@techysy/10router 1.3.5 → 1.4.0

package/app/.next-cli-build/server/chunks/{7239.js → 8318.js}

@@ -1,4 +1,4 @@
-exports.id=7239,exports.ids=[7239],exports.modules={8578:(a,b,c)=>{"use strict";let d=c(33873),e=c(29021),f=c(15296),{MITM_DIR:g}=c(82193),h=d.join(g,"rootCA.key"),i=d.join(g,"rootCA.crt");function j(a){try{let b=f.pki.certificateFromPem(e.readFileSync(a,"utf8")),c=new Date(Date.now()+2592e6);return b.validity.notAfter<c}catch{return!0}}function k(){if(e.existsSync(h)){if("win32"===process.platform){try{let{execFileSync:a}=c(31421),b=c(48161),d=[process.env.USERDOMAIN,process.env.USERNAME].filter(Boolean).join("\\")||b.userInfo().username;a("icacls",[h,"/inheritance:r","/grant:r",`${d}:(F)`],{stdio:"ignore",windowsHide:!0})}catch(a){console.warn(`⚠️  Could not restrict ACLs on ${h}: ${a.message}`)}return}try{e.chmodSync(h,384)}catch(a){console.warn(`⚠️  Could not restrict permissions on ${h}: ${a.message}`)}}}a.exports={generateRootCA:function(){let a=e.existsSync(h)&&e.existsSync(i);if(a&&!j(i))return k(),console.log("✅ Root CA already exists"),{key:h,cert:i};if(a){console.log("\uD83D\uDD10 Root CA expired or expiring soon — regenerating...");try{e.unlinkSync(h)}catch{}try{e.unlinkSync(i)}catch{}}e.existsSync(g)||e.mkdirSync(g,{recursive:!0,mode:448}),console.log("\uD83D\uDD10 Generating Root CA certificate...");let b=f.pki.rsa.generateKeyPair(2048),c=f.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber="01",c.validity.notBefore=new Date,c.validity.notAfter=new Date,c.validity.notAfter.setFullYear(c.validity.notBefore.getFullYear()+10);let d=[{name:"commonName",value:"10Router MITM Root CA"},{name:"organizationName",value:"10Router"},{name:"countryName",value:"US"}];c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),c.sign(b.privateKey,f.md.sha256.create());let l=f.pki.privateKeyToPem(b.privateKey),m=f.pki.certificateToPem(c);return e.writeFileSync(h,l,{mode:384}),e.writeFileSync(i,m),k(),console.log("✅ Root CA generated successfully"),{key:h,cert:i}},loadRootCA:function(){if(!e.existsSync(h)||!e.existsSync(i))throw Error("Root CA not found. Generate it first.");let a=e.readFileSync(h,"utf8"),b=e.readFileSync(i,"utf8");return{key:f.pki.privateKeyFromPem(a),cert:f.pki.certificateFromPem(b)}},generateLeafCert:function(a,b){let c=f.pki.rsa.generateKeyPair(2048),d=f.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=Math.floor(1e6*Math.random()).toString(),d.validity.notBefore=new Date,d.validity.notAfter=new Date,d.validity.notAfter.setFullYear(d.validity.notBefore.getFullYear()+1),d.setSubject([{name:"commonName",value:a}]),d.setIssuer(b.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:a},{type:2,value:`*.${a}`}]}]),d.sign(b.key,f.md.sha256.create()),{key:f.pki.privateKeyToPem(c.privateKey),cert:f.pki.certificateToPem(d)}},isCertExpired:j,ROOT_CA_CERT_PATH:i,ROOT_CA_KEY_PATH:h}},9631:(a,b,c)=>{"use strict";let d=c(29021),e=c(55511),{exec:f}=c(79646),{execWithPassword:g,isSudoAvailable:h}=c(66936),{runElevatedPowerShell:i,quotePs:j}=c(64809),{log:k,err:l}=c(87777),m="win32"===process.platform,n="darwin"===process.platform,o=[{dir:"/usr/local/share/ca-certificates",cmd:"update-ca-certificates"},{dir:"/etc/ca-certificates/trust-source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/ca-trust/source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/trust/anchors",cmd:"update-ca-certificates"}];function p(){for(let a of o)if(d.existsSync(a.dir))return a;return o[0]}let q="10Router MITM Root CA";function r(a){let b=d.readFileSync(a,"utf-8"),c=Buffer.from(b.replace(/-----[^-]+-----/g,"").replace(/\s/g,""),"base64");return e.createHash("sha1").update(c).digest("hex").toUpperCase().match(/.{2}/g).join(":")}async function s(a){var b,c;let e,g;return m?(b=a,new Promise(a=>{let c;try{c=r(b).replace(/:/g,"")}catch{return a(!1)}f(`certutil -store Root ${c}`,{windowsHide:!0},b=>{a(!b)})})):n?(c=a,new Promise(a=>{try{let b=r(c).replace(/:/g,"");f(`security find-certificate -a -c "${q}" -Z /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},(d,e)=>{if(d||!e||!RegExp(`SHA-1 hash:\\s*${b}`,"i").test(e))return a(!1);f(`security verify-cert -c "${c}" -p ssl -k /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},b=>{a(!b)})})}catch{a(!1)}})):(e=p(),g=`${e.dir}/10router-root-ca.crt`,Promise.resolve(d.existsSync(g)))}async function t(a,b){let c=`security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${b}"`;try{await g(`security delete-certificate -c "10Router MITM Root CA" /Library/Keychains/System.keychain 2>/dev/null || true && ${c}`,a),k("\uD83D\uDD10 Cert: ✅ installed to system keychain")}catch(a){throw Error(a.message?.includes("canceled")?"User canceled authorization":"Certificate install failed")}}async function u(a){let b=`
