@withbuddi/buddi 0.1.0-pre.43 → 0.1.0-pre.44

package/packages/install/dist/cloudflared.d.ts

@@ -0,0 +1,121 @@
+import type { ChildProcess, SpawnOptions } from 'node:child_process';
+/** The gateway's backoff: 2 s doubling to 30 s. */
+export declare function connectorRestartDelay(failures: number): number;
+/**
+ * How long until a failed read of the plan or the token is tried again: 30 s
+ * doubling to 10 min. A read that throws is the database or the keychain not
+ * answering for now, not a missing setup, so the connector keeps asking.
+ */
+export declare function connectorReadRetryDelay(failures: number): number;
+export type ConnectorState = 'running' | 'starting' | 'stopped' | 'missing-binary' | 'system-daemon';
+/** What `GET /connector` answers, and what the setup step shows. */
+export interface ConnectorStatus {
+    state: ConnectorState;
+    /** buddi runs its own, or the owner chose the system service. */
+    mode: 'buddi' | 'system';
+    /** The system service's file, when one is installed. */
+    systemDaemon: string | null;
+    /** The cloudflared buddi runs, and where it came from. */
+    binary: {
+        path: string;
+        source: 'path' | 'downloaded';
+    } | null;
+    /** One sentence: why it is missing, stopped or retrying. */
+    detail?: string | undefined;
+    /** The Homebrew line, on a Mac with brew, when the binary is missing. */
+    brew?: string | undefined;
+    pid: number | null;
+    /** Where cloudflared's own lines go. */
+    log: string;
+}
+/** What the database says the connector should be. */
+export interface ConnectorPlan {
+    wanted: boolean;
+    mode: 'buddi' | 'system';
+    /** The tunnel the token belongs to: a change restarts the child. */
+    tunnelId: string | null;
+}
+/** The line cloudflared prints once an edge connection is up. */
+export declare const REGISTERED_LINE: RegExp;
+/** The system service `sudo cloudflared service install` leaves behind. */
+export declare function systemDaemonFiles(platform: NodeJS.Platform): string[];
+export declare function findSystemDaemon(platform: NodeJS.Platform, exists?: (file: string) => boolean): string | null;
+/** The line that removes it, said beside the reason. */
+export declare const SYSTEM_DAEMON_UNINSTALL = "sudo cloudflared service uninstall";
+/** Where a downloaded cloudflared lives. buddi writes nothing else there. */
+export declare function downloadedBinary(data: string, platform?: NodeJS.Platform): string;
+/** A program on PATH (and the extra prefixes), or null. */
+export declare function findOnPath(name: string, pathEnv: string | undefined, platform: NodeJS.Platform, exists?: (file: string) => boolean): string | null;
+/** The release asset for this platform, or null when Cloudflare publishes none. */
+export declare function releaseAsset(platform: NodeJS.Platform, arch: string): string | null;
+/**
+ * The checksums in a release's notes: Cloudflare ends every release body with
+ * a "SHA256 Checksums" block of `<asset>: <hex>` lines.
+ */
+export declare function parseChecksums(body: string): Map<string, string>;
+export declare const sha256: (bytes: Uint8Array) => string;
+export declare class VerifyError extends Error {
+}
+/**
+ * The bytes checked against the published checksum, and against GitHub's own
+ * digest for the asset when it gives one. Throws unless every published value
+ * matches; a release without a checksum for the asset is refused, not trusted.
+ */
+export declare function verifyAsset(bytes: Uint8Array, asset: string, published: Map<string, string>, githubDigest?: string | null): string;
+export declare const RELEASE_URL = "https://api.github.com/repos/cloudflare/cloudflared/releases/latest";
+export type Fetch = (url: string, init?: RequestInit) => Promise<Response>;
+/**
+ * Download, verify and install cloudflared into `<data>/bin/`, mode 0700.
+ * Returns the path. Nothing touches the final path before the bytes check.
