@seedprotocol/gateway-hyper 0.7.0 → 0.7.2-next.593.gd5bd4ea

package/README.md

@@ -21,10 +21,10 @@ Requires Node 20+ and Holepunch native addons. Prefer Node over Bun.
 
 ```bash
 # Operator
-seed gateway tunnel serve --upstream http://127.0.0.1:80 --key-file ./.seed/gateway-tunnel/operator.key.json
+seed-gateway serve --upstream http://127.0.0.1:80 --key-file ./.seed/gateway-tunnel/operator.key.json
 
 # Client sidecar (Path A)
-seed gateway tunnel connect <z32-key> --port 1984
+seed-gateway connect <z32-key> --port 1984
 ```
 
 ## Library

package/dist/bin.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+import { i as e, s as t } from "./src-CnXam5V8.js";
+import n from "node:path";
+import r from "node:process";
+import { parseArgs as i } from "node:util";
+//#region src/bin.ts
+var a = "Usage:\n  seed-gateway serve [--upstream http://127.0.0.1:80] [--key-file <path>]\n      Operator: accept Hyper connections and proxy them to a local upstream (Traefik).\n      Default --key-file: ./.seed/gateway-tunnel/operator.key.json (created on first run).\n\n  seed-gateway connect <key> [--host 127.0.0.1] [--port 1984]\n      Client: dial an operator key and expose a localhost HTTP sidecar.";
+function o(e) {
+	console.error(`[Seed Protocol] ${e}`), console.error(a), r.exit(1);
+}
+function s() {
+	return new Promise((e) => {
+		let t = () => {
+			r.off("SIGINT", t), r.off("SIGTERM", t), e();
+		};
+		r.on("SIGINT", t), r.on("SIGTERM", t);
+	});
+}
+async function c(r) {
+	let [c, ...l] = r;
+	if (!c || c === "--help" || c === "-h" || c === "help") {
+		console.log(a);
+		return;
+	}
+	let { values: u, positionals: d } = i({
+		args: l,
+		allowPositionals: !0,
+		options: {
+			upstream: {
+				type: "string",
+				default: "http://127.0.0.1:80"
+			},
+			"key-file": {
+				type: "string",
+				default: n.join(".seed", "gateway-tunnel", "operator.key.json")
+			},
+			host: {
+				type: "string",
+				default: "127.0.0.1"
+			},
+			port: {
+				type: "string",
+				default: "1984"
+			}
+		}
+	});
+	if (c === "serve") {
+		let e = u.upstream.trim(), r = n.resolve(u["key-file"]);
+		console.log(`[Seed Protocol] Gateway tunnel upstream: ${e}`), console.log(`[Seed Protocol] Operator key file: ${r}`);
+		let i = await t({
+			upstream: e,
+			keyFile: r
+		});
+		console.log(`[Seed Protocol] Operator key (z32): ${i.key}`), console.log("[Seed Protocol] Share this key with SDK users (gatewayHyperKey)."), console.log("[Seed Protocol] Press Ctrl+C to stop."), await s(), await i.close(), console.log("[Seed Protocol] Gateway tunnel stopped.");
+	} else if (c === "connect") {
+		let t = d[0];
+		t || o("seed-gateway connect requires an operator public key (z32 or hex)"), console.log(`[Seed Protocol] Connecting to operator ${t}`);
+		let n = await e({
+			key: t,
+			host: u.host,
+			port: parseInt(u.port, 10) || 1984
+		});
+		console.log(`[Seed Protocol] Local sidecar: ${n.baseUrl}`), console.log("[Seed Protocol] Point SDK transport=hyper or hybrid at this URL (default sidecar port 1984)."), console.log("[Seed Protocol] Press Ctrl+C to stop."), await s(), await n.close(), console.log("[Seed Protocol] Gateway sidecar stopped.");
+	} else o(`Unknown command: ${c}`);
+}
+c(r.argv.slice(2)).catch((e) => {
+	console.error("[Seed Protocol]", e instanceof Error ? e.message : e), r.exit(1);
+});
+//#endregion
+
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","names":["connectTunnel","serveTunnel","path","process","USAGE","fail","message","waitForSignal","onStop","resolve","main","command","rest","argv","parseArgs","upstream","values","keyFile","session","key","positionals","err"],"sources":["../src/bin.ts"],"sourcesContent":["/**\n * `seed-gateway serve|connect` — HTTP tunnel to Seed gateway + upload API infrastructure over HyperDHT.\n * Run under Node (Holepunch natives may crash under Bun).\n */\nimport path from 'node:path'\nimport process from 'node:process'\nimport { parseArgs } from 'node:util'\nimport { connectTunnel, serveTunnel } from './index'\n\nconst USAGE = `Usage:\n  seed-gateway serve [--upstream http://127.0.0.1:80] [--key-file <path>]\n      Operator: accept Hyper connections and proxy them to a local upstream (Traefik).\n      Default --key-file: ./.seed/gateway-tunnel/operator.key.json (created on first run).\n\n  seed-gateway connect <key> [--host 127.0.0.1] [--port 1984]\n      Client: dial an operator key and expose a localhost HTTP sidecar.`\n\nfunction fail(message: string): never {\n  console.error(`[Seed Protocol] ${message}`)\n  console.error(USAGE)\n  process.exit(1)\n}\n\nfunction waitForSignal(): Promise<void> {\n  return new Promise((resolve) => {\n    const onStop = () => {\n      process.off('SIGINT', onStop)\n      process.off('SIGTERM', onStop)\n      resolve()\n    }\n    process.on('SIGINT', onStop)\n    process.on('SIGTERM', onStop)\n  })\n}\n\nasync function main(argv: string[]): Promise<void> {\n  const [command, ...rest] = argv\n  if (!command || command === '--help' || command === '-h' || command === 'help') {\n    console.log(USAGE)\n    return\n  }\n\n  const { values, positionals } = parseArgs({\n    args: rest,\n    allowPositionals: true,\n    options: {\n      upstream: { type: 'string', default: 'http://127.0.0.1:80' },\n      'key-file': {\n        type: 'string',\n        default: path.join('.seed', 'gateway-tunnel', 'operator.key.json'),\n      },\n      host: { type: 'string', default: '127.0.0.1' },\n      port: { type: 'string', default: '1984' },\n    },\n  })\n\n  if (command === 'serve') {\n    const upstream = values.upstream.trim()\n    const keyFile = path.resolve(values['key-file'])\n    console.log(`[Seed Protocol] Gateway tunnel upstream: ${upstream}`)\n    console.log(`[Seed Protocol] Operator key file: ${keyFile}`)\n\n    const session = await serveTunnel({ upstream, keyFile })\n    console.log(`[Seed Protocol] Operator key (z32): ${session.key}`)\n    console.log('[Seed Protocol] Share this key with SDK users (gatewayHyperKey).')\n    console.log('[Seed Protocol] Press Ctrl+C to stop.')\n    await waitForSignal()\n    await session.close()\n    console.log('[Seed Protocol] Gateway tunnel stopped.')\n    return\n  }\n\n  if (command === 'connect') {\n    const key = positionals[0]\n    if (!key) fail('seed-gateway connect requires an operator public key (z32 or hex)')\n\n    console.log(`[Seed Protocol] Connecting to operator ${key}`)\n    const session = await connectTunnel({\n      key,\n      host: values.host,\n      port: parseInt(values.port, 10) || 1984,\n    })\n    console.log(`[Seed Protocol] Local sidecar: ${session.baseUrl}`)\n    console.log(\n      '[Seed Protocol] Point SDK transport=hyper or hybrid at this URL (default sidecar port 1984).',\n    )\n    console.log('[Seed Protocol] Press Ctrl+C to stop.')\n    await waitForSignal()\n    await session.close()\n    console.log('[Seed Protocol] Gateway sidecar stopped.')\n    return\n  }\n\n  fail(`Unknown command: ${command}`)\n}\n\nmain(process.argv.slice(2)).catch((err) => {\n  console.error('[Seed Protocol]', err instanceof Error ? err.message : err)\n  process.exit(1)\n})\n"],"mappings":";;;;;;AASA,IAAMI,IAAQ;AAQd,SAASC,EAAK,GAAwB;CAGpC,AAFA,QAAQ,MAAM,mBAAmBC,GAAS,GAC1C,QAAQ,MAAMF,CAAK,GACnBD,EAAQ,KAAK,CAAC;AAChB;AAEA,SAASI,IAA+B;CACtC,OAAO,IAAI,SAAS,MAAY;EAC9B,IAAMC,UAAe;GAGnB,AAFAL,EAAQ,IAAI,UAAUK,CAAM,GAC5BL,EAAQ,IAAI,WAAWK,CAAM,GAC7BC,EAAQ;EACV;EAEA,AADAN,EAAQ,GAAG,UAAUK,CAAM,GAC3BL,EAAQ,GAAG,WAAWK,CAAM;CAC9B,CAAC;AACH;AAEA,eAAeE,EAAK,GAA+B;CACjD,IAAM,CAACC,GAAS,GAAGC,KAAQC;CAC3B,IAAI,CAACF,KAAWA,MAAY,YAAYA,MAAY,QAAQA,MAAY,QAAQ;EAC9E,QAAQ,IAAIP,CAAK;EACjB;CACF;CAEA,IAAM,EAAE,WAAQ,mBAAgBU,EAAU;EACxC,MAAMF;EACN,kBAAkB;EAClB,SAAS;GACP,UAAU;IAAE,MAAM;IAAU,SAAS;GAAsB;GAC3D,YAAY;IACV,MAAM;IACN,SAASV,EAAK,KAAK,SAAS,kBAAkB,mBAAmB;GACnE;GACA,MAAM;IAAE,MAAM;IAAU,SAAS;GAAY;GAC7C,MAAM;IAAE,MAAM;IAAU,SAAS;GAAO;EAC1C;CACF,CAAC;CAED,IAAIS,MAAY,SAAS;EACvB,IAAMI,IAAWC,EAAO,SAAS,KAAK,GAChCC,IAAUf,EAAK,QAAQc,EAAO,WAAW;EAE/C,AADA,QAAQ,IAAI,4CAA4CD,GAAU,GAClE,QAAQ,IAAI,sCAAsCE,GAAS;EAE3D,IAAMC,IAAU,MAAMjB,EAAY;GAAE;GAAU;EAAQ,CAAC;EAMvD,AALA,QAAQ,IAAI,uCAAuCiB,EAAQ,KAAK,GAChE,QAAQ,IAAI,kEAAkE,GAC9E,QAAQ,IAAI,uCAAuC,GACnD,MAAMX,EAAc,GACpB,MAAMW,EAAQ,MAAM,GACpB,QAAQ,IAAI,yCAAyC;CAEvD,OAEA,IAAIP,MAAY,WAAW;EACzB,IAAMQ,IAAMC,EAAY;EAGxB,AAFKD,KAAKd,EAAK,mEAAmE,GAElF,QAAQ,IAAI,0CAA0Cc,GAAK;EAC3D,IAAMD,IAAU,MAAMlB,EAAc;GAClC;GACA,MAAMgB,EAAO;GACb,MAAM,SAASA,EAAO,MAAM,EAAE,KAAK;EACrC,CAAC;EAQD,AAPA,QAAQ,IAAI,kCAAkCE,EAAQ,SAAS,GAC/D,QAAQ,IACN,8FACF,GACA,QAAQ,IAAI,uCAAuC,GACnD,MAAMX,EAAc,GACpB,MAAMW,EAAQ,MAAM,GACpB,QAAQ,IAAI,0CAA0C;CAExD,OAEA,EAAK,oBAAoBP,GAAS;AACpC;AAEAD,EAAKP,EAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,MAAQ;CAEzC,AADA,QAAQ,MAAM,mBAAmBkB,aAAe,QAAQA,EAAI,UAAUA,CAAG,GACzElB,EAAQ,KAAK,CAAC;AAChB,CAAC"}

package/dist/index.js

@@ -1,424 +1 @@
-import e from "node:fs";
-import t from "node:path";
-import n from "hyperdht";
-import r from "hypercore-id-encoding";
-import i from "node:http";
-import { URL as a } from "node:url";
-//#region src/keys.ts
-function o(e) {
-	return e.toString("hex");
-}
-function s(e) {
-	return Buffer.from(e, "hex");
-}
-function c(e) {
-	return r.encode(e);
-}
-function l(e) {
-	let t = e.trim();
-	if (!t) throw Error("Gateway Hyper key is empty");
-	try {
-		return Buffer.from(r.decode(t));
-	} catch {
-		if (/^[a-fA-F0-9]{64}$/.test(t)) return s(t);
-		throw Error(`Invalid Gateway Hyper key (expected z32 or 64-char hex): ${t.slice(0, 12)}…`);
-	}
-}
-function u(r) {
-	let i = t.resolve(r);
-	if (e.existsSync(i)) {
-		let t = e.readFileSync(i, "utf8"), n = JSON.parse(t);
-		if (!n.publicKey || !n.secretKey) throw Error(`Invalid key file at ${i}: missing publicKey or secretKey`);
-		let r = s(n.publicKey);
-		return {
-			publicKey: r,
-			secretKey: s(n.secretKey),
-			z32: c(r)
-		};
-	}
-	let a = t.dirname(i);
-	e.mkdirSync(a, { recursive: !0 });
-	let l = n.keyPair(), u = {
-		publicKey: o(l.publicKey),
-		secretKey: o(l.secretKey),
-		encoding: "hex"
-	};
-	return e.writeFileSync(i, `${JSON.stringify(u, null, 2)}\n`, { mode: 384 }), {
-		publicKey: l.publicKey,
-		secretKey: l.secretKey,
-		z32: c(l.publicKey)
-	};
-}
-function d() {
-	let e = n.keyPair();
-	return {
-		publicKey: e.publicKey,
-		secretKey: e.secretKey,
-		z32: c(e.publicKey)
-	};
-}
-//#endregion
-//#region src/tunnel/protocol.ts
-var f = 67108864, p = class {
-	stream;
-	buffer = Buffer.alloc(0);
-	waiters = [];
-	ended = !1;
-	onData;
-	onError;
-	onEnd;
-	constructor(e) {
-		this.stream = e, this.onData = (e) => {
-			this.buffer = Buffer.concat([this.buffer, e]), this.drain();
-		}, this.onError = (e) => {
-			let t = this.waiters.splice(0);
-			for (let n of t) n.reject(e);
-		}, this.onEnd = () => {
-			if (this.ended = !0, this.drain(), this.waiters.length > 0) {
-				let e = this.waiters.splice(0);
-				for (let t of e) t.reject(/* @__PURE__ */ Error(`Unexpected end of stream (expected ${t.length} bytes, got ${this.buffer.length})`));
-			}
-		}, e.on("data", this.onData), e.on("error", this.onError), e.on("end", this.onEnd);
-	}
-	readExact(e) {
-		return new Promise((t, n) => {
-			if (e === 0) {
-				t(Buffer.alloc(0));
-				return;
-			}
-			if (this.waiters.push({
-				length: e,
-				resolve: t,
-				reject: n
-			}), this.drain(), this.ended && this.waiters.length > 0) {
-				let e = this.waiters.splice(0);
-				for (let t of e) t.reject(/* @__PURE__ */ Error(`Unexpected end of stream (expected ${t.length} bytes, got ${this.buffer.length})`));
-			}
-		});
-	}
-	drain() {
-		for (; this.waiters.length > 0;) {
-			let e = this.waiters[0];
-			if (!e || this.buffer.length < e.length) break;
-			this.waiters.shift();
-			let t = this.buffer.subarray(0, e.length);
-			this.buffer = this.buffer.subarray(e.length), e.resolve(t);
-		}
-	}
-}, m = /* @__PURE__ */ new WeakMap();
-function h(e) {
-	let t = m.get(e);
-	return t || (t = new p(e), m.set(e, t)), t;
-}
-function g(e, t) {
-	return h(e).readExact(t);
-}
-function _(e, t) {
-	return new Promise((n, r) => {
-		try {
-			if (e.write(t)) {
-				n();
-				return;
-			}
-			let i = () => {
-				e.off("error", a), n();
-			}, a = (t) => {
-				e.off("drain", i), r(t);
-			};
-			e.once("drain", i), e.once("error", a);
-		} catch (e) {
-			r(e instanceof Error ? e : Error(String(e)));
-		}
-	});
-}
-async function v(e, t) {
-	if (t.length > 67108864) throw Error(`Frame too large: ${t.length} bytes (max ${f})`);
-	let n = Buffer.alloc(4);
-	n.writeUInt32BE(t.length, 0), await _(e, Buffer.concat([n, t]));
-}
-async function y(e) {
-	let t = (await g(e, 4)).readUInt32BE(0);
-	if (t === 0) return Buffer.alloc(0);
-	if (t > 67108864) throw Error(`Frame too large: ${t} bytes (max ${f})`);
-	return g(e, t);
-}
-async function b(e, t, n) {
-	await v(e, Buffer.from(JSON.stringify(t), "utf8")), await v(e, n);
-}
-async function x(e) {
-	let t = await y(e), n = JSON.parse(t.toString("utf8"));
-	if (!n.method || !n.path) throw Error("Invalid tunnel request meta: missing method or path");
-	return n.headers = n.headers ?? {}, {
-		meta: n,
-		body: await y(e)
-	};
-}
-async function S(e, t, n) {
-	await v(e, Buffer.from(JSON.stringify(t), "utf8")), await v(e, n);
-}
-async function C(e) {
-	let t = await y(e), n = JSON.parse(t.toString("utf8"));
-	if (typeof n.status != "number") throw Error("Invalid tunnel response meta: missing status");
-	return n.headers = n.headers ?? {}, {
-		meta: n,
-		body: await y(e)
-	};
-}
-function w(e) {
-	let t = {};
-	for (let [n, r] of Object.entries(e)) r != null && (t[n] = Array.isArray(r) ? r.join(", ") : r);
