@qodeca/xezar 0.10.1

package/dist/server-install/platforms/macosx-ngrok.js

@@ -0,0 +1,348 @@
+import { chmodSync, existsSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { CANCEL, PreflightError } from '../types.js';
+import { brewInstallTool, brewRemoveHint, depCheckStep, HOSTNAME_RE, owned, shared, StepAborted, StepCancelled, verifyCommand } from '../steps.js';
+/**
+ * The `macosx-ngrok` strategy: the app runs locally on a Mac and ngrok is the
+ * public front, in place of nginx+certbot. ngrok's built-in `--basic-auth` is
+ * the identity gate (the htpasswd equivalent), and a launchd agent is the
+ * autostart (the systemd equivalent). Proves the engine seam with a genuinely
+ * different platform — same engine, different steps.
+ */
+const PLIST_LABEL = 'ai.xezar.ngrok';
+const plistPath = () => join(homedir(), 'Library', 'LaunchAgents', `${PLIST_LABEL}.plist`);
+/**
+ * `launchctl bootstrap` + proof the agent actually loaded. A discarded
+ * bootstrap exit code (malformed plist, spawn failure) used to record the
+ * step `done` — install reported complete with nothing running.
+ */
+async function bootstrapVerified(ctx, uid, label, path, what) {
+    const code = await ctx.runner.interactive('launchctl', ['bootstrap', `gui/${uid}`, path]);
+    const loaded = (await ctx.runner.capture('launchctl', ['print', `gui/${uid}/${label}`])).code === 0;
+    if (code !== 0 || !loaded) {
+        throw new StepAborted(`launchctl could not load ${what} (bootstrap exit ${code}) — inspect it with: launchctl print gui/${uid}/${label}`);
+    }
+}
+/** Escape a value for inclusion in plist XML text. */
+function escapeXml(s) {
+    return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+/** launchd agent that keeps an authenticated ngrok tunnel to the local cockpit up. */
+export function launchdPlist(port, basicAuth, domain, ngrokBin = '/opt/homebrew/bin/ngrok') {
+    const args = ['http', String(port), '--basic-auth', basicAuth];
+    if (domain)
+        args.push('--domain', domain);
+    // Escape every arg — a password/domain with `&`, `<`, `>` would otherwise
+    // produce invalid plist XML and launchctl would silently fail to load it.
+    const argXml = [ngrokBin, ...args]
+        .map((a) => `      <string>${escapeXml(a)}</string>`)
+        .join('\n');
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!-- Managed by xezar server-install — do not edit by hand. -->
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>${PLIST_LABEL}</string>
+    <key>ProgramArguments</key>
+    <array>
+${argXml}
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+  </dict>
+</plist>
+`;
+}
+const ngrokStep = {
+    id: 'ngrok',
+    title: 'ngrok tunnel (authtoken + domain + basic-auth)',
+    async check(ctx) {
+        if (ctx.dryRun)
+            return false;
+        return verifyCommand(ctx, 'test', ['-f', plistPath()]);
+    },
+    async run(ctx) {
+        // 1) ngrok present?
+        const present = await verifyCommand(ctx, 'ngrok', ['version']);
+        if (!present) {
+            if (ctx.dryRun)
+                ctx.ui.info('DRY RUN — would run: brew install ngrok/ngrok/ngrok');
+            else
+                await ctx.runner.interactive('brew', ['install', 'ngrok/ngrok/ngrok']);
+        }
+        // 2) authtoken (a secret — never stored in server.json; it lives in ngrok's own config)
+        const token = await ctx.ui.password({
+            message: 'Paste your ngrok authtoken (dashboard.ngrok.com → Your Authtoken)',
+            validate: (v) => (v.trim() ? undefined : 'authtoken is required'),
+        });
+        if (token === CANCEL)
+            throw new StepCancelled();
+        // The token expands INSIDE the child shell: argv carries only the literal
+        // string `"$NGROK_AUTHTOKEN"`, so `ps` never sees the secret. It lands in
+        // ngrok's own config (~/Library/Application Support/ngrok/ngrok.yml, 0600
+        // by ngrok itself), never in server.json.
