dsh-zen-remote 2.2.9 → 2.3.2

package/lib/types/config.d.ts

@@ -74,6 +74,22 @@ export interface ZenRemoteConfig {
      * false means NO — default `{}` keeps every plugin unconsented. Volatile:
      * read at compare time, deliberately NOT in RESTART_FIELDS. */
     pluginBridgeConsent: Record<string, boolean>;
+    /** Which public-ingress setup the gateway wizard (GW-1) manages.
+     * `'off'` no public entry; `'caddy'` the plugin-managed Caddy reverse
+     * proxy; `'external'` a user-operated reverse proxy; `'cloudflared'` a
+     * Cloudflare Tunnel. Read live per request by the wizard routes; a mode
+     * change must NOT reload the row (the ingress processes outlive it). */
+    ingressMode: 'off' | 'caddy' | 'external' | 'cloudflared';
+    /** Public ingress domain, bare host (e.g. `dsh.example.com`), no scheme,
+     * no path. Empty means none yet. */
+    ingressDomain: string;
+    /** Port the managed Caddy listens for HTTPS on. [1, 65535]. */
+    ingressHttpsPort: number;
+    /** ACME account contact for certificate notices; empty means none. */
+    ingressAcmeEmail: string;
+    /** The public origin the final verification reached (scheme + host +
+     * optional port, root path only). Empty until verified. */
+    ingressPublicUrl: string;
 }
 /** Defaults, one per field — exactly what layer 4 hands back. */
 export declare const DEFAULTS: ZenRemoteConfig;
@@ -88,6 +104,7 @@ export declare const DEFAULTS: ZenRemoteConfig;
  * settings at operation time use this too.
  */
 export declare function unwrapVolatile(value: unknown): unknown;
+export declare function hostOf(value: unknown): string | undefined;
 /**
  * The effective configuration: every field resolved through the four layers.
  * @param row - the plugin row config as `apply()` received it (loosely typed
@@ -172,6 +189,11 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     idleHours: z<any, any, "volatile">;
     autoShareNewSessions: z<any, any, "volatile">;
     pluginBridgeConsent: z<any, any, "volatile">;
+    ingressMode: z<any, any, "volatile">;
+    ingressDomain: z<any, any, "volatile">;
+    ingressHttpsPort: z<any, any, "volatile">;
+    ingressAcmeEmail: z<any, any, "volatile">;
+    ingressPublicUrl: z<any, any, "volatile">;
     serverUrl: z<any, any, "volatile">;
     deviceToken: z<string, string, "volatile">;
     turnFoldDesktop: z<any, any, "volatile">;
@@ -197,6 +219,11 @@ export declare const Config: z<Schemastery.ObjectS<NoInfer<{
     idleHours: z<any, any, "volatile">;
     autoShareNewSessions: z<any, any, "volatile">;
     pluginBridgeConsent: z<any, any, "volatile">;
+    ingressMode: z<any, any, "volatile">;
+    ingressDomain: z<any, any, "volatile">;
+    ingressHttpsPort: z<any, any, "volatile">;
+    ingressAcmeEmail: z<any, any, "volatile">;
+    ingressPublicUrl: z<any, any, "volatile">;
     serverUrl: z<any, any, "volatile">;
     deviceToken: z<string, string, "volatile">;
     turnFoldDesktop: z<any, any, "volatile">;

package/lib/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;AAK7D,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B;oEACgE;IAChE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;IACvB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ;qEACiE;IACjE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,WAAW,EAAE,OAAO,CAAA;IACpB,2EAA2E;IAC3E,WAAW,EAAE,OAAO,CAAA;IACpB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAA;IACjB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAA;IAClB;;kDAE8C;IAC9C,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAA;IAC7B;;;;mEAI+D;IAC/D,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAC7C;AAMD,iEAAiE;AACjE,eAAO,MAAM,QAAQ,EAAE,eAkBtB,CAAA;AAOD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKtD;AA8MD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB;IACD,MAAM,EAAE,eAAe,CAAA;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,eAAe,EAAE,YAAY,CAAC,CAAA;CACrD,CAwBA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAE3D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAiCjB,CAAA"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAExC,mEAAmE;AACnE,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;AAK7D,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B;oEACgE;IAChE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAA;IACvB,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ;qEACiE;IACjE,UAAU,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,cAAc,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAA;IACpB,2EAA2E;IAC3E,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAA;IAC1B,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAA;IACtB,0EAA0E;IAC1E,WAAW,EAAE,OAAO,CAAA;IACpB,2EAA2E;IAC3E,WAAW,EAAE,OAAO,CAAA;IACpB,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAA;IACjB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAA;IAClB;;kDAE8C;IAC9C,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,oBAAoB,EAAE,OAAO,CAAA;IAC7B;;;;mEAI+D;IAC/D,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC5C;;;;4EAIwE;IACxE,WAAW,EAAE,KAAK,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,CAAA;IACzD;wCACoC;IACpC,aAAa,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,gBAAgB,EAAE,MAAM,CAAA;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAA;IACxB;+DAC2D;IAC3D,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAMD,iEAAiE;AACjE,eAAO,MAAM,QAAQ,EAAE,eAuBtB,CAAA;AAOD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKtD;AA4ED,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAEzD;AAqLD;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB;IACD,MAAM,EAAE,eAAe,CAAA;IACvB,OAAO,EAAE,MAAM,CAAC,MAAM,eAAe,EAAE,YAAY,CAAC,CAAA;CACrD,CA6BA;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQ5F;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAE3D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,eAAO,MAAM,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAyCjB,CAAA"}

