@jingyi0605/codingns 0.4.0 → 0.5.0

package/dist/server/modules/relay-tunnel/relay-tunnel-runtime-adapter.js

@@ -0,0 +1,443 @@
+import WebSocket from "ws";
+import { decryptSecret } from "../../shared/utils/secret-box.js";
+import { nowIso } from "../../shared/utils/time.js";
+import { acceptRelayTunnelClientHandshake, decryptRelayTunnelFrame, encryptRelayTunnelFrame } from "./crypto/relay-tunnel-protocol.js";
+import { deserializeRelayTunnelPacket, serializeRelayTunnelPacket } from "./crypto/relay-tunnel-packets.js";
+import { createRelayTunnelHostClaimProof } from "./relay-tunnel-edge-proof.js";
+import { RelayTunnelGatewayService } from "./relay-tunnel-gateway-service.js";
+const IDLE_POLL_MS = 1_000;
+const ERROR_RETRY_MS = 2_000;
+const CLAIM_TIMEOUT_MS = 8_000;
+const HEARTBEAT_INTERVAL_MS = 5_000;
+const HEARTBEAT_TIMEOUT_MS = 5_000;
+export class RelayTunnelRuntimeEdgeAdapter {
+    identityRepository;
+    repository;
+    dependencies;
+    currentConfigKey = null;
+    runtimeAbortController = null;
+    runtimePromise = null;
+    activeSessions = new Map();
+    lastPhase = "connecting";
+    latestRemainingBytes = null;
+    lastHeartbeatAttemptAtMs = null;
+    constructor(identityRepository, repository, dependencies) {
+        this.identityRepository = identityRepository;
+        this.repository = repository;
+        this.dependencies = dependencies;
+    }
+    async connect(config, signal) {
+        const identity = this.identityRepository.findIdentity();
+        if (!identity) {
+            throw new Error("当前 Host 还没有可用的公共隧道身份密钥");
+        }
+        const configKey = serializeConfigKey(config);
+        if (this.currentConfigKey !== configKey) {
+            await this.disconnect("relay_tunnel_runtime_reconfigure");
+            this.currentConfigKey = configKey;
+            this.lastPhase = "connecting";
+            this.latestRemainingBytes = null;
+            this.lastHeartbeatAttemptAtMs = null;
+            this.runtimeAbortController = new AbortController();
+            this.runtimePromise = this.runSupervisor(config, identity, this.runtimeAbortController.signal);
+        }
+        if (signal.aborted) {
+            throw new Error("操作已取消");
+        }
+        return buildStatus(this.lastPhase, config, identity.keyFingerprint, this.latestRemainingBytes);
+    }
+    async disconnect(_reason) {
+        const controller = this.runtimeAbortController;
+        this.runtimeAbortController = null;
+        this.currentConfigKey = null;
+        this.lastHeartbeatAttemptAtMs = null;
+        if (controller) {
+            controller.abort();
+        }
+        for (const activeSession of this.activeSessions.values()) {
+            activeSession.closed = true;
+            activeSession.gateway?.close();
+            activeSession.socket.close();
+        }
+        this.activeSessions.clear();
+        try {
+            await this.runtimePromise;
+        }
+        catch {
+            // 这里是停机路径，错误已经在状态里体现，不再向上抛。
+        }
+        this.runtimePromise = null;
+    }
+    async runSupervisor(config, identity, signal) {
+        while (!signal.aborted) {
+            try {
+                await this.maybeSendHeartbeat(config, identity, signal);
+                const claim = await this.claimNextSession(config, identity, signal);
+                const remainingBytes = claim?.remainingBytes ?? this.latestRemainingBytes;
+                this.latestRemainingBytes = remainingBytes;
+                if (claim) {
+                    this.lastPhase = "running";
+                    this.startRelaySession(config, identity, claim);
+                }
+                else if (this.lastPhase === "connecting") {
+                    this.lastPhase = "running";
+                }
+                const status = buildStatus(this.lastPhase, config, identity.keyFingerprint, remainingBytes);
+                this.repository.upsertStatus(status);
+                if (!claim) {
+                    await waitForDelay(IDLE_POLL_MS, signal);
+                }
+            }
+            catch (error) {
+                if (signal.aborted) {
+                    break;
+                }
+                const message = error instanceof Error ? error.message : String(error);
