@jonathanyee/devtunnel-ctl 0.0.0-stage → 0.2.0

package/dist/rpc.js

@@ -0,0 +1,208 @@
+import net from 'node:net';
+import { lstat, chmod, unlink } from 'node:fs/promises';
+import { bounded, Fault, record, safeFault, isFaultCode, redact } from "./core.js";
+import { validateConfig } from "./config.js";
+function parseRequest(value) {
+    if (!record(value) || value.v !== 1)
+        throw new Fault('protocol');
+    const allowed = new Set(['v', 'command', 'profile', 'name']);
+    if (Object.keys(value).some(key => !allowed.has(key)))
+        throw new Fault('protocol');
+    if (value.command === 'status' || value.command === 'logs')
+        return { v: 1, command: value.command };
+    if (value.command === 'add') {
+        const config = validateConfig({ version: 1, helperPath: '/unused', profiles: [value.profile] });
+        return { v: 1, command: 'add', profile: config.profiles[0] };
+    }
+    if (['pause', 'resume', 'reconnect'].includes(String(value.command)) &&
+        typeof value.name === 'string' && /^(all|[a-z][a-z0-9-]{0,31})$/.test(value.name)) {
+        if (value.command === 'pause' || value.command === 'resume' || value.command === 'reconnect') {
+            return { v: 1, command: value.command, name: value.name };
+        }
+    }
+    throw new Fault('protocol');
+}
+function parseFrame(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Fault('protocol');
+    }
+}
+export class RpcServer {
+    path;
+    handler;
+    log;
+    server;
+    inode;
+    sockets = new Set();
+    constructor(path, handler, log) {
+        this.path = path;
+        this.handler = handler;
+        this.log = log;
+    }
+    async listen() {
+        if (Buffer.byteLength(this.path) > 100)
+            throw new Fault('invalid-config', 'State directory path is too long for a Unix socket (limit 100 bytes including control.sock).');
+        try {
+            const info = await lstat(this.path);
+            if (!info.isSocket() || info.uid !== process.getuid?.())
+                throw new Fault('invalid-config', 'Control socket path is not an owned Unix socket.');
+            const live = await bounded(signal => new Promise((resolve, reject) => {
+                const socket = net.connect(this.path);
+                const abort = () => { socket.destroy(); reject(new Fault('daemon-unavailable', 'Existing control socket is unresponsive; refusing to unlink it.')); };
+                signal.addEventListener('abort', abort, { once: true });
+                const done = (result) => { signal.removeEventListener('abort', abort); socket.destroy(); resolve(result); };
+                socket.once('connect', () => done(true));
+                socket.once('error', error => {
+                    if ('code' in error && error.code === 'ECONNREFUSED')
+                        done(false);
+                    else {
+                        signal.removeEventListener('abort', abort);
+                        socket.destroy();
+                        reject(new Fault('daemon-unavailable'));
+                    }
+                });
+            }), 500);
+            if (live)
+                throw new Fault('daemon-unavailable', 'A daemon already owns the control socket.');
+            const current = await lstat(this.path);
+            if (current.ino !== info.ino)
+                throw new Fault('daemon-unavailable', 'Control socket ownership changed; refusing cleanup.');
+            await unlink(this.path);
+        }
+        catch (error) {
+            if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT'))
+                throw error;
+        }
+        const server = net.createServer(socket => this.accept(socket));
+        server.maxConnections = 32;
+        this.server = server;
+        await new Promise((resolve, reject) => {
+            server.once('error', reject);
+            server.listen(this.path, () => { server.off('error', reject); resolve(); });
+        });
+        this.inode = (await lstat(this.path)).ino;
+        await chmod(this.path, 0o600);
+        server.on('error', () => this.log(new Fault('internal', 'Control listener failed.')));
+    }
+    accept(socket) {
+        this.sockets.add(socket);
+        const timeout = setTimeout(() => socket.destroy(), 5000);
+        socket.on('error', () => socket.destroy());
+        socket.once('close', () => { clearTimeout(timeout); this.sockets.delete(socket); });
+        let bytes = 0, text = '', handled = false;
+        socket.on('data', (chunk) => {
+            if (handled) {
+                socket.destroy();
+                return;
+            }
+            bytes += chunk.length;
+            if (bytes > 32768) {
+                this.log(new Fault('protocol'));
+                socket.destroy();
+                return;
+            }
+            text += chunk.toString('utf8');
+            const end = text.indexOf('\n');
+            if (end < 0)
