aiservermanager 0.1.1

package/backend/dist/services/authService.js

@@ -0,0 +1,240 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthService = void 0;
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const inversify_1 = require("inversify");
+const types_1 = require("../di/types");
+const CONFIG_DIR = path.join(os.homedir(), ".config", "aiservermanager");
+const SECRET_FILE = path.join(CONFIG_DIR, "auth-secret");
+/**
+ * Authentication service: password verification + JWT token generation.
+ *
+ * Delegates password verification to an injected PasswordVerifier (platform-specific).
+ * JWT secret is persisted to ~/.config/aiservermanager/auth-secret so that
+ * tokens remain valid across server restarts.
+ *
+ * Brute-force protection:
+ * - Per-IP rate limit: max 10 login attempts per minute
+ * - Account lockout: after 5 consecutive failures → locked for 15 minutes
+ */
+let AuthService = class AuthService {
+    verifier;
+    jwtSecret;
+    username;
+    // Brute-force protection state
+    failedByIp = new Map(); // IP → sorted timestamps
+    maxAttempts = 10;
+    windowMs = 60_000; // 1 minute
+    consecutiveLimit = 5;
+    lockoutMs = 15 * 60 * 1000; // 15 min
+    LOCKOUT_FILE = path.join(CONFIG_DIR, "lockout.json");
+    _consecutiveFails = 0;
+    _lockoutUntil = 0;
+    constructor(verifier) {
+        this.verifier = verifier;
+        this.jwtSecret = this.loadOrCreateSecret();
+        this.username = os.userInfo().username;
+        this.loadLockoutState();
+        // Cleanup stale entries every 5 min
+        setInterval(() => this.cleanupStale(), 5 * 60 * 1000);
+    }
+    /**
+     * Check if an IP is rate-limited. Returns null or { retryAfter: seconds }.
+     */
+    checkRateLimit(ip) {
+        const now = Date.now();
+        // Global lockout
+        if (now < this._lockoutUntil) {
+            return { retryAfter: Math.ceil((this._lockoutUntil - now) / 1000) };
+        }
+        // Per-IP rate limit
+        const timestamps = this.failedByIp.get(ip) ?? [];
+        const recent = timestamps.filter((t) => now - t < this.windowMs);
+        if (recent.length >= this.maxAttempts) {
+            const oldest = Math.min(...recent);
+            return { retryAfter: Math.ceil((oldest + this.windowMs - now) / 1000) };
+        }
+        return null;
+    }
+    /**
+     * Verify system password and return a JWT token, or null on failure.
+     * Rate limit is checked by the route BEFORE this method is called.
+     */
+    async login(ip, password) {
+        if (!password)
+            return null;
+        // Timing-safe: verify lockout BEFORE touching the verifier
+        // (route already checks rateLimit, but this is belt-and-suspenders)
+        if (Date.now() < this._lockoutUntil) {
+            this.recordAttempt(ip);
+            return null;
+        }
+        const valid = await this.verifier.verify(password);
+        if (valid) {
+            // Success — reset lockout state
+            this._consecutiveFails = 0;
+            this._lockoutUntil = 0;
+            this.persistLockoutState();
+            return this.generateToken();
+        }
+        // Failure — record for rate limit + update lockout
+        this.recordAttempt(ip);
+        this._consecutiveFails++;
+        if (this._consecutiveFails >= this.consecutiveLimit) {
+            this._lockoutUntil = Date.now() + this.lockoutMs;
+            console.warn(`[AuthService] Account locked for 15 min after ${this._consecutiveFails} consecutive failures`);
+        }
+        this.persistLockoutState();
+        return null;
+    }
+    /** Verify a JWT token and return the decoded payload. */
+    verifyToken(token) {
+        try {
+            const decoded = this.signToken(token, true);
+            return { username: decoded.username };
+        }
+        catch {
+            return null;
+        }
+    }
+    // ── Brute-force tracking ──
+    recordAttempt(ip) {
+        const now = Date.now();
+        const timestamps = this.failedByIp.get(ip) ?? [];
+        timestamps.push(now);
+        this.failedByIp.set(ip, timestamps);
+    }
+    cleanupStale() {
+        const now = Date.now();
+        for (const [ip, timestamps] of this.failedByIp.entries()) {
+            const pruned = timestamps.filter((t) => now - t < this.windowMs);