+ */
+export declare function downloadCloudflared(options: {
+    data: string;
+    platform: NodeJS.Platform;
+    arch: string;
+    fetch?: Fetch;
+    /** Unpack a .tgz into a directory (tests pass their own). */
+    untar?: (archive: string, into: string) => Promise<void>;
+}): Promise<{
+    path: string;
+    version: string;
+    sha256: string;
+}>;
+/** Remove what buddi downloaded. Only `<data>/bin/cloudflared` and its note: buddi wrote nothing else. */
+export declare function removeDownloaded(data: string, platform?: NodeJS.Platform): Promise<boolean>;
+/** The environment the child gets: enough to run, nothing of buddi's. */
+export declare function connectorEnv(env: NodeJS.ProcessEnv, token: string): NodeJS.ProcessEnv;
+/** How long a failed download is not tried again: the setup polls every few seconds. */
+export declare const DOWNLOAD_RETRY_MS: number;
+export interface ConnectorDeps {
+    data: string;
+    platform?: NodeJS.Platform;
+    arch?: string;
+    env?: NodeJS.ProcessEnv;
+    /** What the database says, read at every sync. */
+    plan: () => Promise<ConnectorPlan>;
+    /** The connector token, from the owner secret store, read at spawn only. */
+    token: () => Promise<string | null>;
+    exists?: (file: string) => boolean;
+    download?: () => Promise<{
+        path: string;
+    }>;
+    spawn?: (command: string, args: string[], options: SpawnOptions) => ChildProcess;
+    log?: (line: string) => void;
+    now?: () => number;
+    restartDelay?: (failures: number) => number;
+    /** How long until a failed plan or token read is tried again. */
+    readRetryDelay?: (failures: number) => number;
+}
+export interface Connector {
+    /** Read the plan and make the child match it. Serialized; never throws. */
+    sync(): Promise<ConnectorStatus>;
+    status(): ConnectorStatus;
+    /** Stop the child and delete the binary when buddi downloaded it. */
+    remove(): Promise<ConnectorStatus & {
+        removedBinary: boolean;
+    }>;
+    /** Stop for good: the supervisor is leaving. */
+    close(): Promise<void>;
+}
+export declare function createConnector(deps: ConnectorDeps): Connector;
+//# sourceMappingURL=cloudflared.d.ts.map

package/packages/install/dist/cloudflared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.d.ts","sourceRoot":"","sources":["../src/cloudflared.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQrE,mDAAmD;AACnD,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAgE;AAE/H;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAuE;AAExI,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAErG,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,cAAc,CAAC;IACtB,iEAAiE;IACjE,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,wDAAwD;IACxD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,0DAA0D;IAC1D,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/D,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,yEAAyE;IACzE,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sDAAsD;AACtD,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,oEAAoE;IACpE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,iEAAiE;AACjE,eAAO,MAAM,eAAe,QAAiC,CAAC;AAE9D,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,EAAE,CAIrE;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAAG,MAAM,GAAG,IAAI,CAEzH;AAED,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,uCAAuC,CAAC;AAE5E,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,MAAM,CAEnG;AASD,2DAA2D;AAC3D,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAoB,GAAG,MAAM,GAAG,IAAI,CAQ9J;AAED,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQnF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhE;AAED,eAAO,MAAM,MAAM,GAAI,OAAO,UAAU,KAAG,MAA0D,CAAC;AAEtG,qBAAa,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAUlI;AAED,eAAO,MAAM,WAAW,wEAAwE,CAAC;AAEjG,MAAM,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE3E;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,KAAK,CAAC;IACrE,6DAA6D;IAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA4C7D;AAQD,0GAA0G;AAC1G,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG,OAAO,CAAC,OAAO,CAAC,CAMnH;AAED,yEAAyE;AACzE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAMrF;AAED,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,QAAc,CAAC;AAE7C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,kDAAkD;IAClD,IAAI,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACnC,4EAA4E;IAC5E,KAAK,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAC;IACjF,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5C,iEAAiE;IACjE,cAAc,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/C;AAED,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,IAAI,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;IACjC,MAAM,IAAI,eAAe,CAAC;IAC1B,qEAAqE;IACrE,MAAM,IAAI,OAAO,CAAC,eAAe,GAAG;QAAE,aAAa,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChE,gDAAgD;IAChD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,CAyN9D"}

package/packages/install/dist/cloudflared.js

@@ -0,0 +1,451 @@
+/**
+ * Cloudflare's connector, run by the supervisor (slate R73vdX4bOO).
+ *
+ * When Cloudflare Access is on and "Set it up for me" made a tunnel, the
+ * supervisor runs `cloudflared tunnel --no-autoupdate run` as a managed child,
+ * user-level, like Postgres: restarted with backoff, stopped with buddi. The
+ * tunnel's connector token is read from the owner secret store at each spawn
+ * and handed to the child in `TUNNEL_TOKEN` — never in argv, where `ps` shows
+ * it, and never in a log line.
+ *
+ * The binary: `cloudflared` on PATH (and Homebrew's prefixes, which a launchd
+ * PATH leaves out), else the one buddi downloaded into `<data>/bin/`, else
+ * the official release for this platform from GitHub, checked against the
+ * SHA-256 Cloudflare publishes with the release before anything runs.
+ *
+ * A system service installed by `sudo cloudflared service install` (an
+ * earlier setup's) is detected and never fought: two connectors for one
+ * tunnel take turns dropping each other's connections. The status says
+ * `system-daemon`, and buddi starts nothing until it is uninstalled or the
+ * owner chose to use it instead.
+ *
+ * Nothing here imports a `@buddi/*` value: the supervisor hands in what it
+ * reads from the database (see the note at the top of supervisor.ts).