-	return t;
-}
-function T(e) {
-	let t = /* @__PURE__ */ new Set([
-		"connection",
-		"keep-alive",
-		"transfer-encoding",
-		"upgrade"
-	]), n = {};
-	for (let [r, i] of Object.entries(e)) t.has(r.toLowerCase()) || i != null && (n[r] = Array.isArray(i) ? i.join(", ") : i);
-	return n;
-}
-//#endregion
-//#region src/tunnel/proxy.ts
-async function E(e, t, n) {
-	let r = e.replace(/\/$/, ""), o = new a(t.path, `${r}/`);
-	return new Promise((e, r) => {
-		let a = i.request(o, {
-			method: t.method,
-			headers: t.headers
-		}, (t) => {
-			let n = [];
-			t.on("data", (e) => n.push(e)), t.on("end", () => {
-				e({
-					status: t.statusCode ?? 502,
-					headers: T(t.headers),
-					body: Buffer.concat(n)
-				});
-			}), t.on("error", r);
-		});
-		a.on("error", r), n.length > 0 && a.write(n), a.end();
-	});
-}
-//#endregion
-//#region src/tunnel/serve.ts
-function D(e, t) {
-	let n = x(e);
-	(async () => {
-		try {
-			for (;;) {
-				let { meta: r, body: i } = await n, a = await E(t, r, i);
-				await S(e, {
-					status: a.status,
-					headers: a.headers
-				}, a.body), n = x(e);
-			}
-		} catch {
-			e.destroy();
-		}
-	})();
-}
-async function O(e) {
-	let t = e.upstream.replace(/\/$/, ""), r = u(e.keyFile ?? ".seed/gateway-tunnel/operator.key.json"), i = new n(), a = i.createServer((e) => {
-		D(e, t);
-	});
-	return await a.listen(r), {
-		key: r.z32,
-		upstream: t,
-		close: async () => {
-			await a.close(), await i.destroy();
-		}
-	};
-}
-//#endregion
-//#region src/tunnel/session.ts
-async function k(e) {
-	let t = l(e.key), r = d(), i = new n(), a = null, o = null, s = async () => a && !a.destroyed ? a : o || (o = new Promise((e, n) => {
-		let s = i.connect(t, { keyPair: {
-			publicKey: r.publicKey,
-			secretKey: r.secretKey
-		} }), c = () => {
-			a = s, o = null, e(s);
-		};
-		s.once("open", c), s.once("connect", c), s.once("error", (e) => {
-			o = null, n(e);
-		});
-	}), o), c = Promise.resolve(), u = async (e) => {
-		let t = c.then(() => s()).then(e);
-		return c = t.catch(() => {}), t;
-	};
-	return {
-		key: e.key,
-		runOnTunnel: u,
-		forwardHttp: async (e, t) => u(async (n) => (await b(n, e, t), C(n))),
-		close: async () => {
-			a && !a.destroyed && a.destroy(), await i.destroy();
-		}
-	};
-}
-//#endregion
-//#region src/tunnel/connect.ts
-async function A(e) {
-	let t = [];
-	for await (let n of e) t.push(Buffer.isBuffer(n) ? n : Buffer.from(n));
-	return Buffer.concat(t);
-}
-function j(e) {
-	return i.createServer((t, n) => {
-		(async () => {
-			try {
-				let r = await A(t), i = t.url ?? "/", { meta: a, body: o } = await e({
-					method: t.method ?? "GET",
-					path: i,
-					headers: w(t.headers)
-				}, r);
-				n.writeHead(a.status, a.headers), n.end(o);
-			} catch (e) {
-				let t = e instanceof Error ? e.message : String(e);
-				n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
-			}
-		})();
-	});
-}
-async function M(e) {
-	let t = e.host ?? "127.0.0.1", n = e.port ?? 1984, r = await k({
-		key: e.key,
-		storePath: e.storePath
-	}), i = j((e, t) => r.forwardHttp(e, t));
-	await new Promise((e, r) => {
-		i.once("error", r), i.listen(n, t, () => e());
-	});
-	let a = i.address(), o = a && typeof a == "object" ? a.port : n, s = `http://${t}:${o}`;
-	return {
-		key: e.key,
-		host: t,
-		port: o,
-		baseUrl: s,
-		close: async () => {
-			await new Promise((e) => i.close(() => e())), await r.close();
-		}
-	};
-}
-function N(e, t = "") {
-	let n = e.replace(/\/$/, "");
-	return t ? t.startsWith("/") ? `${n}${t}` : `${n}/${t}` : n;
-}
-//#endregion
-//#region src/tunnel/mountPath.ts
-function P(e, t) {
-	let n = e || "/", r = n.indexOf("?"), i = r === -1 ? n : n.slice(0, r), a = r === -1 ? "" : n.slice(r), o = (t || "").replace(/\/$/, "");
-	if (!o || o === "/") return `${i.startsWith("/") ? i : `/${i}`}${a}` || "/";
-	if (i === o || i.startsWith(`${o}/`)) {
-		let e = i.slice(o.length);
-		return `${e.startsWith("/") ? e : e ? `/${e}` : "/"}${a}`;
-	}
-	return `${i.startsWith("/") ? i : `/${i}`}${a}`;
-}
-//#endregion
-//#region src/tunnel/forward.ts
-async function F(e) {
-	let t = [];
-	for await (let n of e) t.push(Buffer.isBuffer(n) ? n : Buffer.from(n));
-	return Buffer.concat(t);
-}
-async function I(e, t, n, r) {
-	try {
-		let i = await F(t), a = P(t.url ?? "/", r), o = {
-			method: t.method ?? "GET",
-			path: a,
-			headers: w(t.headers)
-		}, { meta: s, body: c } = await e.forwardHttp(o, i);
-		L(n, s, c);
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
-	}
-}
-function L(e, t, n) {
-	e.writeHead(t.status, T(t.headers)), e.end(n);
-}
-async function R(e, t, n) {
-	try {
-		let r = new URL(t.url), i = P(`${r.pathname}${r.search}`, n), a = Buffer.from(await t.arrayBuffer()), o = {};
-		t.headers.forEach((e, t) => {
-			o[t] = e;
-		});
-		let s = {
-			method: t.method || "GET",
-			path: i,
-			headers: w(o)
-		}, { meta: c, body: l } = await e.forwardHttp(s, a);
-		return new Response(l, {
-			status: c.status,
-			headers: T(c.headers)
-		});
-	} catch (e) {
-		let t = e instanceof Error ? e.message : String(e);
-		return new Response(`Gateway Hyper tunnel error: ${t}`, {
-			status: 502,
-			headers: { "Content-Type": "text/plain; charset=utf-8" }
-		});
-	}
-}
-//#endregion
-//#region src/tunnel/proxyApp.ts
-function z(e) {
-	let t = e.key?.trim() || (typeof process < "u" ? process.env.SEED_GATEWAY_HYPER_KEY?.trim() : "") || "";
-	if (!t) throw Error("createGatewayProxy requires options.key or SEED_GATEWAY_HYPER_KEY environment variable");
-	return t;
-}
-function B(e = {}) {
-	let t = e.mountPath?.trim() || "/api/seed-gateway", n = z(e), r = null, i = null, a = async () => {
-		if (r) return r;
-		if (i) return i;
-		i = k({
-			key: n,
-			storePath: e.storePath
-		}).then((e) => (r = e, i = null, e));
-		try {
-			return await i;
-		} catch (e) {
-			throw i = null, e;
-		}
-	}, o = {
-		mountPath: t,
-		start: async () => {
-			await a();
-		},
-		close: async () => {
-			if (i) try {
-				await i;
-			} catch {}
-			r &&= (await r.close(), null);
-		},
-		handleNode: (e, n) => {
-			(async () => {
-				try {
-					await I(await a(), e, n, t);
-				} catch (e) {
-					let t = e instanceof Error ? e.message : String(e);
-					n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
-				}
-			})();
-		},
-		handleFetch: async (e) => {
-			try {
-				return await R(await a(), e, t);
-			} catch (e) {
-				let t = e instanceof Error ? e.message : String(e);
-				return new Response(`Gateway Hyper tunnel error: ${t}`, {
-					status: 502,
-					headers: { "Content-Type": "text/plain; charset=utf-8" }
-				});
-			}
-		}
-	};
-	return e.eager && o.start().catch(() => {}), o;
-}
-//#endregion
-//#region src/constants.ts
-var V = "";
-//#endregion
-export { V as DEFAULT_SEED_GATEWAY_HYPER_KEY, f as MAX_FRAME_BYTES, M as connectTunnel, B as createGatewayProxy, k as createTunnelSession, l as decodePublicKey, c as encodePublicKeyZ32, T as filterResponseHeaders, w as flattenRequestHeaders, u as loadOrCreateOperatorKeypair, N as localGatewayUrl, y as readFrame, x as readTunnelRequest, C as readTunnelResponse, O as serveTunnel, P as stripMountPath, v as writeFrame, b as writeTunnelRequest, S as writeTunnelResponse };
-
-//# sourceMappingURL=index.js.map
+export { t as DEFAULT_SEED_GATEWAY_HYPER_KEY, c as MAX_FRAME_BYTES, i as connectTunnel, n as createGatewayProxy, o as createTunnelSession, _ as decodePublicKey, v as encodePublicKeyZ32, l as filterResponseHeaders, u as flattenRequestHeaders, y as loadOrCreateOperatorKeypair, a as localGatewayUrl, d as readFrame, f as readTunnelRequest, p as readTunnelResponse, s as serveTunnel, r as stripMountPath, m as writeFrame, h as writeTunnelRequest, g as writeTunnelResponse } from "./src-CnXam5V8.js";

package/dist/src-CnXam5V8.js

@@ -0,0 +1,421 @@
+import e from "node:fs";
+import t from "node:path";
+import n from "hyperdht";
+import r from "hypercore-id-encoding";
+import i from "node:http";
+import { URL as a } from "node:url";
+//#region src/keys.ts
+function o(e) {
+	return e.toString("hex");
+}
+function s(e) {
+	return Buffer.from(e, "hex");
+}
+function c(e) {
+	return r.encode(e);
+}
+function l(e) {
+	let t = e.trim();
+	if (!t) throw Error("Gateway Hyper key is empty");
+	try {
+		return Buffer.from(r.decode(t));
+	} catch {
+		if (/^[a-fA-F0-9]{64}$/.test(t)) return s(t);
+		throw Error(`Invalid Gateway Hyper key (expected z32 or 64-char hex): ${t.slice(0, 12)}…`);
+	}
+}
+function u(r) {
+	let i = t.resolve(r);
+	if (e.existsSync(i)) {
+		let t = e.readFileSync(i, "utf8"), n = JSON.parse(t);
+		if (!n.publicKey || !n.secretKey) throw Error(`Invalid key file at ${i}: missing publicKey or secretKey`);
+		let r = s(n.publicKey);
+		return {
+			publicKey: r,
+			secretKey: s(n.secretKey),
+			z32: c(r)
+		};
+	}
+	let a = t.dirname(i);
+	e.mkdirSync(a, { recursive: !0 });
+	let l = n.keyPair(), u = {
+		publicKey: o(l.publicKey),
+		secretKey: o(l.secretKey),
+		encoding: "hex"
+	};
+	return e.writeFileSync(i, `${JSON.stringify(u, null, 2)}\n`, { mode: 384 }), {
+		publicKey: l.publicKey,
+		secretKey: l.secretKey,
+		z32: c(l.publicKey)
+	};
+}
+function d() {
+	let e = n.keyPair();
+	return {
+		publicKey: e.publicKey,
+		secretKey: e.secretKey,
+		z32: c(e.publicKey)
+	};
+}
+//#endregion
+//#region src/tunnel/protocol.ts
+var f = 67108864, p = class {
+	stream;
+	buffer = Buffer.alloc(0);
+	waiters = [];
+	ended = !1;
+	onData;
+	onError;
+	onEnd;
+	constructor(e) {
+		this.stream = e, this.onData = (e) => {
+			this.buffer = Buffer.concat([this.buffer, e]), this.drain();
+		}, this.onError = (e) => {
+			let t = this.waiters.splice(0);
+			for (let n of t) n.reject(e);
+		}, this.onEnd = () => {
+			if (this.ended = !0, this.drain(), this.waiters.length > 0) {
+				let e = this.waiters.splice(0);
+				for (let t of e) t.reject(/* @__PURE__ */ Error(`Unexpected end of stream (expected ${t.length} bytes, got ${this.buffer.length})`));
+			}
+		}, e.on("data", this.onData), e.on("error", this.onError), e.on("end", this.onEnd);
+	}
+	readExact(e) {
+		return new Promise((t, n) => {
+			if (e === 0) t(Buffer.alloc(0));
+			else if (this.waiters.push({
+				length: e,
+				resolve: t,
+				reject: n
+			}), this.drain(), this.ended && this.waiters.length > 0) {
+				let e = this.waiters.splice(0);
+				for (let t of e) t.reject(/* @__PURE__ */ Error(`Unexpected end of stream (expected ${t.length} bytes, got ${this.buffer.length})`));
+			}
+		});
+	}
+	drain() {
+		for (; this.waiters.length > 0;) {
+			let e = this.waiters[0];
+			if (!e || this.buffer.length < e.length) break;
+			this.waiters.shift();
+			let t = this.buffer.subarray(0, e.length);
+			this.buffer = this.buffer.subarray(e.length), e.resolve(t);
+		}
+	}
+}, m = /* @__PURE__ */ new WeakMap();
+function h(e) {
+	let t = m.get(e);
+	return t || (t = new p(e), m.set(e, t)), t;
+}
+function g(e, t) {
+	return h(e).readExact(t);
+}
+function _(e, t) {
+	return new Promise((n, r) => {
+		try {
+			if (e.write(t)) {
+				n();
+				return;
+			}
+			let i = () => {
+				e.off("error", a), n();
+			}, a = (t) => {
+				e.off("drain", i), r(t);
+			};
+			e.once("drain", i), e.once("error", a);
+		} catch (e) {
+			r(e instanceof Error ? e : Error(String(e)));
+		}
+	});
+}
+async function v(e, t) {
+	if (t.length > 67108864) throw Error(`Frame too large: ${t.length} bytes (max ${f})`);
+	let n = Buffer.alloc(4);
+	n.writeUInt32BE(t.length, 0), await _(e, Buffer.concat([n, t]));
+}
+async function y(e) {
+	let t = (await g(e, 4)).readUInt32BE(0);
+	if (t === 0) return Buffer.alloc(0);
+	if (t > 67108864) throw Error(`Frame too large: ${t} bytes (max ${f})`);
+	return g(e, t);
+}
+async function b(e, t, n) {
+	await v(e, Buffer.from(JSON.stringify(t), "utf8")), await v(e, n);
+}
+async function x(e) {
+	let t = await y(e), n = JSON.parse(t.toString("utf8"));
+	if (!n.method || !n.path) throw Error("Invalid tunnel request meta: missing method or path");
+	return n.headers = n.headers ?? {}, {
+		meta: n,
+		body: await y(e)
+	};
+}
+async function S(e, t, n) {
+	await v(e, Buffer.from(JSON.stringify(t), "utf8")), await v(e, n);
+}
+async function C(e) {
+	let t = await y(e), n = JSON.parse(t.toString("utf8"));
+	if (typeof n.status != "number") throw Error("Invalid tunnel response meta: missing status");
+	return n.headers = n.headers ?? {}, {
+		meta: n,
+		body: await y(e)
+	};
+}
+function w(e) {
+	let t = {};
+	for (let [n, r] of Object.entries(e)) r != null && (t[n] = Array.isArray(r) ? r.join(", ") : r);
+	return t;
+}
+function T(e) {
+	let t = /* @__PURE__ */ new Set([
+		"connection",
+		"keep-alive",
+		"transfer-encoding",
+		"upgrade"
+	]), n = {};
+	for (let [r, i] of Object.entries(e)) t.has(r.toLowerCase()) || i != null && (n[r] = Array.isArray(i) ? i.join(", ") : i);
+	return n;
+}
+//#endregion
+//#region src/tunnel/proxy.ts
+async function E(e, t, n) {
+	let r = e.replace(/\/$/, ""), o = new a(t.path, `${r}/`);
+	return new Promise((e, r) => {
+		let a = i.request(o, {
+			method: t.method,
+			headers: t.headers
+		}, (t) => {
+			let n = [];
+			t.on("data", (e) => n.push(e)), t.on("end", () => {
+				e({
+					status: t.statusCode ?? 502,
+					headers: T(t.headers),
+					body: Buffer.concat(n)
+				});
+			}), t.on("error", r);
+		});
+		a.on("error", r), n.length > 0 && a.write(n), a.end();
+	});
+}
+//#endregion
+//#region src/tunnel/serve.ts
+function D(e, t) {
+	let n = x(e);
+	(async () => {
+		try {
+			for (;;) {