+        if (!ctx.dryRun) {
+            const code = await ctx.runner.interactive('bash', ['-c', 'ngrok config add-authtoken "$NGROK_AUTHTOKEN"'], {
+                env: { NGROK_AUTHTOKEN: String(token) },
+            });
+            if (code !== 0)
+                throw new StepAborted('ngrok rejected the authtoken (`ngrok config add-authtoken` failed) — check the token and re-run');
+        }
+        // 3) reserved domain (optional → ephemeral URL)
+        const domainInput = await ctx.ui.text({
+            message: 'Reserved ngrok domain (leave blank for an ephemeral URL that changes on restart)',
+            placeholder: 'xezar.ngrok.app',
+            // Bare hostname only — `https://…` here used to yield `--domain https://…`
+            // in the plist and a `https://https://…` publicUrl.
+            validate: (v) => (!v.trim() || HOSTNAME_RE.test(v.trim()) ? undefined : 'enter a bare hostname (no scheme), e.g. xezar.ngrok.app'),
+        });
+        if (domainInput === CANCEL)
+            throw new StepCancelled();
+        // Guard against `String(undefined)` → `"undefined"` — @clack/prompts can
+        // return undefined when the user accepts without typing over the placeholder.
+        const domain = typeof domainInput === 'string' && domainInput.trim() ? domainInput.trim() : undefined;
+        // 4) basic-auth identity
+        const user = await ctx.ui.text({
+            message: 'Basic-auth username for the tunnel',
+            placeholder: 'ops',
+            validate: (v) => (v.trim() ? undefined : 'username is required'),
+        });
+        if (user === CANCEL)
+            throw new StepCancelled();
+        const password = await ctx.ui.password({
+            message: `Basic-auth password for "${user}"`,
+            validate: (v) => (v.length >= 6 ? undefined : 'use at least 6 characters'),
+        });
+        if (password === CANCEL)
+            throw new StepCancelled();
+        if (!ctx.dryRun && String(password).length < 6) {
+            throw new StepAborted('a basic-auth password (≥6 chars) is required — run server-install without --yes to set one');
+        }
+        const basicAuth = `${String(user)}:${String(password)}`;
+        // 5) launchd agent (the plist embeds the basic-auth creds, like htpasswd on Linux)
+        const path = plistPath();
+        if (ctx.dryRun) {
+            ctx.ui.info(`DRY RUN — would write ${path} and launchctl bootstrap it.`);
+        }
+        else {
+            // Resolve the real ngrok binary path so the plist works on both Apple
+            // Silicon (/opt/homebrew/bin) and Intel (/usr/local/bin) Macs.
+            const ngrokBin = (await ctx.runner.capture('bash', ['-lc', 'command -v ngrok'])).stdout.trim() || '/opt/homebrew/bin/ngrok';
+            mkdirSync(join(homedir(), 'Library', 'LaunchAgents'), { recursive: true });
+            // 0600: unlike the Linux htpasswd (a hash, 0640 root:www-data), this file
+            // embeds the PLAINTEXT basic-auth credentials. `mode` only applies on
+            // create, so chmod too for re-installs over an existing 0644 plist.
+            writeFileSync(path, launchdPlist(ctx.state.primaryPort, basicAuth, domain, ngrokBin), { encoding: 'utf8', mode: 0o600 });
+            chmodSync(path, 0o600);
+            // Use the modern launchctl API — the legacy `launchctl load` returns
+            // error 5 (EIO) on recent macOS versions.
+            const uid = process.getuid ? process.getuid() : 0;
+            // Bootout any prior instance so re-installs don't collide.