+                return;
+            handled = true;
+            if (text.slice(end + 1).trim()) {
+                socket.destroy();
+                return;
+            }
+            const send = (value) => {
+                const frame = JSON.stringify(value) + '\n';
+                if (Buffer.byteLength(frame) > 131072) {
+                    this.log(new Fault('protocol'));
+                    socket.destroy();
+                }
+                else
+                    socket.end(frame);
+            };
+            void Promise.resolve().then(() => this.handler(parseRequest(parseFrame(text.slice(0, end))))).then(result => send({ ok: true, result }), error => {
+                const fault = safeFault(error);
+                this.log(fault);
+                send({ ok: false, error: { code: fault.code, message: fault.message } });
+            });
+        });
+    }
+    async close() {
+        for (const socket of this.sockets)
+            socket.destroy();
+        if (this.server?.listening) {
+            await bounded(() => new Promise((resolve, reject) => this.server.close(error => error ? reject(error) : resolve())), 1000);
+        }
+        if (this.inode !== undefined) {
+            try {
+                const info = await lstat(this.path);
+                if (info.ino === this.inode && info.isSocket())
+                    await unlink(this.path);
+            }
+            catch (error) {
+                if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT'))
+                    throw error;
+            }
+        }
+    }
+}
+export function request(path, value, timeoutMs = 4500) {
+    const frame = JSON.stringify(value) + '\n';
+    if (Buffer.byteLength(frame) > 32768)
+        return Promise.reject(new Fault('protocol'));
+    return bounded(signal => new Promise((resolve, reject) => {
+        const socket = net.connect(path);
+        let bytes = 0, text = '', done = false;
+        const finish = (error, result) => {
+            if (done)
+                return;
+            done = true;
+            signal.removeEventListener('abort', abort);
+            socket.destroy();
+            if (error)
+                reject(error);
+            else
+                resolve(result);
+        };
+        const abort = () => finish(new Fault('daemon-unavailable', 'Daemon did not respond before the deadline. State changes may have completed; check status before retrying.'));
+        signal.addEventListener('abort', abort, { once: true });
+        socket.once('connect', () => socket.write(frame));
+        socket.on('error', () => finish(new Fault('daemon-unavailable')));
+        socket.once('close', () => { if (!done)
+            finish(new Fault('daemon-unavailable')); });
+        socket.on('data', (chunk) => {
+            bytes += chunk.length;
+            if (bytes > 131072) {
+                finish(new Fault('protocol'));
+                return;
+            }
+            text += chunk.toString('utf8');
+            const end = text.indexOf('\n');
+            if (end < 0)
+                return;
+            try {
+                const response = parseFrame(text.slice(0, end));
+                if (!record(response) || typeof response.ok !== 'boolean')
+                    throw new Fault('protocol');
+                if (response.ok)
+                    finish(undefined, response.result);
+                else if (record(response.error) && typeof response.error.message === 'string' && isFaultCode(response.error.code)) {
+                    finish(new Fault(response.error.code, redact(response.error.message)));
+                }
+                else
+                    throw new Fault('protocol');
+            }
+            catch {
+                finish(new Fault('protocol'));
+            }
+        });
+    }), timeoutMs).catch(error => {
+        if (error instanceof Fault && error.code === 'timeout') {
+            throw new Fault('daemon-unavailable', 'Daemon did not respond before the deadline. State changes may have completed; check status before retrying.');
+        }
+        throw error;
+    });
+}
+//# sourceMappingURL=rpc.js.map

package/dist/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../src/rpc.