+                const phase = this.lastPhase === "quota_exhausted" ? "quota_exhausted" : "error";
+                const failedStatus = {
+                    ...buildStatus(phase, config, identity.keyFingerprint, this.latestRemainingBytes),
+                    connected: false,
+                    lastError: message
+                };
+                this.repository.upsertStatus(failedStatus);
+                await waitForDelay(ERROR_RETRY_MS, signal);
+            }
+        }
+    }
+    async maybeSendHeartbeat(config, identity, signal) {
+        const heartbeatRequest = this.buildHeartbeatRequest(config, identity);
+        if (!heartbeatRequest) {
+            return;
+        }
+        const nowMs = Date.now();
+        if (this.lastHeartbeatAttemptAtMs !== null
+            && nowMs - this.lastHeartbeatAttemptAtMs < HEARTBEAT_INTERVAL_MS) {
+            return;
+        }
+        this.lastHeartbeatAttemptAtMs = nowMs;
+        const fetchFn = this.dependencies?.fetchFn ?? fetch;
+        try {
+            const response = await fetchWithTimeout(fetchFn, heartbeatRequest.url, {
+                method: "POST",
+                headers: heartbeatRequest.headers,
+                body: heartbeatRequest.body,
+                signal
+            }, HEARTBEAT_TIMEOUT_MS);
+            if (!response.ok) {
+                throw await buildHttpError(response, "上报 Host 心跳失败");
+            }
+        }
+        catch {
+            // 心跳只负责在线统计，不能反过来把隧道主链路打断。
+        }
+    }
+    async claimNextSession(config, identity, signal) {
+        const fetchFn = this.dependencies?.fetchFn ?? fetch;
+        const challengeResponse = await fetchWithTimeout(fetchFn, buildHttpUrl(config.relayBaseUrl, "/api/public/hosts/challenge"), {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+                bindingId: config.bindingId,
+                tunnelDomain: config.tunnelDomain,
+                hostFingerprint: identity.keyFingerprint
+            }),
+            signal
+        }, CLAIM_TIMEOUT_MS);
+        if (!challengeResponse.ok) {
+            throw await buildHttpError(challengeResponse, "申请 Host 领取挑战失败");
+        }
+        const challengePayload = await challengeResponse.json();
+        const proof = createRelayTunnelHostClaimProof({
+            challengeId: challengePayload.challenge.challengeId,
+            bindingId: config.bindingId,
+            tunnelDomain: config.tunnelDomain,
+            hostFingerprint: identity.keyFingerprint,
+            relayNonce: challengePayload.challenge.relayNonce,
+            relayPublicKey: challengePayload.challenge.relayPublicKey,
+            hostPrivateKeyPem: identity.privateKeyPem
+        });
+        const claimResponse = await fetchWithTimeout(fetchFn, buildHttpUrl(config.relayBaseUrl, "/api/public/hosts/claim-next-session"), {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+                challengeId: challengePayload.challenge.challengeId,
+                proof
+            }),
+            signal
+        }, CLAIM_TIMEOUT_MS);
+        if (!claimResponse.ok) {
+            throw await buildHttpError(claimResponse, "领取待接会话失败");
+        }
+        const claimPayload = await claimResponse.json();
+        return claimPayload.reservation;
+    }
+    buildHeartbeatRequest(config, identity) {
+        const controlBaseUrl = normalizeRequiredText(config.controlBaseUrl);
+        const bindingId = normalizeRequiredText(config.bindingId);
+        const tunnelDomain = normalizeRequiredText(config.tunnelDomain);
+        const encryptedAccessToken = normalizeRequiredText(config.controlAccessTokenCiphertext);
+        const controlSessionSecret = normalizeRequiredText(this.dependencies?.controlSessionSecret);
+        if (!controlBaseUrl
+            || !bindingId
+            || !tunnelDomain
+            || !encryptedAccessToken
+            || !controlSessionSecret) {
+            return null;
+        }
+        try {
+            const accessToken = decryptSecret(controlSessionSecret, encryptedAccessToken);
+            return {
+                url: buildControlHttpUrl(controlBaseUrl, `/api/v1/hosts/${bindingId}/heartbeat`),
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${accessToken}`
+                },