+            if (pruned.length === 0) {
+                this.failedByIp.delete(ip);
+            }
+            else {
+                this.failedByIp.set(ip, pruned);
+            }
+        }
+    }
+    persistLockoutState() {
+        try {
+            fs.writeFileSync(this.LOCKOUT_FILE, JSON.stringify({ consecutiveFails: this._consecutiveFails, lockoutUntil: this._lockoutUntil }), "utf-8");
+        }
+        catch (err) {
+            console.error("[AuthService] Failed to persist lockout state:", err);
+        }
+    }
+    loadLockoutState() {
+        try {
+            const raw = fs.readFileSync(this.LOCKOUT_FILE, "utf-8");
+            const data = JSON.parse(raw);
+            if (typeof data.consecutiveFails === "number")
+                this._consecutiveFails = data.consecutiveFails;
+            if (typeof data.lockoutUntil === "number")
+                this._lockoutUntil = data.lockoutUntil;
+            // If lockout expired while server was down, reset
+            if (Date.now() >= this._lockoutUntil) {
+                this._consecutiveFails = 0;
+                this._lockoutUntil = 0;
+            }
+        }
+        catch {
+            // File doesn't exist yet — normal on first run
+        }
+    }
+    // ── JWT ──
+    generateToken() {
+        const now = Math.floor(Date.now() / 1000);
+        const header = Buffer.from(JSON.stringify({ alg: "HS256", typ: "JWT" })).toString("base64url");
+        const payload = Buffer.from(JSON.stringify({ username: this.username, iat: now, exp: now + 7 * 24 * 60 * 60 })).toString("base64url");
+        const signature = this.computeHmac(`${header}.${payload}`);
+        return `${header}.${payload}.${signature}`;
+    }
+    signToken(token, _verifyOnly) {
+        const parts = token.split(".");
+        if (parts.length !== 3)
+            throw new Error("Invalid token format");
+        const signature = this.computeHmac(`${parts[0]}.${parts[1]}`);
+        if (parts[2] !== signature)
+            throw new Error("Invalid signature");
+        const payload = JSON.parse(Buffer.from(parts[1], "base64url").toString());
+        if (payload.exp && Math.floor(Date.now() / 1000) > payload.exp)
+            throw new Error("Token expired");
+        return payload;
+    }
+    computeHmac(data) {
+        return crypto.createHmac("sha256", this.jwtSecret).update(data).digest("base64url");
+    }
+    // ── JWT secret persistence ──
+    loadOrCreateSecret() {
+        if (process.env.AUTH_SECRET)
+            return process.env.AUTH_SECRET;
+        try {
+            const existing = fs.readFileSync(SECRET_FILE, "utf-8").trim();
+            if (existing.length > 0)
+                return existing;
+        }
+        catch {
+            // File doesn't exist yet
+        }
+        const secret = crypto.randomBytes(32).toString("hex");
+        fs.mkdirSync(CONFIG_DIR, { recursive: true });
+        fs.writeFileSync(SECRET_FILE, secret, { mode: 0o600 });
+        return secret;
+    }
+};
+exports.AuthService = AuthService;
+exports.AuthService = AuthService = __decorate([
+    (0, inversify_1.injectable)(),
+    __param(0, (0, inversify_1.inject)(types_1.PASSWORD_VERIFIER)),
+    __metadata("design:paramtypes", [Object])
+], AuthService);
+//# sourceMappingURL=authService.js.map

package/backend/dist/services/authService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authService.js","sourceRoot":"","sources":["../../src/services/authService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AACjC,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAC7B,yCAA+C;AAC/C,uCAAgD;AAGhD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AACzE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAEzD;;;;;;;;;;GAUG;AAEI,IAAM,WAAW,GAAjB,MAAM,WAAW;IAckC;IAbhD,SAAS,CAAS;IACT,QAAQ,CAAS;IAElC,+BAA+B;IACd,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC,CAAC,yBAAyB;IACnE,WAAW,GAAG,EAAE,CAAC;IACjB,QAAQ,GAAG,MAAM,CAAC,CAAC,WAAW;IAC9B,gBAAgB,GAAG,CAAC,CAAC;IACrB,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;IACrC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC9D,iBAAiB,GAAG,CAAC,CAAC;IACtB,aAAa,GAAG,CAAC,CAAC;IAE1B,YAAwD,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;QAChF,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,oCAAoC;QACpC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,iBAAiB;QACjB,IAAI,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7B,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QACtE,CAAC;QAED,oBAAoB;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEjE,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;YACnC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,QAAgB;QACtC,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,2DAA2D;QAC3D,oEAAoE;QACpE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEnD,IAAI,KAAK,EAAE,CAAC;YACV,gCAAgC;YAChC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;YAC3B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,mDAAmD;QACnD,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QACvB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACpD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,iDAAiD,IAAI,CAAC,iBAAiB,uBAAuB,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yDAAyD;IACzD,WAAW,CAAC,KAAa;QACvB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC5C,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,6BAA6B;IAErB,aAAa,CAAC,EAAU;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACjD,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,EAC9F,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyD,CAAC;YACrF,IAAI,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;gBAAE,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAC9F,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;YAClF,kDAAkD;YAClD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACrC,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAED,YAAY;IAEJ,aAAa;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACzB,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CACnF,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;QAC3D,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IAC7C,CAAC;IAEO,SAAS,CAAC,KAAa,EAAE,WAAqB;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChE,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACjG,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtF,CAAC;IAED,+BAA+B;IAEvB,kBAAkB;QACxB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAE5D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,QAAQ,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtD,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAtLY,kCAAW;sBAAX,WAAW;IADvB,IAAA,sBAAU,GAAE;IAeE,WAAA,IAAA,kBAAM,EAAC,yBAAiB,CAAC,CAAA;;GAd3B,WAAW,CAsLvB"}

package/backend/dist/services/configManager.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConfigManager = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const ServiceConfig_1 = require("../models/ServiceConfig");
+const CONFIG_DIR = path.join(process.env.HOME ?? "", ".config", "aiservermanager", "services");
+/**
+ * Manages service config files in ~/.config/aiservermanager/services/*.conf
+ * Each file is named <service-name>.conf and stores command + flags.
+ */
+class ConfigManager {
+    /** Ensure the config directory exists. */
+    ensureDir() {
+        if (!fs.existsSync(CONFIG_DIR)) {
+            fs.mkdirSync(CONFIG_DIR, { recursive: true });
+        }
+    }
+    /** Get the absolute path for a service name's config file. */
+    configPath(name) {
+        return path.join(CONFIG_DIR, `${name}.conf`);
+    }
+    /** List all service configs. */
+    list() {
+        this.ensureDir();
+        const entries = fs.readdirSync(CONFIG_DIR).filter((f) => f.endsWith(".conf"));
+        const configs = [];
+        for (const entry of entries) {
+            const name = entry.replace(/\.conf$/, "");
+            const raw = fs.readFileSync(this.configPath(name), "utf-8");
+            try {
+                configs.push((0, ServiceConfig_1.parseConfigFile)(name, raw));
+            }
+            catch {
+                // Skip unparseable configs
+            }
+        }
+        return configs.sort((a, b) => a.name.localeCompare(b.name));
+    }
+    /** Get a single service config by name. */
+    get(name) {
+        const p = this.configPath(name);
+        if (!fs.existsSync(p))
+            return null;
+        return (0, ServiceConfig_1.parseConfigFile)(name, fs.readFileSync(p, "utf-8"));
+    }
+    /** Save (create or update) a service config. */
+    save(cfg) {
+        this.ensureDir();