+				let { meta: r, body: i } = await n, a = await E(t, r, i);
+				await S(e, {
+					status: a.status,
+					headers: a.headers
+				}, a.body), n = x(e);
+			}
+		} catch {
+			e.destroy();
+		}
+	})();
+}
+async function O(e) {
+	let t = e.upstream.replace(/\/$/, ""), r = u(e.keyFile ?? ".seed/gateway-tunnel/operator.key.json"), i = new n(), a = i.createServer((e) => {
+		D(e, t);
+	});
+	return await a.listen(r), {
+		key: r.z32,
+		upstream: t,
+		close: async () => {
+			await a.close(), await i.destroy();
+		}
+	};
+}
+//#endregion
+//#region src/tunnel/session.ts
+async function k(e) {
+	let t = l(e.key), r = d(), i = new n(), a = null, o = null, s = async () => a && !a.destroyed ? a : o || (o = new Promise((e, n) => {
+		let s = i.connect(t, { keyPair: {
+			publicKey: r.publicKey,
+			secretKey: r.secretKey
+		} }), c = () => {
+			a = s, o = null, e(s);
+		};
+		s.once("open", c), s.once("connect", c), s.once("error", (e) => {
+			o = null, n(e);
+		});
+	}), o), c = Promise.resolve(), u = async (e) => {
+		let t = c.then(() => s()).then(e);
+		return c = t.catch(() => {}), t;
+	};
+	return {
+		key: e.key,
+		runOnTunnel: u,
+		forwardHttp: async (e, t) => u(async (n) => (await b(n, e, t), C(n))),
+		close: async () => {
+			a && !a.destroyed && a.destroy(), await i.destroy();
+		}
+	};
+}
+//#endregion
+//#region src/tunnel/connect.ts
+async function A(e) {
+	let t = [];
+	for await (let n of e) t.push(Buffer.isBuffer(n) ? n : Buffer.from(n));
+	return Buffer.concat(t);
+}
+function j(e) {
+	return i.createServer((t, n) => {
+		(async () => {
+			try {
+				let r = await A(t), i = t.url ?? "/", { meta: a, body: o } = await e({
+					method: t.method ?? "GET",
+					path: i,
+					headers: w(t.headers)
+				}, r);
+				n.writeHead(a.status, a.headers), n.end(o);
+			} catch (e) {
+				let t = e instanceof Error ? e.message : String(e);
+				n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
+			}
+		})();
+	});
+}
+async function M(e) {
+	let t = e.host ?? "127.0.0.1", n = e.port ?? 1984, r = await k({
+		key: e.key,
+		storePath: e.storePath
+	}), i = j((e, t) => r.forwardHttp(e, t));
+	await new Promise((e, r) => {
+		i.once("error", r), i.listen(n, t, () => e());
+	});
+	let a = i.address(), o = a && typeof a == "object" ? a.port : n, s = `http://${t}:${o}`;
+	return {
+		key: e.key,
+		host: t,
+		port: o,
+		baseUrl: s,
+		close: async () => {
+			await new Promise((e) => i.close(() => e())), await r.close();
+		}
+	};
+}
+function N(e, t = "") {
+	let n = e.replace(/\/$/, "");
+	return t ? t.startsWith("/") ? `${n}${t}` : `${n}/${t}` : n;
+}
+//#endregion
+//#region src/tunnel/mountPath.ts
+function P(e, t) {
+	let n = e || "/", r = n.indexOf("?"), i = r === -1 ? n : n.slice(0, r), a = r === -1 ? "" : n.slice(r), o = (t || "").replace(/\/$/, "");
+	if (!o || o === "/") return `${i.startsWith("/") ? i : `/${i}`}${a}` || "/";
+	if (i === o || i.startsWith(`${o}/`)) {
+		let e = i.slice(o.length);
+		return `${e.startsWith("/") ? e : e ? `/${e}` : "/"}${a}`;
+	}
+	return `${i.startsWith("/") ? i : `/${i}`}${a}`;
+}
+//#endregion
+//#region src/tunnel/forward.ts
+async function F(e) {
+	let t = [];
+	for await (let n of e) t.push(Buffer.isBuffer(n) ? n : Buffer.from(n));
+	return Buffer.concat(t);
+}
+async function I(e, t, n, r) {
+	try {
+		let i = await F(t), a = P(t.url ?? "/", r), o = {
+			method: t.method ?? "GET",
+			path: a,
+			headers: w(t.headers)
+		}, { meta: s, body: c } = await e.forwardHttp(o, i);
+		L(n, s, c);
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
+	}
+}
+function L(e, t, n) {
+	e.writeHead(t.status, T(t.headers)), e.end(n);
+}
+async function R(e, t, n) {
+	try {
+		let r = new URL(t.url), i = P(`${r.pathname}${r.search}`, n), a = Buffer.from(await t.arrayBuffer()), o = {};
+		t.headers.forEach((e, t) => {
+			o[t] = e;
+		});
+		let s = {
+			method: t.method || "GET",
+			path: i,
+			headers: w(o)
+		}, { meta: c, body: l } = await e.forwardHttp(s, a);
+		return new Response(l, {
+			status: c.status,
+			headers: T(c.headers)
+		});
+	} catch (e) {
+		let t = e instanceof Error ? e.message : String(e);
+		return new Response(`Gateway Hyper tunnel error: ${t}`, {
+			status: 502,
+			headers: { "Content-Type": "text/plain; charset=utf-8" }
+		});
+	}
+}
+//#endregion
+//#region src/tunnel/proxyApp.ts
+function z(e) {
+	let t = e.key?.trim() || (typeof process < "u" ? process.env.SEED_GATEWAY_HYPER_KEY?.trim() : "") || "";
+	if (!t) throw Error("createGatewayProxy requires options.key or SEED_GATEWAY_HYPER_KEY environment variable");
+	return t;
+}
+function B(e = {}) {
+	let t = e.mountPath?.trim() || "/api/seed-gateway", n = z(e), r = null, i = null, a = async () => {
+		if (r) return r;
+		if (i) return i;
+		i = k({
+			key: n,
+			storePath: e.storePath
+		}).then((e) => (r = e, i = null, e));
+		try {
+			return await i;
+		} catch (e) {
+			throw i = null, e;
+		}
+	}, o = {
+		mountPath: t,
+		start: async () => {
+			await a();
+		},
+		close: async () => {
+			if (i) try {
+				await i;
+			} catch {}
+			r &&= (await r.close(), null);
+		},
+		handleNode: (e, n) => {
+			(async () => {
+				try {
+					await I(await a(), e, n, t);
+				} catch (e) {
+					let t = e instanceof Error ? e.message : String(e);
+					n.headersSent || n.writeHead(502, { "Content-Type": "text/plain; charset=utf-8" }), n.end(`Gateway Hyper tunnel error: ${t}`);
+				}
+			})();
+		},
+		handleFetch: async (e) => {
+			try {
+				return await R(await a(), e, t);
+			} catch (e) {
+				let t = e instanceof Error ? e.message : String(e);
+				return new Response(`Gateway Hyper tunnel error: ${t}`, {
+					status: 502,
+					headers: { "Content-Type": "text/plain; charset=utf-8" }
+				});
+			}
+		}
+	};
+	return e.eager && o.start().catch(() => {}), o;
+}
+//#endregion
+//#region src/constants.ts
+var V = "";
+//#endregion
+export { l as _, N as a, f as c, y as d, x as f, S as g, b as h, M as i, T as l, v as m, B as n, k as o, C as p, P as r, O as s, V as t, w as u, c as v, u as y };
+
+//# sourceMappingURL=src-CnXam5V8.js.map

package/dist/src-CnXam5V8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"src-CnXam5V8.js","names":["URL","fs","path","HyperDHT","ID","http","URL$1","toHex","buf","fromHex","hex","encodePublicKeyZ32","publicKey","decodePublicKey","trimmed","key","loadOrCreateOperatorKeypair","resolved","keyFile","raw","parsed","dir","kp","persisted","createEphemeralClientKeypair","MAX_FRAME_BYTES","StreamByteReader","stream","chunk","waiters","w","err","length","next","out","readers","getReader","reader","readExact","writeBuffer","onDrain","onError","resolve","reject","writeFrame","payload","header","readFrame","writeTunnelRequest","meta","body","readTunnelRequest","metaBuf","writeTunnelResponse","readTunnelResponse","flattenRequestHeaders","value","headers","filterResponseHeaders","skip","proxyTunnelRequest","base","upstreamBase","targetUrl","req","chunks","res","handleConnection","pendingRequest","socket","result","upstream","serveTunnel","options","keypair","dht","server","createTunnelSession","remotePublicKey","clientKey","activeSocket","connecting","getSocket","onReady","tunnelQueue","runOnTunnel","run","fn","readRequestBody","createLocalServer","responseMeta","responseBody","forwardHttp","message","connectTunnel","host","port","session","address","boundPort","baseUrl","localGatewayUrl","stripMountPath","urlPath","qIndex","pathname","query","mount","mountPath","rest","readNodeBody","forwardNodeRequest","writeNodeResponse","forwardFetchRequest","url","request","bodyBuf","headerRecord","resolveProxyKey","createGatewayProxy","starting","ensureSession","s","proxy","DEFAULT_SEED_GATEWAY_HYPER_KEY"],"sources":["../src/keys.ts","../src/tunnel/protocol.ts","../src/tunnel/proxy.ts","../src/tunnel/serve.ts","../src/tunnel/session.ts","../src/tunnel/connect.ts","../src/tunnel/mountPath.ts","../src/tunnel/forward.ts","../src/tunnel/proxyApp.ts","../src/constants.ts"],"sourcesContent":["import fs from 'node:fs'\nimport path from 'node:path'\nimport HyperDHT from 'hyperdht'\nimport ID from 'hypercore-id-encoding'\nimport type { OperatorKeyPair } from './types'\n\nexport interface PersistedKeyFile {\n  publicKey: string\n  secretKey: string\n  encoding: 'hex'\n}\n\nfunction toHex(buf: Buffer): string {\n  return buf.toString('hex')\n}\n\nfunction fromHex(hex: string): Buffer {\n  return Buffer.from(hex, 'hex')\n}\n\nexport function encodePublicKeyZ32(publicKey: Buffer): string {\n  return ID.encode(publicKey)\n}\n\nexport function decodePublicKey(key: string): Buffer {\n  const trimmed = key.trim()\n  if (!trimmed) {\n    throw new Error('Gateway Hyper key is empty')\n  }\n  try {\n    return Buffer.from(ID.decode(trimmed))\n  } catch {\n    if (/^[a-fA-F0-9]{64}$/.test(trimmed)) {\n      return fromHex(trimmed)\n    }\n    throw new Error(`Invalid Gateway Hyper key (expected z32 or 64-char hex): ${trimmed.slice(0, 12)}…`)\n  }\n}\n\nexport function loadOrCreateOperatorKeypair(keyFile: string): OperatorKeyPair {\n  const resolved = path.resolve(keyFile)\n  if (fs.existsSync(resolved)) {\n    const raw = fs.readFileSync(resolved, 'utf8')\n    const parsed = JSON.parse(raw) as PersistedKeyFile\n    if (!parsed.publicKey || !parsed.secretKey) {\n      throw new Error(`Invalid key file at ${resolved}: missing publicKey or secretKey`)\n    }\n    const publicKey = fromHex(parsed.publicKey)\n    const secretKey = fromHex(parsed.secretKey)\n    return {\n      publicKey,\n      secretKey,\n      z32: encodePublicKeyZ32(publicKey),\n    }\n  }\n\n  const dir = path.dirname(resolved)\n  fs.mkdirSync(dir, { recursive: true })\n  const kp = HyperDHT.keyPair()\n  const persisted: PersistedKeyFile = {\n    publicKey: toHex(kp.publicKey),\n    secretKey: toHex(kp.secretKey),\n    encoding: 'hex',\n  }\n  fs.writeFileSync(resolved, `${JSON.stringify(persisted, null, 2)}\\n`, { mode: 0o600 })\n  return {\n    publicKey: kp.publicKey,\n    secretKey: kp.secretKey,\n    z32: encodePublicKeyZ32(kp.publicKey),\n  }\n}\n\nexport function createEphemeralClientKeypair(): OperatorKeyPair {\n  const kp = HyperDHT.keyPair()\n  return {\n    publicKey: kp.publicKey,\n    secretKey: kp.secretKey,\n    z32: encodePublicKeyZ32(kp.publicKey),\n  }\n}\n","import type { Readable, Writable } from 'node:stream'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\n\n/** Maximum single frame payload (64 MiB). */\nexport const MAX_FRAME_BYTES = 64 * 1024 * 1024\n\ntype ByteWaiter = {\n  length: number\n  resolve: (buf: Buffer) => void\n  reject: (err: Error) => void\n}\n\n/**\n * Per-stream byte buffer. HyperDHT duplexes do not reliably support `unshift`,\n * so we accumulate and slice locally instead of pushing leftovers back.\n */\nclass StreamByteReader {\n  private buffer = Buffer.alloc(0)\n  private waiters: ByteWaiter[] = []\n  private ended = false\n  private readonly onData: (chunk: Buffer) => void\n  private readonly onError: (err: Error) => void\n  private readonly onEnd: () => void\n\n  constructor(private readonly stream: Readable) {\n    this.onData = (chunk: Buffer) => {\n      this.buffer = Buffer.concat([this.buffer, chunk])\n      this.drain()\n    }\n    this.onError = (err: Error) => {\n      const waiters = this.waiters.splice(0)\n      for (const w of waiters) w.reject(err)\n    }\n    this.onEnd = () => {\n      this.ended = true\n      this.drain()\n      if (this.waiters.length > 0) {\n        const waiters = this.waiters.splice(0)\n        for (const w of waiters) {\n          w.reject(\n            new Error(\n              `Unexpected end of stream (expected ${w.length} bytes, got ${this.buffer.length})`,\n            ),\n          )\n        }\n      }\n    }\n    stream.on('data', this.onData)\n    stream.on('error', this.onError)\n    stream.on('end', this.onEnd)\n  }\n\n  readExact(length: number): Promise<Buffer> {\n    return new Promise((resolve, reject) => {\n      if (length === 0) {\n        resolve(Buffer.alloc(0))\n        return\n      }\n      this.waiters.push({ length, resolve, reject })\n      this.drain()\n      if (this.ended && this.waiters.length > 0) {\n        const waiters = this.waiters.splice(0)\n        for (const w of waiters) {\n          w.reject(\n            new Error(\n              `Unexpected end of stream (expected ${w.length} bytes, got ${this.buffer.length})`,\n            ),\n          )\n        }\n      }\n    })\n  }\n\n  private drain(): void {\n    while (this.waiters.length > 0) {\n      const next = this.waiters[0]\n      if (!next || this.buffer.length < next.length) break\n      this.waiters.shift()\n      const out = this.buffer.subarray(0, next.length)\n      this.buffer = this.buffer.subarray(next.length)\n      next.resolve(out)\n    }\n  }\n}\n\nconst readers = new WeakMap<Readable, StreamByteReader>()\n\nfunction getReader(stream: Readable): StreamByteReader {\n  let reader = readers.get(stream)\n  if (!reader) {\n    reader = new StreamByteReader(stream)\n    readers.set(stream, reader)\n  }\n  return reader\n}\n\nfunction readExact(stream: Readable, length: number): Promise<Buffer> {\n  return getReader(stream).readExact(length)\n}\n\nfunction writeBuffer(stream: Writable, buf: Buffer): Promise<void> {\n  return new Promise((resolve, reject) => {\n    // HyperDHT duplexes often never invoke write(callback). Use return value + drain.