+                body: JSON.stringify({
+                    tunnelDomain,
+                    hostFingerprint: identity.keyFingerprint
+                })
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    startRelaySession(config, identity, reservation) {
+        if (this.activeSessions.has(reservation.sessionId)) {
+            return;
+        }
+        const socket = (this.dependencies?.createWebSocket ?? ((url) => new WebSocket(url)))(buildRelayWebSocketUrl(config.relayBaseUrl, reservation.sessionId));
+        const activeSession = {
+            relaySessionId: reservation.sessionId,
+            socket,
+            gateway: null,
+            cryptoSession: null,
+            closed: false
+        };
+        this.activeSessions.set(reservation.sessionId, activeSession);
+        socket.on("message", (payload, isBinary) => {
+            if (isBinary) {
+                void this.emitRelayError(activeSession, "UNSUPPORTED_BINARY_FRAME", "公共隧道控制面不支持二进制帧");
+                return;
+            }
+            const rawPayload = typeof payload === "string" ? payload : payload.toString("utf8");
+            void this.handleRelayPayload(activeSession, config, identity, rawPayload);
+        });
+        socket.on("close", (code, reason) => {
+            this.teardownRelaySession(reservation.sessionId);
+            if (code === 1008 && reason.toString("utf8") === "QUOTA_EXHAUSTED") {
+                this.lastPhase = "quota_exhausted";
+                this.latestRemainingBytes = "0";
+                this.repository.upsertStatus({
+                    ...buildStatus("quota_exhausted", config, identity.keyFingerprint, "0"),
+                    connected: false,
+                    lastError: "公共隧道流量额度已经耗尽"
+                });
+            }
+        });
+        socket.on("error", (error) => {
+            this.repository.upsertStatus({
+                ...buildStatus("error", config, identity.keyFingerprint, this.latestRemainingBytes),
+                connected: false,
+                lastError: error.message
+            });
+        });
+    }
+    async handleRelayPayload(activeSession, config, identity, rawPayload) {
+        let envelope;
+        try {
+            envelope = JSON.parse(rawPayload);
+        }
+        catch {
+            await this.emitRelayError(activeSession, "INVALID_CONTROL_ENVELOPE", "公共隧道控制包不是合法 JSON");
+            return;
+        }
+        if (envelope.type === "client_hello") {
+            if (activeSession.cryptoSession) {
+                await this.emitRelayError(activeSession, "HANDSHAKE_ALREADY_COMPLETED", "当前会话已经完成握手");
+                return;
+            }
+            try {
+                const accepted = acceptRelayTunnelClientHandshake({
+                    hostIdentity: identity,
+                    clientHello: envelope.hello
+                });
+                activeSession.cryptoSession = accepted.session;
+                activeSession.gateway = new RelayTunnelGatewayService({
+                    localTargetBaseUrl: config.localTargetBaseUrl,
+                    onPacket: async (packet) => {
+                        if (!activeSession.cryptoSession || activeSession.closed || activeSession.socket.readyState !== WebSocket.OPEN) {
+                            return;
+                        }
+                        const frame = encryptRelayTunnelFrame(activeSession.cryptoSession, serializeRelayTunnelPacket(packet));
+                        activeSession.socket.send(JSON.stringify({
+                            type: "encrypted_frame",
+                            frame
+                        }));
+                    }
+                });
+                activeSession.socket.send(JSON.stringify({
+                    type: "server_hello",
+                    hello: accepted.serverHello
+                }));
+            }
+            catch (error) {
+                await this.emitRelayError(activeSession, "HANDSHAKE_FAILED", error instanceof Error ? error.message : String(error));
+            }
+            return;
+        }
+        if (envelope.type === "encrypted_frame") {
+            if (!activeSession.cryptoSession || !activeSession.gateway) {
+                await this.emitRelayError(activeSession, "HANDSHAKE_REQUIRED", "当前会话还没有完成握手");