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAS7C,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IACpG,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,IAAI,KAAK,CAAC,OAAO,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,KAAK,WAAW,EAAE,CAAC;YAC7F,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,SAAS;IACH,IAAI,CAAS;IACb,OAAO,CAAyC;IAChD,GAAG,CAAyB;IACrC,MAAM,CAAyB;IAC/B,KAAK,CAAqB;IACjB,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACjD,YAAY,IAAY,EAAE,OAA+C,EAAE,GAA2B;QACpG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,MAAM;QACV,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,8FAA8F,CAAC,CAAC;QAC1K,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,kDAAkD,CAAC,CAAC;YAC/I,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,EAAE,iEAAiE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtJ,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACxD,MAAM,IAAI,GAAG,CAAC,MAAe,EAAE,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrH,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;oBAC3B,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;wBAAE,IAAI,CAAC,KAAK,CAAC,CAAC;yBAC7D,CAAC;wBAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;oBAAC,CAAC;gBACjH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACT,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,2CAA2C,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;YAC3H,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;gBAAE,MAAM,KAAK,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,cAAc,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IACO,MAAM,CAAC,MAAkB;QAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,GAAG,KAAK,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,IAAI,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC1C,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACjF,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;gBAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;gBAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC;oBAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;;oBACxF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC,CAAC;YACF,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAChG,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EACpC,KAAK,CAAC,EAAE;gBACN,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAChB,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,KAAK;QACT,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACpI,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE;oBAAE,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;oBAAE,MAAM,KAAK,CAAC;YAAC,CAAC;QAC/G,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,KAAc,EAAE,SAAS,GAAG,IAAI;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC3C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,OAAO,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,KAAK,CAAC;QACvC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAgB,EAAE,EAAE;YACjD,IAAI,IAAI;gBAAE,OAAO;YACjB,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,MAAM,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;gBAAM,OAAO,CAAC,MAAM,CAAC,CAAC;QACjD,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,EAAE,6GAA6G,CAAC,CAAC,CAAC;QAC3K,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAClC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC9D,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO;YACpD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACvF,IAAI,QAAQ,CAAC,EAAE;oBAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;qBAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClH,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzE,CAAC;;oBAAM,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;QAC3B,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,6GAA6G,CAAC,CAAC;QACvJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/sdk-transport.d.ts

@@ -0,0 +1,33 @@
+import { TunnelRelayTunnelClient } from '@microsoft/dev-tunnels-connections';
+import { TunnelManagementHttpClient } from '@microsoft/dev-tunnels-management';
+import type { CancellationToken } from '@microsoft/dev-tunnels-ssh';
+import type { Tunnel } from '@microsoft/dev-tunnels-contracts';
+import { Agent } from 'node:https';
+import type { Duplex } from 'node:stream';
+import type { Profile } from './config.ts';
+import { TokenProvider } from './auth.ts';
+import type { TokenScope } from './auth.ts';
+import { Fault } from './core.ts';
+export interface TransportEvent {
+    kind: 'relay' | 'keepalive-failed' | 'keepalive-succeeded' | 'retry';
+    connected?: boolean;
+    fault?: Fault;
+}
+export interface Session {
+    readonly connected: boolean;
+    open(signal: AbortSignal): Promise<Duplex>;
+    dispose(): Promise<void>;
+}
+export interface Transport {
+    connect(profile: Profile, signal: AbortSignal, event: (event: TransportEvent) => void): Promise<Session>;
+}
+export declare function sdkCall<T>(signal: AbortSignal, action: (cancellation: CancellationToken) => Promise<T>): Promise<T>;
+export declare function sdkRefresh<T>(signal: AbortSignal, cancellation: CancellationToken | undefined, timeoutMs: number, action: (signal: AbortSignal) => Promise<T>): Promise<T>;
+export declare function resolveTunnel(profile: Pick<Profile, 'tunnelId' | 'clusterId'>, tokens: TokenProvider, management: TunnelManagementHttpClient, signal: AbortSignal, scope?: TokenScope): Promise<Tunnel>;
+export declare class SdkTransport implements Transport {
+    private readonly tokens;
+    private readonly managementFactory;
+    private readonly clientFactory;
+    constructor(tokens: TokenProvider, managementFactory?: (agent: Agent) => TunnelManagementHttpClient, clientFactory?: () => TunnelRelayTunnelClient);