+        fs.writeFileSync(this.configPath(cfg.name), (0, ServiceConfig_1.serializeConfig)(cfg), "utf-8");
+    }
+    /** Delete a service config file. Returns true if the file existed. */
+    delete(name) {
+        const p = this.configPath(name);
+        if (fs.existsSync(p)) {
+            fs.unlinkSync(p);
+            return true;
+        }
+        return false;
+    }
+}
+exports.ConfigManager = ConfigManager;
+//# sourceMappingURL=configManager.js.map

package/backend/dist/services/configManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configManager.js","sourceRoot":"","sources":["../../src/services/configManager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,2DAA0F;AAE1F,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,CAAC,CAAC;AAE/F;;;GAGG;AACH,MAAa,aAAa;IACxB,0CAA0C;IAClC,SAAS;QACf,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,gCAAgC;IAChC,IAAI;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9E,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,IAAA,+BAAe,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,2CAA2C;IAC3C,GAAG,CAAC,IAAY;QACd,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAA,+BAAe,EAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,gDAAgD;IAChD,IAAI,CAAC,GAAkB;QACrB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAA,+BAAe,EAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IAC7E,CAAC;IAED,sEAAsE;IACtE,MAAM,CAAC,IAAY;QACjB,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AArDD,sCAqDC"}

package/backend/dist/services/controllers/systemctlController.js

@@ -0,0 +1,287 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemctlController = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const ExecTools_1 = require("../../helpers/ExecTools");
+const configManager_1 = require("../configManager");
+const SYSTEM_UNIT_DIR = "/etc/systemd/system";
+/** Manage services via systemctl (Linux with systemd). */
+class SystemctlController {
+    configManager = new configManager_1.ConfigManager();
+    _hasSudo = null;
+    /** Check if a service name has a custom config. */
+    hasCustomConfig(name) {
+        return this.configManager.get(name) !== null;
+    }
+    async isAvailable() {
+        if (process.platform !== "linux")
+            return false;
+        const { stdout } = await ExecTools_1.ExecTools.safeExec("systemctl --version");
+        return stdout.trim().length > 0;
+    }
+    /**
+     * Check if the process can execute privileged commands (root or passwordless sudo).
+     */
+    async checkSudo() {
+        if (this._hasSudo !== null)
+            return this._hasSudo;
+        // Check if running as root (UID 0)
+        const { stdout: uidOut } = await ExecTools_1.ExecTools.safeExec("id -u");
+        if (uidOut.trim() === "0") {
+            this._hasSudo = true;
+            return true;
+        }
+        // Check if sudo works non-interactively (-n = no tty prompt)
+        const sudoResult = await ExecTools_1.ExecTools.safeExecWithCode("sudo -n true");
+        this._hasSudo = sudoResult.exitCode === 0;
+        return this._hasSudo;
+    }
+    async getStatus(name) {
+        const sudo = this.hasCustomConfig(name) ? "sudo " : "";
+        // Check if unit file exists — append .service suffix for reliable matching
+        const listResult = await ExecTools_1.ExecTools.safeExec(`${sudo}systemctl list-unit-files ${name}.service --no-legend`);
+        const installed = listResult.stdout.includes(`${name}.service`);
+        if (!installed) {
+            return {
+                name,
+                running: false,
+                enabled: false,
+                installed: false,
+                error: `Service "${name}" not found`,
+            };
+        }
+        const [activeResult, enableResult] = await Promise.all([
+            ExecTools_1.ExecTools.safeExec(`${sudo}systemctl is-active ${name}`),
+            ExecTools_1.ExecTools.safeExec(`${sudo}systemctl is-enabled ${name}`),
+        ]);
+        const activeStdout = activeResult.stdout.trim();
+        const enableStdout = enableResult.stdout.trim();
+        const running = activeStdout === "active";
+        const enabled = enableStdout === "enabled";
+        // Capture systemd "failed" state as an error the user can see
+        let error;
+        if (activeStdout === "failed") {