+                return;
+            }
+            try {
+                const plaintext = decryptRelayTunnelFrame(activeSession.cryptoSession, envelope.frame);
+                await activeSession.gateway.handlePacket(deserializeRelayTunnelPacket(plaintext));
+            }
+            catch (error) {
+                await this.emitRelayError(activeSession, "DECRYPT_FRAME_FAILED", error instanceof Error ? error.message : String(error));
+            }
+            return;
+        }
+        if (envelope.type === "error") {
+            this.repository.upsertStatus({
+                ...buildStatus("error", config, identity.keyFingerprint, this.latestRemainingBytes),
+                connected: false,
+                lastError: `${envelope.errorCode}: ${envelope.detail}`
+            });
+        }
+    }
+    async emitRelayError(activeSession, errorCode, detail) {
+        if (activeSession.closed || activeSession.socket.readyState !== WebSocket.OPEN) {
+            return;
+        }
+        activeSession.socket.send(JSON.stringify({
+            type: "error",
+            errorCode,
+            detail
+        }));
+    }
+    teardownRelaySession(sessionId) {
+        const activeSession = this.activeSessions.get(sessionId);
+        if (!activeSession) {
+            return;
+        }
+        activeSession.closed = true;
+        activeSession.gateway?.close();
+        this.activeSessions.delete(sessionId);
+    }
+}
+function buildStatus(phase, config, hostFingerprint, remainingBytes) {
+    return {
+        phase,
+        connected: phase === "running",
+        bindingId: config.bindingId,
+        tunnelDomain: config.tunnelDomain,
+        hostFingerprint,
+        trafficUsedBytes: null,
+        trafficRemainingBytes: remainingBytes,
+        quotaResetAt: null,
+        lastError: null,
+        observedAt: nowIso()
+    };
+}
+function serializeConfigKey(config) {
+    return JSON.stringify({
+        relayBaseUrl: config.relayBaseUrl,
+        bindingId: config.bindingId,
+        tunnelDomain: config.tunnelDomain,
+        localTargetBaseUrl: config.localTargetBaseUrl,
+        hostPublicKey: config.hostPublicKey,
+        hostKeyFingerprint: config.hostKeyFingerprint
+    });
+}
+function buildHttpUrl(baseUrl, pathname) {
+    const url = resolveRelayBaseUrl(baseUrl, pathname);
+    url.protocol = url.protocol === "wss:" || url.protocol === "https:" ? "https:" : "http:";
+    return url.toString();
+}
+function buildRelayWebSocketUrl(relayBaseUrl, sessionId) {
+    const url = resolveRelayBaseUrl(relayBaseUrl, "ws");
+    url.searchParams.set("sessionId", sessionId);
+    url.searchParams.set("role", "upstream");
+    url.protocol = url.protocol === "https:" || url.protocol === "wss:" ? "wss:" : "ws:";
+    return url.toString();
+}
+function buildControlHttpUrl(controlBaseUrl, pathname) {
+    const url = new URL(pathname.replace(/^\/+/, ""), ensureTrailingSlash(controlBaseUrl));
+    url.protocol = url.protocol === "https:" ? "https:" : "http:";
+    return url.toString();
+}
+function ensureTrailingSlash(value) {
+    return value.endsWith("/") ? value : `${value}/`;
+}
+function resolveRelayBaseUrl(baseUrl, pathname) {
+    return new URL(pathname.replace(/^\/+/, ""), ensureTrailingSlash(baseUrl));
+}
+async function fetchWithTimeout(fetchFn, input, init, timeoutMs) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), timeoutMs);
+    const linkedAbort = () => controller.abort();
+    init.signal?.addEventListener("abort", linkedAbort, {
+        once: true
+    });
+    try {
+        return await fetchFn(input, {
+            ...init,
+            signal: controller.signal
+        });
+    }
+    finally {
+        clearTimeout(timeoutId);
+        init.signal?.removeEventListener("abort", linkedAbort);
+    }
+}
+async function buildHttpError(response, prefix) {
+    const raw = await response.text();
+    if (!raw.trim()) {
+        return new Error(`${prefix}（HTTP ${response.status}）`);
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (parsed.detail) {
+            return new Error(`${prefix}：${parsed.detail}`);
+        }
+    }
+    catch {
+        // 这里退回可读文本错误。
+    }
+    return new Error(`${prefix}：${raw.trim()}`);
+}