+exports.id=8318,exports.ids=[3662,8318],exports.modules={3662:(a,b,c)=>{"use strict";c.d(b,{$e:()=>i,AZ:()=>m,Dt:()=>k,EQ:()=>f,LY:()=>d,O:()=>e,X8:()=>j,fh:()=>h,qS:()=>o,t2:()=>l,wf:()=>g,yD:()=>n});let d={400:{type:"invalid_request_error",code:"bad_request"},401:{type:"authentication_error",code:"invalid_api_key"},402:{type:"billing_error",code:"payment_required"},403:{type:"permission_error",code:"insufficient_quota"},404:{type:"invalid_request_error",code:"model_not_found"},406:{type:"invalid_request_error",code:"model_not_supported"},429:{type:"rate_limit_error",code:"rate_limit_exceeded"},500:{type:"server_error",code:"internal_server_error"},502:{type:"server_error",code:"bad_gateway"},503:{type:"server_error",code:"service_unavailable"},504:{type:"server_error",code:"gateway_timeout"}},e={400:"Bad request",401:"Invalid API key provided",402:"Payment required",403:"You exceeded your current quota",404:"Not found (wrong endpoint path, or the model does not exist)",406:"Model not supported",429:"Rate limit exceeded",500:"Internal server error",502:"Bad gateway - upstream provider error",503:"Service temporarily unavailable",504:"Gateway timeout"},f={base:2e3,max:3e5,maxLevel:15},g=3e4,h=18e5,i=864e5,j={short:6e4,long:6e5},k=3e5,l=[{provider:"codex",text:"model is not supported when using codex with a chatgpt account",cooldownMs:18e5},{text:"no credentials",cooldownMs:12e4},{text:"request not allowed",cooldownMs:5e3},{text:"unapproved channel",channelScope:!0,cooldownMs:j.short},{text:"illegal api invocation",channelScope:!0,cooldownMs:j.short},{text:"improperly formed request",cooldownMs:12e4},{text:"mimo desktop account",cooldownMs:0},{text:"real-name verification",cooldownMs:0},{text:"realname verification",cooldownMs:0},{text:"rate limit",backoff:!0},{text:"too many requests",backoff:!0},{text:"quota exceeded",backoff:!0},{text:"capacity",backoff:!0},{text:"overloaded",backoff:!0},{status:401,cooldownMs:12e4},{status:402,cooldownMs:12e4},{status:403,cooldownMs:12e4},{status:404,cooldownMs:12e4},{status:429,backoff:!0}],m=/real-name verification|realname|\bface verification\b|实名认证/i,n={"stepfun-plan-cn":"StepFun CN 的 Step Plan 免费套餐要求账号先完成实名（人脸）核验，未完成时上游一律拒绝，与本机额度、与 10Router 都无关。出路：1. 打开 https://account.stepfun.com/security?action=realname 完成人脸核验后重试（推荐）；2. 或改用按量计费的 stepfun-cn 渠道（扣现金/代金券，无实名要求）。该账号不会被锁定，但在实名完成前每次调用都会得到这条提示。"},o="上游要求该账号先完成实名认证（real-name verification），未完成前所有调用都会被拒绝；请按上游提示的地址完成核验后重试。"},8578:(a,b,c)=>{"use strict";let d=c(33873),e=c(29021),f=c(15296),{MITM_DIR:g}=c(82193),h=d.join(g,"rootCA.key"),i=d.join(g,"rootCA.crt");function j(a){try{let b=f.pki.certificateFromPem(e.readFileSync(a,"utf8")),c=new Date(Date.now()+2592e6);return b.validity.notAfter<c}catch{return!0}}function k(){if(e.existsSync(h)){if("win32"===process.platform){try{let{execFileSync:a}=c(31421),b=c(48161),d=[process.env.USERDOMAIN,process.env.USERNAME].filter(Boolean).join("\\")||b.userInfo().username;a("icacls",[h,"/inheritance:r","/grant:r",`${d}:(F)`],{stdio:"ignore",windowsHide:!0})}catch(a){console.warn(`⚠️  Could not restrict ACLs on ${h}: ${a.message}`)}return}try{e.chmodSync(h,384)}catch(a){console.warn(`⚠️  Could not restrict permissions on ${h}: ${a.message}`)}}}a.exports={generateRootCA:function(){let a=e.existsSync(h)&&e.existsSync(i);if(a&&!j(i))return k(),console.log("✅ Root CA already exists"),{key:h,cert:i};if(a){console.log("\uD83D\uDD10 Root CA expired or expiring soon — regenerating...");try{e.unlinkSync(h)}catch{}try{e.unlinkSync(i)}catch{}}e.existsSync(g)||e.mkdirSync(g,{recursive:!0,mode:448}),console.log("\uD83D\uDD10 Generating Root CA certificate...");let b=f.pki.rsa.generateKeyPair(2048),c=f.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber="01",c.validity.notBefore=new Date,c.validity.notAfter=new Date,c.validity.notAfter.setFullYear(c.validity.notBefore.getFullYear()+10);let d=[{name:"commonName",value:"10Router MITM Root CA"},{name:"organizationName",value:"10Router"},{name:"countryName",value:"US"}];c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),c.sign(b.privateKey,f.md.sha256.create());let l=f.pki.privateKeyToPem(b.privateKey),m=f.pki.certificateToPem(c);return e.writeFileSync(h,l,{mode:384}),e.writeFileSync(i,m),k(),console.log("✅ Root CA generated successfully"),{key:h,cert:i}},loadRootCA:function(){if(!e.existsSync(h)||!e.existsSync(i))throw Error("Root CA not found. Generate it first.");let a=e.readFileSync(h,"utf8"),b=e.readFileSync(i,"utf8");return{key:f.pki.privateKeyFromPem(a),cert:f.pki.certificateFromPem(b)}},generateLeafCert:function(a,b){let c=f.pki.rsa.generateKeyPair(2048),d=f.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=Math.floor(1e6*Math.random()).toString(),d.validity.notBefore=new Date,d.validity.notAfter=new Date,d.validity.notAfter.setFullYear(d.validity.notBefore.getFullYear()+1),d.setSubject([{name:"commonName",value:a}]),d.setIssuer(b.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:a},{type:2,value:`*.${a}`}]}]),d.sign(b.key,f.md.sha256.create()),{key:f.pki.privateKeyToPem(c.privateKey),cert:f.pki.certificateToPem(d)}},isCertExpired:j,ROOT_CA_CERT_PATH:i,ROOT_CA_KEY_PATH:h}},9631:(a,b,c)=>{"use strict";let d=c(29021),e=c(55511),{exec:f}=c(79646),{execWithPassword:g,isSudoAvailable:h}=c(66936),{runElevatedPowerShell:i,quotePs:j}=c(64809),{log:k,err:l}=c(87777),m="win32"===process.platform,n="darwin"===process.platform,o=[{dir:"/usr/local/share/ca-certificates",cmd:"update-ca-certificates"},{dir:"/etc/ca-certificates/trust-source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/ca-trust/source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/trust/anchors",cmd:"update-ca-certificates"}];function p(){for(let a of o)if(d.existsSync(a.dir))return a;return o[0]}let q="10Router MITM Root CA";function r(a){let b=d.readFileSync(a,"utf-8"),c=Buffer.from(b.replace(/-----[^-]+-----/g,"").replace(/\s/g,""),"base64");return e.createHash("sha1").update(c).digest("hex").toUpperCase().match(/.{2}/g).join(":")}async function s(a){var b,c;let e,g;return m?(b=a,new Promise(a=>{let c;try{c=r(b).replace(/:/g,"")}catch{return a(!1)}f(`certutil -store Root ${c}`,{windowsHide:!0},b=>{a(!b)})})):n?(c=a,new Promise(a=>{try{let b=r(c).replace(/:/g,"");f(`security find-certificate -a -c "${q}" -Z /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},(d,e)=>{if(d||!e||!RegExp(`SHA-1 hash:\\s*${b}`,"i").test(e))return a(!1);f(`security verify-cert -c "${c}" -p ssl -k /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},b=>{a(!b)})})}catch{a(!1)}})):(e=p(),g=`${e.dir}/10router-root-ca.crt`,Promise.resolve(d.existsSync(g)))}async function t(a,b){let c=`security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${b}"`;try{await g(`security delete-certificate -c "10Router MITM Root CA" /Library/Keychains/System.keychain 2>/dev/null || true && ${c}`,a),k("\uD83D\uDD10 Cert: ✅ installed to system keychain")}catch(a){throw Error(a.message?.includes("canceled")?"User canceled authorization":"Certificate install failed")}}async function u(a){let b=`
     certutil -delstore Root ${j(q)} 2>$null | Out-Null
     $exit = & certutil -addstore Root ${j(a)} 2>&1
     if ($LASTEXITCODE -ne 0) { throw "certutil exit $LASTEXITCODE" }
@@ -50,7 +50,7 @@ ${c}
 `.replace(/'/g,"'\\''");await t(`printf '%s' '${e}' | tee ${q} > /dev/null`,b),await u(b)}i(`🌐 DNS ${a}: ✅ added ${d.join(", ")}`)}catch(a){throw Error(a.message?.includes("incorrect password")?"Wrong sudo password":`Failed to add DNS entry: ${a.message}`)}}async function x(a,b){let c=k[a];if(!c)throw Error(`Unknown tool: ${a}`);let d=c.filter(a=>v(a));if(0===d.length)return void i(`🌐 DNS ${a}: already inactive`);try{if(o){let a=g.readFileSync(q,"utf8"),b=a.split(/\r?\n/).filter(a=>!d.some(b=>a.includes(b))).join("\r\n").replace(/[\r\n\s]+$/g,"")+"\r\n";n(q,a,b),await l("ipconfig /flushdns | Out-Null")}else{let a=(g.readFileSync(q,"utf8").split(/\r?\n/).filter(a=>!d.some(b=>a.includes(b))).join("\n").replace(/[\r\n\s]+$/g,"")+"\n").replace(/'/g,"'\\''");await t(`printf '%s' '${a}' | tee ${q} > /dev/null`,b),await u(b)}i(`🌐 DNS ${a}: ✅ removed ${d.join(", ")}`)}catch(a){throw Error(a.message?.includes("incorrect password")?"Wrong sudo password":`Failed to remove DNS entry: ${a.message}`)}}async function y(a){for(let b of Object.keys(k))try{await x(b,a)}catch(a){j(`DNS ${b}: failed to remove — ${a.message}`)}}a.exports={TOOL_HOSTS:k,addDNSEntry:w,removeDNSEntry:x,removeAllDNSEntries:y,removeAllDNSEntriesSync:function(){try{if(!g.existsSync(q))return;let a=Object.values(k).flat(),b=g.readFileSync(q,"utf8"),c=o?"\r\n":"\n",d=b.split(/\r?\n/).filter(b=>!a.some(a=>b.includes(a))).join(c).replace(/[\r\n\s]+$/g,"")+c;if(d===b)return;if(g.writeFileSync(q,d,"utf8"),o)try{f("ipconfig /flushdns",{windowsHide:!0,stdio:"ignore"})}catch{}else if(p)try{f("dscacheutil -flushcache && killall -HUP mDNSResponder",{stdio:"ignore"})}catch{}else try{f("resolvectl flush-caches 2>/dev/null || true",{stdio:"ignore"})}catch{}}catch{}},execWithPassword:t,isSudoAvailable:r,canRunSudoWithoutPassword:s,isSudoPasswordRequired:function(){return!o&&r()&&!s()},checkDNSEntry:v,checkAllDNSStatus:function(){try{let a=g.readFileSync(q,"utf8"),b={};for(let[c,d]of Object.entries(k))b[c]=d.every(b=>a.includes(b));return b}catch{return Object.fromEntries(Object.keys(k).map(a=>[a,!1]))}},listToolsWithDnsEntries:function(){try{let a=g.readFileSync(q,"utf8");return Object.entries(k).filter(([,b])=>b.some(b=>a.includes(b))).map(([a])=>a)}catch{return[]}}}},78335:()=>{},82193:(a,b,c)=>{"use strict";let d=c(29021),e=c(33873),f=c(21820),g="10router",h="9router";function i(){return"win32"===process.platform?e.join(process.env.APPDATA||e.join(f.homedir(),"AppData","Roaming"),h):e.join(f.homedir(),`.${h}`)}let j=["db.json","usage.json","disabledModels.json","request-details.json"];function k(){return"win32"===process.platform?e.join(process.env.APPDATA||e.join(f.homedir(),"AppData","Roaming"),g):e.join(f.homedir(),`.${g}`)}let l=function(){let a=process.env.DATA_DIR;if(!a)return!function(){try{let a=i(),b=k();if(!d.existsSync(a)||d.existsSync(e.join(b,"db","data.sqlite"))||j.some(a=>d.existsSync(e.join(b,a))))return;d.cpSync(a,b,{recursive:!0,force:!1}),console.log(`[migration] copied legacy data dir ${a} → ${b}`)}catch(a){console.warn(`[migration] failed to migrate ${i()} → ${k()}: ${a?.message}`)}}(),k();try{return d.mkdirSync(a,{recursive:!0}),a}catch(b){if(b?.code==="EACCES"||b?.code==="EPERM")return console.warn(`[DATA_DIR] '${a}' not writable → fallback ~/.${g}`),k();throw b}}(),m=e.join(l,"mitm");a.exports={DATA_DIR:l,MITM_DIR:m}},85341:a=>{"use strict";a.exports={TOOL_HOSTS:{antigravity:["daily-cloudcode-pa.googleapis.com","cloudcode-pa.googleapis.com"],copilot:["api.individual.githubcopilot.com"],kiro:["runtime.us-east-1.kiro.dev","q.us-east-1.amazonaws.com","codewhisperer.us-east-1.amazonaws.com"],cursor:["api2.cursor.sh"]}}},87777:(a,b,c)=>{"use strict";let d=c(29021),e=c(33873),f=c(74075),{DATA_DIR:g}=c(82193),{LOG_BLACKLIST_URL_PARTS:h}=c(17511);function i(){return new Date().toLocaleTimeString("en-US",{hour12:!1})}let j=e.join(g,"logs","mitm");d.existsSync(j)||d.mkdirSync(j,{recursive:!0});let k=/^\s*(\{\s*\}|\[\s*\]|null)?\s*$/;function l(a,b=80){return String(a).replace(/[^a-zA-Z0-9]/g,"_").substring(0,b)}function m(a){return!!a&&h.some(b=>a.includes(b))}a.exports={log:a=>console.log(`[${i()}] [MITM] ${a}`),err:a=>console.error(`[${i()}] ❌ [MITM] ${a}`),dumpRequest:function(a,b,c="raw"){if(m(a.url))return null;try{let f=new Date().toISOString().replace(/[:.]