+            await ctx.runner.capture('launchctl', ['bootout', `gui/${uid}/${PLIST_LABEL}`]);
+            await bootstrapVerified(ctx, uid, PLIST_LABEL, path, 'the ngrok tunnel agent');
+        }
+        if (domain) {
+            ctx.state.publicUrl = `https://${domain}`;
+            ctx.state.ephemeral = false;
+        }
+        else {
+            ctx.state.ephemeral = true;
+            ctx.ui.note('No reserved domain — the tunnel URL is ephemeral and changes each restart. Find it at http://localhost:4040.', 'ngrok');
+        }
+        return {
+            artifacts: [
+                shared('ngrok-config', { name: 'authtoken', removeHint: 'ngrok config add-authtoken "" (or edit ~/Library/Application Support/ngrok/ngrok.yml)' }),
+                owned('launchd', { name: PLIST_LABEL, path }),
+            ],
+        };
+    },
+    async undo(ctx, created) {
+        // Work from the static label/path, not just the recorded artifact — a step
+        // satisfied via check() records `created: null`, and the agent (whose plist
+        // holds the basic-auth credentials) must still be removed.
+        const path = (created?.artifacts ?? []).find((a) => a.type === 'launchd')?.path ?? plistPath();
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — would launchctl bootout and remove the ngrok agent.');
+        }
+        else {
+            const uid = process.getuid ? process.getuid() : 0;
+            await ctx.runner.capture('launchctl', ['bootout', `gui/${uid}/${PLIST_LABEL}`]);
+            rmSync(path, { force: true });
+        }
+        const cfg = (created?.artifacts ?? []).find((a) => a.type === 'ngrok-config');
+        if (cfg) {
+            ctx.ui.note(`The ngrok authtoken was left in ngrok's own config — remove it yourself if you want it gone:\n${cfg.removeHint ?? ''}`, 'ngrok');
+        }
+    },
+};
+/* ── autostart: run xezar itself as a launchd agent ─────────────────── */
+const XEZAR_PLIST_LABEL = 'ai.xezar.cockpit';
+const OFFICIAL_CLI_PKG = '@qodeca/xezar';
+/** The commands that package puts on PATH — a package NAME is not a command name. */
+const OFFICIAL_CLI_BINS = ['xezar', 'xez'];
+const xezarPlistPath = () => join(homedir(), 'Library', 'LaunchAgents', `${XEZAR_PLIST_LABEL}.plist`);
+/** Resolve the argv array for the xezar launchd agent, mirroring how the CLI was launched. */
+async function resolveXezarArgv(ctx) {
+    const node = process.execPath;
+    const pkgRoot = resolve(fileURLToPath(new URL('../../..', import.meta.url)));
+    const entry = join(pkgRoot, 'dist', 'index.js');
+    const npxPath = join(dirname(node), 'npx');
+    if (/[/\\]_npx[/\\]/.test(pkgRoot))
+        return [npxPath, '--yes', OFFICIAL_CLI_PKG];
+    if (ctx.dryRun || existsSync(entry))
+        return [node, entry];
+    const lookup = OFFICIAL_CLI_BINS.map((bin) => `command -v ${bin}`).join(' || ');
+    const out = (await ctx.runner.capture('bash', ['-lc', lookup])).stdout.trim();
+    const globalBin = out.split('\n').map((s) => s.trim()).filter(Boolean).pop();
+    if (globalBin)
+        return [node, globalBin];
+    // No runnable xezar → installing a KeepAlive agent would make launchd
+    // respawn-throttle a permanently failing job across reboots. Fail the step.
+    throw new StepAborted(`could not locate a runnable xezar (${entry} missing, no global ${OFFICIAL_CLI_BINS.join(' / ')}) — ` +
+        `install it (npm i -g ${OFFICIAL_CLI_PKG}) or build the checkout, then re-run with --reconfigure autostart`);
+}
+/** launchd agent that keeps the xezar cockpit running on the given port. */
+export function xezarLaunchdPlist(repoRoot, port, argv) {
+    // Give the agent the operator's PATH so xezar can spawn claude/gh/codex.