+async function waitForDelay(delayMs, signal) {
+    if (signal.aborted) {
+        throw new Error("操作已取消");
+    }
+    await new Promise((resolve, reject) => {
+        const timeoutId = setTimeout(() => {
+            signal.removeEventListener("abort", handleAbort);
+            resolve();
+        }, delayMs);
+        const handleAbort = () => {
+            clearTimeout(timeoutId);
+            reject(new Error("操作已取消"));
+        };
+        signal.addEventListener("abort", handleAbort, {
+            once: true
+        });
+    });
+}
+export const __internal__ = {
+    buildHttpUrl,
+    buildRelayWebSocketUrl,
+    buildControlHttpUrl
+};
+function normalizeRequiredText(value) {
+    const normalized = value?.trim() ?? "";
+    return normalized.length > 0 ? normalized : null;
+}
+//# sourceMappingURL=relay-tunnel-runtime-adapter.js.map

package/dist/server/modules/relay-tunnel/relay-tunnel-runtime-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-tunnel-runtime-adapter.js","sourceRoot":"","sources":["../../../../src/modules/relay-tunnel/relay-tunnel-runtime-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,IAAI,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAGjE,OAAO,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAOpD,OAAO,EACL,gCAAgC,EAChC,uBAAuB,EACvB,uBAAuB,EAKxB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AA2D9E,MAAM,YAAY,GAAG,KAAK,CAAC;AAC3B,MAAM,cAAc,GAAG,KAAK,CAAC;AAC7B,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,MAAM,OAAO,6BAA6B;IAUrB;IACA;IACA;IAXX,gBAAgB,GAAkB,IAAI,CAAC;IACvC,sBAAsB,GAA2B,IAAI,CAAC;IACtD,cAAc,GAAyB,IAAI,CAAC;IAC5C,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,SAAS,GAAqB,YAAY,CAAC;IAC3C,oBAAoB,GAAkB,IAAI,CAAC;IAC3C,wBAAwB,GAAkB,IAAI,CAAC;IAEvD,YACmB,kBAAyD,EACzD,UAAyC,EACzC,YAIhB;QANgB,uBAAkB,GAAlB,kBAAkB,CAAuC;QACzD,eAAU,GAAV,UAAU,CAA+B;QACzC,iBAAY,GAAZ,YAAY,CAI5B;IACA,CAAC;IAEJ,KAAK,CAAC,OAAO,CACX,MAAiC,EACjC,MAAmB;QAEnB,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,CAAC;QAExD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;YAC1D,IAAI,CAAC,gBAAgB,GAAG,SAAS,CAAC;YAClC,IAAI,CAAC,SAAS,GAAG,YAAY,CAAC;YAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;YACjC,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;YACrC,IAAI,CAAC,sBAAsB,GAAG,IAAI,eAAe,EAAE,CAAC;YACpD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACjG,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,OAAO,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjG,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAE/C,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC7B,IAAI,CAAC,wBAAwB,GAAG,IAAI,CAAC;QAErC,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;QAED,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC;YACzD,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;YAC5B,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;YAC/B,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,MAAiC,EACjC,QAAqC,EACrC,MAAmB;QAEnB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACpE,MAAM,cAAc,GAAG,KAAK,EAAE,cAAc,IAAI,IAAI,CAAC,oBAAoB,CAAC;gBAE1E,IAAI,CAAC,oBAAoB,GAAG,cAAc,CAAC;gBAC3C,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;oBAC3B,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAClD,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,YAAY,EAAE,CAAC;oBAC3C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC7B,CAAC;gBAED,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;gBAC5F,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;gBAErC,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM;gBACR,CAAC;gBAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACvE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,KAAK,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC;gBACjF,MAAM,YAAY,GAA8B;oBAC9C,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC;oBACjF,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,OAAO;iBACnB,CAAC;gBAEF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;gBAE3C,MAAM,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,MAAiC,EACjC,QAAqC,EACrC,MAAmB;QAEnB,MAAM,gBAAgB,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEtE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IACE,IAAI,CAAC,wBAAwB,KAAK,IAAI;eACnC,KAAK,GAAG,IAAI,CAAC,wBAAwB,GAAG,qBAAqB,EAChE,