/g,"-"),g=l((a.headers.host||"")+a.url),h=e.join(j,`${f}_${c}_${g}.req.json`),i=null;try{i=JSON.parse(b.toString())}catch{}return d.writeFileSync(h,JSON.stringify({method:a.method,url:a.url,host:a.headers.host,headers:a.headers,body:i??b.toString("utf8")},null,2)),h}catch{return null}},createResponseDumper:function(a,b="raw"){if(m(a.url))return null;let c=new Date().toISOString().replace(/[:.]/g,"-"),g=l((a.headers.host||"")+a.url),h=e.join(j,`${c}_${b}_${g}.res.txt`),i=0,n={},o=[];return{writeHeader:(a,b)=>{i=a,n=b||{}},writeChunk:a=>{null!=a&&o.push(Buffer.isBuffer(a)?a:Buffer.from(a))},end:()=>{try{let a=Buffer.concat(o),b=n["content-encoding"]||n["Content-Encoding"],c=(function(a,b){if(!a||0===a.length)return a;try{let c=(b||"").toLowerCase();if(c.includes("gzip"))return f.gunzipSync(a);if(c.includes("br"))return f.brotliDecompressSync(a);if(c.includes("deflate"))return f.inflateSync(a)}catch{}return a})(a,b).toString("utf8");if(k.test(c))return;let e={...n};delete e["content-encoding"],delete e["Content-Encoding"];let g=`STATUS: ${i}
 HEADERS: ${JSON.stringify(e,null,2)}
 ---BODY---
-${c}`;d.writeFileSync(h,g)}catch{}},file:h}},clearDumpDir:function(){try{if(!d.existsSync(j))return;for(let a of d.readdirSync(j))try{d.rmSync(e.join(j,a),{recursive:!0,force:!0})}catch{}}catch{}}}},89718:(a,b,c)=>{"use strict";c.d(b,{Bf:()=>d.Bf,CG:()=>d.CG,Dj:()=>d.Dj,Fh:()=>d.Fh,Iq:()=>d.Iq,K1:()=>d.K1,KJ:()=>d.KJ,L:()=>d.L,L9:()=>d.L9,Lh:()=>d.Lh,Mc:()=>d.Mc,OM:()=>d.OM,PX:()=>d.PX,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Um:()=>d.Um,Uv:()=>d.Uv,VT:()=>d.VT,XW:()=>d.XW,Yd:()=>d.Yd,ZO:()=>d.ZO,bI:()=>d.bI,c:()=>d.c,ek:()=>d.ek,fK:()=>d.fK,fv:()=>d.fv,getProviderConnections:()=>d.P,getSettings:()=>d.mt,h1:()=>d.h1,hj:()=>d.hj,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,iE:()=>d.iE,jd:()=>d.jd,o5:()=>d.o5,oG:()=>d.oG,op:()=>d.op,r4:()=>d.r4,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.rj,updateSettings:()=>d.Xx,uv:()=>d.uv,yF:()=>d.yF,yg:()=>d.yg,zP:()=>d.zP});var d=c(27274)},96182:(a,b,c)=>{"use strict";let{exec:d,spawn:e,execSync:f}=c(79646),g=c(33873),h=c(29021),i=c(21820),j=c(91645),k=c(55591),l=c(55511),{addDNSEntry:m,removeDNSEntry:n,removeAllDNSEntries:o,removeAllDNSEntriesSync:p,checkAllDNSStatus:q,listToolsWithDnsEntries:r,TOOL_HOSTS:s,isSudoAvailable:t,isSudoPasswordRequired:u}=c(66936),{isAdmin:v}=c(64809),w="win32"===process.platform,x="darwin"===process.platform,{generateCert:y}=c(26033),{installCert:z,uninstallCert:A}=c(9631),{isCertExpired:B}=c(8578),{DATA_DIR:C,MITM_DIR:D}=c(82193),{log:E,err:F}=c(87777),{LSOF_BIN:G}=c(17511),H="http://localhost:20128";function I(a){return null==a||""===a?"''":`'${String(a).replace(/'/g,"'\\''")}'`}async function J(){if(!ab)return H;try{let a=await ab(),b=a&&null!=a.mitmRouterBaseUrl?String(a.mitmRouterBaseUrl).trim():"";if(!b)return H;let c=new URL(b);if("http:"!==c.protocol&&"https:"!==c.protocol)return H;return b.replace(/\/+$/,"")}catch{return H}}let K=g.join(D,".mitm.pid"),L=g.join(D,".mitm.lock"),M=[5e3,1e4,2e4,3e4,6e4],N=0,O=0,P=!1;function Q(){if(process.env.MITM_SERVER_PATH)return process.env.MITM_SERVER_PATH;let a=g.join(__dirname,"server.js");if(h.existsSync(a))return a;let b=g.join(process.cwd(),"src","mitm","server.js");if(h.existsSync(b))return b;let c=g.join(process.cwd(),"..","src","mitm","server.js");return h.existsSync(c)?c:b}function R(a){try{if(!a||!h.existsSync(a)||!a.includes(`${g.sep}node_modules${g.sep}`))return a;let b=g.join(C,"runtime","mitm"),c=g.join(b,"server.js");if(h.existsSync(c))try{if(h.statSync(a).size===h.statSync(c).size)return c}catch{}return h.mkdirSync(b,{recursive:!0}),h.copyFileSync(a,c),c}catch(b){try{E(`[MITM] runtime copy failed: ${b.message}`)}catch{}return a}}let S=R(Q()),T=null,U=null;function V(){return globalThis.__mitmSudoPassword||null}function W(a){globalThis.__mitmSudoPassword=a}function X(a){try{return process.kill(a,0),!0}catch(a){return"EACCES"===a.code}}function Y(a,b=!1,e=null){if(w)d(`taskkill ${b?"/F ":""}/PID ${a}`,{windowsHide:!0},()=>{});else{let f=b?"SIGKILL":"SIGTERM",g=`pkill -${f} -P ${a} 2>/dev/null; kill -${f} ${a} 2>/dev/null`;if(e||t()){let{execWithPassword:a}=c(66936);a(g,e||"").catch(()=>d(g,{windowsHide:!0},()=>{}))}else d(g,{windowsHide:!0},()=>{})}}let Z=/^[0-9a-f]{24}:[0-9a-f]{32}:[0-9a-f]+$/;async function $(){return Promise.resolve().then(c.bind(c,72082))}async function _(a){let{encryptSecret:b}=await $();return b(a)}async function aa(a){if("string"!=typeof a||!a)return null;let{isEncrypted:b,decryptSecret:d}=await $();if(b(a))try{return d(a)||null}catch{return null}if(!Z.test(a))return null;try{let[b,d,e]=a.split(":"),f=l.createDecipheriv("aes-256-gcm",function(){let{machineIdSync:a}=c(19713),b=a();if(!b||"string"!=typeof b||!b.trim())throw Error("machine id unavailable — cannot read a legacy encrypted password");return l.createHash("sha256").update(b+"10router-mitm-pwd").digest()}(),Buffer.from(b,"hex"));return f.setAuthTag(Buffer.from(d,"hex")),f.update(Buffer.from(e,"hex"))+f.final("utf8")||null}catch{return null}}let ab=null,ac=null;async function ad(a,b){if(ac)try{let c={mitmEnabled:a};b&&(c.mitmSudoEncrypted=await _(b)),await ac(c)}catch(a){F(`Failed to save settings: ${a.message}`)}}async function ae(){if(ac)try{await ac({mitmSudoEncrypted:null})}catch(a){F(`Failed to clear encrypted password: ${a.message}`)}}async function af(){if(!ab)return null;try{let a=(await ab()).mitmSudoEncrypted;if(!a)return null;let b=await aa(a);if(!b)return null;let{isEncrypted:c}=await $();if(!c(a)&&ac)try{await ac({mitmSudoEncrypted:await _(b)})}catch{}return b}catch{return null}}async function ag(a,b){if(ac&&ab)try{let c={...