\n    try {\n      const ok = stream.write(buf)\n      if (ok) {\n        resolve()\n        return\n      }\n      const onDrain = () => {\n        stream.off('error', onError)\n        resolve()\n      }\n      const onError = (err: Error) => {\n        stream.off('drain', onDrain)\n        reject(err)\n      }\n      stream.once('drain', onDrain)\n      stream.once('error', onError)\n    } catch (err) {\n      reject(err instanceof Error ? err : new Error(String(err)))\n    }\n  })\n}\n\nexport async function writeFrame(stream: Writable, payload: Buffer): Promise<void> {\n  if (payload.length > MAX_FRAME_BYTES) {\n    throw new Error(`Frame too large: ${payload.length} bytes (max ${MAX_FRAME_BYTES})`)\n  }\n  const header = Buffer.alloc(4)\n  header.writeUInt32BE(payload.length, 0)\n  // Single write — HyperDHT can drop/stall subsequent writes in the same turn.\n  await writeBuffer(stream, Buffer.concat([header, payload]))\n}\n\nexport async function readFrame(stream: Readable): Promise<Buffer> {\n  const header = await readExact(stream, 4)\n  const length = header.readUInt32BE(0)\n  if (length === 0) {\n    return Buffer.alloc(0)\n  }\n  if (length > MAX_FRAME_BYTES) {\n    throw new Error(`Frame too large: ${length} bytes (max ${MAX_FRAME_BYTES})`)\n  }\n  return readExact(stream, length)\n}\n\nexport async function writeTunnelRequest(\n  stream: Writable,\n  meta: TunnelMeta,\n  body: Buffer,\n): Promise<void> {\n  const metaFrame = Buffer.from(JSON.stringify(meta), 'utf8')\n  await writeFrame(stream, metaFrame)\n  await writeFrame(stream, body)\n}\n\nexport async function readTunnelRequest(\n  stream: Readable,\n): Promise<{ meta: TunnelMeta; body: Buffer }> {\n  const metaBuf = await readFrame(stream)\n  const meta = JSON.parse(metaBuf.toString('utf8')) as TunnelMeta\n  if (!meta.method || !meta.path) {\n    throw new Error('Invalid tunnel request meta: missing method or path')\n  }\n  meta.headers = meta.headers ?? {}\n  const body = await readFrame(stream)\n  return { meta, body }\n}\n\nexport async function writeTunnelResponse(\n  stream: Writable,\n  meta: TunnelResponseMeta,\n  body: Buffer,\n): Promise<void> {\n  const metaFrame = Buffer.from(JSON.stringify(meta), 'utf8')\n  await writeFrame(stream, metaFrame)\n  await writeFrame(stream, body)\n}\n\nexport async function readTunnelResponse(\n  stream: Readable,\n): Promise<{ meta: TunnelResponseMeta; body: Buffer }> {\n  const metaBuf = await readFrame(stream)\n  const meta = JSON.parse(metaBuf.toString('utf8')) as TunnelResponseMeta\n  if (typeof meta.status !== 'number') {\n    throw new Error('Invalid tunnel response meta: missing status')\n  }\n  meta.headers = meta.headers ?? {}\n  const body = await readFrame(stream)\n  return { meta, body }\n}\n\n/** Normalize header values to strings for tunnel transport. */\nexport function flattenRequestHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string> {\n  const out: Record<string, string> = {}\n  for (const [key, value] of Object.entries(headers)) {\n    if (value == null) continue\n    out[key] = Array.isArray(value) ? value.join(', ') : value\n  }\n  return out\n}\n\n/** Pick response headers safe to forward to the local HTTP client. */\nexport function filterResponseHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string> {\n  const skip = new Set([\n    'connection',\n    'keep-alive',\n    'transfer-encoding',\n    'upgrade',\n  ])\n  const out: Record<string, string> = {}\n  for (const [key, value] of Object.entries(headers)) {\n    if (skip.has(key.toLowerCase())) continue\n    if (value == null) continue\n    out[key] = Array.isArray(value) ? value.join(', ') : value\n  }\n  return out\n}\n","import http from 'node:http'\nimport { URL } from 'node:url'\nimport { filterResponseHeaders } from './protocol'\nimport type { TunnelMeta } from '../types'\n\nexport async function proxyTunnelRequest(\n  upstreamBase: string,\n  meta: TunnelMeta,\n  body: Buffer,\n): Promise<{ status: number; headers: Record<string, string>; body: Buffer }> {\n  const base = upstreamBase.replace(/\\/$/, '')\n  const targetUrl = new URL(meta.path, `${base}/`)\n\n  return new Promise((resolve, reject) => {\n    const req = http.request(\n      targetUrl,\n      {\n        method: meta.method,\n        headers: meta.headers,\n      },\n      (res) => {\n        const chunks: Buffer[] = []\n        res.on('data', (chunk: Buffer) => chunks.push(chunk))\n        res.on('end', () => {\n          resolve({\n            status: res.statusCode ?? 502,\n            headers: filterResponseHeaders(res.headers as Record<string, string | string[] | undefined>),\n            body: Buffer.concat(chunks),\n          })\n        })\n        res.on('error', reject)\n      },\n    )\n    req.on('error', reject)\n    if (body.length > 0) {\n      req.write(body)\n    }\n    req.end()\n  })\n}\n","import type { Duplex } from 'node:stream'\nimport HyperDHT from 'hyperdht'\nimport { readTunnelRequest, writeTunnelResponse } from './protocol'\nimport { proxyTunnelRequest } from './proxy'\nimport { loadOrCreateOperatorKeypair } from '../keys'\nimport type { ServeTunnelOptions, ServeTunnelResult } from '../types'\n\nfunction handleConnection(\n  socket: Duplex,\n  upstream: string,\n): void {\n  // Attach framed readers synchronously so HyperDHT early bytes are not lost.\n  let pendingRequest = readTunnelRequest(socket)\n  void (async () => {\n    try {\n      while (true) {\n        const { meta, body } = await pendingRequest\n        const result = await proxyTunnelRequest(upstream, meta, body)\n        await writeTunnelResponse(\n          socket,\n          { status: result.status, headers: result.headers },\n          result.body,\n        )\n        pendingRequest = readTunnelRequest(socket)\n      }\n    } catch {\n      socket.destroy()\n    }\n  })()\n}\n\n/**\n * Operator: accept Hyperswarm/DHT connections and proxy framed HTTP to upstream Traefik.\n */\nexport async function serveTunnel(options: ServeTunnelOptions): Promise<ServeTunnelResult> {\n  const upstream = options.upstream.replace(/\\/$/, '')\n  const keyFile = options.keyFile ?? '.seed/gateway-tunnel/operator.key.json'\n  const keypair = loadOrCreateOperatorKeypair(keyFile)\n\n  const dht = new HyperDHT()\n  const server = dht.createServer((socket) => {\n    handleConnection(socket as Duplex, upstream)\n  })\n\n  await server.listen(keypair)\n\n  return {\n    key: keypair.z32,\n    upstream,\n    close: async () => {\n      await server.close()\n      await dht.destroy()\n    },\n  }\n}\n","import type { Duplex } from 'node:stream'\nimport HyperDHT from 'hyperdht'\nimport { createEphemeralClientKeypair, decodePublicKey } from '../keys'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\nimport { readTunnelResponse, writeTunnelRequest } from './protocol'\n\nexport type TunnelSessionOptions = {\n  /** Operator public key (z32 or hex) */\n  key: string\n  /** Optional store path for DHT client state */\n  storePath?: string\n}\n\nexport type TunnelSession = {\n  key: string\n  runOnTunnel: <T>(fn: (socket: Duplex) => Promise<T>) => Promise<T>\n  forwardHttp: (\n    meta: TunnelMeta,\n    body: Buffer,\n  ) => Promise<{ meta: TunnelResponseMeta; body: Buffer }>\n  close: () => Promise<void>\n}\n\n/**\n * Dial the operator HyperDHT key and expose a serialized request/response forwarder.\n */\nexport async function createTunnelSession(options: TunnelSessionOptions): Promise<TunnelSession> {\n  const remotePublicKey = decodePublicKey(options.key)\n  const clientKey = createEphemeralClientKeypair()\n\n  const dht = new HyperDHT()\n  let activeSocket: Duplex | null = null\n  let connecting: Promise<Duplex> | null = null\n\n  const getSocket = async (): Promise<Duplex> => {\n    if (activeSocket && !activeSocket.destroyed) {\n      return activeSocket\n    }\n    if (connecting) {\n      return connecting\n    }\n    connecting = new Promise<Duplex>((resolve, reject) => {\n      const socket = dht.connect(remotePublicKey, {\n        keyPair: { publicKey: clientKey.publicKey, secretKey: clientKey.secretKey },\n      }) as Duplex\n      const onReady = () => {\n        activeSocket = socket\n        connecting = null\n        resolve(socket)\n      }\n      socket.once('open', onReady)\n      socket.once('connect', onReady)\n      socket.once('error', (err: Error) => {\n        connecting = null\n        reject(err)\n      })\n    })\n    return connecting\n  }\n\n  /** Serialize tunnel transactions on one persistent socket. */\n  let tunnelQueue: Promise<unknown> = Promise.resolve()\n  const runOnTunnel = async <T>(fn: (socket: Duplex) => Promise<T>): Promise<T> => {\n    const run = tunnelQueue.then(() => getSocket()).then(fn)\n    tunnelQueue = run.catch(() => {})\n    return run\n  }\n\n  const forwardHttp = async (\n    meta: TunnelMeta,\n    body: Buffer,\n  ): Promise<{ meta: TunnelResponseMeta; body: Buffer }> => {\n    return runOnTunnel(async (socket) => {\n      await writeTunnelRequest(socket, meta, body)\n      return readTunnelResponse(socket)\n    })\n  }\n\n  return {\n    key: options.key,\n    runOnTunnel,\n    forwardHttp,\n    close: async () => {\n      if (activeSocket && !activeSocket.destroyed) {\n        activeSocket.destroy()\n      }\n      await dht.destroy()\n    },\n  }\n}\n","import http from 'node:http'\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport {\n  flattenRequestHeaders,\n} from './protocol'\nimport { createTunnelSession } from './session'\nimport type { ConnectTunnelOptions, ConnectTunnelResult } from '../types'\n\nasync function readRequestBody(req: IncomingMessage): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nfunction createLocalServer(\n  forwardHttp: (\n    meta: { method: string; path: string; headers: Record<string, string> },\n    body: Buffer,\n  ) => Promise<{ meta: { status: number; headers: Record<string, string> }; body: Buffer }>,\n): http.Server {\n  return http.createServer((req, res) => {\n    void (async () => {\n      try {\n        const body = await readRequestBody(req)\n        const path = req.url ?? '/'\n        const meta = {\n          method: req.method ?? 'GET',\n          path,\n          headers: flattenRequestHeaders(req.headers as Record<string, string | string[] | undefined>),\n        }\n\n        const { meta: responseMeta, body: responseBody } = await forwardHttp(meta, body)\n\n        res.writeHead(responseMeta.status, responseMeta.headers)\n        res.end(responseBody)\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err)\n        if (!res.headersSent) {\n          res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n        }\n        res.end(`Gateway Hyper tunnel error: ${message}`)\n      }\n    })()\n  })\n}\n\n/**\n * Client: dial operator key and expose a localhost HTTP server that forwards through the tunnel.\n */\nexport async function connectTunnel(options: ConnectTunnelOptions): Promise<ConnectTunnelResult> {\n  const host = options.host ?? '127.0.0.1'\n  const port = options.port ?? 1984\n\n  const session = await createTunnelSession({\n    key: options.key,\n    storePath: options.storePath,\n  })\n\n  const server = createLocalServer((meta, body) => session.forwardHttp(meta, body))\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject)\n    server.listen(port, host, () => resolve())\n  })\n\n  const address = server.address()\n  const boundPort =\n    address && typeof address === 'object' ? address.port : port\n\n  const baseUrl = `http://${host}:${boundPort}`\n\n  return {\n    key: options.key,\n    host,\n    port: boundPort,\n    baseUrl,\n    close: async () => {\n      await new Promise<void>((resolve) => server.close(() => resolve()))\n      await session.close()\n    },\n  }\n}\n\nexport function localGatewayUrl(baseUrl: string, path = ''): string {\n  const base = baseUrl.replace(/\\/$/, '')\n  if (!path) return base\n  return path.startsWith('/') ? `${base}${path}` : `${base}/${path}`\n}\n","/**\n * Strip a mount path prefix from an incoming request URL path (including query string).\n * If the path is already unmounted (framework stripped it), returns it unchanged (with leading `/`).\n */\nexport function stripMountPath(urlPath: string, mountPath: string): string {\n  const raw = urlPath || '/'\n  const qIndex = raw.indexOf('?')\n  const pathname = qIndex === -1 ? raw : raw.slice(0, qIndex)\n  const query = qIndex === -1 ? '' : raw.slice(qIndex)\n\n  const mount = (mountPath || '').replace(/\\/$/, '')\n  if (!mount || mount === '/') {\n    const path = pathname.startsWith('/') ? pathname : `/${pathname}`\n    return `${path}${query}` || '/'\n  }\n\n  if (pathname === mount || pathname.startsWith(`${mount}/`)) {\n    const rest = pathname.slice(mount.length)\n    const path = rest.startsWith('/') ? rest : rest ? `/${rest}` : '/'\n    return `${path}${query}`\n  }\n\n  // Already stripped by the framework (e.g. Express mount)\n  const path = pathname.startsWith('/') ? pathname : `/${pathname}`\n  return `${path}${query}`\n}\n","import type { IncomingMessage, ServerResponse } from 'node:http'\nimport {\n  filterResponseHeaders,\n  flattenRequestHeaders,\n} from './protocol'\nimport { stripMountPath } from './mountPath'\nimport type { TunnelSession } from './session'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\n\nasync function readNodeBody(req: IncomingMessage): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nexport async function forwardNodeRequest(\n  session: TunnelSession,\n  req: IncomingMessage,\n  res: ServerResponse,\n  mountPath: string,\n): Promise<void> {\n  try {\n    const body = await readNodeBody(req)\n    const path = stripMountPath(req.url ?? '/', mountPath)\n    const meta: TunnelMeta = {\n      method: req.method ?? 