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,GAAG,KAAK,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK,CAAC;QAEpD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CACrC,OAAO,EACP,gBAAgB,CAAC,GAAG,EACpB;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,gBAAgB,CAAC,OAAO;gBACjC,IAAI,EAAE,gBAAgB,CAAC,IAAI;gBAC3B,MAAM;aACP,EACD,oBAAoB,CACrB,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,MAAiC,EACjC,QAAqC,EACrC,MAAmB;QAEnB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK,CAAC;QACpD,MAAM,iBAAiB,GAAG,MAAM,gBAAgB,CAC9C,OAAO,EACP,YAAY,CAAC,MAAM,CAAC,YAAa,EAAE,6BAA6B,CAAC,EACjE;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,eAAe,EAAE,QAAQ,CAAC,cAAc;aACzC,CAAC;YACF,MAAM;SACP,EACD,gBAAgB,CACjB,CAAC;QAEF,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC1B,MAAM,MAAM,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAM,iBAAiB,CAAC,IAAI,EAAgC,CAAC;QACtF,MAAM,KAAK,GAAG,+BAA+B,CAAC;YAC5C,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,WAAW;YACnD,SAAS,EAAE,MAAM,CAAC,SAAU;YAC5B,YAAY,EAAE,MAAM,CAAC,YAAa;YAClC,eAAe,EAAE,QAAQ,CAAC,cAAc;YACxC,UAAU,EAAE,gBAAgB,CAAC,SAAS,CAAC,UAAU;YACjD,cAAc,EAAE,gBAAgB,CAAC,SAAS,CAAC,cAAc;YACzD,iBAAiB,EAAE,QAAQ,CAAC,aAAa;SAC1C,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAC1C,OAAO,EACP,YAAY,CAAC,MAAM,CAAC,YAAa,EAAE,sCAAsC,CAAC,EAC1E;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,WAAW,EAAE,gBAAgB,CAAC,SAAS,CAAC,WAAW;gBACnD,KAAK;aACN,CAAC;YACF,MAAM;SACP,EACD,gBAAgB,CACjB,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,MAAM,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,IAAI,EAAuC,CAAC;QACrF,OAAO,YAAY,CAAC,WAAW,CAAC;IAClC,CAAC;IAEO,qBAAqB,CAC3B,MAAiC,EACjC,QAAqC;QAMrC,MAAM,cAAc,GAAG,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;QACxF,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAE5F,IACE,CAAC,cAAc;eACZ,CAAC,SAAS;eACV,CAAC,YAAY;eACb,CAAC,oBAAoB;eACrB,CAAC,oBAAoB,EACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,aAAa,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;YAE9E,OAAO;gBACL,GAAG,EAAE,mBAAmB,CAAC,cAAc,EAAE,iBAAiB,SAAS,YAAY,CAAC;gBAChF,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,WAAW,EAAE;iBACvC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY;oBACZ,eAAe,EAAE,QAAQ,CAAC,cAAc;iBACzC,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CACvB,MAAiC,EACjC,QAAqC,EACrC,WAA0E;QAE1E,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAClF,sBAAsB,CAAC,MAAM,CAAC,YAAa,EAAE,WAAW,CAAC,SAAS,CAAC,CACpE,CAAC;QACF,MAAM,aAAa,GAAuB;YACxC,cAAc,EAAE,WAAW,CAAC,SAAS;YACrC,MAAM;YACN,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;YACnB,MAAM,EAAE,KAAK;SACd,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAE9D,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE;YACzC,IAAI,QAAQ,EAAE,CAAC;gBACb,KAAK,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,0BAA0B,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpF,KAAK,IAAI,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,CAAC,oBAAoB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAEjD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,iBAAiB,EAAE,CAAC;gBACnE,IAAI,CAAC,SAAS,GAAG,iBAAiB,CAAC;gBACnC,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;gBAChC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;oBAC3B,GAAG,WAAW,CAAC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,GAAG,CAAC;oBACvE,SAAS,EAAE,KAAK;oBAChB,SAAS,EAAE,cAAc;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAC3B,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC;gBACnF,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,aAAiC,EACjC,MAAiC,EACjC,QAAqC,EACrC,UAAkB;QAElB,IAAI,QAAoC,CAAC;QAEzC,IAAI,CAAC;YACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAA+B,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC;gBAChC,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,6BAA6B,EAAE,YAAY,CAAC,CAAC;gBACtF,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,gCAAgC,CAAC;oBAChD,YAAY,EAAE,QAAQ;oBACtB,WAAW,EAAE,QAAQ,CAAC,KAAK;iBAC5B,CAAC,CAAC;gBAEH,aAAa,CAAC,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC;gBAC/C,aAAa,CAAC,OAAO,GAAG,IAAI,yBAAyB,CAAC;oBACpD,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;wBACzB,IAAI,CAAC,aAAa,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;4BAC/G,OAAO;wBACT,CAAC;wBAED,MAAM,KAAK,GAAG,uBAAuB,CACnC,aAAa,CAAC,aAAa,EAC3B,0BAA0B,CAAC,MAAM,CAAC,CACnC,CAAC;wBAEF,aAAa,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,iBAAiB;4BACvB,KAAK;yBACsC,CAAC,CAC/C,CAAC;oBACJ,CAAC;iBACF,CAAC,CAAC;gBACH,aAAa,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,QAAQ,CAAC,WAAW;iBACa,CAAC,CAC5C,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,cAAc,CACvB,aAAa,EACb,kBAAkB,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACJ,CAAC;YAED,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;gBAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;gBAC9E,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,uBAAuB,CAAC,aAAa,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACvF,MAAM,aAAa,CAAC,OAAO,CAAC,YAAY,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC;YACpF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,cAAc,CACvB,aAAa,EACb,sBAAsB,EACtB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;YACJ,CAAC;YAED,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAC3B,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,oBAAoB,CAAC;gBACnF,SAAS,EAAE,KAAK;gBAChB,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,MAAM,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,aAAiC,EACjC,SAAiB,EACjB,MAAc;QAEd,IAAI,aAAa,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,aAAa,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,OAAO;YACb,SAAS;YACT,MAAM;SAC4B,CAAC,CACtC,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,SAAiB;QAC5C,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC;QAC5B,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AAED,SAAS,WAAW,CAClB,KAAuB,EACvB,MAAiC,EACjC,eAA8B,EAC9B,cAA6B;IAE7B,OAAO;QACL,KAAK;QACL,SAAS,EAAE,KAAK,KAAK,SAAS;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,eAAe;QACf,gBAAgB,EAAE,IAAI;QACtB,qBAAqB,EAAE,cAAc;QACrC,YAAY,EAAE,IAAI;QAClB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,MAAM,EAAE;KACrB,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiC;IAC3D,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,QAAgB;IACrD,MAAM,GAAG,GAAG,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAEnD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACzF,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,sBAAsB,CAAC,YAAoB,EAAE,SAAiB;IACrE,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAEpD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACrF,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAAC,cAAsB,EAAE,QAAgB;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC;IAEvF,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9D,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,QAAgB;IAC5D,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAqB,EACrB,KAAa,EACb,IAA4C,EAC5C,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAE7C,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE;QAClD,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,KAAK,EAAE;YAC1B,GAAG,IAAI;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,MAAc;IAC9D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAElC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,IAAI,KAAK,CAAC,GAAG,MAAM,SAAS,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,OAAO,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe,EAAE,MAAmB;IAC9D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,MAAM,WAAW,GAAG,GAAG,EAAE;YACvB,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE;YAC5C,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY;IACZ,sBAAsB;IACtB,mBAAmB;CACpB,CAAC;AAEF,SAAS,qBAAqB,CAAC,KAAgC;IAC7D,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC"}

package/dist/server/modules/relay-tunnel/relay-tunnel-service.d.ts

@@ -0,0 +1,111 @@
+import type Database from "better-sqlite3";
+import type { BootstrapStateRepository } from "../../storage/repositories/bootstrap-state-repository.js";
+import type { InstanceRelayTunnelIdentityRepository } from "../../storage/repositories/instance-relay-tunnel-identity-repository.js";
+import type { InstanceRelayTunnelRepository } from "../../storage/repositories/instance-relay-tunnel-repository.js";
+import { type TaskManager } from "../tasks/task-manager.js";
+import { type TaskHandle } from "../tasks/task-types.js";
+import type { InstanceRelayTunnelConfig, InstanceRelayTunnelStatus, RelayTunnelPhase, RelayTunnelProvider } from "../../types/domain.js";