+ */
+import { spawn as nodeSpawn, execFile } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { createWriteStream, existsSync, mkdirSync } from 'node:fs';
+import { chmod, mkdir, mkdtemp, rename, rm, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { stopChild } from './environment.js';
+/** The gateway's backoff: 2 s doubling to 30 s. */
+export function connectorRestartDelay(failures) { return Math.min(30_000, 2000 * 2 ** Math.min(failures, 4)); }
+/**
+ * How long until a failed read of the plan or the token is tried again: 30 s
+ * doubling to 10 min. A read that throws is the database or the keychain not
+ * answering for now, not a missing setup, so the connector keeps asking.
+ */
+export function connectorReadRetryDelay(failures) { return Math.min(10 * 60_000, 30_000 * 2 ** Math.min(failures, 5)); }
+/** The line cloudflared prints once an edge connection is up. */
+export const REGISTERED_LINE = /Registered tunnel connection/;
+/** The system service `sudo cloudflared service install` leaves behind. */
+export function systemDaemonFiles(platform) {
+    if (platform === 'darwin')
+        return ['/Library/LaunchDaemons/com.cloudflare.cloudflared.plist'];
+    if (platform === 'linux')
+        return ['/etc/systemd/system/cloudflared.service', '/etc/init.d/cloudflared'];
+    return [];
+}
+export function findSystemDaemon(platform, exists = existsSync) {
+    return systemDaemonFiles(platform).find(file => exists(file)) ?? null;
+}
+/** The line that removes it, said beside the reason. */
+export const SYSTEM_DAEMON_UNINSTALL = 'sudo cloudflared service uninstall';
+/** Where a downloaded cloudflared lives. buddi writes nothing else there. */
+export function downloadedBinary(data, platform = process.platform) {
+    return path.join(data, 'bin', platform === 'win32' ? 'cloudflared.exe' : 'cloudflared');
+}
+/** Directories a launchd or systemd PATH leaves out but cloudflared is usually in. */
+function extraDirs(platform) {
+    if (platform === 'darwin')
+        return ['/opt/homebrew/bin', '/usr/local/bin'];
+    if (platform === 'linux')
+        return ['/usr/local/bin', '/usr/bin'];
+    return [];
+}
+/** A program on PATH (and the extra prefixes), or null. */
+export function findOnPath(name, pathEnv, platform, exists = existsSync) {
+    const dirs = [...(pathEnv ?? '').split(path.delimiter), ...extraDirs(platform)].filter(dir => dir !== '' && path.isAbsolute(dir));
+    const file = platform === 'win32' ? `${name}.exe` : name;
+    for (const dir of dirs) {
+        const candidate = path.join(dir, file);
+        if (exists(candidate))
+            return candidate;
+    }
+    return null;
+}
+/** The release asset for this platform, or null when Cloudflare publishes none. */
+export function releaseAsset(platform, arch) {
+    if (platform === 'darwin' && (arch === 'arm64' || arch === 'x64'))
+        return `cloudflared-darwin-${arch === 'x64' ? 'amd64' : 'arm64'}.tgz`;
+    if (platform === 'linux') {
+        const name = { x64: 'amd64', arm64: 'arm64', arm: 'arm', ia32: '386' }[arch];
+        return name ? `cloudflared-linux-${name}` : null;
+    }
+    if (platform === 'win32' && arch === 'x64')
+        return 'cloudflared-windows-amd64.exe';
+    return null;
+}
+/**
+ * The checksums in a release's notes: Cloudflare ends every release body with
+ * a "SHA256 Checksums" block of `<asset>: <hex>` lines.
+ */
+export function parseChecksums(body) {
+    const out = new Map();
+    for (const line of body.split(/\r?\n/)) {
+        const match = /^\s*([A-Za-z0-9._-]+):\s*([0-9a-fA-F]{64})\s*$/.exec(line);
+        if (match)
+            out.set(match[1], match[2].toLowerCase());
+    }
+    return out;
+}
+export const sha256 = (bytes) => createHash('sha256').update(bytes).digest('hex');
+export class VerifyError extends Error {
+}
+/**
+ * The bytes checked against the published checksum, and against GitHub's own
+ * digest for the asset when it gives one. Throws unless every published value
+ * matches; a release without a checksum for the asset is refused, not trusted.
+ */
+export function verifyAsset(bytes, asset, published, githubDigest) {
+    const expected = published.get(asset);
+    if (!expected)
+        throw new VerifyError(`Cloudflare’s release lists no checksum for ${asset}, so buddi won’t run it.`);
+    const actual = sha256(bytes);
+    if (actual !== expected)
+        throw new VerifyError(`The downloaded ${asset} doesn’t match the checksum Cloudflare published, so buddi deleted it.`);
+    if (githubDigest) {
+        const digest = githubDigest.replace(/^sha256:/i, '').toLowerCase();
+        if (digest !== actual)
+            throw new VerifyError(`The downloaded ${asset} doesn’t match GitHub’s digest for it, so buddi deleted it.`);
+    }
+    return actual;
+}
+export const RELEASE_URL = 'https://api.github.com/repos/cloudflare/cloudflared/releases/latest';
+/**
+ * Download, verify and install cloudflared into `<data>/bin/`, mode 0700.