+    const pathDirs = [dirname(process.execPath), ...(process.env.PATH ?? '').split(':'), '/usr/local/bin', '/usr/bin', '/bin']
+        .filter((d, i, a) => d && d !== '.' && a.indexOf(d) === i);
+    const fullArgv = [...argv, 'serve', '--no-open', '--port', String(port)];
+    const argXml = fullArgv.map((a) => `      <string>${escapeXml(a)}</string>`).join('\n');
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!-- Managed by xezar server-install — do not edit by hand. -->
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>${XEZAR_PLIST_LABEL}</string>
+    <key>ProgramArguments</key>
+    <array>
+${argXml}
+    </array>
+    <key>WorkingDirectory</key>
+    <string>${escapeXml(repoRoot)}</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+      <key>XEZ_REMOTE</key>
+      <string>1</string>
+      <key>PATH</key>
+      <string>${escapeXml(pathDirs.join(':'))}</string>
+    </dict>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+  </dict>
+</plist>
+`;
+}
+const autostartStep = {
+    id: 'autostart',
+    title: 'Run xezar as a service (launchd — starts now + on boot)',
+    async check(ctx) {
+        if (ctx.dryRun)
+            return false;
+        return verifyCommand(ctx, 'test', ['-f', xezarPlistPath()]);
+    },
+    async run(ctx) {
+        const argv = await resolveXezarArgv(ctx);
+        const path = xezarPlistPath();
+        if (ctx.dryRun) {
+            ctx.ui.info(`DRY RUN — would write ${path} and launchctl bootstrap it.`);
+        }
+        else {
+            mkdirSync(join(homedir(), 'Library', 'LaunchAgents'), { recursive: true });
+            writeFileSync(path, xezarLaunchdPlist(ctx.repoRoot, ctx.state.primaryPort, argv), { encoding: 'utf8', mode: 0o600 });
+            chmodSync(path, 0o600);
+            const uid = process.getuid ? process.getuid() : 0;
+            await ctx.runner.capture('launchctl', ['bootout', `gui/${uid}/${XEZAR_PLIST_LABEL}`]);
+            await bootstrapVerified(ctx, uid, XEZAR_PLIST_LABEL, path, 'the xezar cockpit agent');
+        }
+        return { artifacts: [owned('launchd', { name: XEZAR_PLIST_LABEL, path })] };
+    },
+    async undo(ctx, created) {
+        // Static label/path fallback — see the ngrok step's undo.
+        const path = (created?.artifacts ?? []).find((a) => a.type === 'launchd')?.path ?? xezarPlistPath();
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — would launchctl bootout and remove the xezar agent.');
+        }
+        else {
+            const uid = process.getuid ? process.getuid() : 0;
+            await ctx.runner.capture('launchctl', ['bootout', `gui/${uid}/${XEZAR_PLIST_LABEL}`]);
+            rmSync(path, { force: true });
+        }
+    },
+};
+const identityStep = {
+    id: 'identity',
+    title: 'Identity check (ngrok basic-auth active)',
+    async check() {
+        return false;
+    },
+    async run(ctx) {
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — would confirm the ngrok tunnel is up and basic-auth is enforced.');
+            return { artifacts: [] };
+        }
+        // ngrok needs a moment after launchctl bootstrap to bind to :4040.
+        // Retry a few times with a short delay before giving up.
+        let up = false;
+        for (let attempt = 0; attempt < 5 && !up; attempt++) {
+            if (attempt > 0)
+                await new Promise((r) => setTimeout(r, 1500));
+            up = await verifyCommand(ctx, 'curl', ['-s', 'http://localhost:4040/api/tunnels'], (r) => r.stdout.includes('public_url'));
+        }
+        if (up)
+            ctx.ui.success('ngrok tunnel is up (basic-auth enforced at the ngrok edge).');
+        else
+            ctx.ui.warn('Could not reach the ngrok local API (localhost:4040) — check the tunnel started.');
+        return { artifacts: [] };
+    },
+    async undo() {
+        // nothing created
+    },
+};
+export const macosxNgrok = {
+    id: 'macosx-ngrok',
+    label: 'macOS + ngrok',
+    async preflight(ctx) {
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — skipping OS preflight.');
+            return;
+        }
+        if (!(await ctx.runner.capture('uname', ['-s'])).stdout.includes('Darwin')) {
+            throw new PreflightError('macosx-ngrok requires macOS. On a Linux VPS use --platform ubuntu-vps.');
+        }
+    },
+    steps() {
+        return [
+            depCheckStep({ installTool: brewInstallTool, removeHint: brewRemoveHint }),
+            autostartStep,
+            ngrokStep,
+            identityStep,
+        ];
+    },
+    async redeploy(ctx) {
+        // Restart both the xezar cockpit and the ngrok tunnel, then re-verify.