(await ab()).dnsToolEnabled||{},[a]:b};await ac({dnsToolEnabled:c})}catch(a){F(`Failed to save DNS state: ${a.message}`)}}async function ah(){if(!ab)return{};try{return(await ab()).dnsToolEnabled||{}}catch{return{}}}async function ai(a){let b=await ah(),c=a||V()||await af();for(let[a,d]of Object.entries(b))if(d&&s[a])try{await m(a,c)}catch(b){F(`DNS ${a}: restore failed — ${b.message}`)}}async function aj(){let a=r();if(0===a.length)return;let b=await an().catch(()=>null);if(b?.running)return;let c=ab?await ab().catch(()=>({})):{},d=await ah(),e=a.filter(a=>!c.mitmEnabled||!d[a]);if(0===e.length)return;if(!await ak())return void F(`DNS: stale entries from a previous run (${e.join(", ")}) still point at 127.0.0.1 — those tools will keep failing until they are removed. `+(w?"Restart 10Router as administrator to clean them up.":"Enter your sudo password in the dashboard to clean them up."));let f=V()||await af();for(let a of e)try{await n(a,f),E(`🌐 DNS ${a}: cleaned up stale entries from a previous run`)}catch(b){F(`DNS ${a}: stale cleanup failed — ${b.message}`)}}async function ak(){return w?v():!(!v()&&u())||!!(V()||await af())}function al(a){return new Promise(a=>{w?d('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{windowsHide:!0},(b,c)=>{if(b)return a(null);let e=parseInt(c.trim(),10);if(!e||e<=4)return a(null);d(`tasklist /FI "PID eq ${e}" /FO CSV /NH`,{windowsHide:!0},(b,c)=>{let d=c?.match(/"([^"]+)"/);a({pid:e,name:d?d[1]:"unknown"})})}):d(`${G} -nP -iTCP:443 -sTCP:LISTEN -t`,{windowsHide:!0},(b,c)=>{if(b||!c?.trim())return a(null);let e=parseInt(c.trim().split("\n")[0],10);if(!e||isNaN(e))return a(null);d(`ps -p ${e} -o comm=`,{windowsHide:!0},(b,c)=>{a({pid:e,name:c?.trim()||"unknown"})})})})}async function am(a){if(T&&!T.killed){try{T.kill("SIGKILL")}catch{}T=null,U=null}try{if(h.existsSync(K)){let b=parseInt(h.readFileSync(K,"utf-8").trim(),10);b&&X(b)&&(Y(b,!0,a),await new Promise(a=>setTimeout(a,500))),h.unlinkSync(K)}}catch{}if(!w&&S)try{let b=S.replace(/'/g,"'\\''");if(a||t()){let{execWithPassword:d}=c(66936);await d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,a||"").catch(()=>{})}else d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,{windowsHide:!0},()=>{});await new Promise(a=>setTimeout(a,500))}catch{}}async function an(){let a=null!==T&&!T.killed,b=U;if(!a)try{if(h.existsSync(K)){let c=parseInt(h.readFileSync(K,"utf-8").trim(),10);c&&X(c)?(a=!0,b=c):h.unlinkSync(K)}}catch{}let d=q(),e=g.join(D,"rootCA.crt"),f=h.existsSync(e),{checkCertInstalled:i}=c(9631),j=!!f&&await i(e);return{running:a,pid:b,certExists:f,certTrusted:j,dnsStatus:d}}async function ao(a){if(P)return;if(P=!0,Date.now()-O>=6e4&&(N=0),N>=5){F("Max restart attempts reached. Giving up."),P=!1;return}let b=M[Math.min(N,M.length-1)];N++,E(`Restarting in ${b/1e3}s... (${N}/5)`),await new Promise(a=>setTimeout(a,b));try{let b=ab?await ab():null;if(b&&!b.mitmEnabled){E("MITM disabled, skipping restart"),P=!1;return}let c=V()||await af();if(!c&&!w){F("No cached password, cannot auto-restart"),P=!1;return}await aq(a,c),E("\uD83D\uDD04 Restarted successfully"),N=0,P=!1}catch(b){F(`Restart attempt ${N}/5 failed: ${b.message}`),P=!1,ao(a)}}async function ap(a,b){if(a&&a.pid){if(w)try{f(`powershell -NonInteractive -WindowStyle Hidden -Command "Stop-Process -Id ${a.pid} -Force -ErrorAction SilentlyContinue"`,{windowsHide:!0})}catch{}else try{let{execWithPassword:d}=c(66936);b||t()?await d(`kill -9 ${a.pid}`,b||""):f(`kill -9 ${a.pid}`,{windowsHide:!0})}catch{}await new Promise(a=>setTimeout(a,800))}}async function aq(a,b,l=!1){if(!T||T.killed)try{if(h.existsSync(K)){let a=parseInt(h.readFileSync(K,"utf-8").trim(),10);if(a&&X(a))return U=a,E(`♻️ Reusing existing process (PID: ${a})`),await ad(!0,b),b&&W(b),{running:!0,pid:a};h.unlinkSync(K)}}catch{}if(T&&!T.killed)throw Error("MITM server is already running");try{h.writeFileSync(L,String(process.pid),{flag:"wx"})}catch(a){if("EEXIST"===a.code){let a=!1;try{let b=parseInt(h.readFileSync(L,"utf-8").trim(),10);a=!b||!X(b)}catch{a=!0}if(!a)throw Error("MITM server is already starting (lock contention)");try{h.unlinkSync(L)}catch{}h.writeFileSync(L,String(process.pid),{flag:"wx"})}else throw a}try{if(await am(b),!w){let a=await new Promise(a=>{let b=j.createServer();b.once("error",b=>{"EADDRINUSE"===b.code?a("in-use"):a("no-permission")}),b.once("listening",()=>{b.close(()=>a("free"))}),b.listen(443,"127.0.0.1")});if("in-use"===a||"no-permission"===a){let a=await al(b);if(a){let c=a.name.includes("/")?a.name.split("/").filter(Boolean).pop():a.name;if(l)E(`Killing process on port 443 (PID ${a.pid}, name=${c})...`),await ap(a,b);else{let b=Error(`Port 443 is already in use by "${c}" (PID ${a.pid}).`);throw b.code="PORT_443_BUSY",b.portOwner={pid:a.pid,name:c},b}}}}let m=g.join(D,"rootCA.crt"),n=g.join(D,"rootCA.key"),o=h.existsSync(m)&&h.existsSync(n);if(!o||B(m)){if(o){E("\uD83D\uDD10 Cert expired — uninstalling old cert...");let a=b||V()||await af();try{await A(a,m)}catch{}}E("\uD83D\uDD10 Generating Root CA..."),await y()}let{checkCertInstalled:p}=c(9631),r=await p(m),s=!w&&!x&&!t();if(r)E("\uD83D\uDD10 Cert: already trusted ✅");else{E("\uD83D\uDD10 Cert: not trusted → installing...");let a=b||V()||await af();if(s)E(`🔐 Cert: skipping system trust (no sudo). Install ${m} as a trusted CA on machines that use this proxy.