+export interface RelayTunnelConfigUpdateInput {
+    activated?: boolean;
+    relayBaseUrl?: string | null;
+    controlBaseUrl?: string | null;
+    localTargetBaseUrl?: string | null;
+}
+export interface RelayTunnelBindInput {
+    accountId?: string | null;
+    relayBaseUrl?: string | null;
+    controlBaseUrl?: string | null;
+    bindingId?: string;
+    tunnelDomain?: string;
+    hostPublicKey?: string;
+    hostKeyFingerprint?: string;
+}
+export interface InstanceRelayTunnelStatusDto {
+    activated: boolean;
+    enabled: boolean;
+    provider: RelayTunnelProvider;
+    relayBaseUrl: string | null;
+    controlBaseUrl: string | null;
+    controlAccountEmail: string | null;
+    controlSessionExpiresAt: string | null;
+    accountId: string | null;
+    tunnelDomain: string | null;
+    bindingId: string | null;
+    hostPublicKey: string | null;
+    hostKeyFingerprint: string | null;
+    localTargetBaseUrl: string;
+    phase: RelayTunnelPhase;
+    connected: boolean;
+    hostFingerprint: string | null;
+    trafficUsedBytes: string | null;
+    trafficRemainingBytes: string | null;
+    quotaResetAt: string | null;
+    lastError: string | null;
+    observedAt: string | null;
+    updatedAt: string | null;
+}
+export interface RelayTunnelControlLoginInput {
+    email?: string | null;
+    password?: string | null;
+}
+export interface RelayTunnelControlHostLabelAvailability {
+    hostLabel: string;
+    tunnelDomain: string | null;
+    available: boolean;
+    reason: "available" | "occupied" | "reserved" | "unavailable";
+}
+export interface RelayTunnelTrafficWalletSummary {
+    accountId: string;
+    grantedBytes: string;
+    usedBytes: string;
+    remainingBytes: string;
+    exhausted: boolean;
+    updatedAt: string;
+}
+export interface RelayTunnelRuntimeAdapter {
+    connect(config: InstanceRelayTunnelConfig, signal: AbortSignal): Promise<InstanceRelayTunnelStatus>;
+    disconnect?(reason?: string): Promise<void> | void;
+}
+export declare class RelayTunnelService {
+    private readonly db;
+    private readonly bootstrapStateRepository;
+    private readonly repository;
+    private readonly defaultLocalTargetBaseUrl;
+    private readonly legacyLocalTargetBaseUrl;
+    private readonly controlSessionSecret;
+    private readonly fetchFn;
+    private readonly taskManager;
+    private readonly runtimeAdapter;
+    private readonly identityService;
+    constructor(db: Database.Database, bootstrapStateRepository: BootstrapStateRepository, identityRepository: InstanceRelayTunnelIdentityRepository, repository: InstanceRelayTunnelRepository, options: {
+        defaultLocalTargetBaseUrl: string;
+        legacyLocalTargetBaseUrl?: string | null;
+        controlSessionSecret: string;
+        fetchFn?: typeof fetch;
+    }, taskManager?: TaskManager, runtimeAdapter?: RelayTunnelRuntimeAdapter);
+    restoreOnStartup(): Promise<void>;
+    getStatus(): Promise<InstanceRelayTunnelStatusDto>;
+    ensureIdentity(): Promise<InstanceRelayTunnelStatusDto>;
+    updateConfig(input: RelayTunnelConfigUpdateInput): Promise<InstanceRelayTunnelStatusDto>;
+    loginControl(input: RelayTunnelControlLoginInput): Promise<InstanceRelayTunnelStatusDto>;
+    logoutControl(): Promise<InstanceRelayTunnelStatusDto>;
+    checkHostLabelAvailability(hostLabel: string): Promise<RelayTunnelControlHostLabelAvailability>;
+    bindControlHost(hostLabel: string): Promise<InstanceRelayTunnelStatusDto>;
+    getTrafficWallet(): Promise<RelayTunnelTrafficWalletSummary>;
+    bind(input: RelayTunnelBindInput): Promise<InstanceRelayTunnelStatusDto>;
+    unbind(): Promise<InstanceRelayTunnelStatusDto>;
+    enable(): Promise<InstanceRelayTunnelStatusDto>;
+    disable(): Promise<InstanceRelayTunnelStatusDto>;
+    requestReconnect(source?: string): TaskHandle<InstanceRelayTunnelStatusDto>;
+    private readStateSnapshot;
+    private reconcileLegacyLocalTargetBaseUrl;
+    private resolveEffectiveStatus;
+    private registerBackgroundTasks;
+    private runConnectTask;
+    private buildStatusDto;
+    private resolveConfigWithIdentity;
+    private syncIdentityIntoConfig;
+    private isBootstrapInitialized;
+    private requireControlSession;
+    private requestControlApi;
+}