+            error = `Service "${name}" is in failed state — check the Journal panel for details.`;
+        }
+        // Try to get PID
+        let pid;
+        const pidResult = await ExecTools_1.ExecTools.safeExec(`${sudo}systemctl show ${name} --property=MainPID --value`);
+        const pidStr = pidResult.stdout.trim();
+        if (pidStr && pidStr !== "0") {
+            pid = parseInt(pidStr, 10);
+        }
+        return { name, running, enabled, installed, pid, error };
+    }
+    async perform(name, action) {
+        const sudo = "sudo ";
+        const cmd = `${sudo}systemctl ${action} ${name}`;
+        const result = await ExecTools_1.ExecTools.safeExecWithCode(cmd);
+        if (result.exitCode !== 0) {
+            return {
+                name,
+                running: false,
+                enabled: false,
+                installed: true,
+                error: `systemctl ${action} failed (code ${result.exitCode}): ${result.stderr.trim() || result.stdout.trim()}`,
+            };
+        }
+        const status = await this.getStatus(name);
+        // After "start", verify the service is actually running
+        if (action === "start" && !status.running && !status.error) {
+            status.error = `Service "${name}" failed to start — check the Journal panel for details.`;
+        }
+        return status;
+    }
+    /**
+     * Build the systemd unit file content for a custom service.
+     */
+    buildUnitContent(name, execStart) {
+        return `[Unit]
+Description=ai server manager service (${name})
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=${execStart}
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+`;
+    }
+    /**
+     * Write the unit file and reload the daemon. Does NOT enable.
+     */
+    async install(name, execStart) {
+        const sudo = "sudo ";
+        const unitPath = path.join(SYSTEM_UNIT_DIR, `${name}.service`);
+        const unitContent = this.buildUnitContent(name, execStart);
+        try {
+            if (this.hasCustomConfig(name)) {
+                const writeResult = await ExecTools_1.ExecTools.safeExecWithCode(`echo '${unitContent.replace(/'/g, "'\"'\"'")}' | sudo tee ${unitPath} > /dev/null`);
+                if (writeResult.exitCode !== 0) {
+                    return {
+                        name,
+                        running: false,
+                        enabled: false,
+                        installed: false,
+                        error: `Failed to write unit file: ${writeResult.stderr.trim()}`,
+                    };
+                }
+            }
+            else {
+                fs.writeFileSync(unitPath, unitContent, "utf-8");
+            }
+        }
+        catch (err) {
+            return {
+                name,
+                running: false,
+                enabled: false,
+                installed: false,
+                error: `Failed to write unit file: ${err instanceof Error ? err.message : String(err)}`,
+            };
+        }
+        const reloadResult = await ExecTools_1.ExecTools.safeExecWithCode(`${sudo}systemctl daemon-reload`);
+        if (reloadResult.exitCode !== 0) {
+            return {
+                name,
+                running: false,
+                enabled: false,
+                installed: true,
+                error: `systemctl daemon-reload failed: ${reloadResult.stderr.trim()}`,
+            };
+        }
+        return this.getStatus(name);
+    }
+    async installAndEnable(name, execStart) {
+        const status = await this.install(name, execStart);
+        if (status.error)
+            return status;
+        const enableResult = await ExecTools_1.ExecTools.safeExecWithCode(`sudo systemctl enable ${name}`);
+        if (enableResult.exitCode !== 0) {
+            return {
+                name,
+                running: false,
+                enabled: false,
+                installed: true,
+                error: `systemctl enable failed: ${enableResult.stderr.trim()}`,
+            };
+        }
+        return this.getStatus(name);
+    }
+    async uninstall(name) {
+        const sudo = this.hasCustomConfig(name) ? "sudo " : "";
+        const unitPath = path.join(SYSTEM_UNIT_DIR, `${name}.service`);
+        // Stop the service first (best-effort)