+        if (ctx.dryRun) {
+            ctx.ui.info('DRY RUN — would restart the xezar and ngrok launchd agents and re-verify.');
+            return;
+        }
+        const uid = process.getuid ? process.getuid() : 0;
+        ctx.ui.info('Redeploying — restarting the xezar cockpit.');
+        const xezarCode = await ctx.runner.interactive('launchctl', ['kickstart', '-k', `gui/${uid}/${XEZAR_PLIST_LABEL}`]);
+        if (xezarCode !== 0)
+            ctx.ui.warn(`launchctl kickstart returned non-zero — check \`launchctl print gui/${uid}/${XEZAR_PLIST_LABEL}\`.`);
+        ctx.ui.info('Redeploying — restarting the ngrok tunnel.');
+        const code = await ctx.runner.interactive('launchctl', ['kickstart', '-k', `gui/${uid}/${PLIST_LABEL}`]);
+        if (code !== 0)
+            ctx.ui.warn(`launchctl kickstart returned non-zero — check \`launchctl print gui/${uid}/${PLIST_LABEL}\`.`);
+        await identityStep.run(ctx);
+    },
+};
+//# sourceMappingURL=macosx-ngrok.js.map

package/dist/server-install/platforms/macosx-ngrok.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macosx-ngrok.js","sourceRoot":"","sources":["../../../src/server-install/platforms/macosx-ngrok.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAmF,MAAM,aAAa,CAAC;AACtI,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEnJ;;;;;;GAMG;AAEH,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,WAAW,QAAQ,CAAC,CAAC;AAEnG;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,GAAmB,EAAE,GAAW,EAAE,KAAa,EAAE,IAAY,EAAE,IAAY;IAC1G,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IACpG,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,WAAW,CACnB,4BAA4B,IAAI,oBAAoB,IAAI,4CAA4C,GAAG,IAAI,KAAK,EAAE,CACnH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC9E,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,SAAiB,EAAE,MAAe,EAAE,QAAQ,GAAG,yBAAyB;IACjH,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC1C,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC;SAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;SACpD,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;;;;;;cAMK,WAAW;;;EAGvB,MAAM;;;;;;;;CAQP,CAAC;AACF,CAAC;AAED,MAAM,SAAS,GAAgB;IAC7B,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,gDAAgD;IACvD,KAAK,CAAC,KAAK,CAAC,GAAG;QACb,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,oBAAoB;QACpB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,GAAG,CAAC,MAAM;gBAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;;gBAC9E,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,wFAAwF;QACxF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;YAClC,OAAO,EAAE,mEAAmE;YAC5E,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC;SAClE,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QAChD,0EAA0E;QAC1E,0EAA0E;QAC1E,0EAA0E;QAC1E,0CAA0C;QAC1C,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,+CAA+C,CAAC,EAAE;gBACzG,GAAG,EAAE,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;aACxC,CAAC,CAAC;YACH,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,iGAAiG,CAAC,CAAC;QAC3I,CAAC;QAED,gDAAgD;QAChD,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YACpC,OAAO,EAAE,kFAAkF;YAC3F,WAAW,EAAE,iBAAiB;YAC9B,2EAA2E;YAC3E,oDAAoD;YACpD,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yDAAyD,CAAC;SACnI,CAAC,CAAC;QACH,IAAI,WAAW,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QACtD,yEAAyE;QACzE,8EAA8E;QAC9E,MAAM,MAAM,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEtG,yBAAyB;QACzB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;YAC7B,OAAO,EAAE,oCAAoC;YAC7C,WAAW,EAAE,KAAK;YAClB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC;SACjE,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,4BAA4B,IAAI,GAAG;YAC5C,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,2BAA2B,CAAC;SAC3E,CAAC,CAAC;QACH,IAAI,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,aAAa,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,WAAW,CAAC,4FAA4F,CAAC,CAAC;QACtH,CAAC;QACD,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAExD,mFAAmF;QACnF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,IAAI,8BAA8B,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,yBAAyB,CAAC;YAE5H,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,0EAA0E;YAC1E,sEAAsE;YACtE,oEAAoE;YACpE,aAAa,CAAC,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAEvB,qEAAqE;YACrE,0CAA0C;YAC1C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,2DAA2D;YAC3D,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,wBAAwB,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,