`);else{if(!a&&u())throw Error("Sudo password required to install Root CA certificate");try{await z(a,m),E("\uD83D\uDD10 Cert: ✅ trusted")}catch(a){throw Error(`Failed to trust certificate: ${a.message}`)}}}let v=S;if((!v||!h.existsSync(v))&&(E(`[MITM] server.js missing at ${v} → recopying`),!(v=R(Q()))||!h.existsSync(v)))throw Error(`MITM server.js not found at ${v}. Reinstall 10router.`);let C=await J();if(E(`🚀 Starting server... (router: ${C})`),w){let c=await al(b);if(c)if(l)E(`Killing process on port 443 (PID ${c.pid}, name=${c.name})...`),await ap(c,b);else{let a=Error(`Port 443 is already in use by "${c.name}" (PID ${c.pid}).`);throw a.code="PORT_443_BUSY",a.portOwner={pid:c.pid,name:c.name},a}T=e(process.execPath,[v],{detached:!1,windowsHide:!0,cwd:i.tmpdir(),stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:C}}),ac&&await ac({mitmCertInstalled:!0}).catch(()=>{})}else if(t()){let c=`export HOME=${I(i.homedir())} && export MITM_ROUTER_BASE=${I(C)} && export NODE_ENV=production && IFS= read -r ROUTER_API_KEY && export ROUTER_API_KEY && exec ${I(process.execPath)} ${I(v)}`;(T=e("sudo",["-S","-E","sh","-c",c],{detached:!1,windowsHide:!0,stdio:["pipe","pipe","pipe"]})).stdin.write(`${b}
+${c}`;d.writeFileSync(h,g)}catch{}},file:h}},clearDumpDir:function(){try{if(!d.existsSync(j))return;for(let a of d.readdirSync(j))try{d.rmSync(e.join(j,a),{recursive:!0,force:!0})}catch{}}catch{}}}},89718:(a,b,c)=>{"use strict";c.d(b,{Bf:()=>d.Bf,CG:()=>d.CG,Dj:()=>d.Dj,Fh:()=>d.Fh,Iq:()=>d.Iq,K1:()=>d.K1,KJ:()=>d.KJ,L:()=>d.L,L9:()=>d.L9,Lh:()=>d.Lh,Mc:()=>d.Mc,OM:()=>d.OM,PX:()=>d.PX,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Um:()=>d.Um,Uv:()=>d.Uv,VT:()=>d.VT,XW:()=>d.XW,Yd:()=>d.Yd,ZO:()=>d.ZO,bI:()=>d.bI,c:()=>d.c,ek:()=>d.ek,fK:()=>d.fK,fv:()=>d.fv,getApiKeyByKey:()=>d.mY,getProviderConnections:()=>d.P,getSettings:()=>d.mt,h1:()=>d.h1,hj:()=>d.hj,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,iE:()=>d.iE,jd:()=>d.jd,localStartOfDayIso:()=>d.Yq,lr:()=>d.lr,o5:()=>d.o5,oG:()=>d.oG,op:()=>d.op,r4:()=>d.r4,sV:()=>d.sV,sumApiKeyTokensSince:()=>d.ZQ,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.rj,updateSettings:()=>d.Xx,uv:()=>d.uv,yF:()=>d.yF,yg:()=>d.yg,zP:()=>d.zP});var d=c(27274)},96182:(a,b,c)=>{"use strict";let{exec:d,spawn:e,execSync:f}=c(79646),g=c(33873),h=c(29021),i=c(21820),j=c(91645),k=c(55591),l=c(55511),{addDNSEntry:m,removeDNSEntry:n,removeAllDNSEntries:o,removeAllDNSEntriesSync:p,checkAllDNSStatus:q,listToolsWithDnsEntries:r,TOOL_HOSTS:s,isSudoAvailable:t,isSudoPasswordRequired:u}=c(66936),{isAdmin:v}=c(64809),w="win32"===process.platform,x="darwin"===process.platform,{generateCert:y}=c(26033),{installCert:z,uninstallCert:A}=c(9631),{isCertExpired:B}=c(8578),{DATA_DIR:C,MITM_DIR:D}=c(82193),{log:E,err:F}=c(87777),{LSOF_BIN:G}=c(17511),H="http://localhost:20128";function I(a){return null==a||""===a?"''":`'${String(a).replace(/'/g,"'\\''")}'`}async function J(){if(!ab)return H;try{let a=await ab(),b=a&&null!=a.mitmRouterBaseUrl?String(a.mitmRouterBaseUrl).trim():"";if(!b)return H;let c=new URL(b);if("http:"!==c.protocol&&"https:"!==c.protocol)return H;return b.replace(/\/+$/,"")}catch{return H}}let K=g.join(D,".mitm.pid"),L=g.join(D,".mitm.lock"),M=[5e3,1e4,2e4,3e4,6e4],N=0,O=0,P=!1;function Q(){if(process.env.MITM_SERVER_PATH)return process.env.MITM_SERVER_PATH;let a=g.join(__dirname,"server.js");if(h.existsSync(a))return a;let b=g.join(process.cwd(),"src","mitm","server.js");if(h.existsSync(b))return b;let c=g.join(process.cwd(),"..","src","mitm","server.js");return h.existsSync(c)?c:b}function R(a){try{if(!a||!h.existsSync(a)||!a.includes(`${g.sep}node_modules${g.sep}`))return a;let b=g.join(C,"runtime","mitm"),c=g.join(b,"server.js");if(h.existsSync(c))try{if(h.statSync(a).size===h.statSync(c).size)return c}catch{}return h.mkdirSync(b,{recursive:!0}),h.copyFileSync(a,c),c}catch(b){try{E(`[MITM] runtime copy failed: ${b.message}`)}catch{}return a}}let S=R(Q()),T=null,U=null;function V(){return globalThis.__mitmSudoPassword||null}function W(a){globalThis.__mitmSudoPassword=a}function X(a){try{return process.kill(a,0),!0}catch(a){return"EACCES"===a.code}}function Y(a,b=!1,e=null){if(w)d(`taskkill ${b?"/F ":""}/PID ${a}`,{windowsHide:!0},()=>{});else{let f=b?"SIGKILL":"SIGTERM",g=`pkill -${f} -P ${a} 2>/dev/null; kill -${f} ${a} 2>/dev/null`;if(e||t()){let{execWithPassword:a}=c(66936);a(g,e||"").catch(()=>d(g,{windowsHide:!0},()=>{}))}else d(g,{windowsHide:!0},()=>{})}}let Z=/^[0-9a-f]{24}:[0-9a-f]{32}:[0-9a-f]+$/;async function $(){return Promise.resolve().then(c.bind(c,72082))}async function _(a){let{encryptSecret:b}=await $();return b(a)}async function aa(a){if("string"!=typeof a||!a)return null;let{isEncrypted:b,decryptSecret:d}=await $();if(b(a))try{return d(a)||null}catch{return null}if(!Z.test(a))return null;try{let[b,d,e]=a.split(":"),f=l.createDecipheriv("aes-256-gcm",function(){let{machineIdSync:a}=c(19713),b=a();if(!b||"string"!