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAIhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAWlD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,MAAM;QACd,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAA;KAClD;CACF;AAUD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAgBpD,OAAO,KAAK,EAAqB,cAAc,EAAqD,MAAM,oBAAoB,CAAA;AAO9H,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAO7E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAS1C,6DAA6D;AAC7D,eAAO,MAAM,YAAY,4BAA4B,CAAA;AAiBrD;;kEAEkE;AAClE,eAAO,MAAM,mBAAmB,mCAAmC,CAAA;AAEnE,+FAA+F;AAC/F,eAAO,MAAM,UAAU,iBAAiB,CAAA;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,QAAmB,CAAA;AAiBxD,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,WAAW,GAAG,SAAS,CAExD;AAaD,sEAAsE;AACtE,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED;;;;;8DAK8D;AAC9D,MAAM,WAAW,eAAe;IAC9B;;;;qEAIiE;IACjE,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;iEAC6D;IAC7D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;uDAGmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;;+DAO2D;IAC3D,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;wCACoC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;wEACoE;IACpE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGhH;AA6BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAKnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBlD;AA+ID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,cAAc,GAC/C,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CA24BtE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAIhE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAWlD,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,MAAM;QACd,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAA;KAClD;CACF;AAUD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAKvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAyBpD,OAAO,KAAK,EAAqB,cAAc,EAAqD,MAAM,oBAAoB,CAAA;AAO9H,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAO7E,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAS1C,6DAA6D;AAC7D,eAAO,MAAM,YAAY,4BAA4B,CAAA;AAiBrD;;kEAEkE;AAClE,eAAO,MAAM,mBAAmB,mCAAmC,CAAA;AAEnE,+FAA+F;AAC/F,eAAO,MAAM,UAAU,iBAAiB,CAAA;AAExC,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,QAAmB,CAAA;AAiBxD,2DAA2D;AAC3D,wBAAgB,cAAc,IAAI,WAAW,GAAG,SAAS,CAExD;AAaD,sEAAsE;AACtE,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED;;;;;8DAK8D;AAC9D,MAAM,WAAW,eAAe;IAC9B;;;;qEAIiE;IACjE,IAAI,CAAC,EAAE,OAAO,CAAA;IACd;iEAC6D;IAC7D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;uDAGmD;IACnD,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB;;;;;;;+DAO2D;IAC3D,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;wCACoC;IACpC,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B;wEACoE;IACpE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC9B;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGhH;AA6BD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAKnE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBlD;AA+ID;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,cAAc,GAC/C,OAAO,CAAC,IAAI,CAAC,CAyCf;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,GAAG,IAAI,CAmmCtE"}

package/lib/types/intercept.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"intercept.d.ts","sourceRoot":"","sources":["../../src/intercept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAc,MAAM,mBAAmB,CAAA;AAE5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAA+E,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAYvI;;;;;;0CAM0C;AAC1C,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,yBAAyB,GACzB,wBAAwB,GACxB,qBAAqB,GACrB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,sBAAsB,GACtB,SAAS,CAAA;AAEb;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,CAgHlF,CAAA;AAED;;;;;gBAKgB;AAChB,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,CAAA;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CA2ClD,CAAA;AAEF;iDACiD;AACjD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AA+GD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAgDjH,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAItD,CAAA;AAKF,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1E;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;CACrC;AAED;sDACsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,iBAAiB,CAAA;IACxB;0BACsB;IACtB,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,wEAAwE;IACxE,cAAc,EAAE,sBAAsB,EAAE,CAAA;IACxC;;sBAEkB;IAClB,iBAAiB,EAAE,sBAAsB,EAAE,CAAA;IAC3C;sCACkC;IAClC,cAAc,EAAE,mBAAmB,EAAE,CAAA;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC;iFAC6E;IAC7E,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,KAAK,EAAE,WAAW,CAAA;IAClB;;+EAE2E;IAC3E,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACrC,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IAClD;;uEAEmE;IACnE,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;;sEAMkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,kBAAkB,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B;4DACwD;IACxD,SAAS,IAAI,IAAI,CAAA;IACjB;iEAC6D;IAC7D,WAAW,IAAI,oBAAoB,CAAA;IACnC;;;kBAGc;IACd,YAAY,IAAI;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D;sEACkE;IAClE,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAA;IAC5C;;;6DAGyD;IACzD,qBAAqB,IAAI,IAAI,CAAA;CAC9B;AA+VD,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CA8CxF;AAED,+DAA+D;AAC/D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAwFzF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAiBxF;AA8gBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;yCAEqC;IACrC,uBAAuB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IACrD;;+EAE2E;IAC3E,qBAAqB,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IACvE;;0CAEsC;IACtC,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAAA;CAC3C;AAknBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,eAAe,CAqgClF;AAED,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;8CAG0C;IAC1C,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CACxB;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CA2EzG;AAED,MAAM,WAAW,mBAAmB;IAClC;iBACa;IACb,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;IAC5E,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gEAAgE;IAChE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IAClD,wDAAwD;IACxD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IACnD,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuBtG"}
+{"version":3,"file":"intercept.d.ts","sourceRoot":"","sources":["../../src/intercept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+EG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAc,MAAM,mBAAmB,CAAA;AAE5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAE7D,OAAO,EAA+E,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AAYvI;;;;;;0CAM0C;AAC1C,MAAM,MAAM,YAAY,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,yBAAyB,GACzB,wBAAwB,GACxB,qBAAqB,GACrB,iBAAiB,GACjB,gBAAgB,GAChB,WAAW,GACX,sBAAsB,GACtB,SAAS,CAAA;AAEb;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,CAgHlF,CAAA;AAED;;;;;gBAKgB;AAChB,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,gBAAgB,EAAE,CAAA;CAAE,GAC9D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;CAAE,CAAA;AAE9F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CA2ClD,CAAA;AAEF;iDACiD;AACjD,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEvD;AA+GD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAgDjH,uDAAuD;AACvD,MAAM,WAAW,sBAAsB;IACrC,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAItD,CAAA;AAKF,8DAA8D;AAC9D,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE1E;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;CACrC;AAED;sDACsD;AACtD,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,iBAAiB,CAAA;IACxB;0BACsB;IACtB,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,wEAAwE;IACxE,cAAc,EAAE,sBAAsB,EAAE,CAAA;IACxC;;sBAEkB;IAClB,iBAAiB,EAAE,sBAAsB,EAAE,CAAA;IAC3C;sCACkC;IAClC,cAAc,EAAE,mBAAmB,EAAE,CAAA;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC;iFAC6E;IAC7E,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,KAAK,EAAE,WAAW,CAAA;IAClB;;+EAE2E;IAC3E,WAAW,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACrC,iEAAiE;IACjE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IAClD;;uEAEmE;IACnE,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB;;;;;;sEAMkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,kBAAkB,CAAA;CAC7C;AAED,MAAM,WAAW,eAAe;IAC9B;4DACwD;IACxD,SAAS,IAAI,IAAI,CAAA;IACjB;iEAC6D;IAC7D,WAAW,IAAI,oBAAoB,CAAA;IACnC;;;kBAGc;IACd,YAAY,IAAI;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;IAC/D;sEACkE;IAClE,aAAa,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAAA;IAC5C;;;6DAGyD;IACzD,qBAAqB,IAAI,IAAI,CAAA;CAC9B;AA+VD,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CA8CxF;AAED,+DAA+D;AAC/D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAwFzF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,GAAG,IAAI,CAiBxF;AA+iBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,kBAAkB;IACjC;;yCAEqC;IACrC,uBAAuB,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAA;IACrD;;+EAE2E;IAC3E,qBAAqB,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,SAAS,MAAM,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,CAAA;IACvE;;0CAEsC;IACtC,qBAAqB,IAAI,SAAS,MAAM,EAAE,CAAA;CAC3C;AAknBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,uBAAuB,GAAG,eAAe,CA4gClF;AAED,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;8CAG0C;IAC1C,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CACxB;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CA2EzG;AAED,MAAM,WAAW,mBAAmB;IAClC;iBACa;IACb,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,eAAe,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;IAC5E,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gEAAgE;IAChE,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IAClD,wDAAwD;IACxD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;IACnD,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,OAAO,CAAA;CACxB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuBtG"}