+ * Returns the path. Nothing touches the final path before the bytes check.
+ */
+export async function downloadCloudflared(options) {
+    const { data, platform, arch } = options;
+    const request = options.fetch ?? fetch;
+    const asset = releaseAsset(platform, arch);
+    if (!asset)
+        throw new VerifyError(`Cloudflare publishes no cloudflared for ${platform} on ${arch}.`);
+    const headers = { 'User-Agent': 'buddi', Accept: 'application/vnd.github+json' };
+    const meta = await request(RELEASE_URL, { headers, signal: AbortSignal.timeout(20_000) });
+    if (!meta.ok)
+        throw new VerifyError(`GitHub answered ${meta.status} for cloudflared’s latest release.`);
+    const release = await meta.json();
+    const entry = (release.assets ?? []).find(a => a.name === asset);
+    const url = entry?.browser_download_url ?? '';
+    if (!entry || !/^https:\/\/github\.com\/cloudflare\/cloudflared\/releases\/download\//.test(url)) {
+        throw new VerifyError(`cloudflared’s latest release has no ${asset}.`);
+    }
+    const published = parseChecksums(release.body ?? '');
+    const response = await request(url, { headers: { 'User-Agent': 'buddi' }, signal: AbortSignal.timeout(180_000) });
+    if (!response.ok)
+        throw new VerifyError(`GitHub answered ${response.status} for ${asset}.`);
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    const digest = verifyAsset(bytes, asset, published, entry.digest ?? null);
+    const bin = path.dirname(downloadedBinary(data, platform));
+    await mkdir(bin, { recursive: true, mode: 0o700 });
+    const staging = await mkdtemp(path.join(bin, '.download-'));
+    try {
+        let unpacked;
+        if (asset.endsWith('.tgz')) {
+            const archive = path.join(staging, asset);
+            await writeFile(archive, bytes, { mode: 0o600 });
+            await (options.untar ?? untar)(archive, staging);
+            unpacked = path.join(staging, 'cloudflared');
+            if (!existsSync(unpacked))
+                throw new VerifyError(`${asset} held no cloudflared.`);
+        }
+        else {
+            unpacked = path.join(staging, 'cloudflared');
+            await writeFile(unpacked, bytes, { mode: 0o700 });
+        }
+        await chmod(unpacked, 0o700);
+        const target = downloadedBinary(data, platform);
+        await rename(unpacked, target);
+        const version = typeof release.tag_name === 'string' ? release.tag_name : '';
+        await writeFile(path.join(bin, 'cloudflared.json'), `${JSON.stringify({ version, asset, sha256: digest, at: new Date().toISOString() }, null, 2)}\n`, { mode: 0o600 });
+        return { path: target, version, sha256: digest };
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+    }
+}
+function untar(archive, into) {
+    return new Promise((resolve, reject) => {
+        execFile('tar', ['-xzf', archive, '-C', into, 'cloudflared'], { timeout: 60_000 }, error => (error ? reject(new VerifyError(`${path.basename(archive)} could not be unpacked.`)) : resolve()));
+    });
+}
+/** Remove what buddi downloaded. Only `<data>/bin/cloudflared` and its note: buddi wrote nothing else. */
+export async function removeDownloaded(data, platform = process.platform) {
+    const file = downloadedBinary(data, platform);
+    const had = existsSync(file);
+    await rm(file, { force: true });
+    await rm(path.join(path.dirname(file), 'cloudflared.json'), { force: true });
+    return had;
+}
+/** The environment the child gets: enough to run, nothing of buddi's. */
+export function connectorEnv(env, token) {
+    const keep = ['PATH', 'HOME', 'TMPDIR', 'LANG', 'LC_ALL', 'SYSTEMROOT', 'USERPROFILE', 'HTTPS_PROXY', 'HTTP_PROXY', 'NO_PROXY'];
+    const out = {};
+    for (const key of keep)
+        if (typeof env[key] === 'string')
+            out[key] = env[key];
+    out.TUNNEL_TOKEN = token;
+    return out;
+}
+/** How long a failed download is not tried again: the setup polls every few seconds. */
+export const DOWNLOAD_RETRY_MS = 10 * 60_000;
+export function createConnector(deps) {
+    const platform = deps.platform ?? process.platform;
+    const arch = deps.arch ?? process.arch;
+    const env = deps.env ?? process.env;
+    const exists = deps.exists ?? existsSync;
+    const say = deps.log ?? ((line) => console.error(line));
+    const now = deps.now ?? Date.now;
+    const delay = deps.restartDelay ?? connectorRestartDelay;
+    const readDelay = deps.readRetryDelay ?? connectorReadRetryDelay;
+    const spawn = deps.spawn ?? nodeSpawn;
+    const logFile = path.join(deps.data, 'logs', 'cloudflared.log');
+    const download = deps.download ?? (() => downloadCloudflared({ data: deps.data, platform, arch }));
+    let child;
+    let state = 'stopped';
+    let mode = 'buddi';
+    let detail;
+    let brew;
+    let binary = null;
+    let desired = false, closed = false;