+    connect(profile: Profile, signal: AbortSignal, event: (e: TransportEvent) => void): Promise<Session>;
+}

package/dist/sdk-transport.js

@@ -0,0 +1,239 @@
+import { TunnelRelayTunnelClient, ConnectionStatus, RelayConnectionError } from '@microsoft/dev-tunnels-connections';
+import { TunnelManagementHttpClient, ManagementApiVersions } from '@microsoft/dev-tunnels-management';
+import { CancellationTokenSource, SecureStream } from '@microsoft/dev-tunnels-ssh';
+import { TunnelConnectionMode } from '@microsoft/dev-tunnels-contracts';
+import { Agent } from 'node:https';
+import { TokenProvider } from "./auth.js";
+import { bounded, Fault, safeFault } from "./core.js";
+export async function sdkCall(signal, action) {
+    const source = new CancellationTokenSource();
+    const abort = () => source.cancel();
+    signal.addEventListener('abort', abort, { once: true });
+    if (signal.aborted)
+        source.cancel();
+    try {
+        return await action(source.token);
+    }
+    finally {
+        signal.removeEventListener('abort', abort);
+        source.dispose();
+    }
+}
+export async function sdkRefresh(signal, cancellation, timeoutMs, action) {
+    const controller = new AbortController();
+    const subscription = cancellation?.onCancellationRequested(() => controller.abort());
+    if (cancellation?.isCancellationRequested)
+        controller.abort();
+    try {
+        return await bounded(action, timeoutMs, AbortSignal.any([signal, controller.signal]));
+    }
+    finally {
+        subscription?.dispose();
+    }
+}
+export async function resolveTunnel(profile, tokens, management, signal, scope = 'connect') {
+    for (let attempt = 0; attempt < 2; attempt++) {
+        const token = await tokens.get(profile, signal, attempt > 0, scope);
+        const clusterId = profile.clusterId ?? token.clusterId;
+        if (!clusterId)
+            throw new Fault('invalid-config', 'Specify --cluster: the token has no SDK routing hint.');
+        try {
+            const tunnel = await bounded(inner => sdkCall(inner, cancellation => management.getTunnel({ tunnelId: profile.tunnelId, clusterId }, { accessToken: token.value, includePorts: true, followRedirects: true }, cancellation)), 8000, signal);
+            if (!tunnel)
+                throw new Fault('remote-unavailable');
+            return { ...tunnel, accessTokens: { [scope]: token.value } };
+        }
+        catch (error) {
+            const fault = safeFault(error);
+            if (fault.code === 'login-required' && attempt === 0)
+                continue;
+            throw fault;
+        }
+    }
+    throw new Fault('login-required');
+}
+export class SdkTransport {
+    tokens;
+    managementFactory;
+    clientFactory;
+    constructor(tokens, managementFactory = (agent) => new TunnelManagementHttpClient({ name: 'devtunnel-ctl', version: '0.1.0' }, ManagementApiVersions.Version20230927preview, undefined, undefined, agent), clientFactory = () => new TunnelRelayTunnelClient(undefined, () => { })) {
+        this.tokens = tokens;
+        this.managementFactory = managementFactory;
+        this.clientFactory = clientFactory;
+    }
+    async connect(profile, signal, event) {
+        const agent = new Agent({ keepAlive: false, maxSockets: 8, timeout: 10000 });
+        const management = this.managementFactory(agent);
+        management.trace = () => { };
+        management.enableEventsReporting = false;
+        const client = this.clientFactory();
+        client.trace = () => { };
+        client.acceptLocalConnectionsForForwardedPorts = false;
+        const lifetime = new AbortController();
+        const streams = new Set();
+        const destroyStream = (stream) => {
+            if (stream instanceof SecureStream)
+                stream.dispose();
+            stream.destroy();
+        };
+        const metadata = async (signal) => {
+            const tunnel = await resolveTunnel(profile, this.tokens, management, signal);
+            const endpoints = tunnel.endpoints?.filter(e => e.connectionMode === TunnelConnectionMode.TunnelRelay);
+            if (!endpoints?.length)
+                throw new Fault('remote-unavailable');
+            if (endpoints.some(e => !e.hostPublicKeys?.length)) {
+                throw new Fault('remote-unavailable', 'Tunnel host has not published public keys; refusing unverified host identity.');
+            }
+            return tunnel;
+        };
+        const subscriptions = [];
+        let disposed = false, established = false, refreshes = 0, authRetried = false, graceUntil = 0;
+        let refreshEpoch = 0;
+        let refreshFailure;
+        const clearRefreshEvidence = () => { refreshEpoch++; refreshFailure = undefined; };
+        const connectionFault = (error) => {
+            // The SDK can rethrow the original relay 401 after its refresh handler fails.