package/lib/types/merge-streams.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merge-streams.d.ts","sourceRoot":"","sources":["../../src/merge-streams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8IG;AAIH;;8DAE8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAoDvF,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D;kDAC8C;IAC9C,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC;8DAC0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;wBAEoB;IACpB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAClC;;6EAEyE;IACzE,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IACnC;;;0DAGsD;IACtD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;;;;;kCAK8B;IAC9B,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;6EACyE;IACzE,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;;;6CAGyC;IACzC,SAAS,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7C;;;4DAGwD;IACxD,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;;;;;;2BAMuB;IACvB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3D;;;gFAG4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC;;2CAEuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAgkBtF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;sEACkE;IAClE,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAClC;;;;0CAIsC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IACnC;2DACuD;IACvD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;2DACuD;IACvD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB,2DAA2D;IAC3D,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;8CAC0C;IAC1C,SAAS,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7C,gEAAgE;IAChE,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B,+CAA+C;IAC/C,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3D,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA2JhF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAqBvG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAwB/G;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EAAE,CAiBvF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CAc5F"}
+{"version":3,"file":"merge-streams.d.ts","sourceRoot":"","sources":["../../src/merge-streams.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8IG;AAIH;;8DAE8D;AAC9D,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,UAAU,CAAA;AAoDvF,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D;kDAC8C;IAC9C,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACxC;8DAC0D;IAC1D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;;wBAEoB;IACpB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAClC;;6EAEyE;IACzE,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IACnC;;;0DAGsD;IACtD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;;;;;kCAK8B;IAC9B,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;6EACyE;IACzE,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;;;6CAGyC;IACzC,SAAS,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7C;;;4DAGwD;IACxD,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;;;;;;2BAMuB;IACvB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3D;;;gFAG4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC;;2CAEuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CA6lBtF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACzC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B;sEACkE;IAClE,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IAClC;;;;0CAIsC;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,EAAE,CAAA;IACnC;2DACuD;IACvD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB;2DACuD;IACvD,YAAY,IAAI,OAAO,EAAE,CAAA;IACzB,2DAA2D;IAC3D,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B;8CAC0C;IAC1C,SAAS,CAAC,UAAU,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAC7C,gEAAgE;IAChE,eAAe,IAAI,OAAO,EAAE,CAAA;IAC5B,+CAA+C;IAC/C,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE,CAAA;IAC3D,uDAAuD;IACvD,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAA;CACzC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CA2JhF;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAqBvG;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAwB/G;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,EAAE,CAiBvF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,CAc5F"}

package/lib/types/wizard/binary-io.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Ingress binary I/O (GW-2, revised by GW-fix-1/H1): download, unpack,
+ * install and cache-probe for the two wizard-managed binaries. The
+ * arithmetic lives in binary.ts; this file is the only one allowed to touch
+ * the filesystem or the network for it.
+ *
+ * House rules the tasks pin down:
+ *
+ *   - No shell, no `child_process` at all. Downloads ride `fetch`, the
+ *     body streams straight to a `.part` file, and the install is a POSIX
+ *     rename — a crash mid-download can never leave a half binary at the
+ *     install path.