+    let tunnelId = null;
+    let failures = 0, retry, retryPending = false;
+    /** Failed plan or token reads in a row, and the sync that tries again. */
+    let readFailures = 0, readRetry, readFailedThisPass = false;
+    let downloadFailedAt = 0, downloadError;
+    let log;
+    let chain = Promise.resolve();
+    const alive = () => !!child && child.exitCode === null && child.signalCode === null;
+    const status = () => ({
+        state, mode, systemDaemon: findSystemDaemon(platform, exists), binary,
+        ...(detail === undefined ? {} : { detail }), ...(brew === undefined ? {} : { brew }),
+        pid: alive() ? child.pid ?? null : null, log: logFile,
+    });
+    const serial = (work) => {
+        const run = chain.catch(() => { }).then(work);
+        chain = run;
+        return run;
+    };
+    async function stop() {
+        desired = false;
+        clearTimeout(retry);
+        retryPending = false;
+        if (alive())
+            say(`supervisor: stopping cloudflared (pid ${child.pid}).`);
+        await stopChild(child, 'SIGTERM', 10_000);
+        child = undefined;
+    }
+    async function resolveBinary() {
+        const onPath = findOnPath('cloudflared', env.PATH, platform, exists);
+        if (onPath)
+            return { path: onPath, source: 'path' };
+        const mine = downloadedBinary(deps.data, platform);
+        if (exists(mine))
+            return { path: mine, source: 'downloaded' };
+        if (downloadFailedAt && now() - downloadFailedAt < DOWNLOAD_RETRY_MS)
+            return null;
+        state = 'starting';
+        detail = 'Downloading cloudflared from Cloudflare’s releases on GitHub.';
+        say('supervisor: downloading cloudflared from github.com/cloudflare/cloudflared.');
+        try {
+            const got = await download();
+            downloadFailedAt = 0;
+            downloadError = undefined;
+            say(`supervisor: cloudflared downloaded and verified (${got.path}).`);
+            return { path: got.path, source: 'downloaded' };
+        }
+        catch (error) {
+            downloadFailedAt = now();
+            downloadError = error instanceof VerifyError ? error.message : 'cloudflared could not be downloaded from GitHub.';
+            say(`supervisor: ${downloadError}`);
+            return null;
+        }
+    }
+    function start(bin, token) {
+        if (closed || !desired || alive())
+            return;
+        if (!log) {
+            try {
+                mkdirSync(path.dirname(logFile), { recursive: true, mode: 0o700 });
+                // Created 0700 like every directory buddi makes in its data dir.
+                log = createWriteStream(logFile, { flags: 'a', mode: 0o600 });
+                log.on('error', () => { log = undefined; });
+            }
+            catch {
+                log = undefined;
+            }
+        }
+        const started = now();
+        state = 'starting';
+        detail = undefined;
+        const proc = spawn(bin, ['tunnel', '--no-autoupdate', 'run'], { env: connectorEnv(env, token), stdio: ['ignore', 'pipe', 'pipe'] });
+        child = proc;
+        say(`supervisor: cloudflared started (pid ${proc.pid}).`);
+        const watch = (chunk) => {
+            log?.write(chunk);
+            if (child === proc && state !== 'running' && REGISTERED_LINE.test(chunk.toString('utf8'))) {
+                state = 'running';
+                say('supervisor: cloudflared connected to Cloudflare.');
+            }
+        };
+        proc.stdout?.on('data', watch);
+        proc.stderr?.on('data', watch);
+        proc.once('error', () => {
+            if (child !== proc)
+                return;
+            detail = 'cloudflared could not be started.';
+        });
+        proc.once('close', (code, signal) => {
+            if (child !== proc)
+                return;
+            child = undefined;
+            if (now() - started >= 60_000)
+                failures = 0;
+            if (!desired || closed) {
+                state = 'stopped';
+                return;
+            }
+            const wait = delay(failures++);
+            state = 'starting';
+            detail = `cloudflared stopped (${signal ?? `exit ${code}`}); starting it again in ${Math.round(wait / 1000)} s. Its lines are in logs/cloudflared.log.`;
+            say(`supervisor: cloudflared exited (${signal ?? `code ${code}`}); restarting in ${wait} ms.`);
+            clearTimeout(retry);
+            retryPending = true;
+            retry = setTimeout(() => { retryPending = false; void serial(() => spawnWithToken(bin)); }, wait);
+            retry.unref?.();
+        });
+    }
+    /**
+     * A read that threw: say so, and sync again after the read backoff. The
+     * state is `starting` — buddi still means to run the connector — never the
+     * `stopped` a truly missing token is.