'GET',\n      path,\n      headers: flattenRequestHeaders(req.headers as Record<string, string | string[] | undefined>),\n    }\n    const { meta: responseMeta, body: responseBody } = await session.forwardHttp(meta, body)\n    writeNodeResponse(res, responseMeta, responseBody)\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    if (!res.headersSent) {\n      res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n    }\n    res.end(`Gateway Hyper tunnel error: ${message}`)\n  }\n}\n\nfunction writeNodeResponse(\n  res: ServerResponse,\n  meta: TunnelResponseMeta,\n  body: Buffer,\n): void {\n  res.writeHead(meta.status, filterResponseHeaders(meta.headers))\n  res.end(body)\n}\n\nexport async function forwardFetchRequest(\n  session: TunnelSession,\n  request: Request,\n  mountPath: string,\n): Promise<Response> {\n  try {\n    const url = new URL(request.url)\n    const path = stripMountPath(`${url.pathname}${url.search}`, mountPath)\n    const bodyBuf = Buffer.from(await request.arrayBuffer())\n    const headerRecord: Record<string, string> = {}\n    request.headers.forEach((value, key) => {\n      headerRecord[key] = value\n    })\n    const meta: TunnelMeta = {\n      method: request.method || 'GET',\n      path,\n      headers: flattenRequestHeaders(headerRecord),\n    }\n    const { meta: responseMeta, body: responseBody } = await session.forwardHttp(meta, bodyBuf)\n    return new Response(responseBody, {\n      status: responseMeta.status,\n      headers: filterResponseHeaders(responseMeta.headers),\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    return new Response(`Gateway Hyper tunnel error: ${message}`, {\n      status: 502,\n      headers: { 'Content-Type': 'text/plain; charset=utf-8' },\n    })\n  }\n}\n","import type { IncomingMessage, ServerResponse } from 'node:http'\nimport { createTunnelSession, type TunnelSession } from './session'\nimport { forwardFetchRequest, forwardNodeRequest } from './forward'\nimport type { CreateGatewayProxyOptions, GatewayProxy } from '../types'\n\nfunction resolveProxyKey(options: CreateGatewayProxyOptions): string {\n  const key =\n    options.key?.trim() ||\n    (typeof process !== 'undefined' ? process.env.SEED_GATEWAY_HYPER_KEY?.trim() : '') ||\n    ''\n  if (!key) {\n    throw new Error(\n      'createGatewayProxy requires options.key or SEED_GATEWAY_HYPER_KEY environment variable',\n    )\n  }\n  return key\n}\n\n/**\n * App-server Hyper gateway proxy for hosted web apps (Path B).\n *\n * Mount on a Node route (Next.js Node runtime, Express, etc.). Keep the operator\n * Hyper key on the server only — browsers talk HTTP to `proxyBaseUrl`.\n *\n * Prefer Node.js over Bun for Holepunch natives.\n */\nexport function createGatewayProxy(options: CreateGatewayProxyOptions = {}): GatewayProxy {\n  const mountPath = options.mountPath?.trim() || '/api/seed-gateway'\n  const key = resolveProxyKey(options)\n\n  let session: TunnelSession | null = null\n  let starting: Promise<TunnelSession> | null = null\n\n  const ensureSession = async (): Promise<TunnelSession> => {\n    if (session) return session\n    if (starting) return starting\n    starting = createTunnelSession({ key, storePath: options.storePath }).then((s) => {\n      session = s\n      starting = null\n      return s\n    })\n    try {\n      return await starting\n    } catch (err) {\n      starting = null\n      throw err\n    }\n  }\n\n  const proxy: GatewayProxy = {\n    mountPath,\n    start: async () => {\n      await ensureSession()\n    },\n    close: async () => {\n      if (starting) {\n        try {\n          await starting\n        } catch {\n          /* ignore start failure during close */\n        }\n      }\n      if (session) {\n        await session.close()\n        session = null\n      }\n    },\n    handleNode: (req: IncomingMessage, res: ServerResponse) => {\n      void (async () => {\n        try {\n          const s = await ensureSession()\n          await forwardNodeRequest(s, req, res, mountPath)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          if (!res.headersSent) {\n            res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n          }\n          res.end(`Gateway Hyper tunnel error: ${message}`)\n        }\n      })()\n    },\n    handleFetch: async (request: Request): Promise<Response> => {\n      try {\n        const s = await ensureSession()\n        return await forwardFetchRequest(s, request, mountPath)\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err)\n        return new Response(`Gateway Hyper tunnel error: ${message}`, {\n          status: 502,\n          headers: { 'Content-Type': 'text/plain; charset=utf-8' },\n        })\n      }\n    },\n  }\n\n  if (options.eager) {\n    void proxy.start().catch(() => {\n      /* first request will surface the error */\n    })\n  }\n\n  return proxy\n}\n","/**\n * Official Seed Protocol gateway Hyper tunnel operator key (z32).\n * Empty until ops generate and back up the first operator keypair.\n */\nexport const DEFAULT_SEED_GATEWAY_HYPER_KEY = ''\n"],"mappings":";;;;;;;AAYA,SAASO,EAAM,GAAqB;CAClC,OAAOC,EAAI,SAAS,KAAK;AAC3B;AAEA,SAASC,EAAQ,GAAqB;CACpC,OAAO,OAAO,KAAKC,GAAK,KAAK;AAC/B;AAEA,SAAgBC,EAAmB,GAA2B;CAC5D,OAAOP,EAAG,OAAOQ,CAAS;AAC5B;AAEA,SAAgBC,EAAgB,GAAqB;CACnD,IAAMC,IAAUC,EAAI,KAAK;CACzB,IAAI,CAACD,GACH,MAAU,MAAM,4BAA4B;CAE9C,IAAI;EACF,OAAO,OAAO,KAAKV,EAAG,OAAOU,CAAO,CAAC;CACvC,QAAQ;EACN,IAAI,oBAAoB,KAAKA,CAAO,GAClC,OAAOL,EAAQK,CAAO;EAExB,MAAU,MAAM,4DAA4DA,EAAQ,MAAM,GAAG,EAAE,EAAE,EAAE;CACrG;AACF;AAEA,SAAgBE,EAA4B,GAAkC;CAC5E,IAAMC,IAAWf,EAAK,QAAQgB,CAAO;CACrC,IAAIjB,EAAG,WAAWgB,CAAQ,GAAG;EAC3B,IAAME,IAAMlB,EAAG,aAAagB,GAAU,MAAM,GACtCG,IAAS,KAAK,MAAMD,CAAG;EAC7B,IAAI,CAACC,EAAO,aAAa,CAACA,EAAO,WAC/B,MAAU,MAAM,uBAAuBH,EAAS,iCAAiC;EAEnF,IAAML,IAAYH,EAAQW,EAAO,SAAS;EAE1C,OAAO;GACL;GACA,WAHgBX,EAAQW,EAAO,SAG/B;GACA,KAAKT,EAAmBC,CAAS;EACnC;CACF;CAEA,IAAMS,IAAMnB,EAAK,QAAQe,CAAQ;CACjC,EAAG,UAAUI,GAAK,EAAE,WAAW,GAAK,CAAC;CACrC,IAAMC,IAAKnB,EAAS,QAAQ,GACtBoB,IAA8B;EAClC,WAAWhB,EAAMe,EAAG,SAAS;EAC7B,WAAWf,EAAMe,EAAG,SAAS;EAC7B,UAAU;CACZ;CAEA,OADArB,EAAG,cAAcgB,GAAU,GAAG,KAAK,UAAUM,GAAW,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC,GAC9E;EACL,WAAWD,EAAG;EACd,WAAWA,EAAG;EACd,KAAKX,EAAmBW,EAAG,SAAS;CACtC;AACF;AAEA,SAAgBE,IAAgD;CAC9D,IAAMF,IAAKnB,EAAS,QAAQ;CAC5B,OAAO;EACL,WAAWmB,EAAG;EACd,WAAWA,EAAG;EACd,KAAKX,EAAmBW,EAAG,SAAS;CACtC;AACF;;;AC3EA,IAAaG,IAAkB,UAYzBC,IAAN,MAAuB;CAQQ;CAP7B,SAAiB,OAAO,MAAM,CAAC;CAC/B,UAAgC,CAAC;CACjC,QAAgB;CAChB;CACA;CACA;CAEA,YAAY,GAAmC;EAyB7C,AAzB2B,KAAA,SAAAC,GAC3B,KAAK,UAAU,MAAkB;GAE/B,AADA,KAAK,SAAS,OAAO,OAAO,CAAC,KAAK,QAAQC,CAAK,CAAC,GAChD,KAAK,MAAM;EACb,GACA,KAAK,WAAW,MAAe;GAC7B,IAAMC,IAAU,KAAK,QAAQ,OAAO,CAAC;GACrC,KAAK,IAAMC,KAAKD,GAAS,EAAE,OAAOE,CAAG;EACvC,GACA,KAAK,cAAc;GAGjB,IAFA,KAAK,QAAQ,IACb,KAAK,MAAM,GACP,KAAK,QAAQ,SAAS,GAAG;IAC3B,IAAMF,IAAU,KAAK,QAAQ,OAAO,CAAC;IACrC,KAAK,IAAMC,KAAKD,GACd,EAAE,OACA,gBAAI,MACF,sCAAsCC,EAAE,OAAO,cAAc,KAAK,OAAO,OAAO,EAClF,CACF;GAEJ;EACF,GACAH,EAAO,GAAG,QAAQ,KAAK,MAAM,GAC7BA,EAAO,GAAG,SAAS,KAAK,OAAO,GAC/BA,EAAO,GAAG,OAAO,KAAK,KAAK;CAC7B;CAEA,UAAU,GAAiC;EACzC,OAAO,IAAI,SAAS,GAAS,MAAW;GACtC,IAAIK,MAAW,GACb,EAAQ,OAAO,MAAM,CAAC,CAAC;QAKzB,IAFA,KAAK,QAAQ,KAAK;IAAE;IAAQ;IAAS;GAAO,CAAC,GAC7C,KAAK,MAAM,GACP,KAAK,SAAS,KAAK,QAAQ,SAAS,GAAG;IACzC,IAAMH,IAAU,KAAK,QAAQ,OAAO,CAAC;IACrC,KAAK,IAAMC,KAAKD,GACd,EAAE,OACA,gBAAI,MACF,sCAAsCC,EAAE,OAAO,cAAc,KAAK,OAAO,OAAO,EAClF,CACF;GAEJ;EACF,CAAC;CACH;CAEA,QAAsB;EACpB,OAAO,KAAK,QAAQ,SAAS,IAAG;GAC9B,IAAMG,IAAO,KAAK,QAAQ;GAC1B,IAAI,CAACA,KAAQ,KAAK,OAAO,SAASA,EAAK,QAAQ;GAC/C,KAAK,QAAQ,MAAM;GACnB,IAAMC,IAAM,KAAK,OAAO,SAAS,GAAGD,EAAK,MAAM;GAE/C,AADA,KAAK,SAAS,KAAK,OAAO,SAASA,EAAK,MAAM,GAC9CA,EAAK,QAAQC,CAAG;EAClB;CACF;AACF,GAEMC,oBAAU,IAAI,QAAoC;AAExD,SAASC,EAAU,GAAoC;CACrD,IAAIC,IAASF,EAAQ,IAAIR,CAAM;CAK/B,OAJKU,MACH,IAAS,IAAIX,EAAiBC,CAAM,GACpCQ,EAAQ,IAAIR,GAAQU,CAAM,IAErBA;AACT;AAEA,SAASC,EAAU,GAAkB,GAAiC;CACpE,OAAOF,EAAUT,CAAM,CAAC,CAAC,UAAUK,CAAM;AAC3C;AAEA,SAASO,EAAY,GAAkB,GAA4B;CACjE,OAAO,IAAI,SAAS,GAAS,MAAW;EAEtC,IAAI;GAEF,IADWZ,EAAO,MAAMnB,CACpB,GAAI;IACN,EAAQ;IACR;GACF;GACA,IAAMgC,UAAgB;IAEpB,AADAb,EAAO,IAAI,SAASc,CAAO,GAC3BC,EAAQ;GACV,GACMD,KAAW,MAAe;IAE9B,AADAd,EAAO,IAAI,SAASa,CAAO,GAC3BG,EAAOZ,CAAG;GACZ;GAEA,AADAJ,EAAO,KAAK,SAASa,CAAO,GAC5Bb,EAAO,KAAK,SAASc,CAAO;EAC9B,SAASV,GAAK;GACZ,EAAOA,aAAe,QAAQA,IAAU,MAAM,OAAOA,CAAG,CAAC,CAAC;EAC5D;CACF,CAAC;AACH;AAEA,eAAsBa,EAAW,GAAkB,GAAgC;CACjF,IAAIC,EAAQ,SAAA,UACV,MAAU,MAAM,oBAAoBA,EAAQ,OAAO,cAAcpB,EAAgB,EAAE;CAErF,IAAMqB,IAAS,OAAO,MAAM,CAAC;CAG7B,AAFAA,EAAO,cAAcD,EAAQ,QAAQ,CAAC,GAEtC,MAAMN,EAAYZ,GAAQ,OAAO,OAAO,CAACmB,GAAQD,CAAO,CAAC,CAAC;AAC5D;AAEA,eAAsBE,EAAU,GAAmC;CAEjE,IAAMf,KAAS,MADMM,EAAUX,GAAQ,CAAC,EAAA,CAClB,aAAa,CAAC;CACpC,IAAIK,MAAW,GACb,OAAO,OAAO,MAAM,CAAC;CAEvB,IAAIA,IAAA,UACF,MAAU,MAAM,oBAAoBA,EAAO,cAAcP,EAAgB,EAAE;CAE7E,OAAOa,EAAUX,GAAQK,CAAM;AACjC;AAEA,eAAsBgB,EACpB,GACA,GACA,GACe;CAGf,AADA,MAAMJ,EAAWjB,GADC,OAAO,KAAK,KAAK,UAAUsB,CAAI,GAAG,MAC3B,CAAS,GAClC,MAAML,EAAWjB,GAAQuB,CAAI;AAC/B;AAEA,eAAsBC,EACpB,GAC6C;CAC7C,IAAMC,IAAU,MAAML,EAAUpB,CAAM,GAChCsB,IAAO,KAAK,MAAMG,EAAQ,SAAS,MAAM,CAAC;CAChD,IAAI,CAACH,EAAK,UAAU,CAACA,EAAK,MACxB,MAAU,MAAM,qDAAqD;CAIvE,OAFA,EAAK,UAAUA,EAAK,WAAW,CAAC,GAEzB;EAAE;EAAM,MAAA,MADIF,EAAUpB,CAAM;CACf;AACtB;AAEA,eAAsB0B,EACpB,GACA,GACA,GACe;CAGf,AADA,MAAMT,EAAWjB,GADC,OAAO,KAAK,KAAK,UAAUsB,CAAI,GAAG,MAC3B,CAAS,GAClC,MAAML,EAAWjB,GAAQuB,CAAI;AAC/B;AAEA,eAAsBI,EACpB,GACqD;CACrD,IAAMF,IAAU,MAAML,EAAUpB,CAAM,GAChCsB,IAAO,KAAK,MAAMG,EAAQ,SAAS,MAAM,CAAC;CAChD,IAAI,OAAOH,EAAK,UAAW,UACzB,MAAU,MAAM,8CAA8C;CAIhE,OAFA,EAAK,UAAUA,EAAK,WAAW,CAAC,GAEzB;EAAE;EAAM,MAAA,MADIF,EAAUpB,CAAM;CACf;AACtB;AAGA,SAAgB4B,EACd,GACwB;CACxB,IAAMrB,IAA8B,CAAC;CACrC,KAAK,IAAM,CAACnB,GAAKyC,MAAU,OAAO,QAAQC,CAAO,GAC/C,AAAID,KAAS,SACb,EAAIzC,KAAO,MAAM,QAAQyC,CAAK,IAAIA,EAAM,KAAK,IAAI,IAAIA;CAEvD,OAAOtB;AACT;AAGA,SAAgBwB,EACd,GACwB;CACxB,IAAMC,oBAAO,IAAI,IAAI;EACnB;EACA;EACA;EACA;CACF,CAAC,GACKzB,IAA8B,CAAC;CACrC,KAAK,IAAM,CAACnB,GAAKyC,MAAU,OAAO,QAAQC,CAAO,GAC/C,AAAIE,EAAK,IAAI5C,EAAI,YAAY,CAAC,KAC1ByC,KAAS,SACb,EAAIzC,KAAO,MAAM,QAAQyC,CAAK,IAAIA,EAAM,KAAK,IAAI,IAAIA;CAEvD,OAAOtB;AACT;;;ACzNA,eAAsB0B,EACpB,GACA,GACA,GAC4E;CAC5E,IAAMC,IAAOC,EAAa,QAAQ,OAAO,EAAE,GACrCC,IAAY,IAAI/D,EAAIiD,EAAK,MAAM,GAAGY,EAAK,EAAE;CAE/C,OAAO,IAAI,SAAS,GAAS,MAAW;EACtC,IAAMG,IAAM3D,EAAK,QACf0D,GACA;GACE,QAAQd,EAAK;GACb,SAASA,EAAK;EAChB,IACC,MAAQ;GACP,IAAMgB,IAAmB,CAAC;GAS1B,AARAC,EAAI,GAAG,SAAS,MAAkBD,EAAO,KAAKrC,CAAK,CAAC,GACpDsC,EAAI,GAAG,aAAa;IAClB,EAAQ;KACN,QAAQA,EAAI,cAAc;KAC1B,SAASR,EAAsBQ,EAAI,OAAwD;KAC3F,MAAM,OAAO,OAAOD,CAAM;IAC5B,CAAC;GACH,CAAC,GACDC,EAAI,GAAG,SAASvB,CAAM;EACxB,CACF;EAKA,AAJAqB,EAAI,GAAG,SAASrB,CAAM,GAClBO,EAAK,SAAS,KAChBc,EAAI,MAAMd,CAAI,GAEhBc,EAAI,IAAI;CACV,CAAC;AACH;;;AChCA,SAASG,EACP,GACA,GACM;CAEN,IAAIC,IAAiBjB,EAAkBkB,CAAM;CAC7C,CAAM,YAAY;EAChB,IAAI;GACF,SAAa;IACX,IAAM,EAAE,SAAM,YAAS,MAAMD,GACvBE,IAAS,MAAMV,EAAmBW,GAAUtB,GAAMC,CAAI;IAM5D,AALA,MAAMG,EACJgB,GACA;KAAE,QAAQC,EAAO;KAAQ,SAASA,EAAO;IAAQ,GACjDA,EAAO,IACT,GACA,IAAiBnB,EAAkBkB,CAAM;GAC3C;EACF,QAAQ;GACN,EAAO,QAAQ;EACjB;CACF,EAAA,CAAG;AACL;AAKA,eAAsBG,EAAY,GAAyD;CACzF,IAAMD,IAAWE,EAAQ,SAAS,QAAQ,OAAO,EAAE,GAE7CC,IAAU1D,EADAyD,EAAQ,WAAW,wCACgB,GAE7CE,IAAM,IAAIxE,EAAS,GACnByE,IAASD,EAAI,cAAc,MAAW;EAC1C,EAAiBN,GAAkBE,CAAQ;CAC7C,CAAC;CAID,OAFA,MAAMK,EAAO,OAAOF,CAAO,GAEpB;EACL,KAAKA,EAAQ;EACb;EACA,OAAO,YAAY;GAEjB,AADA,MAAME,EAAO,MAAM,GACnB,MAAMD,EAAI,QAAQ;EACpB;CACF;AACF;;;AC5BA,eAAsBE,EAAoB,GAAuD;CAC/F,IAAMC,IAAkBjE,EAAgB4D,EAAQ,GAAG,GAC7CM,IAAYvD,EAA6B,GAEzCmD,IAAM,IAAIxE,EAAS,GACrB6E,IAA8B,MAC9BC,IAAqC,MAEnCC,IAAY,YACZF,KAAgB,CAACA,EAAa,YACzBA,IAELC,MAGJ,IAAa,IAAI,SAAiB,GAAS,MAAW;EACpD,IAAMZ,IAASM,EAAI,QAAQG,GAAiB,EAC1C,SAAS;GAAE,WAAWC,EAAU;GAAW,WAAWA,EAAU;EAAU,EAC5E,CAAC,GACKI,UAAgB;GAGpB,AAFA,IAAed,GACf,IAAa,MACb3B,EAAQ2B,CAAM;EAChB;EAGA,AAFAA,EAAO,KAAK,QAAQc,CAAO,GAC3Bd,EAAO,KAAK,WAAWc,CAAO,GAC9Bd,EAAO,KAAK,UAAU,MAAe;GAEnC,AADA,IAAa,MACb1B,EAAOZ,CAAG;EACZ,CAAC;CACH,CAAC,GACMkD,IAILG,IAAgC,QAAQ,QAAQ,GAC9CC,IAAc,OAAU,MAAmD;EAC/E,IAAMC,IAAMF,EAAY,WAAWF,EAAU,CAAC,CAAC,CAAC,KAAKK,CAAE;EAEvD,OADA,IAAcD,EAAI,YAAY,CAAC,CAAC,GACzBA;CACT;CAYA,OAAO;EACL,KAAKb,EAAQ;EACb;EACA,oBAZA,GACA,MAEOY,EAAY,OAAO,OACxB,MAAMrC,EAAmBqB,GAAQpB,GAAMC,CAAI,GACpCI,EAAmBe,CAAM,EACjC;EAOD,OAAO,YAAY;GAIjB,AAHIW,KAAgB,CAACA,EAAa,aAChCA,EAAa,QAAQ,GAEvB,MAAML,EAAI,QAAQ;EACpB;CACF;AACF;;;ACjFA,eAAea,EAAgB,GAAuC;CACpE,IAAMvB,IAAmB,CAAC;CAC1B,WAAW,IAAMrC,KAASoC,GACxB,EAAO,KAAK,OAAO,SAASpC,CAAK,IAAIA,IAAQ,OAAO,KAAKA,CAAK,CAAC;CAEjE,OAAO,OAAO,OAAOqC,CAAM;AAC7B;AAEA,SAASwB,EACP,GAIa;CACb,OAAOpF,EAAK,cAAc,GAAK,MAAQ;EACrC,CAAM,YAAY;GAChB,IAAI;IACF,IAAM6C,IAAO,MAAMsC,EAAgBxB,CAAG,GAChC9D,IAAO8D,EAAI,OAAO,KAOlB,EAAE,MAAM0B,GAAc,MAAMC,MAAiB,MAAMC,EAAY;KALnE,QAAQ5B,EAAI,UAAU;KACtB;KACA,SAAST,EAAsBS,EAAI,OAAwD;IAGxB,GAAMd,CAAI;IAG/E,AADAgB,EAAI,UAAUwB,EAAa,QAAQA,EAAa,OAAO,GACvDxB,EAAI,IAAIyB,CAAY;GACtB,SAAS5D,GAAK;IACZ,IAAM8D,IAAU9D,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;IAI/D,AAHKmC,EAAI,eACPA,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpEA,EAAI,IAAI,+BAA+B2B,GAAS;GAClD;EACF,EAAA,CAAG;CACL,CAAC;AACH;AAKA,eAAsBC,EAAc,GAA6D;CAC/F,IAAMC,IAAOtB,EAAQ,QAAQ,aACvBuB,IAAOvB,EAAQ,QAAQ,MAEvBwB,IAAU,MAAMpB,EAAoB;EACxC,KAAKJ,EAAQ;EACb,WAAWA,EAAQ;CACrB,CAAC,GAEKG,IAASa,GAAmB,GAAM,MAASQ,EAAQ,YAAYhD,GAAMC,CAAI,CAAC;CAEhF,MAAM,IAAI,SAAe,GAAS,MAAW;EAE3C,AADA0B,EAAO,KAAK,SAASjC,CAAM,GAC3BiC,EAAO,OAAOoB,GAAMD,SAAYrD,EAAQ,CAAC;CAC3C,CAAC;CAED,IAAMwD,IAAUtB,EAAO,QAAQ,GACzBuB,IACJD,KAAW,OAAOA,KAAY,WAAWA,EAAQ,OAAOF,GAEpDI,IAAU,UAAUL,EAAK,GAAGI;CAElC,OAAO;EACL,KAAK1B,EAAQ;EACb;EACA,MAAM0B;EACN;EACA,OAAO,YAAY;GAEjB,AADA,MAAM,IAAI,SAAe,MAAYvB,EAAO,YAAYlC,EAAQ,CAAC,CAAC,GAClE,MAAMuD,EAAQ,MAAM;EACtB;CACF;AACF;AAEA,SAAgBI,EAAgB,GAAiB,IAAO,IAAY;CAClE,IAAMxC,IAAOuC,EAAQ,QAAQ,OAAO,EAAE;CAEtC,OADKlG,IACEA,EAAK,WAAW,GAAG,IAAI,GAAG2D,IAAO3D,MAAS,GAAG2D,EAAK,GAAG3D,MAD1C2D;AAEpB;;;ACrFA,SAAgByC,EAAe,GAAiB,GAA2B;CACzE,IAAMnF,IAAMoF,KAAW,KACjBC,IAASrF,EAAI,QAAQ,GAAG,GACxBsF,IAAWD,MAAW,KAAKrF,IAAMA,EAAI,MAAM,GAAGqF,CAAM,GACpDE,IAAQF,MAAW,KAAK,KAAKrF,EAAI,MAAMqF,CAAM,GAE7CG,KAASC,KAAa,GAAA,CAAI,QAAQ,OAAO,EAAE;CACjD,IAAI,CAACD,KAASA,MAAU,KAEtB,OAAO,GADMF,EAAS,WAAW,GAAG,IAAIA,IAAW,IAAIA,MACtCC,OAAW;CAG9B,IAAID,MAAaE,KAASF,EAAS,WAAW,GAAGE,EAAM,EAAE,GAAG;EAC1D,IAAME,IAAOJ,EAAS,MAAME,EAAM,MAAM;EAExC,OAAO,GADME,EAAK,WAAW,GAAG,IAAIA,IAAOA,IAAO,IAAIA,MAAS,MAC9CH;CACnB;CAIA,OAAO,GADMD,EAAS,WAAW,GAAG,IAAIA,IAAW,IAAIA,MACtCC;AACnB;;;AChBA,eAAeI,EAAa,GAAuC;CACjE,IAAM7C,IAAmB,CAAC;CAC1B,WAAW,IAAMrC,KAASoC,GACxB,EAAO,KAAK,OAAO,SAASpC,CAAK,IAAIA,IAAQ,OAAO,KAAKA,CAAK,CAAC;CAEjE,OAAO,OAAO,OAAOqC,CAAM;AAC7B;AAEA,eAAsB8C,EACpB,GACA,GACA,GACA,GACe;CACf,IAAI;EACF,IAAM7D,IAAO,MAAM4D,EAAa9C,CAAG,GAC7B9D,IAAOoG,EAAetC,EAAI,OAAO,KAAK4C,CAAS,GAC/C3D,IAAmB;GACvB,QAAQe,EAAI,UAAU;GACtB;GACA,SAAST,EAAsBS,EAAI,OAAwD;EAC7F,GACM,EAAE,MAAM0B,GAAc,MAAMC,MAAiB,MAAMM,EAAQ,YAAYhD,GAAMC,CAAI;EACvF,EAAkBgB,GAAKwB,GAAcC,CAAY;CACnD,SAAS5D,GAAK;EACZ,IAAM8D,IAAU9D,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;EAI/D,AAHKmC,EAAI,eACPA,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpEA,EAAI,IAAI,+BAA+B2B,GAAS;CAClD;AACF;AAEA,SAASmB,EACP,GACA,GACA,GACM;CAEN,AADA9C,EAAI,UAAUjB,EAAK,QAAQS,EAAsBT,EAAK,OAAO,CAAC,GAC9DiB,EAAI,IAAIhB,CAAI;AACd;AAEA,eAAsB+D,EACpB,GACA,GACA,GACmB;CACnB,IAAI;EACF,IAAMC,IAAM,IAAI,IAAIC,EAAQ,GAAG,GACzBjH,IAAOoG,EAAe,GAAGY,EAAI,WAAWA,EAAI,UAAUN,CAAS,GAC/DQ,IAAU,OAAO,KAAK,MAAMD,EAAQ,YAAY,CAAC,GACjDE,IAAuC,CAAC;EAC9C,EAAQ,QAAQ,SAAS,GAAO,MAAQ;GACtC,EAAatG,KAAOyC;EACtB,CAAC;EACD,IAAMP,IAAmB;GACvB,QAAQkE,EAAQ,UAAU;GAC1B;GACA,SAAS5D,EAAsB8D,CAAY;EAC7C,GACM,EAAE,MAAM3B,GAAc,MAAMC,MAAiB,MAAMM,EAAQ,YAAYhD,GAAMmE,CAAO;EAC1F,OAAO,IAAI,SAASzB,GAAc;GAChC,QAAQD,EAAa;GACrB,SAAShC,EAAsBgC,EAAa,OAAO;EACrD,CAAC;CACH,SAAS3D,GAAK;EACZ,IAAM8D,IAAU9D,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;EAC/D,OAAO,IAAI,SAAS,+BAA+B8D,KAAW;GAC5D,QAAQ;GACR,SAAS,EAAE,gBAAgB,4BAA4B;EACzD,CAAC;CACH;AACF;;;AC5EA,SAASyB,EAAgB,GAA4C;CACnE,IAAMvG,IACJ0D,EAAQ,KAAK,KAAK,MACjB,OAAO,UAAY,MAAc,QAAQ,IAAI,wBAAwB,KAAK,IAAI,OAC/E;CACF,IAAI,CAAC1D,GACH,MAAU,MACR,wFACF;CAEF,OAAOA;AACT;AAUA,SAAgBwG,EAAmB,IAAqC,CAAC,GAAiB;CACxF,IAAMX,IAAYnC,EAAQ,WAAW,KAAK,KAAK,qBACzC1D,IAAMuG,EAAgB7C,CAAO,GAE/BwB,IAAgC,MAChCuB,IAA0C,MAExCC,IAAgB,YAAoC;EACxD,IAAIxB,GAAS,OAAOA;EACpB,IAAIuB,GAAU,OAAOA;EACrB,IAAW3C,EAAoB;GAAE;GAAK,WAAWJ,EAAQ;EAAU,CAAC,CAAC,CAAC,MAAM,OAC1E,IAAUiD,GACV,IAAW,MACJA,EACR;EACD,IAAI;GACF,OAAO,MAAMF;EACf,SAASzF,GAAK;GAEZ,MADA,IAAW,MACLA;EACR;CACF,GAEM4F,IAAsB;EAC1B;EACA,OAAO,YAAY;GACjB,MAAMF,EAAc;EACtB;EACA,OAAO,YAAY;GACjB,IAAID,GACF,IAAI;IACF,MAAMA;GACR,QAAQ,CAER;GAEF,AAEEvB,OADA,MAAMA,EAAQ,MAAM,GACV;EAEd;EACA,aAAa,GAAsB,MAAwB;GACzD,CAAM,YAAY;IAChB,IAAI;KAEF,MAAMc,EAAmB,MADTU,EAAc,GACFzD,GAAKE,GAAK0C,CAAS;IACjD,SAAS7E,GAAK;KACZ,IAAM8D,IAAU9D,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;KAI/D,AAHKmC,EAAI,eACPA,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpEA,EAAI,IAAI,+BAA+B2B,GAAS;IAClD;GACF,EAAA,CAAG;EACL;EACA,aAAa,OAAO,MAAwC;GAC1D,IAAI;IAEF,OAAO,MAAMoB,EAAoB,MADjBQ,EAAc,GACMN,GAASP,CAAS;GACxD,SAAS7E,GAAK;IACZ,IAAM8D,IAAU9D,aAAe,QAAQA,EAAI,UAAU,OAAOA,CAAG;IAC/D,OAAO,IAAI,SAAS,+BAA+B8D,KAAW;KAC5D,QAAQ;KACR,SAAS,EAAE,gBAAgB,4BAA4B;IACzD,CAAC;GACH;EACF;CACF;CAQA,OANIpB,EAAQ,SACVkD,EAAW,MAAM,CAAC,CAAC,YAAY,CAE/B,CAAC,GAGIA;AACT;;;AClGA,IAAaC,IAAiC"}

package/package.json

@@ -1,9 +1,12 @@
 {
   "name": "@seedprotocol/gateway-hyper",
-  "version": "0.7.0",
+  "version": "0.7.2-next.593.gd5bd4ea",
   "description": "Hyperswarm HTTP tunnel for Seed Protocol gateway + upload API infrastructure",
   "type": "module",
   "main": "./dist/index.js",
+  "bin": {
+    "seed-gateway": "./dist/bin.js"
+  },
   "exports": {
     ".": {
       "import": {
@@ -39,10 +42,15 @@
     "rimraf": "^6.0.1",
     "typescript": "~5.9.3",
     "vite": "^8.0.0",
-    "vitest": "^3.0.0"
+    "vitest": "^4.1.11"
   },
   "author": "Keith Axline <keith@journodao.xyz>",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/JournoLabs/seed-protocol-sdk.git",
+    "directory": "packages/gateway-hyper"
+  },
   "publishConfig": {
     "access": "public"
   }

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/keys.ts","../src/tunnel/protocol.ts","../src/tunnel/proxy.ts","../src/tunnel/serve.ts","../src/tunnel/session.ts","../src/tunnel/connect.ts","../src/tunnel/mountPath.ts","../src/tunnel/forward.ts","../src/tunnel/proxyApp.ts","../src/constants.ts"],"sourcesContent":["import fs from 'node:fs'\nimport path from 'node:path'\nimport HyperDHT from 'hyperdht'\nimport ID from 'hypercore-id-encoding'\nimport type { OperatorKeyPair } from './types'\n\nexport interface PersistedKeyFile {\n  publicKey: string\n  secretKey: string\n  encoding: 'hex'\n}\n\nfunction toHex(buf: Buffer): string {\n  return buf.toString('hex')\n}\n\nfunction fromHex(hex: string): Buffer {\n  return Buffer.from(hex, 'hex')\n}\n\nexport function encodePublicKeyZ32(publicKey: Buffer): string {\n  return ID.encode(publicKey)\n}\n\nexport function decodePublicKey(key: string): Buffer {\n  const trimmed = key.trim()\n  if (!trimmed) {\n    throw new Error('Gateway Hyper key is empty')\n  }\n  try {\n    return Buffer.from(ID.decode(trimmed))\n  } catch {\n    if (/^[a-fA-F0-9]{64}$/.test(trimmed)) {\n      return fromHex(trimmed)\n    }\n    throw new Error(`Invalid Gateway Hyper key (expected z32 or 64-char hex): ${trimmed.slice(0, 12)}…`)\n  }\n}\n\nexport function loadOrCreateOperatorKeypair(keyFile: string): OperatorKeyPair {\n  const resolved = path.resolve(keyFile)\n  if (fs.existsSync(resolved)) {\n    const raw = fs.readFileSync(resolved, 'utf8')\n    const parsed = JSON.parse(raw) as PersistedKeyFile\n    if (!parsed.publicKey || !parsed.secretKey) {\n      throw new Error(`Invalid key file at ${resolved}: missing publicKey or secretKey`)\n    }\n    const publicKey = fromHex(parsed.publicKey)\n    const secretKey = fromHex(parsed.secretKey)\n    return {\n      publicKey,\n      secretKey,\n      z32: encodePublicKeyZ32(publicKey),\n    }\n  }\n\n  const dir = path.dirname(resolved)\n  fs.mkdirSync(dir, { recursive: true })\n  const kp = HyperDHT.keyPair()\n  const persisted: PersistedKeyFile = {\n    publicKey: toHex(kp.publicKey),\n    secretKey: toHex(kp.secretKey),\n    encoding: 'hex',\n  }\n  fs.writeFileSync(resolved, `${JSON.stringify(persisted, null, 2)}\\n`, { mode: 0o600 })\n  return {\n    publicKey: kp.publicKey,\n    secretKey: kp.secretKey,\n    z32: encodePublicKeyZ32(kp.publicKey),\n  }\n}\n\nexport function createEphemeralClientKeypair(): OperatorKeyPair {\n  const kp = HyperDHT.keyPair()\n  return {\n    publicKey: kp.publicKey,\n    secretKey: kp.secretKey,\n    z32: encodePublicKeyZ32(kp.publicKey),\n  }\n}\n","import type { Readable, Writable } from 'node:stream'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\n\n/** Maximum single frame payload (64 MiB). */\nexport const MAX_FRAME_BYTES = 64 * 1024 * 1024\n\ntype ByteWaiter = {\n  length: number\n  resolve: (buf: Buffer) => void\n  reject: (err: Error) => void\n}\n\n/**\n * Per-stream byte buffer. HyperDHT duplexes do not reliably support `unshift`,\n * so we accumulate and slice locally instead of pushing leftovers back.\n */\nclass StreamByteReader {\n  private buffer = Buffer.alloc(0)\n  private waiters: ByteWaiter[] = []\n  private ended = false\n  private readonly onData: (chunk: Buffer) => void\n  private readonly onError: (err: Error) => void\n  private readonly onEnd: () => void\n\n  constructor(private readonly stream: Readable) {\n    this.onData = (chunk: Buffer) => {\n      this.buffer = Buffer.concat([this.buffer, chunk])\n      this.drain()\n    }\n    this.onError = (err: Error) => {\n      const waiters = this.waiters.splice(0)\n      for (const w of waiters) w.reject(err)\n    }\n    this.onEnd = () => {\n      this.ended = true\n      this.drain()\n      if (this.waiters.length > 0) {\n        const waiters = this.waiters.splice(0)\n        for (const w of waiters) {\n          w.reject(\n            new Error(\n              `Unexpected end of stream (expected ${w.length} bytes, got ${this.buffer.length})`,\n            ),\n          )\n        }\n      }\n    }\n    stream.on('data', this.onData)\n    stream.on('error', this.onError)\n    stream.on('end', this.onEnd)\n  }\n\n  readExact(length: number): Promise<Buffer> {\n    return new Promise((resolve, reject) => {\n      if (length === 0) {\n        resolve(Buffer.alloc(0))\n        return\n      }\n      this.waiters.push({ length, resolve, reject })\n      this.drain()\n      if (this.ended && this.waiters.length > 0) {\n        const waiters = this.waiters.splice(0)\n        for (const w of waiters) {\n          w.reject(\n            new Error(\n              `Unexpected end of stream (expected ${w.length} bytes, got ${this.buffer.length})`,\n            ),\n          )\n        }\n      }\n    })\n  }\n\n  private drain(): void {\n    while (this.waiters.length > 0) {\n      const next = this.waiters[0]\n      if (!next || this.buffer.length < next.length) break\n      this.waiters.shift()\n      const out = this.buffer.subarray(0, next.length)\n      this.buffer = this.buffer.subarray(next.length)\n      next.resolve(out)\n    }\n  }\n}\n\nconst readers = new WeakMap<Readable, StreamByteReader>()\n\nfunction getReader(stream: Readable): StreamByteReader {\n  let reader = readers.get(stream)\n  if (!reader) {\n    reader = new StreamByteReader(stream)\n    readers.set(stream, reader)\n  }\n  return reader\n}\n\nfunction readExact(stream: Readable, length: number): Promise<Buffer> {\n  return getReader(stream).readExact(length)\n}\n\nfunction writeBuffer(stream: Writable, buf: Buffer): Promise<void> {\n  return new Promise((resolve, reject) => {\n    // HyperDHT duplexes often never invoke write(callback). Use return value + drain.\n    try {\n      const ok = stream.write(buf)\n      if (ok) {\n        resolve()\n        return\n      }\n      const onDrain = () => {\n        stream.off('error', onError)\n        resolve()\n      }\n      const onError = (err: Error) => {\n        stream.off('drain', onDrain)\n        reject(err)\n      }\n      stream.once('drain', onDrain)\n      stream.once('error', onError)\n    } catch (err) {\n      reject(err instanceof Error ? err : new Error(String(err)))\n    }\n  })\n}\n\nexport async function writeFrame(stream: Writable, payload: Buffer): Promise<void> {\n  if (payload.length > MAX_FRAME_BYTES) {\n    throw new Error(`Frame too large: ${payload.length} bytes (max ${MAX_FRAME_BYTES})`)\n  }\n  const header = Buffer.alloc(4)\n  header.writeUInt32BE(payload.length, 0)\n  // Single write — HyperDHT can drop/stall subsequent writes in the same turn.\n  await writeBuffer(stream, Buffer.concat([header, payload]))\n}\n\nexport async function readFrame(stream: Readable): Promise<Buffer> {\n  const header = await readExact(stream, 4)\n  const length = header.readUInt32BE(0)\n  if (length === 0) {\n    return Buffer.alloc(0)\n  }\n  if (length > MAX_FRAME_BYTES) {\n    throw new Error(`Frame too large: ${length} bytes (max ${MAX_FRAME_BYTES})`)\n  }\n  return readExact(stream, length)\n}\n\nexport async function writeTunnelRequest(\n  stream: Writable,\n  meta: TunnelMeta,\n  body: Buffer,\n): Promise<void> {\n  const metaFrame = Buffer.from(JSON.stringify(meta), 'utf8')\n  await writeFrame(stream, metaFrame)\n  await writeFrame(stream, body)\n}\n\nexport async function readTunnelRequest(\n  stream: Readable,\n): Promise<{ meta: TunnelMeta; body: Buffer }> {\n  const metaBuf = await readFrame(stream)\n  const meta = JSON.parse(metaBuf.toString('utf8')) as TunnelMeta\n  if (!meta.method || !meta.path) {\n    throw new Error('Invalid tunnel request meta: missing method or path')\n  }\n  meta.headers = meta.headers ?? {}\n  const body = await readFrame(stream)\n  return { meta, body }\n}\n\nexport async function writeTunnelResponse(\n  stream: Writable,\n  meta: TunnelResponseMeta,\n  body: Buffer,\n): Promise<void> {\n  const metaFrame = Buffer.from(JSON.stringify(meta), 'utf8')\n  await writeFrame(stream, metaFrame)\n  await writeFrame(stream, body)\n}\n\nexport async function readTunnelResponse(\n  stream: Readable,\n): Promise<{ meta: TunnelResponseMeta; body: Buffer }> {\n  const metaBuf = await readFrame(stream)\n  const meta = JSON.parse(metaBuf.toString('utf8')) as TunnelResponseMeta\n  if (typeof meta.status !