+ *   - The archive wrapper comes from binary.ts's METADATA (`options.archive`,
+ *     what binaryUrls() models per platform), never from sniffing the URL:
+ *     the Caddy build API's URL is a query string whose ending says nothing
+ *     about the tar.gz / zip payload it answers with (GW-fix-1/H1).
+ *   - Windows' Caddy asset is a zip and there is no zip reader here yet:
+ *     refused up front with the typed `windows-zip-unsupported` code, the
+ *     manual-install link stays the fallback (GW-fix-1/H1 item 3).
+ *   - After unpacking (or for a bare download), a unix image must carry an
+ *     ELF or Mach-O magic; anything else is refused as `bad-binary-image`
+ *     and leaves nothing on disk (GW-fix-1/H1 item 4). Windows keeps no
+ *     magic check — PE inspection is not this module's job.
+ *   - The darwin cloudflared asset is a `.tgz`; it is unpacked with
+ *     `zlib.gunzipSync` plus a minimal ustar reader (the archive carries a
+ *     single entry — no PAX/GNU long-name handling needed, but those
+ *     header types are skipped correctly if an upstream rebuild adds one).
+ *   - Installed images get 0755; `ensureBinary` is idempotent (an existing
+ *     executable short-circuits before any network traffic).
+ *
+ * `fetch` is injectable so the tests drive real downloads against a local
+ * mock server without touching the network.
+ */
+import { type BinaryArchive, type BinaryPlatform, type IngressBinary } from './binary.js';
+/**
+ * One failed or refused download/install. `code` is the wire-stable marker
+ * the UI classifies on — `'download-failed'` for transport/shaping
+ * failures, `'windows-zip-unsupported'` for the zip refusal, and
+ * `'bad-binary-image'` when the payload did not carry an executable
+ * image's magic. `installUrl` is the official manual-install page the
+ * failure card links to. Fields are assigned in the constructor body rather
+ * than declared as parameter properties (the check scripts import modules
+ * through Node's strip-only type stripping, which rejects that syntax).
+ */
+export declare class BinaryDownloadError extends Error {
+    readonly code: string;
+    readonly tool: IngressBinary;
+    readonly url: string;
+    readonly status: number | null;
+    readonly installUrl: string;
+    constructor(tool: IngressBinary, url: string, status: number | null, message: string, options?: {
+        cause?: unknown;
+        code?: string;
+    });
+}
+/**
+ * The installed binary's absolute path, or undefined when it is not (yet)
+ * on disk in executable shape — the read-only probe; see binary.ts's
+ * `binaryInstallPath` for the pure arithmetic.
+ */
+export declare function binaryPath(dshHome: string, tool: IngressBinary, platform?: BinaryPlatform): string | undefined;
+/** Progress callback: bytes on disk so far, and the declared total when the
+ * server sent one. */
+export type DownloadProgress = (received: number, total: number | null) => void;
+export interface DownloadBinaryOptions {
+    fetchImpl?: typeof fetch;
+    platform?: BinaryPlatform;
+    onProgress?: DownloadProgress;
+    /** The archive wrapper the URL delivers — metadata from binary.ts
+     * (`binaryUrls` / `caddyDownload` / `cloudflaredDownload`), NOT guessed
+     * from the URL shape. Default `'none'`: a bare executable. */
+    archive?: BinaryArchive;
+}
+/**
+ * Download one binary from an explicit URL and install it. The archive
+ * wrapper is the CALLER'S metadata (`options.archive`) — `ensureBinary`
+ * feeds it from binaryUrls(); tests pin it per fixture. `platform` only
+ * matters for the install name and the magic-check gate; it defaults to
+ * this process's.
+ * @returns the absolute install path.
+ */
+export declare function downloadBinary(dshHome: string, tool: IngressBinary, url: string, options?: DownloadBinaryOptions): Promise<string>;
+export interface EnsureBinaryOptions extends DownloadBinaryOptions {
+    /** Force the platform mapping (tests); defaults to this process's. */
+    platform?: BinaryPlatform;
+}
+/**
+ * Detect whether the current host is in mainland China:
+ * 1. Fast local check: system timezone is `Asia/Shanghai`, `Asia/Chongqing`,
+ *    `Asia/Harbin`, or `Asia/Urumqi`, or `LANG`/`LC_ALL` carries `zh_CN`.