+            if (error instanceof RelayConnectionError && error.errorContext.statusCode === 401 && refreshFailure) {
+                return refreshFailure;
+            }
+            return safeFault(error);
+        };
+        let disposal;
+        const emit = (e) => { if (!disposed && !lifetime.signal.aborted)
+            event(e); };
+        const dispose = () => {
+            if (disposal)
+                return disposal;
+            disposed = true;
+            clearRefreshEvidence();
+            lifetime.abort();
+            agent.destroy();
+            for (const stream of streams)
+                destroyStream(stream);
+            streams.clear();
+            signal.removeEventListener('abort', abort);
+            for (const subscription of subscriptions)
+                subscription.dispose();
+            disposal = bounded(() => Promise.all([client.dispose(), management.dispose()]).then(() => { }), 2000);
+            return disposal;
+        };
+        const abort = () => { void dispose().catch(error => event({ kind: 'retry', fault: safeFault(error) })); };
+        const relayFactory = client.streamFactory;
+        client.streamFactory = {
+            createRelayStream: async (...args) => {
+                if (!args[0].startsWith('wss://'))
+                    throw new Fault('remote-unavailable', 'Relay endpoint must use authenticated TLS.');
+                try {
+                    return await bounded(() => relayFactory.createRelayStream(args[0], args[1], args[2], { ...args[3], tlsOptions: { ...args[3]?.tlsOptions, agent } }, args[4]), 10000, lifetime.signal, late => bounded(() => late.stream.close(), 1000));
+                }
+                catch (error) {
+                    agent.destroy();
+                    throw error;
+                }
+            },
+        };
+        signal.addEventListener('abort', abort, { once: true });
+        if (signal.aborted) {
+            await dispose();
+            throw new Fault('aborted');
+        }
+        subscriptions.push(client.portForwarding(e => { e.cancel = e.portNumber !== profile.remotePort; }));
+        subscriptions.push(client.connectionStatusChanged(e => {
+            const connected = e.status === ConnectionStatus.Connected;
+            const fault = e.disconnectError ? connectionFault(e.disconnectError) : undefined;
+            if (connected) {
+                established = true;
+                graceUntil = 0;
+                refreshes = 0;
+                authRetried = false;
+                clearRefreshEvidence();
+            }
+            else {
+                if (e.status === ConnectionStatus.Connecting &&
+                    (e.previousStatus === ConnectionStatus.Connected || e.previousStatus === ConnectionStatus.Disconnected)) {
+                    refreshes = 0;
+                    authRetried = false;
+                    clearRefreshEvidence();
+                }
+                if (established && !graceUntil)
+                    graceUntil = Date.now() + 8000;
+            }
+            emit({ kind: 'relay', connected, ...(fault ? { fault } : {}) });
+        }));
+        subscriptions.push(client.keepAliveFailed(() => emit({ kind: 'keepalive-failed' })));
+        subscriptions.push(client.keepAliveSucceeded(() => emit({ kind: 'keepalive-succeeded' })));
+        subscriptions.push(client.retryingTunnelConnection(e => {
+            const fault = connectionFault(e.error);
+            const initialAuthRetry = !established && refreshes === 1 && !authRetried;
+            if (initialAuthRetry)
+                authRetried = true;
+            // The outer controller owns retry scheduling; the SDK only owns a short resumable grace.
+            e.retry = (initialAuthRetry || (established && Date.now() < graceUntil)) &&
+                fault.code !== 'access-denied' && fault.code !== 'throttled' && !refreshFailure && !disposed;
+            emit({ kind: 'retry', fault });
+        }));
+        subscriptions.push(client.refreshingTunnelAccessToken(e => {
+            clearRefreshEvidence();
+            const epoch = refreshEpoch;
+            const current = () => epoch === refreshEpoch && !disposed && !lifetime.signal.aborted;
+            e.tunnelAccessToken = sdkRefresh(lifetime.signal, e.cancellation, 12000, inner => {
+                if (!current())
+                    throw new Fault('aborted');
+                if (++refreshes > 1)
+                    throw new Fault('login-required');
+                return this.tokens.get(profile, inner, true).then(token => token.value);
+            }).then(token => {
+                if (!current())
+                    throw new Fault('aborted');
+                return token;
+            }).catch(error => {
+                if (!current())
+                    throw new Fault('aborted');
+                const fault = safeFault(error);
+                const sanitized = new Fault(fault.code, undefined, fault.retryAfterMs);
+                refreshFailure = sanitized;
+                throw sanitized;
+            });
+        }));
+        subscriptions.push(client.refreshingTunnel(e => {