== 'number') {\n    throw new Error('Invalid tunnel response meta: missing status')\n  }\n  meta.headers = meta.headers ?? {}\n  const body = await readFrame(stream)\n  return { meta, body }\n}\n\n/** Normalize header values to strings for tunnel transport. */\nexport function flattenRequestHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string> {\n  const out: Record<string, string> = {}\n  for (const [key, value] of Object.entries(headers)) {\n    if (value == null) continue\n    out[key] = Array.isArray(value) ? value.join(', ') : value\n  }\n  return out\n}\n\n/** Pick response headers safe to forward to the local HTTP client. */\nexport function filterResponseHeaders(\n  headers: Record<string, string | string[] | undefined>,\n): Record<string, string> {\n  const skip = new Set([\n    'connection',\n    'keep-alive',\n    'transfer-encoding',\n    'upgrade',\n  ])\n  const out: Record<string, string> = {}\n  for (const [key, value] of Object.entries(headers)) {\n    if (skip.has(key.toLowerCase())) continue\n    if (value == null) continue\n    out[key] = Array.isArray(value) ? value.join(', ') : value\n  }\n  return out\n}\n","import http from 'node:http'\nimport { URL } from 'node:url'\nimport { filterResponseHeaders } from './protocol'\nimport type { TunnelMeta } from '../types'\n\nexport async function proxyTunnelRequest(\n  upstreamBase: string,\n  meta: TunnelMeta,\n  body: Buffer,\n): Promise<{ status: number; headers: Record<string, string>; body: Buffer }> {\n  const base = upstreamBase.replace(/\\/$/, '')\n  const targetUrl = new URL(meta.path, `${base}/`)\n\n  return new Promise((resolve, reject) => {\n    const req = http.request(\n      targetUrl,\n      {\n        method: meta.method,\n        headers: meta.headers,\n      },\n      (res) => {\n        const chunks: Buffer[] = []\n        res.on('data', (chunk: Buffer) => chunks.push(chunk))\n        res.on('end', () => {\n          resolve({\n            status: res.statusCode ?? 502,\n            headers: filterResponseHeaders(res.headers as Record<string, string | string[] | undefined>),\n            body: Buffer.concat(chunks),\n          })\n        })\n        res.on('error', reject)\n      },\n    )\n    req.on('error', reject)\n    if (body.length > 0) {\n      req.write(body)\n    }\n    req.end()\n  })\n}\n","import type { Duplex } from 'node:stream'\nimport HyperDHT from 'hyperdht'\nimport { readTunnelRequest, writeTunnelResponse } from './protocol'\nimport { proxyTunnelRequest } from './proxy'\nimport { loadOrCreateOperatorKeypair } from '../keys'\nimport type { ServeTunnelOptions, ServeTunnelResult } from '../types'\n\nfunction handleConnection(\n  socket: Duplex,\n  upstream: string,\n): void {\n  // Attach framed readers synchronously so HyperDHT early bytes are not lost.\n  let pendingRequest = readTunnelRequest(socket)\n  void (async () => {\n    try {\n      while (true) {\n        const { meta, body } = await pendingRequest\n        const result = await proxyTunnelRequest(upstream, meta, body)\n        await writeTunnelResponse(\n          socket,\n          { status: result.status, headers: result.headers },\n          result.body,\n        )\n        pendingRequest = readTunnelRequest(socket)\n      }\n    } catch {\n      socket.destroy()\n    }\n  })()\n}\n\n/**\n * Operator: accept Hyperswarm/DHT connections and proxy framed HTTP to upstream Traefik.\n */\nexport async function serveTunnel(options: ServeTunnelOptions): Promise<ServeTunnelResult> {\n  const upstream = options.upstream.replace(/\\/$/, '')\n  const keyFile = options.keyFile ?? '.seed/gateway-tunnel/operator.key.json'\n  const keypair = loadOrCreateOperatorKeypair(keyFile)\n\n  const dht = new HyperDHT()\n  const server = dht.createServer((socket) => {\n    handleConnection(socket as Duplex, upstream)\n  })\n\n  await server.listen(keypair)\n\n  return {\n    key: keypair.z32,\n    upstream,\n    close: async () => {\n      await server.close()\n      await dht.destroy()\n    },\n  }\n}\n","import type { Duplex } from 'node:stream'\nimport HyperDHT from 'hyperdht'\nimport { createEphemeralClientKeypair, decodePublicKey } from '../keys'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\nimport { readTunnelResponse, writeTunnelRequest } from './protocol'\n\nexport type TunnelSessionOptions = {\n  /** Operator public key (z32 or hex) */\n  key: string\n  /** Optional store path for DHT client state */\n  storePath?: string\n}\n\nexport type TunnelSession = {\n  key: string\n  runOnTunnel: <T>(fn: (socket: Duplex) => Promise<T>) => Promise<T>\n  forwardHttp: (\n    meta: TunnelMeta,\n    body: Buffer,\n  ) => Promise<{ meta: TunnelResponseMeta; body: Buffer }>\n  close: () => Promise<void>\n}\n\n/**\n * Dial the operator HyperDHT key and expose a serialized request/response forwarder.\n */\nexport async function createTunnelSession(options: TunnelSessionOptions): Promise<TunnelSession> {\n  const remotePublicKey = decodePublicKey(options.key)\n  const clientKey = createEphemeralClientKeypair()\n\n  const dht = new HyperDHT()\n  let activeSocket: Duplex | null = null\n  let connecting: Promise<Duplex> | null = null\n\n  const getSocket = async (): Promise<Duplex> => {\n    if (activeSocket && !activeSocket.destroyed) {\n      return activeSocket\n    }\n    if (connecting) {\n      return connecting\n    }\n    connecting = new Promise<Duplex>((resolve, reject) => {\n      const socket = dht.connect(remotePublicKey, {\n        keyPair: { publicKey: clientKey.publicKey, secretKey: clientKey.secretKey },\n      }) as Duplex\n      const onReady = () => {\n        activeSocket = socket\n        connecting = null\n        resolve(socket)\n      }\n      socket.once('open', onReady)\n      socket.once('connect', onReady)\n      socket.once('error', (err: Error) => {\n        connecting = null\n        reject(err)\n      })\n    })\n    return connecting\n  }\n\n  /** Serialize tunnel transactions on one persistent socket. */\n  let tunnelQueue: Promise<unknown> = Promise.resolve()\n  const runOnTunnel = async <T>(fn: (socket: Duplex) => Promise<T>): Promise<T> => {\n    const run = tunnelQueue.then(() => getSocket()).then(fn)\n    tunnelQueue = run.catch(() => {})\n    return run\n  }\n\n  const forwardHttp = async (\n    meta: TunnelMeta,\n    body: Buffer,\n  ): Promise<{ meta: TunnelResponseMeta; body: Buffer }> => {\n    return runOnTunnel(async (socket) => {\n      await writeTunnelRequest(socket, meta, body)\n      return readTunnelResponse(socket)\n    })\n  }\n\n  return {\n    key: options.key,\n    runOnTunnel,\n    forwardHttp,\n    close: async () => {\n      if (activeSocket && !activeSocket.destroyed) {\n        activeSocket.destroy()\n      }\n      await dht.destroy()\n    },\n  }\n}\n","import http from 'node:http'\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport {\n  flattenRequestHeaders,\n} from './protocol'\nimport { createTunnelSession } from './session'\nimport type { ConnectTunnelOptions, ConnectTunnelResult } from '../types'\n\nasync function readRequestBody(req: IncomingMessage): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nfunction createLocalServer(\n  forwardHttp: (\n    meta: { method: string; path: string; headers: Record<string, string> },\n    body: Buffer,\n  ) => Promise<{ meta: { status: number; headers: Record<string, string> }; body: Buffer }>,\n): http.Server {\n  return http.createServer((req, res) => {\n    void (async () => {\n      try {\n        const body = await readRequestBody(req)\n        const path = req.url ?? '/'\n        const meta = {\n          method: req.method ?? 'GET',\n          path,\n          headers: flattenRequestHeaders(req.headers as Record<string, string | string[] | undefined>),\n        }\n\n        const { meta: responseMeta, body: responseBody } = await forwardHttp(meta, body)\n\n        res.writeHead(responseMeta.status, responseMeta.headers)\n        res.end(responseBody)\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err)\n        if (!res.headersSent) {\n          res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n        }\n        res.end(`Gateway Hyper tunnel error: ${message}`)\n      }\n    })()\n  })\n}\n\n/**\n * Client: dial operator key and expose a localhost HTTP server that forwards through the tunnel.\n */\nexport async function connectTunnel(options: ConnectTunnelOptions): Promise<ConnectTunnelResult> {\n  const host = options.host ?? '127.0.0.1'\n  const port = options.port ?? 1984\n\n  const session = await createTunnelSession({\n    key: options.key,\n    storePath: options.storePath,\n  })\n\n  const server = createLocalServer((meta, body) => session.forwardHttp(meta, body))\n\n  await new Promise<void>((resolve, reject) => {\n    server.once('error', reject)\n    server.listen(port, host, () => resolve())\n  })\n\n  const address = server.address()\n  const boundPort =\n    address && typeof address === 'object' ? address.port : port\n\n  const baseUrl = `http://${host}:${boundPort}`\n\n  return {\n    key: options.key,\n    host,\n    port: boundPort,\n    baseUrl,\n    close: async () => {\n      await new Promise<void>((resolve) => server.close(() => resolve()))\n      await session.close()\n    },\n  }\n}\n\nexport function localGatewayUrl(baseUrl: string, path = ''): string {\n  const base = baseUrl.replace(/\\/$/, '')\n  if (!path) return base\n  return path.startsWith('/') ? `${base}${path}` : `${base}/${path}`\n}\n","/**\n * Strip a mount path prefix from an incoming request URL path (including query string).\n * If the path is already unmounted (framework stripped it), returns it unchanged (with leading `/`).\n */\nexport function stripMountPath(urlPath: string, mountPath: string): string {\n  const raw = urlPath || '/'\n  const qIndex = raw.indexOf('?')\n  const pathname = qIndex === -1 ? raw : raw.slice(0, qIndex)\n  const query = qIndex === -1 ? '' : raw.slice(qIndex)\n\n  const mount = (mountPath || '').replace(/\\/$/, '')\n  if (!mount || mount === '/') {\n    const path = pathname.startsWith('/') ? pathname : `/${pathname}`\n    return `${path}${query}` || '/'\n  }\n\n  if (pathname === mount || pathname.startsWith(`${mount}/`)) {\n    const rest = pathname.slice(mount.length)\n    const path = rest.startsWith('/') ? rest : rest ? `/${rest}` : '/'\n    return `${path}${query}`\n  }\n\n  // Already stripped by the framework (e.g. Express mount)\n  const path = pathname.startsWith('/') ? pathname : `/${pathname}`\n  return `${path}${query}`\n}\n","import type { IncomingMessage, ServerResponse } from 'node:http'\nimport {\n  filterResponseHeaders,\n  flattenRequestHeaders,\n} from './protocol'\nimport { stripMountPath } from './mountPath'\nimport type { TunnelSession } from './session'\nimport type { TunnelMeta, TunnelResponseMeta } from '../types'\n\nasync function readNodeBody(req: IncomingMessage): Promise<Buffer> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) {\n    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk))\n  }\n  return Buffer.concat(chunks)\n}\n\nexport async function forwardNodeRequest(\n  session: TunnelSession,\n  req: IncomingMessage,\n  res: ServerResponse,\n  mountPath: string,\n): Promise<void> {\n  try {\n    const body = await readNodeBody(req)\n    const path = stripMountPath(req.url ?? '/', mountPath)\n    const meta: TunnelMeta = {\n      method: req.method ?? 'GET',\n      path,\n      headers: flattenRequestHeaders(req.headers as Record<string, string | string[] | undefined>),\n    }\n    const { meta: responseMeta, body: responseBody } = await session.forwardHttp(meta, body)\n    writeNodeResponse(res, responseMeta, responseBody)\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    if (!res.headersSent) {\n      res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n    }\n    res.end(`Gateway Hyper tunnel error: ${message}`)\n  }\n}\n\nfunction writeNodeResponse(\n  res: ServerResponse,\n  meta: TunnelResponseMeta,\n  body: Buffer,\n): void {\n  res.writeHead(meta.status, filterResponseHeaders(meta.headers))\n  res.end(body)\n}\n\nexport async function forwardFetchRequest(\n  session: TunnelSession,\n  request: Request,\n  mountPath: string,\n): Promise<Response> {\n  try {\n    const url = new URL(request.url)\n    const path = stripMountPath(`${url.pathname}${url.search}`, mountPath)\n    const bodyBuf = Buffer.from(await request.arrayBuffer())\n    const headerRecord: Record<string, string> = {}\n    request.headers.forEach((value, key) => {\n      headerRecord[key] = value\n    })\n    const meta: TunnelMeta = {\n      method: request.method || 'GET',\n      path,\n      headers: flattenRequestHeaders(headerRecord),\n    }\n    const { meta: responseMeta, body: responseBody } = await session.forwardHttp(meta, bodyBuf)\n    return new Response(responseBody, {\n      status: responseMeta.status,\n      headers: filterResponseHeaders(responseMeta.headers),\n    })\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err)\n    return new Response(`Gateway Hyper tunnel error: ${message}`, {\n      status: 502,\n      headers: { 'Content-Type': 'text/plain; charset=utf-8' },\n    })\n  }\n}\n","import type { IncomingMessage, ServerResponse } from 'node:http'\nimport { createTunnelSession, type TunnelSession } from './session'\nimport { forwardFetchRequest, forwardNodeRequest } from './forward'\nimport type { CreateGatewayProxyOptions, GatewayProxy } from '../types'\n\nfunction resolveProxyKey(options: CreateGatewayProxyOptions): string {\n  const key =\n    options.key?.trim() ||\n    (typeof process !== 'undefined' ? process.env.SEED_GATEWAY_HYPER_KEY?.trim() : '') ||\n    ''\n  if (!key) {\n    throw new Error(\n      'createGatewayProxy requires options.key or SEED_GATEWAY_HYPER_KEY environment variable',\n    )\n  }\n  return key\n}\n\n/**\n * App-server Hyper gateway proxy for hosted web apps (Path B).\n *\n * Mount on a Node route (Next.js Node runtime, Express, etc.). Keep the operator\n * Hyper key on the server only — browsers talk HTTP to `proxyBaseUrl`.\n *\n * Prefer Node.js over Bun for Holepunch natives.