=typeof b||!b.trim())throw Error("machine id unavailable — cannot read a legacy encrypted password");return l.createHash("sha256").update(b+"10router-mitm-pwd").digest()}(),Buffer.from(b,"hex"));return f.setAuthTag(Buffer.from(d,"hex")),f.update(Buffer.from(e,"hex"))+f.final("utf8")||null}catch{return null}}let ab=null,ac=null;async function ad(a,b){if(ac)try{let c={mitmEnabled:a};b&&(c.mitmSudoEncrypted=await _(b)),await ac(c)}catch(a){F(`Failed to save settings: ${a.message}`)}}async function ae(){if(ac)try{await ac({mitmSudoEncrypted:null})}catch(a){F(`Failed to clear encrypted password: ${a.message}`)}}async function af(){if(!ab)return null;try{let a=(await ab()).mitmSudoEncrypted;if(!a)return null;let b=await aa(a);if(!b)return null;let{isEncrypted:c}=await $();if(!c(a)&&ac)try{await ac({mitmSudoEncrypted:await _(b)})}catch{}return b}catch{return null}}async function ag(a,b){if(ac&&ab)try{let c={...(await ab()).dnsToolEnabled||{},[a]:b};await ac({dnsToolEnabled:c})}catch(a){F(`Failed to save DNS state: ${a.message}`)}}async function ah(){if(!ab)return{};try{return(await ab()).dnsToolEnabled||{}}catch{return{}}}async function ai(a){let b=await ah(),c=a||V()||await af();for(let[a,d]of Object.entries(b))if(d&&s[a])try{await m(a,c)}catch(b){F(`DNS ${a}: restore failed — ${b.message}`)}}async function aj(){let a=r();if(0===a.length)return;let b=await an().catch(()=>null);if(b?.running)return;let c=ab?await ab().catch(()=>({})):{},d=await ah(),e=a.filter(a=>!c.mitmEnabled||!d[a]);if(0===e.length)return;if(!await ak())return void F(`DNS: stale entries from a previous run (${e.join(", ")}) still point at 127.0.0.1 — those tools will keep failing until they are removed. `+(w?"Restart 10Router as administrator to clean them up.":"Enter your sudo password in the dashboard to clean them up."));let f=V()||await af();for(let a of e)try{await n(a,f),E(`🌐 DNS ${a}: cleaned up stale entries from a previous run`)}catch(b){F(`DNS ${a}: stale cleanup failed — ${b.message}`)}}async function ak(){return w?v():!(!v()&&u())||!!(V()||await af())}function al(a){return new Promise(a=>{w?d('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{windowsHide:!0},(b,c)=>{if(b)return a(null);let e=parseInt(c.trim(),10);if(!e||e<=4)return a(null);d(`tasklist /FI "PID eq ${e}" /FO CSV /NH`,{windowsHide:!0},(b,c)=>{let d=c?.match(/"([^"]+)"/);a({pid:e,name:d?d[1]:"unknown"})})}):d(`${G} -nP -iTCP:443 -sTCP:LISTEN -t`,{windowsHide:!0},(b,c)=>{if(b||!c?.trim())return a(null);let e=parseInt(c.trim().split("\n")[0],10);if(!e||isNaN(e))return a(null);d(`ps -p ${e} -o comm=`,{windowsHide:!0},(b,c)=>{a({pid:e,name:c?.trim()||"unknown"})})})})}async function am(a){if(T&&!T.killed){try{T.kill("SIGKILL")}catch{}T=null,U=null}try{if(h.existsSync(K)){let b=parseInt(h.readFileSync(K,"utf-8").trim(),10);b&&X(b)&&(Y(b,!0,a),await new Promise(a=>setTimeout(a,500))),h.unlinkSync(K)}}catch{}if(!w&&S)try{let b=S.replace(/'/g,"'\\''");if(a||t()){let{execWithPassword:d}=c(66936);await d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,a||"").catch(()=>{})}else d(`pkill -SIGKILL -f "${b}" 2>/dev/null || true`,{windowsHide:!0},()=>{});await new Promise(a=>setTimeout(a,500))}catch{}}async function an(){let a=null!==T&&!T.killed,b=U;if(!a)try{if(h.existsSync(K)){let c=parseInt(h.readFileSync(K,"utf-8").trim(),10);c&&X(c)?(a=!0,b=c):h.unlinkSync(K)}}catch{}let d=q(),e=g.join(D,"rootCA.crt"),f=h.existsSync(e),{checkCertInstalled:i}=c(9631),j=!!f&&await i(e);return{running:a,pid:b,certExists:f,certTrusted:j,dnsStatus:d}}async function ao(a){if(P)return;if(P=!0,Date.now()-O>=6e4&&(N=0),N>=5){F("Max restart attempts reached. Giving up."),P=!1;return}let b=M[Math.min(N,M.length-1)];N++,E(`Restarting in ${b/1e3}s... (${N}/5)`),await new Promise(a=>setTimeout(a,b));try{let b=ab?await ab():null;if(b&&!b.mitmEnabled){E("MITM disabled, skipping restart"),P=!1;return}let c=V()||await af();if(!c&&!w){F("No cached password, cannot auto-restart"),P=!1;return}await aq(a,c),E("\uD83D\uDD04 Restarted successfully"),N=0,P=!1}catch(b){F(`Restart attempt ${N}/5 failed: ${b.message}`),P=!1,ao(a)}}async function ap(a,b){if(a&&a.pid){if(w)try{f(`powershell -NonInteractive -WindowStyle Hidden -Command "Stop-Process -Id ${a.pid} -Force -ErrorAction SilentlyContinue"`,{windowsHide:!0})}catch{}else try{let{execWithPassword:d}=c(66936);b||t()?await d(`kill -9 ${a.pid}`,b||""):f(`kill -9 ${a.pid}`,{windowsHide:!0})}catch{}await new Promise(a=>setTimeout(a,800))}}async function aq(a,b,l=!1){if(!T||T.killed)try{if(h.existsSync(K)){let a=parseInt(h.readFileSync(K,"utf-8").trim(),10);if(a&&X(a))return U=a,E(`♻️ Reusing existing process (PID: ${a})`),await ad(!0,b),b&&W(b),{running:!0,pid:a};h.unlinkSync(K)}}catch{}if(T&&!T.killed)throw Error("MITM server is already running");try{h.writeFileSync(L,String(process.pid),{flag:"wx"})}catch(a){if("EEXIST"===a.code){let a=!1;try{let b=parseInt(h.readFileSync(L,"utf-8").trim(),10);a=!b||!X(b)}catch{a=!0}if(!a)throw Error("MITM server is already starting (lock contention)");try{h.unlinkSync(L)}catch{}h.writeFileSync(L,String(process.pid),{flag:"wx"})}else throw a}try{if(await am(b),!w){let a=await new Promise(a=>{let b=j.createServer();b.once("error",b=>{"EADDRINUSE"===b.code?a("in-use"):a("no-permission")}),b.once("listening",()=>{b.close(()=>a("free"))}),b.listen(443,"127.0.0.1")});if("in-use"===a||"no-permission"===a){let a=await al(b);if(a){let c=a.name.includes("/")?a.name.split("/").filter(Boolean).pop():a.name;if(l)E(`Killing process on port 443 (PID ${a.pid}, name=${c})...`),await ap(a,b);else{let b=Error(`Port 443 is already in use by "${c}" (PID ${a.pid}).