+            e.tunnelPromise = sdkRefresh(lifetime.signal, e.cancellation, 20000, metadata);
+        }));
+        try {
+            const tunnel = await metadata(lifetime.signal);
+            await bounded(inner => sdkCall(inner, cancellation => client.connect(tunnel, {
+                enableRetry: true, enableReconnect: true, keepAliveIntervalInSeconds: 10, httpAgent: agent,
+            }, cancellation)), 15000, lifetime.signal);
+            await bounded(inner => sdkCall(inner, cancellation => client.waitForForwardedPort(profile.remotePort, cancellation)), 5000, lifetime.signal);
+            if (disposed || signal.aborted)
+                throw new Fault('aborted');
+            return {
+                get connected() { return !disposed && client.connectionStatus === ConnectionStatus.Connected; },
+                open: async (openSignal) => {
+                    if (disposed)
+                        throw new Fault('aborted');
+                    const stream = await bounded(inner => sdkCall(inner, cancellation => client.connectToForwardedPort(profile.remotePort, cancellation)), 3000, AbortSignal.any([openSignal, lifetime.signal]), destroyStream);
+                    if (disposed || openSignal.aborted || stream.destroyed) {
+                        destroyStream(stream);
+                        throw new Fault('aborted');
+                    }
+                    streams.add(stream);
+                    stream.on('error', () => destroyStream(stream));
+                    stream.once('close', () => {
+                        streams.delete(stream);
+                        // SecureStream.destroy() alone does not close its separate SDK SSH session.
+                        if (stream instanceof SecureStream)
+                            stream.dispose();
+                    });
+                    return stream;
+                },
+                dispose,
+            };
+        }
+        catch (error) {
+            const fault = signal.aborted || lifetime.signal.aborted ? new Fault('aborted') : connectionFault(error);
+            await dispose().catch(disposeError => event({ kind: 'retry', fault: safeFault(disposeError) }));
+            throw fault;
+        }
+    }
+}
+//# sourceMappingURL=sdk-transport.js.map

package/dist/sdk-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-transport.js","sourceRoot":"","sources":["../src/sdk-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AACrH,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AACtG,OAAO,EAAE,uBAAuB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAGnC,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAgBtD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAI,MAAmB,EAAE,MAAuD;IAC3G,MAAM,MAAM,GAAG,IAAI,uBAAuB,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IACpC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACpC,IAAI,CAAC;QAAC,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;YAClC,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,MAAmB,EAAE,YAA2C,EAClG,SAAiB,EAAE,MAA2C;IAC9D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,YAAY,EAAE,uBAAuB,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,IAAI,YAAY,EAAE,uBAAuB;QAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAC9D,IAAI,CAAC;QAAC,OAAO,MAAM,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;YACtF,CAAC;QAAC,YAAY,EAAE,OAAO,EAAE,CAAC;IAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgD,EAAE,MAAqB,EAAE,UAAsC,EAAE,MAAmB,EACpI,QAAoB,SAAS;IAE7B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;QACvD,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CACvF,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,EACzC,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,YAAY,CACtF,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnD,OAAO,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC/D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC;gBAAE,SAAS;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,YAAY;IACN,MAAM,CAAgB;IACtB,iBAAiB,CAA+C;IAChE,aAAa,CAAgC;IAC9D,YAAY,MAAqB,EAC/B,oBAAoB,CAAC,KAAY,EAAE,EAAE,CAAC,IAAI,0BAA0B,CAClE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,qBAAqB,CAAC,sBAAsB,EACzF,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAC9B,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,uBAAuB,CAAC,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC;QAEtE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAgB,EAAE,MAAmB,EAAE,KAAkC;QACrF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,UAAU,CAAC,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QAC5B,UAAU,CAAC,qBAAqB,GAAG,KAAK,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACxB,MAAM,CAAC,uCAAuC,GAAG,KAAK,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAQ,EAAE;YAC7C,IAAI,MAAM,YAAY,YAAY;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAmB,EAAmB,EAAE;YAC9D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;YAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACvG,IAAI,CAAC,SAAS,EAAE,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;gBACnD,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,+EAA+E,CAAC,CAAC;YACzH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,MAAM,aAAa,GAA0B,EAAE,CAAC;QAChD,IAAI,QAAQ,GAAG,KAAK,EAAE,WAAW,GAAG,