\n */\nexport function createGatewayProxy(options: CreateGatewayProxyOptions = {}): GatewayProxy {\n  const mountPath = options.mountPath?.trim() || '/api/seed-gateway'\n  const key = resolveProxyKey(options)\n\n  let session: TunnelSession | null = null\n  let starting: Promise<TunnelSession> | null = null\n\n  const ensureSession = async (): Promise<TunnelSession> => {\n    if (session) return session\n    if (starting) return starting\n    starting = createTunnelSession({ key, storePath: options.storePath }).then((s) => {\n      session = s\n      starting = null\n      return s\n    })\n    try {\n      return await starting\n    } catch (err) {\n      starting = null\n      throw err\n    }\n  }\n\n  const proxy: GatewayProxy = {\n    mountPath,\n    start: async () => {\n      await ensureSession()\n    },\n    close: async () => {\n      if (starting) {\n        try {\n          await starting\n        } catch {\n          /* ignore start failure during close */\n        }\n      }\n      if (session) {\n        await session.close()\n        session = null\n      }\n    },\n    handleNode: (req: IncomingMessage, res: ServerResponse) => {\n      void (async () => {\n        try {\n          const s = await ensureSession()\n          await forwardNodeRequest(s, req, res, mountPath)\n        } catch (err) {\n          const message = err instanceof Error ? err.message : String(err)\n          if (!res.headersSent) {\n            res.writeHead(502, { 'Content-Type': 'text/plain; charset=utf-8' })\n          }\n          res.end(`Gateway Hyper tunnel error: ${message}`)\n        }\n      })()\n    },\n    handleFetch: async (request: Request): Promise<Response> => {\n      try {\n        const s = await ensureSession()\n        return await forwardFetchRequest(s, request, mountPath)\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err)\n        return new Response(`Gateway Hyper tunnel error: ${message}`, {\n          status: 502,\n          headers: { 'Content-Type': 'text/plain; charset=utf-8' },\n        })\n      }\n    },\n  }\n\n  if (options.eager) {\n    void proxy.start().catch(() => {\n      /* first request will surface the error */\n    })\n  }\n\n  return proxy\n}\n","/**\n * Official Seed Protocol gateway Hyper tunnel operator key (z32).\n * Empty until ops generate and back up the first operator keypair.\n */\nexport const DEFAULT_SEED_GATEWAY_HYPER_KEY = ''\n"],"mappings":";;;;;;;AAYA,SAAS,EAAM,GAAqB;CAClC,OAAO,EAAI,SAAS,KAAK;AAC3B;AAEA,SAAS,EAAQ,GAAqB;CACpC,OAAO,OAAO,KAAK,GAAK,KAAK;AAC/B;AAEA,SAAgB,EAAmB,GAA2B;CAC5D,OAAO,EAAG,OAAO,CAAS;AAC5B;AAEA,SAAgB,EAAgB,GAAqB;CACnD,IAAM,IAAU,EAAI,KAAK;CACzB,IAAI,CAAC,GACH,MAAU,MAAM,4BAA4B;CAE9C,IAAI;EACF,OAAO,OAAO,KAAK,EAAG,OAAO,CAAO,CAAC;CACvC,QAAQ;EACN,IAAI,oBAAoB,KAAK,CAAO,GAClC,OAAO,EAAQ,CAAO;EAExB,MAAU,MAAM,4DAA4D,EAAQ,MAAM,GAAG,EAAE,EAAE,EAAE;CACrG;AACF;AAEA,SAAgB,EAA4B,GAAkC;CAC5E,IAAM,IAAW,EAAK,QAAQ,CAAO;CACrC,IAAI,EAAG,WAAW,CAAQ,GAAG;EAC3B,IAAM,IAAM,EAAG,aAAa,GAAU,MAAM,GACtC,IAAS,KAAK,MAAM,CAAG;EAC7B,IAAI,CAAC,EAAO,aAAa,CAAC,EAAO,WAC/B,MAAU,MAAM,uBAAuB,EAAS,iCAAiC;EAEnF,IAAM,IAAY,EAAQ,EAAO,SAAS;EAE1C,OAAO;GACL;GACA,WAHgB,EAAQ,EAAO,SAG/B;GACA,KAAK,EAAmB,CAAS;EACnC;CACF;CAEA,IAAM,IAAM,EAAK,QAAQ,CAAQ;CACjC,EAAG,UAAU,GAAK,EAAE,WAAW,GAAK,CAAC;CACrC,IAAM,IAAK,EAAS,QAAQ,GACtB,IAA8B;EAClC,WAAW,EAAM,EAAG,SAAS;EAC7B,WAAW,EAAM,EAAG,SAAS;EAC7B,UAAU;CACZ;CAEA,OADA,EAAG,cAAc,GAAU,GAAG,KAAK,UAAU,GAAW,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,IAAM,CAAC,GAC9E;EACL,WAAW,EAAG;EACd,WAAW,EAAG;EACd,KAAK,EAAmB,EAAG,SAAS;CACtC;AACF;AAEA,SAAgB,IAAgD;CAC9D,IAAM,IAAK,EAAS,QAAQ;CAC5B,OAAO;EACL,WAAW,EAAG;EACd,WAAW,EAAG;EACd,KAAK,EAAmB,EAAG,SAAS;CACtC;AACF;;;AC3EA,IAAa,IAAkB,UAYzB,IAAN,MAAuB;CAQQ;CAP7B,SAAiB,OAAO,MAAM,CAAC;CAC/B,UAAgC,CAAC;CACjC,QAAgB;CAChB;CACA;CACA;CAEA,YAAY,GAAmC;EAyB7C,AAzB2B,KAAA,SAAA,GAC3B,KAAK,UAAU,MAAkB;GAE/B,AADA,KAAK,SAAS,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAK,CAAC,GAChD,KAAK,MAAM;EACb,GACA,KAAK,WAAW,MAAe;GAC7B,IAAM,IAAU,KAAK,QAAQ,OAAO,CAAC;GACrC,KAAK,IAAM,KAAK,GAAS,EAAE,OAAO,CAAG;EACvC,GACA,KAAK,cAAc;GAGjB,IAFA,KAAK,QAAQ,IACb,KAAK,MAAM,GACP,KAAK,QAAQ,SAAS,GAAG;IAC3B,IAAM,IAAU,KAAK,QAAQ,OAAO,CAAC;IACrC,KAAK,IAAM,KAAK,GACd,EAAE,OACA,gBAAI,MACF,sCAAsC,EAAE,OAAO,cAAc,KAAK,OAAO,OAAO,EAClF,CACF;GAEJ;EACF,GACA,EAAO,GAAG,QAAQ,KAAK,MAAM,GAC7B,EAAO,GAAG,SAAS,KAAK,OAAO,GAC/B,EAAO,GAAG,OAAO,KAAK,KAAK;CAC7B;CAEA,UAAU,GAAiC;EACzC,OAAO,IAAI,SAAS,GAAS,MAAW;GACtC,IAAI,MAAW,GAAG;IAChB,EAAQ,OAAO,MAAM,CAAC,CAAC;IACvB;GACF;GAGA,IAFA,KAAK,QAAQ,KAAK;IAAE;IAAQ;IAAS;GAAO,CAAC,GAC7C,KAAK,MAAM,GACP,KAAK,SAAS,KAAK,QAAQ,SAAS,GAAG;IACzC,IAAM,IAAU,KAAK,QAAQ,OAAO,CAAC;IACrC,KAAK,IAAM,KAAK,GACd,EAAE,OACA,gBAAI,MACF,sCAAsC,EAAE,OAAO,cAAc,KAAK,OAAO,OAAO,EAClF,CACF;GAEJ;EACF,CAAC;CACH;CAEA,QAAsB;EACpB,OAAO,KAAK,QAAQ,SAAS,IAAG;GAC9B,IAAM,IAAO,KAAK,QAAQ;GAC1B,IAAI,CAAC,KAAQ,KAAK,OAAO,SAAS,EAAK,QAAQ;GAC/C,KAAK,QAAQ,MAAM;GACnB,IAAM,IAAM,KAAK,OAAO,SAAS,GAAG,EAAK,MAAM;GAE/C,AADA,KAAK,SAAS,KAAK,OAAO,SAAS,EAAK,MAAM,GAC9C,EAAK,QAAQ,CAAG;EAClB;CACF;AACF,GAEM,oBAAU,IAAI,QAAoC;AAExD,SAAS,EAAU,GAAoC;CACrD,IAAI,IAAS,EAAQ,IAAI,CAAM;CAK/B,OAJK,MACH,IAAS,IAAI,EAAiB,CAAM,GACpC,EAAQ,IAAI,GAAQ,CAAM,IAErB;AACT;AAEA,SAAS,EAAU,GAAkB,GAAiC;CACpE,OAAO,EAAU,CAAM,CAAC,CAAC,UAAU,CAAM;AAC3C;AAEA,SAAS,EAAY,GAAkB,GAA4B;CACjE,OAAO,IAAI,SAAS,GAAS,MAAW;EAEtC,IAAI;GAEF,IADW,EAAO,MAAM,CACpB,GAAI;IACN,EAAQ;IACR;GACF;GACA,IAAM,UAAgB;IAEpB,AADA,EAAO,IAAI,SAAS,CAAO,GAC3B,EAAQ;GACV,GACM,KAAW,MAAe;IAE9B,AADA,EAAO,IAAI,SAAS,CAAO,GAC3B,EAAO,CAAG;GACZ;GAEA,AADA,EAAO,KAAK,SAAS,CAAO,GAC5B,EAAO,KAAK,SAAS,CAAO;EAC9B,SAAS,GAAK;GACZ,EAAO,aAAe,QAAQ,IAAU,MAAM,OAAO,CAAG,CAAC,CAAC;EAC5D;CACF,CAAC;AACH;AAEA,eAAsB,EAAW,GAAkB,GAAgC;CACjF,IAAI,EAAQ,SAAA,UACV,MAAU,MAAM,oBAAoB,EAAQ,OAAO,cAAc,EAAgB,EAAE;CAErF,IAAM,IAAS,OAAO,MAAM,CAAC;CAG7B,AAFA,EAAO,cAAc,EAAQ,QAAQ,CAAC,GAEtC,MAAM,EAAY,GAAQ,OAAO,OAAO,CAAC,GAAQ,CAAO,CAAC,CAAC;AAC5D;AAEA,eAAsB,EAAU,GAAmC;CAEjE,IAAM,KAAS,MADM,EAAU,GAAQ,CAAC,EAAA,CAClB,aAAa,CAAC;CACpC,IAAI,MAAW,GACb,OAAO,OAAO,MAAM,CAAC;CAEvB,IAAI,IAAA,UACF,MAAU,MAAM,oBAAoB,EAAO,cAAc,EAAgB,EAAE;CAE7E,OAAO,EAAU,GAAQ,CAAM;AACjC;AAEA,eAAsB,EACpB,GACA,GACA,GACe;CAGf,AADA,MAAM,EAAW,GADC,OAAO,KAAK,KAAK,UAAU,CAAI,GAAG,MAC3B,CAAS,GAClC,MAAM,EAAW,GAAQ,CAAI;AAC/B;AAEA,eAAsB,EACpB,GAC6C;CAC7C,IAAM,IAAU,MAAM,EAAU,CAAM,GAChC,IAAO,KAAK,MAAM,EAAQ,SAAS,MAAM,CAAC;CAChD,IAAI,CAAC,EAAK,UAAU,CAAC,EAAK,MACxB,MAAU,MAAM,qDAAqD;CAIvE,OAFA,EAAK,UAAU,EAAK,WAAW,CAAC,GAEzB;EAAE;EAAM,MAAA,MADI,EAAU,CAAM;CACf;AACtB;AAEA,eAAsB,EACpB,GACA,GACA,GACe;CAGf,AADA,MAAM,EAAW,GADC,OAAO,KAAK,KAAK,UAAU,CAAI,GAAG,MAC3B,CAAS,GAClC,MAAM,EAAW,GAAQ,CAAI;AAC/B;AAEA,eAAsB,EACpB,GACqD;CACrD,IAAM,IAAU,MAAM,EAAU,CAAM,GAChC,IAAO,KAAK,MAAM,EAAQ,SAAS,MAAM,CAAC;CAChD,IAAI,OAAO,EAAK,UAAW,UACzB,MAAU,MAAM,8CAA8C;CAIhE,OAFA,EAAK,UAAU,EAAK,WAAW,CAAC,GAEzB;EAAE;EAAM,MAAA,MADI,EAAU,CAAM;CACf;AACtB;AAGA,SAAgB,EACd,GACwB;CACxB,IAAM,IAA8B,CAAC;CACrC,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAO,GAC3C,KAAS,SACb,EAAI,KAAO,MAAM,QAAQ,CAAK,IAAI,EAAM,KAAK,IAAI,IAAI;CAEvD,OAAO;AACT;AAGA,SAAgB,EACd,GACwB;CACxB,IAAM,oBAAO,IAAI,IAAI;EACnB;EACA;EACA;EACA;CACF,CAAC,GACK,IAA8B,CAAC;CACrC,KAAK,IAAM,CAAC,GAAK,MAAU,OAAO,QAAQ,CAAO,GAC3C,EAAK,IAAI,EAAI,YAAY,CAAC,KAC1B,KAAS,SACb,EAAI,KAAO,MAAM,QAAQ,CAAK,IAAI,EAAM,KAAK,IAAI,IAAI;CAEvD,OAAO;AACT;;;ACzNA,eAAsB,EACpB,GACA,GACA,GAC4E;CAC5E,IAAM,IAAO,EAAa,QAAQ,OAAO,EAAE,GACrC,IAAY,IAAI,EAAI,EAAK,MAAM,GAAG,EAAK,EAAE;CAE/C,OAAO,IAAI,SAAS,GAAS,MAAW;EACtC,IAAM,IAAM,EAAK,QACf,GACA;GACE,QAAQ,EAAK;GACb,SAAS,EAAK;EAChB,IACC,MAAQ;GACP,IAAM,IAAmB,CAAC;GAS1B,AARA,EAAI,GAAG,SAAS,MAAkB,EAAO,KAAK,CAAK,CAAC,GACpD,EAAI,GAAG,aAAa;IAClB,EAAQ;KACN,QAAQ,EAAI,cAAc;KAC1B,SAAS,EAAsB,EAAI,OAAwD;KAC3F,MAAM,OAAO,OAAO,CAAM;IAC5B,CAAC;GACH,CAAC,GACD,EAAI,GAAG,SAAS,CAAM;EACxB,CACF;EAKA,AAJA,EAAI,GAAG,SAAS,CAAM,GAClB,EAAK,SAAS,KAChB,EAAI,MAAM,CAAI,GAEhB,EAAI,IAAI;CACV,CAAC;AACH;;;AChCA,SAAS,EACP,GACA,GACM;CAEN,IAAI,IAAiB,EAAkB,CAAM;CAC7C,CAAM,YAAY;EAChB,IAAI;GACF,SAAa;IACX,IAAM,EAAE,SAAM,YAAS,MAAM,GACvB,IAAS,MAAM,EAAmB,GAAU,GAAM,CAAI;IAM5D,AALA,MAAM,EACJ,GACA;KAAE,QAAQ,EAAO;KAAQ,SAAS,EAAO;IAAQ,GACjD,EAAO,IACT,GACA,IAAiB,EAAkB,CAAM;GAC3C;EACF,QAAQ;GACN,EAAO,QAAQ;EACjB;CACF,EAAA,CAAG;AACL;AAKA,eAAsB,EAAY,GAAyD;CACzF,IAAM,IAAW,EAAQ,SAAS,QAAQ,OAAO,EAAE,GAE7C,IAAU,EADA,EAAQ,WAAW,wCACgB,GAE7C,IAAM,IAAI,EAAS,GACnB,IAAS,EAAI,cAAc,MAAW;EAC1C,EAAiB,GAAkB,CAAQ;CAC7C,CAAC;CAID,OAFA,MAAM,EAAO,OAAO,CAAO,GAEpB;EACL,KAAK,EAAQ;EACb;EACA,OAAO,YAAY;GAEjB,AADA,MAAM,EAAO,MAAM,GACnB,MAAM,EAAI,QAAQ;EACpB;CACF;AACF;;;AC5BA,eAAsB,EAAoB,GAAuD;CAC/F,IAAM,IAAkB,EAAgB,EAAQ,GAAG,GAC7C,IAAY,EAA6B,GAEzC,IAAM,IAAI,EAAS,GACrB,IAA8B,MAC9B,IAAqC,MAEnC,IAAY,YACZ,KAAgB,CAAC,EAAa,YACzB,IAEL,MAGJ,IAAa,IAAI,SAAiB,GAAS,MAAW;EACpD,IAAM,IAAS,EAAI,QAAQ,GAAiB,EAC1C,SAAS;GAAE,WAAW,EAAU;GAAW,WAAW,EAAU;EAAU,EAC5E,CAAC,GACK,UAAgB;GAGpB,AAFA,IAAe,GACf,IAAa,MACb,EAAQ,CAAM;EAChB;EAGA,AAFA,EAAO,KAAK,QAAQ,CAAO,GAC3B,EAAO,KAAK,WAAW,CAAO,GAC9B,EAAO,KAAK,UAAU,MAAe;GAEnC,AADA,IAAa,MACb,EAAO,CAAG;EACZ,CAAC;CACH,CAAC,GACM,IAIL,IAAgC,QAAQ,QAAQ,GAC9C,IAAc,OAAU,MAAmD;EAC/E,IAAM,IAAM,EAAY,WAAW,EAAU,CAAC,CAAC,CAAC,KAAK,CAAE;EAEvD,OADA,IAAc,EAAI,YAAY,CAAC,CAAC,GACzB;CACT;CAYA,OAAO;EACL,KAAK,EAAQ;EACb;EACA,oBAZA,GACA,MAEO,EAAY,OAAO,OACxB,MAAM,EAAmB,GAAQ,GAAM,CAAI,GACpC,EAAmB,CAAM,EACjC;EAOD,OAAO,YAAY;GAIjB,AAHI,KAAgB,CAAC,EAAa,aAChC,EAAa,QAAQ,GAEvB,MAAM,EAAI,QAAQ;EACpB;CACF;AACF;;;ACjFA,eAAe,EAAgB,GAAuC;CACpE,IAAM,IAAmB,CAAC;CAC1B,WAAW,IAAM,KAAS,GACxB,EAAO,KAAK,OAAO,SAAS,CAAK,IAAI,IAAQ,OAAO,KAAK,CAAK,CAAC;CAEjE,OAAO,OAAO,OAAO,CAAM;AAC7B;AAEA,SAAS,EACP,GAIa;CACb,OAAO,EAAK,cAAc,GAAK,MAAQ;EACrC,CAAM,YAAY;GAChB,IAAI;IACF,IAAM,IAAO,MAAM,EAAgB,CAAG,GAChC,IAAO,EAAI,OAAO,KAOlB,EAAE,MAAM,GAAc,MAAM,MAAiB,MAAM,EAAY;KALnE,QAAQ,EAAI,UAAU;KACtB;KACA,SAAS,EAAsB,EAAI,OAAwD;IAGxB,GAAM,CAAI;IAG/E,AADA,EAAI,UAAU,EAAa,QAAQ,EAAa,OAAO,GACvD,EAAI,IAAI,CAAY;GACtB,SAAS,GAAK;IACZ,IAAM,IAAU,aAAe,QAAQ,EAAI,UAAU,OAAO,CAAG;IAI/D,AAHK,EAAI,eACP,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpE,EAAI,IAAI,+BAA+B,GAAS;GAClD;EACF,EAAA,CAAG;CACL,CAAC;AACH;AAKA,eAAsB,EAAc,GAA6D;CAC/F,IAAM,IAAO,EAAQ,QAAQ,aACvB,IAAO,EAAQ,QAAQ,MAEvB,IAAU,MAAM,EAAoB;EACxC,KAAK,EAAQ;EACb,WAAW,EAAQ;CACrB,CAAC,GAEK,IAAS,GAAmB,GAAM,MAAS,EAAQ,YAAY,GAAM,CAAI,CAAC;CAEhF,MAAM,IAAI,SAAe,GAAS,MAAW;EAE3C,AADA,EAAO,KAAK,SAAS,CAAM,GAC3B,EAAO,OAAO,GAAM,SAAY,EAAQ,CAAC;CAC3C,CAAC;CAED,IAAM,IAAU,EAAO,QAAQ,GACzB,IACJ,KAAW,OAAO,KAAY,WAAW,EAAQ,OAAO,GAEpD,IAAU,UAAU,EAAK,GAAG;CAElC,OAAO;EACL,KAAK,EAAQ;EACb;EACA,MAAM;EACN;EACA,OAAO,YAAY;GAEjB,AADA,MAAM,IAAI,SAAe,MAAY,EAAO,YAAY,EAAQ,CAAC,CAAC,GAClE,MAAM,EAAQ,MAAM;EACtB;CACF;AACF;AAEA,SAAgB,EAAgB,GAAiB,IAAO,IAAY;CAClE,IAAM,IAAO,EAAQ,QAAQ,OAAO,EAAE;CAEtC,OADK,IACE,EAAK,WAAW,GAAG,IAAI,GAAG,IAAO,MAAS,GAAG,EAAK,GAAG,MAD1C;AAEpB;;;ACrFA,SAAgB,EAAe,GAAiB,GAA2B;CACzE,IAAM,IAAM,KAAW,KACjB,IAAS,EAAI,QAAQ,GAAG,GACxB,IAAW,MAAW,KAAK,IAAM,EAAI,MAAM,GAAG,CAAM,GACpD,IAAQ,MAAW,KAAK,KAAK,EAAI,MAAM,CAAM,GAE7C,KAAS,KAAa,GAAA,CAAI,QAAQ,OAAO,EAAE;CACjD,IAAI,CAAC,KAAS,MAAU,KAEtB,OAAO,GADM,EAAS,WAAW,GAAG,IAAI,IAAW,IAAI,MACtC,OAAW;CAG9B,IAAI,MAAa,KAAS,EAAS,WAAW,GAAG,EAAM,EAAE,GAAG;EAC1D,IAAM,IAAO,EAAS,MAAM,EAAM,MAAM;EAExC,OAAO,GADM,EAAK,WAAW,GAAG,IAAI,IAAO,IAAO,IAAI,MAAS,MAC9C;CACnB;CAIA,OAAO,GADM,EAAS,WAAW,GAAG,IAAI,IAAW,IAAI,MACtC;AACnB;;;AChBA,eAAe,EAAa,GAAuC;CACjE,IAAM,IAAmB,CAAC;CAC1B,WAAW,IAAM,KAAS,GACxB,EAAO,KAAK,OAAO,SAAS,CAAK,IAAI,IAAQ,OAAO,KAAK,CAAK,CAAC;CAEjE,OAAO,OAAO,OAAO,CAAM;AAC7B;AAEA,eAAsB,EACpB,GACA,GACA,GACA,GACe;CACf,IAAI;EACF,IAAM,IAAO,MAAM,EAAa,CAAG,GAC7B,IAAO,EAAe,EAAI,OAAO,KAAK,CAAS,GAC/C,IAAmB;GACvB,QAAQ,EAAI,UAAU;GACtB;GACA,SAAS,EAAsB,EAAI,OAAwD;EAC7F,GACM,EAAE,MAAM,GAAc,MAAM,MAAiB,MAAM,EAAQ,YAAY,GAAM,CAAI;EACvF,EAAkB,GAAK,GAAc,CAAY;CACnD,SAAS,GAAK;EACZ,IAAM,IAAU,aAAe,QAAQ,EAAI,UAAU,OAAO,CAAG;EAI/D,AAHK,EAAI,eACP,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpE,EAAI,IAAI,+BAA+B,GAAS;CAClD;AACF;AAEA,SAAS,EACP,GACA,GACA,GACM;CAEN,AADA,EAAI,UAAU,EAAK,QAAQ,EAAsB,EAAK,OAAO,CAAC,GAC9D,EAAI,IAAI,CAAI;AACd;AAEA,eAAsB,EACpB,GACA,GACA,GACmB;CACnB,IAAI;EACF,IAAM,IAAM,IAAI,IAAI,EAAQ,GAAG,GACzB,IAAO,EAAe,GAAG,EAAI,WAAW,EAAI,UAAU,CAAS,GAC/D,IAAU,OAAO,KAAK,MAAM,EAAQ,YAAY,CAAC,GACjD,IAAuC,CAAC;EAC9C,EAAQ,QAAQ,SAAS,GAAO,MAAQ;GACtC,EAAa,KAAO;EACtB,CAAC;EACD,IAAM,IAAmB;GACvB,QAAQ,EAAQ,UAAU;GAC1B;GACA,SAAS,EAAsB,CAAY;EAC7C,GACM,EAAE,MAAM,GAAc,MAAM,MAAiB,MAAM,EAAQ,YAAY,GAAM,CAAO;EAC1F,OAAO,IAAI,SAAS,GAAc;GAChC,QAAQ,EAAa;GACrB,SAAS,EAAsB,EAAa,OAAO;EACrD,CAAC;CACH,SAAS,GAAK;EACZ,IAAM,IAAU,aAAe,QAAQ,EAAI,UAAU,OAAO,CAAG;EAC/D,OAAO,IAAI,SAAS,+BAA+B,KAAW;GAC5D,QAAQ;GACR,SAAS,EAAE,gBAAgB,4BAA4B;EACzD,CAAC;CACH;AACF;;;AC5EA,SAAS,EAAgB,GAA4C;CACnE,IAAM,IACJ,EAAQ,KAAK,KAAK,MACjB,OAAO,UAAY,MAAc,QAAQ,IAAI,wBAAwB,KAAK,IAAI,OAC/E;CACF,IAAI,CAAC,GACH,MAAU,MACR,wFACF;CAEF,OAAO;AACT;AAUA,SAAgB,EAAmB,IAAqC,CAAC,GAAiB;CACxF,IAAM,IAAY,EAAQ,WAAW,KAAK,KAAK,qBACzC,IAAM,EAAgB,CAAO,GAE/B,IAAgC,MAChC,IAA0C,MAExC,IAAgB,YAAoC;EACxD,IAAI,GAAS,OAAO;EACpB,IAAI,GAAU,OAAO;EACrB,IAAW,EAAoB;GAAE;GAAK,WAAW,EAAQ;EAAU,CAAC,CAAC,CAAC,MAAM,OAC1E,IAAU,GACV,IAAW,MACJ,EACR;EACD,IAAI;GACF,OAAO,MAAM;EACf,SAAS,GAAK;GAEZ,MADA,IAAW,MACL;EACR;CACF,GAEM,IAAsB;EAC1B;EACA,OAAO,YAAY;GACjB,MAAM,EAAc;EACtB;EACA,OAAO,YAAY;GACjB,IAAI,GACF,IAAI;IACF,MAAM;GACR,QAAQ,CAER;GAEF,AAEE,OADA,MAAM,EAAQ,MAAM,GACV;EAEd;EACA,aAAa,GAAsB,MAAwB;GACzD,CAAM,YAAY;IAChB,IAAI;KAEF,MAAM,EAAmB,MADT,EAAc,GACF,GAAK,GAAK,CAAS;IACjD,SAAS,GAAK;KACZ,IAAM,IAAU,aAAe,QAAQ,EAAI,UAAU,OAAO,CAAG;KAI/D,AAHK,EAAI,eACP,EAAI,UAAU,KAAK,EAAE,gBAAgB,4BAA4B,CAAC,GAEpE,EAAI,IAAI,+BAA+B,GAAS;IAClD;GACF,EAAA,CAAG;EACL;EACA,aAAa,OAAO,MAAwC;GAC1D,IAAI;IAEF,OAAO,MAAM,EAAoB,MADjB,EAAc,GACM,GAAS,CAAS;GACxD,SAAS,GAAK;IACZ,IAAM,IAAU,aAAe,QAAQ,EAAI,UAAU,OAAO,CAAG;IAC/D,OAAO,IAAI,SAAS,+BAA+B,KAAW;KAC5D,QAAQ;KACR,SAAS,EAAE,gBAAgB,4BAA4B;IACzD,CAAC;GACH;EACF;CACF;CAQA,OANI,EAAQ,SACV,EAAW,MAAM,CAAC,CAAC,YAAY,CAE/B,CAAC,GAGI;AACT;;;AClGA,IAAa,IAAiC"}