+        await ExecTools_1.ExecTools.safeExec(`${sudo}systemctl stop ${name}`);
+        // Disable the service (best-effort)
+        await ExecTools_1.ExecTools.safeExec(`${sudo}systemctl disable ${name}`);
+        // Remove unit file
+        try {
+            if (this.hasCustomConfig(name)) {
+                const rmResult = await ExecTools_1.ExecTools.safeExecWithCode(`sudo rm -f ${unitPath}`);
+                if (rmResult.exitCode !== 0) {
+                    return { ok: false, error: `Failed to remove unit file: ${rmResult.stderr.trim()}` };
+                }
+            }
+            else {
+                if (fs.existsSync(unitPath)) {
+                    fs.unlinkSync(unitPath);
+                }
+            }
+        }
+        catch (err) {
+            return { ok: false, error: `Failed to remove unit file: ${err instanceof Error ? err.message : String(err)}` };
+        }
+        // Reload systemd daemon
+        const reloadResult = await ExecTools_1.ExecTools.safeExecWithCode(`${sudo}systemctl daemon-reload`);
+        if (reloadResult.exitCode !== 0) {
+            return { ok: false, error: `systemctl daemon-reload failed: ${reloadResult.stderr.trim()}` };
+        }
+        return { ok: true };
+    }
+    async listAvailable() {
+        const { stdout } = await ExecTools_1.ExecTools.safeExec("systemctl list-unit-files --type=service --no-legend --no-pager --all");
+        const customNames = new Set(this.configManager.list().map((c) => c.name));
+        const names = [];
+        for (const line of stdout.split("\n")) {
+            const trimmed = line.trim();
+            if (!trimmed || trimmed.startsWith("UNIT") || trimmed.startsWith("Hint"))
+                continue;
+            const parts = trimmed.split(/\s+/);
+            const unitFile = parts[0];
+            if (!unitFile)
+                continue;
+            // Strip .service suffix
+            const name = unitFile.replace(/\.service$/, "");
+            // Skip custom services (have a config)
+            if (customNames.has(name))
+                continue;
+            names.push(name);
+        }
+        return names.sort();
+    }
+    async getJournal(name, count = 100) {
+        const sudo = this.hasCustomConfig(name) ? "sudo " : "";
+        // journalctl with verbose ISO timestamp for parsing
+        const result = await ExecTools_1.ExecTools.safeExec(`${sudo}journalctl -u ${name} --no-pager -n ${count} --output=short-iso 2>/dev/null || true`);
+        if (result.stderr && !result.stdout.trim()) {
+            return { error: result.stderr.trim() || `No journal found for "${name}"` };
+        }
+        const lines = [];
+        for (const raw of result.stdout.trim().split("\n")) {
+            const trimmed = raw.trim();
+            if (!trimmed)
+                continue;
+            // Parse "2026-07-16 12:34:56.789 +0300 hostname service[pid]: message"
+            // The timestamp is the first two token parts (date + time+offset)
+            const match = trimmed.match(/^(\d{4}-\d{2}-\d{2}\s+\d{2}:\d{2}:\d{2}[^\s]*)\s+\S+\s+\S+:\s*(.*)$/);
+            if (match) {
+                lines.push({ timestamp: match[1], message: match[2] });
+            }
+            else {
+                // Fallback: treat entire line as message with empty timestamp
+                lines.push({ timestamp: "", message: trimmed });
+            }
+        }
+        return lines;
+    }
+}
+exports.SystemctlController = SystemctlController;
+//# sourceMappingURL=systemctlController.js.map

package/backend/dist/services/controllers/systemctlController.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"systemctlController.js","sourceRoot":"","sources":["../../../src/services/controllers/systemctlController.