the two die together. Ending is the
+ * process only — the identity's state directory stays, and the next login
+ * boots warm from it.
+ */
+export declare const PORTER_DEFAULT_IDLE_HOURS: number;
+/**
+ * Finds the chell this porter will start sessions with: the one installed
+ * beside it, by the package's own entry.
+ *
+ * @returns The absolute path of chell's entry script.
+ */
+export declare function chellEntry_locate(): string;
+/**
+ * Resolves the porter's configuration from the environment.
+ *
+ * @param env - The environment; `process.env` in production.
+ * @param locateChell - How to find chell when the environment does not say.
+ * @returns The resolved configuration.
+ * @throws {Error} When the one fact with no default — the CUBE — is missing
+ *   or not a URL, or the port is not a number.
+ */
+export declare function porterConfig_resolve(env: PorterEnv, locateChell?: () => string): PorterConfig;

package/dist/config.js

@@ -0,0 +1,95 @@
+/**
+ * @file What a porter is told, and what it assumes when it is not.
+ *
+ * A porter stands in front of ONE CUBE: the door asks for a username and a
+ * password and never for a server, because a page that asks where to send
+ * a password is a phishing form with a logo on it. The CUBE, the state
+ * directory, the bind address and the chell to start are the deployment's
+ * facts, read from the environment once at start.
+ *
+ * @module
+ */
+import { createRequire } from 'node:module';
+import { randomBytes } from 'node:crypto';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/** The port a porter takes when told none. */
+export const PORTER_DEFAULT_PORT = 4180;
+/**
+ * How long a browser stays let in when the deployment does not say: a day,
+ * the same span an idle session lives, so a cookie and the session it
+ * names die together. CUBE's tokens carry no expiry of their own to follow.
+ */
+export const PORTER_DEFAULT_COOKIE_HOURS = 24;
+/**
+ * How long a session stands with nobody on it before the porter ends it:
+ * a day, the same as the cookie, so the two die together. Ending is the
+ * process only — the identity's state directory stays, and the next login
+ * boots warm from it.
+ */
+export const PORTER_DEFAULT_IDLE_HOURS = 24;
+/**
+ * Finds the chell this porter will start sessions with: the one installed
+ * beside it, by the package's own entry.
+ *
+ * @returns The absolute path of chell's entry script.
+ */
+export function chellEntry_locate() {
+    const require = createRequire(import.meta.url);
+    return require.resolve('@fnndsc/chell');
+}
+/**
+ * Resolves the porter's configuration from the environment.
+ *
+ * @param env - The environment; `process.env` in production.
+ * @param locateChell - How to find chell when the environment does not say.
+ * @returns The resolved configuration.
+ * @throws {Error} When the one fact with no default — the CUBE — is missing
+ *   or not a URL, or the port is not a number.
+ */
+export function porterConfig_resolve(env, locateChell = chellEntry_locate) {
+    const cubeUrl = env.PORTER_CUBE_URL;
+    if (cubeUrl === undefined || cubeUrl.length === 0) {
+        throw new Error('PORTER_CUBE_URL is required: the one CUBE this door serves, e.g. https://cube.example.org/api/v1/');
+    }
+    try {
+        new URL(cubeUrl);
+    }
+    catch {
+        throw new Error(`PORTER_CUBE_URL is not a URL: ${cubeUrl}`);
+    }
+    const portText = env.PORTER_PORT ?? String(PORTER_DEFAULT_PORT);
+    const port = Number(portText);
+    if (!Number.isInteger(port) || port <= 0 || port > 65535) {
+        throw new Error(`PORTER_PORT is not a port: ${portText}`);
+    }
+    const hoursText = env.PORTER_COOKIE_HOURS ?? String(PORTER_DEFAULT_COOKIE_HOURS);
+    const cookieHours = Number(hoursText);
+    if (!Number.isFinite(cookieHours) || cookieHours <= 0) {
+        throw new Error(`PORTER_COOKIE_HOURS is not a span of hours: ${hoursText}`);
+    }
+    const idleText = env.PORTER_IDLE_HOURS ?? String(PORTER_DEFAULT_IDLE_HOURS);
+    const idleHours = Number(idleText);
+    if (!Number.isFinite(idleHours) || idleHours <= 0) {
+        throw new Error(`PORTER_IDLE_HOURS is not a span of hours: ${idleText}`);
+    }
+    const stateBase = env.XDG_STATE_HOME ?? join(homedir(), '.local', 'state');
+    // A secret nobody set is made up here: the door still works, but every
+    // browser is asked again when this porter restarts. Said out loud at start.
+    const secretGiven = env.PORTER_SECRET !== undefined && env.PORTER_SECRET.length >= 20;
+    if (env.PORTER_SECRET !== undefined && !secretGiven) {
+        throw new Error('PORTER_SECRET is too short: give at least 20 characters, or none to have one made up per start');
+    }
+    return {
+        cubeUrl: cubeUrl.endsWith('/') ? cubeUrl : `${cubeUrl}/`,
+        stateDir: env.PORTER_STATE_DIR ?? join(stateBase, 'porter'),
+        host: env.PORTER_HOST ?? '127.0.0.1',
+        port,
+        chellEntry: env.PORTER_CHELL ?? locateChell(),
+        secret: secretGiven ? env.PORTER_SECRET : randomBytes(32).toString('hex'),
+        secretGenerated: !secretGiven,
+        cookieHours,
+        idleHours,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAqCjC,8CAA8C;AAC9C,MAAM,CAAC,MAAM,mBAAmB,GAAW,IAAI,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAW,EAAE,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAW,EAAE,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAgB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAc,EAAE,cAA4B,iBAAiB;IAChG,MAAM,OAAO,GAAuB,GAAG,CAAC,eAAe,CAAC;IACxD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAW,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACxE,MAAM,IAAI,GAAW,MAAM,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,SAAS,GAAW,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACzF,MAAM,WAAW,GAAW,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAW,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACpF,MAAM,SAAS,GAAW,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,SAAS,GAAW,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnF,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,WAAW,GAAY,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/F,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;IACpH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG;QACxD,QAAQ,EAAE,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC3D,IAAI,EAAE,GAAG,CAAC,WAAW,IAAI,WAAW;QACpC,IAAI;QACJ,UAAU,EAAE,GAAG,CAAC,YAAY,IAAI,WAAW,EAAE;QAC7C,MAAM,EAAE,WAAW,CAAC,CAAC,CAAE,GAAG,CAAC,aAAwB,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrF,eAAe,EAAE,CAAC,WAAW;QAC7B,WAAW;QACX,SAAS;KACV,CAAC;AACJ,CAAC"}