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,WAAW,GAAG,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC;QAC9F,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,cAAiC,CAAC;QACtC,MAAM,oBAAoB,GAAG,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACnF,MAAM,eAAe,GAAG,CAAC,KAAc,EAAS,EAAE;YAChD,8EAA8E;YAC9E,IAAI,KAAK,YAAY,oBAAoB,IAAI,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,GAAG,IAAI,cAAc,EAAE,CAAC;gBACrG,OAAO,cAAc,CAAC;YACxB,CAAC;YACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC;QACF,IAAI,QAAmC,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,GAAkB,EAAE;YAClC,IAAI,QAAQ;gBAAE,OAAO,QAAQ,CAAC;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,oBAAoB,EAAE,CAAC;YACvB,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,aAAa,CAAC,MAAM,CAAC,CAAC;YACpD,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC3C,KAAK,MAAM,YAAY,IAAI,aAAa;gBAAE,YAAY,CAAC,OAAO,EAAE,CAAC;YACjE,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACrG,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,MAAM,CAAC,aAAa,GAAG;YACrB,iBAAiB,EAAE,KAAK,EAAE,GAAG,IAAuD,EAAE,EAAE;gBACtF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;gBACvH,IAAI,CAAC;oBACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EACjF,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EACzE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBAAC,MAAM,KAAK,CAAC;gBAAC,CAAC;YACnD,CAAC;SACF,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,OAAO,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QACpE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE;YACpD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,SAAS,CAAC;YAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,IAAI,SAAS,EAAE,CAAC;gBACd,WAAW,GAAG,IAAI,CAAC;gBAAC,UAAU,GAAG,CAAC,CAAC;gBAAC,SAAS,GAAG,CAAC,CAAC;gBAAC,WAAW,GAAG,KAAK,CAAC;gBACvE,oBAAoB,EAAE,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,CAAC,MAAM,KAAK,gBAAgB,CAAC,UAAU;oBACxC,CAAC,CAAC,CAAC,cAAc,KAAK,gBAAgB,CAAC,SAAS,IAAI,CAAC,CAAC,cAAc,KAAK,gBAAgB,CAAC,YAAY,CAAC,EAAE,CAAC;oBAC5G,SAAS,GAAG,CAAC,CAAC;oBAAC,WAAW,GAAG,KAAK,CAAC;oBACnC,oBAAoB,EAAE,CAAC;gBACzB,CAAC;gBACD,IAAI,WAAW,IAAI,CAAC,UAAU;oBAAE,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACjE,CAAC;YACD,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC,CAAC;QACJ,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;QACrF,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3F,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE;YACrD,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,gBAAgB,GAAG,CAAC,WAAW,IAAI,SAAS,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC;YACzE,IAAI,gBAAgB;gBAAE,WAAW,GAAG,IAAI,CAAC;YACzC,yFAAyF;YACzF,CAAC,CAAC,KAAK,GAAG,CAAC,gBAAgB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC;gBACtE,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC;YAC/F,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC,CAAC;QACJ,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE;YACxD,oBAAoB,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,YAAY,CAAC;YAC3B,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;YACtF,CAAC,CAAC,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE;gBAC/E,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3C,IAAI,EAAE,SAAS,GAAG,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1E,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;gBACd,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3C,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gBACf,IAAI,CAAC,OAAO,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;gBACvE,cAAc,GAAG,SAAS,CAAC;gBAC3B,MAAM,SAAS,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,CAAC;QACJ,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE;YAC7C,CAAC,CAAC,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC3E,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,0BAA0B,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK;aAC3F,EAAE,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CACnD,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzF,IAAI,QAAQ,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO;gBACL,IAAI,SAAS,KAAK,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,KAAK,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC/F,IAAI,EAAE,KAAK,EAAC,UAAU,EAAC,EAAE;oBACvB,IAAI,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;oBACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAClE,MAAM,CAAC,sBAAsB,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,EAAE,IAAI,EACxE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;oBAC/D,IAAI,QAAQ,IAAI,UAAU,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;wBACvD,aAAa,CAAC,MAAM,CAAC,CAAC;wBACtB,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;oBAC7B,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;oBAChD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;wBACxB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBACvB,4EAA4E;wBAC5E,IAAI,MAAM,YAAY,YAAY;4BAAE,MAAM,CAAC,OAAO,EAAE,CAAC;oBACvD,CAAC,CAAC,CAAC;oBACH,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,OAAO;aACR,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACxG,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;YAChG,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF"}