+ * 2. Quick 1.5s probe to Cloudflare's `/cdn-cgi/trace` (`loc=CN`), or if
+ *    direct `github.com` HEAD fails/times out within 2s.
+ */
+export declare function detectCnNetwork(fetchImpl?: typeof fetch): Promise<boolean>;
+/**
+ * The idempotent front door: an already-installed executable short-circuits
+ * (no network), anything else downloads from the official distribution
+ * point for the tool, archive shape included.
+ *
+ * When using the default `fetch` transport, automatically detects mainland
+ * China network environments and tries prebuilt GitHub Release mirrors
+ * (`gh-proxy.com` / `ghfast.top`) + direct GitHub Release before falling back
+ * to `caddyserver.com/api/download`. When a custom `fetchImpl` is injected
+ * (unit tests), calls the canonical `binaryUrls(platform)` endpoint directly.
+ * @returns the absolute install path and whether THIS call downloaded.
+ */
+export declare function ensureBinary(dshHome: string, tool: IngressBinary, options?: EnsureBinaryOptions): Promise<{
+    path: string;
+    downloaded: boolean;
+}>;
+//# sourceMappingURL=binary-io.d.ts.map

package/lib/types/wizard/binary-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary-io.d.ts","sourceRoot":"","sources":["../../../src/wizard/binary-io.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAqBH,OAAO,EAOL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,aAAa,CAAA;AAqCpB;;;;;;;;;GASG;AACH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;gBAEf,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;CASnI;AAaD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,GAAE,cAAkC,GAAG,MAAM,GAAG,SAAS,CAGjI;AAED;sBACsB;AACtB,MAAM,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAA;AAE/E,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B;;kEAE8D;IAC9D,OAAO,CAAC,EAAE,aAAa,CAAA;CACxB;AA2GD;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,CAAC,CA0EjB;AAED,MAAM,WAAW,mBAAoB,SAAQ,qBAAqB;IAChE,sEAAsE;IACtE,QAAQ,CAAC,EAAE,cAAc,CAAA;CAC1B;AAMD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,SAAS,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAgCvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAyBhD"}

package/lib/types/wizard/binary.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Ingress binary arithmetic (GW-2): platform mapping, download-URL
+ * construction and install-path computation for the two binaries the
+ * gateway wizard manages — Caddy (custom build with the Cloudflare DNS
+ * module, for DNS-01 certificates) and cloudflared (the tunnel client).
+ *
+ * Pure by contract: URL strings, path strings and platform facts only —
+ * every touch of the filesystem or the network lives in binary-io.ts, and
+ * the routes layer reads both. `node:path`/`node:os` here are arithmetic,
+ * not I/O: the same discipline as virtual-id.ts's zero-dependency rule,
+ * relaxed one notch because path building is this module's whole job.
+ *
+ * Platform coverage mirrors what both upstream distribution points actually
+ * ship: darwin/linux/windows × amd64/arm64. macOS arm64's cloudflared asset
+ * is a `.tgz` (the only archive shape in the set) — binary-io unpacks it.
+ */
+/** The two binaries the wizard downloads and runs. */
+export type IngressBinary = 'caddy' | 'cloudflared';
+/**
+ * The platform shapes both distribution points understand. Windows is
+ * deliberately amd64-only: that is all Caddy's build API and cloudflared's
+ * Releases publish a gateway-wizard-usable image for (a windows-arm64 host
+ * has no supported download either way, so pretending otherwise would only
+ * move the failure somewhere less explicable).
+ */
+export type BinaryPlatform = {
+    os: 'darwin';
+    arch: 'amd64' | 'arm64';
+} | {
+    os: 'linux';
+    arch: 'amd64' | 'arm64';
+} | {
+    os: 'windows';
+    arch: 'amd64';
+};
+/**
+ * The wrapper an asset arrives in: `tgz` gzipped tar (needs unpacking),
+ * `zip` (no reader in this codebase yet — refused before download), `exe`
+ * Windows' own format, `none` a bare executable.