`);throw b.code="PORT_443_BUSY",b.portOwner={pid:a.pid,name:c},b}}}}let m=g.join(D,"rootCA.crt"),n=g.join(D,"rootCA.key"),o=h.existsSync(m)&&h.existsSync(n);if(!o||B(m)){if(o){E("\uD83D\uDD10 Cert expired — uninstalling old cert...");let a=b||V()||await af();try{await A(a,m)}catch{}}E("\uD83D\uDD10 Generating Root CA..."),await y()}let{checkCertInstalled:p}=c(9631),r=await p(m),s=!w&&!x&&!t();if(r)E("\uD83D\uDD10 Cert: already trusted ✅");else{E("\uD83D\uDD10 Cert: not trusted → installing...");let a=b||V()||await af();if(s)E(`🔐 Cert: skipping system trust (no sudo). Install ${m} as a trusted CA on machines that use this proxy.`);else{if(!a&&u())throw Error("Sudo password required to install Root CA certificate");try{await z(a,m),E("\uD83D\uDD10 Cert: ✅ trusted")}catch(a){throw Error(`Failed to trust certificate: ${a.message}`)}}}let v=S;if((!v||!h.existsSync(v))&&(E(`[MITM] server.js missing at ${v} → recopying`),!(v=R(Q()))||!h.existsSync(v)))throw Error(`MITM server.js not found at ${v}. Reinstall 10router.`);let C=await J();if(E(`🚀 Starting server... (router: ${C})`),w){let c=await al(b);if(c)if(l)E(`Killing process on port 443 (PID ${c.pid}, name=${c.name})...`),await ap(c,b);else{let a=Error(`Port 443 is already in use by "${c.name}" (PID ${c.pid}).`);throw a.code="PORT_443_BUSY",a.portOwner={pid:c.pid,name:c.name},a}T=e(process.execPath,[v],{detached:!1,windowsHide:!0,cwd:i.tmpdir(),stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:C}}),ac&&await ac({mitmCertInstalled:!0}).catch(()=>{})}else if(t()){let c=`export HOME=${I(i.homedir())} && export MITM_ROUTER_BASE=${I(C)} && export NODE_ENV=production && IFS= read -r ROUTER_API_KEY && export ROUTER_API_KEY && exec ${I(process.execPath)} ${I(v)}`;(T=e("sudo",["-S","-E","sh","-c",c],{detached:!1,windowsHide:!0,stdio:["pipe","pipe","pipe"]})).stdin.write(`${b}
 `),T.stdin.write(`${a}
 `),T.stdin.end()}else T=e(process.execPath,[v],{detached:!1,windowsHide:!0,cwd:i.tmpdir(),stdio:["ignore","pipe","pipe"],env:{...process.env,ROUTER_API_KEY:a,NODE_ENV:"production",MITM_ROUTER_BASE:C}});if(T&&(U=T.pid,h.writeFileSync(K,String(U)),O=Date.now()),x){let a=g.join(D,"rootCA.crt");h.existsSync(a)&&d(`launchctl setenv NODE_EXTRA_CA_CERTS "${a}"`,{windowsHide:!0},b=>{b?E(`[launchctl] Failed to set NODE_EXTRA_CA_CERTS: ${b.message}`):E(`[launchctl] NODE_EXTRA_CA_CERTS set to ${a}`)})}else if(w){let a=g.join(D,"rootCA.crt");h.existsSync(a)&&d(`setx NODE_EXTRA_CA_CERTS "${a}"`,{windowsHide:!0},a=>{a?E(`[setx] Failed to set NODE_EXTRA_CA_CERTS: ${a.message}`):E("[setx] NODE_EXTRA_CA_CERTS set for current user")})}let H=null;T&&(T.stdout.on("data",a=>{process.stdout.write(a)}),T.stderr.on("data",a=>{let b=a.toString().trim();b&&(w||!b.includes("Password:")&&!b.includes("password for"))&&(F(b),H=b),!w&&(b.includes("incorrect password")||b.includes("no password was provided"))&&(W(null),ae(),P=!0)}),T.on("exit",b=>{E(`Server exited (code: ${b})`),T=null,U=null;try{h.unlinkSync(K)}catch{}try{h.unlinkSync(L)}catch{}0===b||P||ao(a)}));let M=await function(a=443){return new Promise(b=>{let c=Date.now()+8e3,d=()=>{let e=k.request({hostname:"127.0.0.1",port:a,path:"/_mitm_health",method:"GET",rejectUnauthorized:!1},a=>{let c="";a.on("data",a=>{c+=a}),a.on("end",()=>{try{let a=JSON.parse(c);b(!0===a.ok?{ok:!0,pid:a.pid||null}:null)}catch{b(null)}})});e.on("error",()=>{Date.now()<c?setTimeout(d,500):b(null)}),e.end()};d()})}(443);if(!M){if(T&&!T.killed){try{T.kill()}catch{}T=null}let a=function(){try{if(w){let a=f('powershell -NonInteractive -WindowStyle Hidden -Command "$c = Get-NetTCPConnection -LocalPort 443 -State Listen -ErrorAction SilentlyContinue | Select-Object -First 1; if ($c) { $c.OwningProcess } else { 0 }"',{encoding:"utf8",windowsHide:!0}).trim(),b=parseInt(a,10);if(b&&b>4){let a=f(`tasklist /FI "PID eq ${b}" /FO CSV /NH`,{encoding:"utf8",windowsHide:!0}).match(/"([^"]+)"/);if(a)return a[1].replace(".exe","")}}else{let a=f(`${G} -i :443`,{encoding:"utf8",windowsHide:!0}).trim().split("\n");if(a.length>1)return a[1].split(/\s+/)[0]}}catch{}return null}(),b=a?` Port 443 already in use by ${a}.`:"",c=H||`Check sudo password or port 443 access.${b}`;throw Error(`MITM server failed to start. ${c}`)}ac&&await ac({mitmCertInstalled:!0}).catch(()=>{}),E(`✅ Server healthy (PID: ${U||M.pid})`);let N=q();for(let[a,b]of Object.entries(N))E(`🌐 DNS ${a}: ${b?"✅ active":"❌ inactive"}`);await ad(!0,b),b&&W(b);try{h.unlinkSync(L)}catch{}return{running:!0,pid:U}}catch(a){try{h.unlinkSync(L)}catch{}throw a}}async function ar(a){P=!0,N=0,E("⏹ Stopping server...");let b=T,e=b&&!b.killed?b.pid:(()=>{try{return parseInt(h.readFileSync(K,"utf-8").trim(),10)}catch{return null}})();if(e&&X(e)&&(E(`Killing server (PID: ${e})...`),Y(e,!1,a),await new Promise(a=>setTimeout(a,1e3)),X(e)&&Y(e,!0,a)),T=null,U=null,w){let a=g.join(process.env.SystemRoot||"C:\\Windows","System32","drivers","etc","hosts"),b=Object.values(s).flat();try{let{isAdmin:d,runElevatedPowerShell:e,quotePs:f}=c(64809);if(d()){let d=h.readFileSync(a,"utf8"),e=d.split(/\r?\n/).filter(a=>!b.some(b=>a.includes(b))).join("\r\n").replace(/[\r\n\s]+$/g,"")+"\r\n";e!==d&&h.writeFileSync(a,e,"utf8");try{c(79646).execSync("ipconfig /flushdns",{windowsHide:!0,stdio:"ignore"})}catch{}E("\uD83C\uDF10 DNS: ✅ all tool hosts removed")}else{let c=b.map(f).join(","),d=`
           $hosts = @(${c})