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,2CAA6B;AAC7B,uDAAwE;AAGxE,oDAAiD;AAEjD,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAE9C,0DAA0D;AAC1D,MAAa,mBAAmB;IACb,aAAa,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC7C,QAAQ,GAAmB,IAAI,CAAC;IAExC,mDAAmD;IAC3C,eAAe,CAAC,IAAY;QAClC,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAS,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC;QACnE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAEjD,mCAAmC;QACnC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,6DAA6D;QAC7D,MAAM,UAAU,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;QACpE,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvD,2EAA2E;QAC3E,MAAM,UAAU,GAAG,MAAM,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,6BAA6B,IAAI,sBAAsB,CAAC,CAAC;QAC5G,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC;QAEhE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,YAAY,IAAI,aAAa;aACrC,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,YAAY,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,uBAAuB,IAAI,EAAE,CAAC;YACxD,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,wBAAwB,IAAI,EAAE,CAAC;SAC1D,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,YAAY,KAAK,QAAQ,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,KAAK,SAAS,CAAC;QAE3C,8DAA8D;QAC9D,IAAI,KAAyB,CAAC;QAC9B,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YAC9B,KAAK,GAAG,YAAY,IAAI,6DAA6D,CAAC;QACxF,CAAC;QAED,iBAAiB;QACjB,IAAI,GAAuB,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,kBAAkB,IAAI,6BAA6B,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAqB;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC;QAErB,MAAM,GAAG,GAAG,GAAG,IAAI,aAAa,MAAM,IAAI,IAAI,EAAE,CAAC;QACjD,MAAM,MAAM,GAAuB,MAAM,qBAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAEzE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,aAAa,MAAM,iBAAiB,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;aAC/G,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE1C,wDAAwD;QACxD,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC3D,MAAM,CAAC,KAAK,GAAG,YAAY,IAAI,0DAA0D,CAAC;QAC5F,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,IAAY,EAAE,SAAiB;QACtD,OAAO;yCAC8B,IAAI;;;;;YAKjC,SAAS;;;;;;CAMpB,CAAC;IACA,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,SAAiB;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAClD,SAAS,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,gBAAgB,QAAQ,cAAc,CACpF,CAAC;gBACF,IAAI,WAAW,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC/B,OAAO;wBACL,IAAI;wBACJ,OAAO,EAAE,KAAK;wBACd,OAAO,EAAE,KAAK;wBACd,SAAS,EAAE,KAAK;wBAChB,KAAK,EAAE,8BAA8B,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;qBACjE,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACxF,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;QACxF,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,mCAAmC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;aACvE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAY,EAAE,SAAiB;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACnD,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC;QAEhC,MAAM,YAAY,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI;gBACJ,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,4BAA4B,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;aAChE,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;QAE/D,uCAAuC;QACvC,MAAM,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,kBAAkB,IAAI,EAAE,CAAC,CAAC;QAE1D,oCAAoC;QACpC,MAAM,qBAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,qBAAqB,IAAI,EAAE,CAAC,CAAC;QAE7D,mBAAmB;QACnB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;gBAC5E,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACjH,CAAC;QAED,wBAAwB;QACxB,MAAM,YAAY,GAAG,MAAM,qBAAS,CAAC,gBAAgB,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;QACxF,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAC/F,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAS,CAAC,QAAQ,CACzC,uEAAuE,CACxE,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,SAAS;YAEnF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,QAAQ;gBAAE,SAAS;YAExB,wBAAwB;YACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAEhD,uCAAuC;YACvC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,QAAgB,GAAG;QAChD,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAEvD,oDAAoD;QACpD,MAAM,MAAM,GAAG,MAAM,qBAAS,CAAC,QAAQ,CACrC,GAAG,IAAI,iBAAiB,IAAI,kBAAkB,KAAK,yCAAyC,CAC7F,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,yBAAyB,IAAI,GAAG,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,KAAK,GAAkB,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC,OAAO;gBAAE,SAAS;YAEvB,uEAAuE;YACvE,kEAAkE;YAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACnG,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACN,8DAA8D;gBAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA3RD,kDA2RC"}