WAAW,MAAM,EAAE,CAAC;YAC1C,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3B,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,8GAA8G,EAAE,OAAO,CAAC,CAAC;QACvI,CAAC;QAED,OAAO;YACL,SAAS,EAAE;gBACT,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,uFAAuF,EAAE,CAAC;gBAClJ,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;aAC9C;SACF,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;QACrB,2EAA2E;QAC3E,4EAA4E;QAC5E,2DAA2D;QAC3D,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,CAAC;QAC/F,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;YAChF,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAC9E,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,iGAAiG,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,EACvH,OAAO,CACR,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC;AAEF,2EAA2E;AAE3E,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,eAAe,CAAC;AACzC,qFAAqF;AACrF,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AAC3C,MAAM,cAAc,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,iBAAiB,QAAQ,CAAC,CAAC;AAE9G,8FAA8F;AAC9F,KAAK,UAAU,gBAAgB,CAAC,GAAmB;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAE3C,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAChF,IAAI,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9E,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC;IAC7E,IAAI,SAAS;QAAE,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAExC,sEAAsE;IACtE,4EAA4E;IAC5E,MAAM,IAAI,WAAW,CACnB,sCAAsC,KAAK,uBAAuB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;QACnG,wBAAwB,gBAAgB,mEAAmE,CAC9G,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,IAAc;IAC9E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC;SACvH,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO;;;;;;cAMK,iBAAiB;;;EAG7B,MAAM;;;cAGM,SAAS,CAAC,QAAQ,CAAC;;;;;;gBAMjB,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;;;;;;;;CAQ5C,CAAC;AACF,CAAC;AAED,MAAM,aAAa,GAAgB;IACjC,EAAE,EAAE,WAAW;IACf,KAAK,EAAE,yDAAyD;IAChE,KAAK,CAAC,KAAK,CAAC,GAAG;QACb,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC7B,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,yBAAyB,IAAI,8BAA8B,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,yBAAyB,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO;QACrB,0DAA0D;QAC1D,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,IAAI,IAAI,cAAc,EAAE,CAAC;QACpG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF,CAAC;AAEF,MAAM,YAAY,GAAgB;IAChC,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,0CAA0C;IACjD,KAAK,CAAC,KAAK;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,GAAG;QACX,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;YAC1F,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;QACD,mEAAmE;QACnE,yDAAyD;QACzD,IAAI,EAAE,GAAG,KAAK,CAAC;QACf,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,OAAO,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAC/D,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,mCAAmC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;QAC7H,CAAC;QACD,IAAI,EAAE;YAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC;;YACjF,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACrG,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,IAAI;QACR,kBAAkB;IACpB,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAqB;IAC3C,EAAE,EAAE,cAAc;IAClB,KAAK,EAAE,eAAe;IACtB,KAAK,CAAC,SAAS,CAAC,GAAmB;QACjC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,cAAc,CAAC,wEAAwE,CAAC,CAAC;QACrG,CAAC;IACH,CAAC;IACD,KAAK;QACH,OAAO;YACL,YAAY,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;YAC1E,aAAa;YACb,SAAS;YACT,YAAY;SACb,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,GAAmB;QAChC,uEAAuE;QACvE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;YACzF,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAAC;QACpH,IAAI,SAAS,KAAK,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,uEAAuE,GAAG,IAAI,iBAAiB,KAAK,CAAC,CAAC;QACvI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC;QACzG,IAAI,IAAI,KAAK,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,uEAAuE,GAAG,IAAI,WAAW,KAAK,CAAC,CAAC;QAC5H,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;CACF,CAAC"}

package/dist/server-install/platforms/ubuntu-vps.d.ts

@@ -0,0 +1,63 @@
+import { type InstallContext, type PlatformStrategy } from '../types.ts';
+/**
+ * Name of the process listening on `port`, or null when nothing is. Best effort
+ * (`ss` output varies, and without root the process name may be hidden) — used
+ * only to make a port collision explainable, never to gate the install.
+ */
+export declare function portListener(ctx: InstallContext, port: number): Promise<string | null>;
+/** The interface the cockpit listens on — loopback unless an external-proxy
+ *  install bound it somewhere the proxy can reach (e.g. the docker bridge). */
+export declare function upstreamHost(ctx: InstallContext): string;
+/**
+ * The nginx server block: auth_basic identity + SSE-safe proxy to loopback.
+ * `serverName` defaults to the catch-all `_`; the SSL step rewrites it to the
+ * real domain so the `certbot --nginx` plugin can find this vhost to edit.
+ */
+export declare function nginxVhost(port: number, serverName?: string, htpasswd?: string): string;
+/**
+ * systemd unit that runs xezar loopback-bound with XEZ_REMOTE=1.
+ *
+ * `execStart` must be an ABSOLUTE command — systemd resolves the ExecStart
+ * executable against its OWN compiled-in PATH (/usr/local/bin:/usr/bin:…), NOT
+ * the unit's `Environment=PATH`, so a bare `xezar` gives status=203/EXEC
+ * ("Unable to locate executable"). `resolveExecStart` therefore returns an
+ * absolute `"<node> <entry.js>"`. We still set `Environment=PATH` (with the
+ * installer's node dir) for any child process the app spawns.
+ */
+export declare function systemdUnit(repoRoot: string, port: number, scope: 'user' | 'system', execStart: string, bindHost?: string): string;
+/**
+ * Decide the absolute ExecStart command for the service, mirroring how the
+ * installer itself was launched so the box keeps running the same xezar:
+ *
+ *  - Launched via `npx <alias>` (the CLI package lives in npm's ephemeral
+ *    `_npx` cache, which gets cleaned): the service can't point there, so it
+ *    reinstalls-and-runs the same way — `<abs npx> --yes @qodeca/xezar` (bare `npx`
+ *    would 203/EXEC, so npx is made absolute).
+ *  - A stable install (a checkout, or a global `xezar`/`xez`): run the
+ *    CLI's own built entry `<node> <pkg>/dist/index.js`, or a resolved global
+ *    bin. Absolute node + absolute script → systemd never resolves off PATH.
+ */
+export declare function serviceExecStart(opts: {
+    node: string;
+    pkgRoot: string;
+    entry: string;
+    entryExists: boolean;
+    npxPath: string;
+    globalBin?: string;
+}): string;
+/** True when a systemd `ExecStart` string launches xezar via npx (the unpinned
+ *  `npx --yes @qodeca/xezar` form) rather than a checkout (`<node> …/dist/index.js`)
+ *  or a global bin. */
+export declare function isNpxExecStart(execStart: string): boolean;
+/**
+ * The npx trap (#696): `npx --yes @qodeca/xezar` caches the resolved package under
+ * `~/.npm/_npx/<hash>` and reuses it forever — a service restart re-execs the
+ * SAME cached build, so `server-deploy` would never actually update. Before
+ * restarting an npx-based unit we delete the cache entries that contain
+ * `@qodeca/xezar`, so the next launch re-resolves `latest`. Surgical: other npx
+ * packages' caches are left untouched. A checkout / global-bin unit has no
+ * npx cache to clear and is skipped (its restart picks up the new build/global
+ * directly).
+ */
+export declare function refreshNpxCacheForRedeploy(ctx: InstallContext, execStart: string): void;
+export declare const ubuntuVps: PlatformStrategy;