+     */
+    function readFailed(what) {
+        readFailedThisPass = true;
+        const wait = readDelay(readFailures++);
+        state = 'starting';
+        detail = `buddi could not read ${what}; trying again in ${wait >= 60_000 ? `${Math.round(wait / 60_000)} min` : `${Math.round(wait / 1000)} s`}.`;
+        say(`supervisor: could not read ${what}; syncing the connector again in ${wait} ms.`);
+        clearTimeout(readRetry);
+        readRetry = setTimeout(() => { readRetry = undefined; void serial(reconcile); }, wait);
+        readRetry.unref?.();
+    }
+    async function spawnWithToken(bin) {
+        if (closed || !desired || alive())
+            return;
+        let token;
+        try {
+            token = await deps.token();
+        }
+        catch {
+            readFailed('the connector token');
+            return;
+        }
+        if (!token) {
+            // Truly none in the vault: nothing to retry until the owner sets it up.
+            state = 'stopped';
+            detail = 'buddi has no connector token for the tunnel. Set it up again.';
+            return;
+        }
+        start(bin, token);
+    }
+    async function reconcile() {
+        if (closed)
+            return status();
+        clearTimeout(readRetry);
+        readRetry = undefined;
+        readFailedThisPass = false;
+        const result = await reconcileOnce();
+        // A pass that read everything it needed ends the read backoff.
+        if (!readFailedThisPass)
+            readFailures = 0;
+        return result;
+    }
+    async function reconcileOnce() {
+        let plan;
+        try {
+            plan = await deps.plan();
+        }
+        catch {
+            readFailed('its Cloudflare setting');
+            return status();
+        }
+        mode = plan.mode;
+        brew = undefined;
+        if (!plan.wanted) {
+            await stop();
+            state = 'stopped';
+            detail = undefined;
+            tunnelId = null;
+            return status();
+        }
+        const daemon = findSystemDaemon(platform, exists);
+        if (plan.mode === 'system' || daemon) {
+            await stop();
+            state = 'system-daemon';
+            detail = plan.mode === 'system'
+                ? (daemon ? 'Cloudflare’s system service runs the connector; buddi starts none of its own.' : 'You chose Cloudflare’s system service, but none is installed.')
+                : 'Cloudflare’s system service is installed. Two connectors for one tunnel fight, so buddi starts none of its own.';
+            return status();
+        }
+        if (alive() && tunnelId === plan.tunnelId)
+            return status();
+        if (retryPending && tunnelId === plan.tunnelId) {
+            desired = true;
+            return status();
+        }
+        if (alive() || retryPending)
+            await stop();
+        desired = true;
+        tunnelId = plan.tunnelId;
+        binary = await resolveBinary();
+        if (!binary) {
+            state = 'missing-binary';
+            detail = downloadError ?? 'cloudflared isn’t on this computer.';
+            if (platform === 'darwin' && findOnPath('brew', env.PATH, platform, exists))
+                brew = 'brew install cloudflared';
+            return status();
+        }
+        failures = 0;
+        await spawnWithToken(binary.path);
+        return status();
+    }
+    return {
+        sync: () => serial(reconcile),
+        status,
+        remove: () => serial(async () => {
+            await stop();
+            state = 'stopped';
+            detail = undefined;
+            tunnelId = null;
+            const removedBinary = await removeDownloaded(deps.data, platform);
+            if (binary?.source === 'downloaded')
+                binary = null;
+            downloadFailedAt = 0;
+            downloadError = undefined;
+            return { ...status(), removedBinary };
+        }),
+        close: () => serial(async () => {
+            closed = true;
+            clearTimeout(readRetry);
+            readRetry = undefined;
+            await stop();
+            state = 'stopped';
+            log?.end();
+            log = undefined;
+        }),
+    };
+}
+//# sourceMappingURL=cloudflared.js.map

package/packages/install/dist/cloudflared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflared.js","sourceRoot":"","sources":["../src/cloudflared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAElE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEnE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,mDAAmD;AACnD,MAAM,UAAU,qBAAqB,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/H;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AA8BxI,iEAAiE;AACjE,MAAM,CAAC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAE9D,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,QAAyB;IACzD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAC9F,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,yCAAyC,EAAE,yBAAyB,CAAC,CAAC;IACxG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAyB,EAAE,SAAoC,UAAU;IACxG,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC;AACxE,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,oCAAoC,CAAC;AAE5E,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACzF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAC1F,CAAC;AAED,sFAAsF;AACtF,SAAS,SAAS,CAAC,QAAyB;IAC1C,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,CAAC;IAC1E,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;IAChE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,OAA2B,EAAE,QAAyB,EAAE,SAAoC,UAAU;IAC7I,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAClI,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,YAAY,CAAC,QAAyB,EAAE,IAAY;IAClE,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,sBAAsB,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC;IACzI,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,GAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAA6B,CAAC,IAAI,CAAC,CAAC;QACzG,OAAO,IAAI,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,+BAA+B,CAAC;IACnF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAW,EAAG,KAAK,CAAC,CAAC,CAAY,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEtG,MAAM,OAAO,WAAY,SAAQ,KAAK;CAAG;AAEzC;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB,EAAE,KAAa,EAAE,SAA8B,EAAE,YAA4B;IACxH,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,8CAA8C,KAAK,0BAA0B,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,KAAK,wEAAwE,CAAC,CAAC;IAChJ,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACnE,IAAI,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,KAAK,6DAA6D,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,qEAAqE,CAAC;AAIjG;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAIzC;IACC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,2CAA2C,QAAQ,OAAO,IAAI,GAAG,CAAC,CAAC;IACrG,MAAM,OAAO,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,CAAC,MAAM,oCAAoC,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAoI,CAAC;IACpK,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,KAAK,EAAE,oBAAoB,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,uEAAuE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,WAAW,CAAC,uCAAuC,KAAK,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,KAAK,GAAG,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC;QACH,IAAI,QAAgB,CAAC;QACrB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1C,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAC;QACpF,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC7C,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvK,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,OAAe,EAAE,IAAY;IAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACjM,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,WAA4B,OAAO,CAAC,QAAQ;IAC/F,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,YAAY,CAAC,GAAsB,EAAE,KAAa;IAChE,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IAChI,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9E,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,MAAM,CAAC;AA+B7C,MAAM,UAAU,eAAe,CAAC,IAAmB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,IAAI,uBAAuB,CAAC;IACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnG,IAAI,KAA+B,CAAC;IACpC,IAAI,KAAK,GAAmB,SAAS,CAAC;IACtC,IAAI,IAAI,GAAuB,OAAO,CAAC;IACvC,IAAI,MAA0B,CAAC;IAC/B,IAAI,IAAwB,CAAC;IAC7B,IAAI,MAAM,GAA8B,IAAI,CAAC;IAC7C,IAAI,OAAO,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,CAAC;IACpC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,QAAQ,GAAG,CAAC,EAAE,KAAiC,EAAE,YAAY,GAAG,KAAK,CAAC;IAC1E,0EAA0E;IAC1E,IAAI,YAAY,GAAG,CAAC,EAAE,SAAqC,EAAE,kBAAkB,GAAG,KAAK,CAAC;IACxF,IAAI,gBAAgB,GAAG,CAAC,EAAE,aAAiC,CAAC;IAC5D,IAAI,GAA4B,CAAC;IACjC,IAAI,KAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEhD,MAAM,KAAK,GAAG,GAAY,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;IAC7F,MAAM,MAAM,GAAG,GAAoB,EAAE,CAAC,CAAC;QACrC,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM;QACrE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACpF,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO;KACvD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAI,IAAsB,EAAc,EAAE;QACvD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,KAAK,GAAG,GAAG,CAAC;QACZ,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,KAAK,UAAU,IAAI;QACjB,OAAO,GAAG,KAAK,CAAC;QAChB,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,YAAY,GAAG,KAAK,CAAC;QACrB,IAAI,KAAK,EAAE;YAAE,GAAG,CAAC,yCAAyC,KAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1E,MAAM,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC1C,KAAK,GAAG,SAAS,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,aAAa;QAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC9D,IAAI,gBAAgB,IAAI,GAAG,EAAE,GAAG,gBAAgB,GAAG,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAClF,KAAK,GAAG,UAAU,CAAC;QACnB,MAAM,GAAG,+DAA+D,CAAC;QACzE,GAAG,CAAC,6EAA6E,CAAC,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC7B,gBAAgB,GAAG,CAAC,CAAC;YAAC,aAAa,GAAG,SAAS,CAAC;YAChD,GAAG,CAAC,oDAAoD,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;YACtE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAgB,GAAG,GAAG,EAAE,CAAC;YACzB,aAAa,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kDAAkD,CAAC;YAClH,GAAG,CAAC,eAAe,aAAa,EAAE,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,KAAK,CAAC,GAAW,EAAE,KAAa;QACvC,IAAI,MAAM,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE;YAAE,OAAO;QAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnE,iEAAiE;gBACjE,GAAG,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9D,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,GAAG,SAAS,CAAC;YAAC,CAAC;QAC9B,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC;QACtB,KAAK,GAAG,UAAU,CAAC;QACnB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpI,KAAK,GAAG,IAAI,CAAC;QACb,GAAG,CAAC,wCAAwC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,CAAC,KAAa,EAAQ,EAAE;YACpC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAClB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC1F,KAAK,GAAG,SAAS,CAAC;gBAClB,GAAG,CAAC,kDAAkD,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACtB,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;YAC3B,MAAM,GAAG,mCAAmC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO;YAC3B,KAAK,GAAG,SAAS,CAAC;YAClB,IAAI,GAAG,EAAE,GAAG,OAAO,IAAI,MAAM;gBAAE,QAAQ,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC;gBAAC,KAAK,GAAG,SAAS,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/B,KAAK,GAAG,UAAU,CAAC;YACnB,MAAM,GAAG,wBAAwB,MAAM,IAAI,QAAQ,IAAI,EAAE,2BAA2B,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,4CAA4C,CAAC;YACxJ,GAAG,CAAC,mCAAmC,MAAM,IAAI,QAAQ,IAAI,EAAE,oBAAoB,IAAI,MAAM,CAAC,CAAC;YAC/F,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,SAAS,UAAU,CAAC,IAAY;QAC9B,kBAAkB,GAAG,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;QACvC,KAAK,GAAG,UAAU,CAAC;QACnB,MAAM,GAAG,wBAAwB,IAAI,qBAAqB,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;QAClJ,GAAG,CAAC,8BAA8B,IAAI,oCAAoC,IAAI,MAAM,CAAC,CAAC;QACtF,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,SAAS,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvF,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,GAAW;QACvC,IAAI,MAAM,IAAI,CAAC,OAAO,IAAI,KAAK,EAAE;YAAE,OAAO;QAC1C,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YACzC,UAAU,CAAC,qBAAqB,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,wEAAwE;YACxE,KAAK,GAAG,SAAS,CAAC;YAClB,MAAM,GAAG,+DAA+D,CAAC;YACzE,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpB,CAAC;IAED,KAAK,UAAU,SAAS;QACtB,IAAI,MAAM;YAAE,OAAO,MAAM,EAAE,CAAC;QAC5B,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,SAAS,GAAG,SAAS,CAAC;QACtB,kBAAkB,GAAG,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QACrC,+DAA+D;QAC/D,IAAI,CAAC,kBAAkB;YAAE,YAAY,GAAG,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,aAAa;QAC1B,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC;YAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,CAAC;QACjC,MAAM,CAAC;YAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;QAChE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACjB,IAAI,GAAG,SAAS,CAAC;QACjB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,SAAS,CAAC;YAAC,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YACvD,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,eAAe,CAAC;YACxB,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAC7B,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,+EAA+E,CAAC,CAAC,CAAC,+DAA+D,CAAC;gBAC9J,CAAC,CAAC,iHAAiH,CAAC;YACtH,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,EAAE,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ;YAAE,OAAO,MAAM,EAAE,CAAC;QAC3D,IAAI,YAAY,IAAI,QAAQ,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;YAAC,OAAO,MAAM,EAAE,CAAC;QAAC,CAAC;QACpF,IAAI,KAAK,EAAE,IAAI,YAAY;YAAE,MAAM,IAAI,EAAE,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC;QACf,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACzB,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,GAAG,gBAAgB,CAAC;YACzB,MAAM,GAAG,aAAa,IAAI,qCAAqC,CAAC;YAChE,IAAI,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC;gBAAE,IAAI,GAAG,0BAA0B,CAAC;YAC/G,OAAO,MAAM,EAAE,CAAC;QAClB,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC;QACb,MAAM,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QAC7B,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC9B,MAAM,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,SAAS,CAAC;YAAC,MAAM,GAAG,SAAS,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC;YACvD,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClE,IAAI,MAAM,EAAE,MAAM,KAAK,YAAY;gBAAE,MAAM,GAAG,IAAI,CAAC;YACnD,gBAAgB,GAAG,CAAC,CAAC;YAAC,aAAa,GAAG,SAAS,CAAC;YAChD,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,aAAa,EAAE,CAAC;QACxC,CAAC,CAAC;QACF,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE;YAC7B,MAAM,GAAG,IAAI,CAAC;YACd,YAAY,CAAC,SAAS,CAAC,CAAC;YACxB,SAAS,GAAG,SAAS,CAAC;YACtB,MAAM,IAAI,EAAE,CAAC;YACb,KAAK,GAAG,SAAS,CAAC;YAClB,GAAG,EAAE,GAAG,EAAE,CAAC;YACX,GAAG,GAAG,SAAS,CAAC;QAClB,CAAC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/packages/install/dist/index.d.ts

@@ -3,4 +3,5 @@ export * from './postgres.js';
 export * from './supervisor.js';
 export * from './upgrade.js';
 export * from './app-layout.js';
+export * from './cloudflared.js';
 //# sourceMappingURL=index.d.ts.map

package/packages/install/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/packages/install/dist/index.js

@@ -6,4 +6,5 @@ export * from './postgres.js';
 export * from './supervisor.js';
 export * from './upgrade.js';
 export * from './app-layout.js';
+export * from './cloudflared.js';
 //# sourceMappingURL=index.js.map

package/packages/install/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,2DAA2D;AAC3D,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,2DAA2D;AAC3D,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}