+ */
+export type BinaryArchive = 'tgz' | 'zip' | 'exe' | 'none';
+/** This process's platform, mapped into the download points' naming. */
+export declare function currentPlatform(): BinaryPlatform;
+/** Caddy's custom-build API, pinned to the Cloudflare DNS module the
+ * DNS-01 challenge needs (plain Caddy cannot write the TXT record). */
+export declare function caddyDownloadUrl(platform: BinaryPlatform): string;
+/**
+ * The Caddy asset the build API answers with, PLUS its archive shape —
+ * `caddyserver.com/api/download` returns a bare Mach-O/ELF binary on unix
+ * (`Content-Disposition: attachment; filename="caddy_<os>_<arch>_custom"`,
+ * `Content-Type: application/octet-stream`) and a bare `.exe` on Windows.
+ */
+export declare function caddyDownload(platform: BinaryPlatform): {
+    url: string;
+    archive: BinaryArchive;
+};
+/** cloudflared's GitHub Releases asset for one platform, plus the archive
+ * shape the I/O half must unwrap (darwin assets are `.tgz`, windows ships
+ * a bare `.exe`, linux a bare binary). */
+export declare function cloudflaredDownload(platform: BinaryPlatform): {
+    url: string;
+    archive: BinaryArchive;
+};
+/** Both download URLs for one platform WITH their archive shapes, defaults
+ * to the running process's. The archive metadata — not a URL suffix — is
+ * what tells the I/O half how to unpack. */
+export declare function binaryUrls(platform?: BinaryPlatform): {
+    caddy: string;
+    caddyArchive: BinaryArchive;
+    cloudflared: string;
+    cloudflaredArchive: BinaryArchive;
+};
+/** Official manual-install pages, surfaced by the UI when a download fails. */
+export declare const MANUAL_INSTALL_LINKS: Readonly<Record<IngressBinary, string>>;
+/** Everything ingress lives under this one directory of DSH_HOME. */
+export declare const INGRESS_DIR_NAME = "zen-remote-ingress";
+/** `<DSH_HOME>` as the rest of the plugin resolves it (config.ts's convention). */
+export declare function dshHomeDefault(env?: NodeJS.ProcessEnv): string;
+/** `<DSH_HOME>/zen-remote-ingress` — Caddyfile, data dir and bin/ sit here. */
+export declare function ingressDir(dshHome: string): string;
+/** `<DSH_HOME>/zen-remote-ingress/bin` — both binaries install here. */
+export declare function binDir(dshHome: string): string;
+/** `<DSH_HOME>/zen-remote-ingress/Caddyfile` — generated, validated, then
+ * handed to `caddy run --config`. */
+export declare function caddyfilePath(dshHome: string): string;
+/** `<DSH_HOME>/zen-remote-ingress/caddy-data` — certificates and the ACME
+ * account live here, kept out of the default Caddy home. */
+export declare function caddyDataDir(dshHome: string): string;
+/** The installed file name. Windows cannot spawn an extension-less image,
+ * so the `.exe` suffix is part of the install name there. */
+export declare function binaryFileName(tool: IngressBinary, platform?: BinaryPlatform): string;
+/** The absolute install path for one binary (where downloadBinary puts it). */
+export declare function binaryInstallPath(dshHome: string, tool: IngressBinary, platform?: BinaryPlatform): string;
+/** Prebuilt Caddy + `github.com/caddy-dns/cloudflare` release assets hosted
+ * on this repository's `caddy-cloudflare` GitHub Release (built by
+ * `.github/workflows/caddy-assets.yml`). Unlike `caddyserver.com/api/download`
+ * — which compiles on the fly and throttles downloads to ~13 KB/s — these
+ * static GitHub Release assets download in seconds and work with mainland
+ * China GitHub acceleration mirrors (`gh-proxy.com` / `ghfast.top`). */
+export declare function caddyPrebuiltDownload(platform: BinaryPlatform): {
+    url: string;
+    archive: BinaryArchive;
+};
+/** Mainland China GitHub release acceleration mirrors, tried first when the
+ * host environment is detected as mainland China (or tried as fallbacks if
+ * direct GitHub times out). */
+export declare const GITHUB_MIRROR_PREFIXES: readonly ["https://gh-proxy.com/", "https://ghfast.top/"];
+/** Ordered candidate downloads for one binary and platform:
+ * - When `preferCnMirror` is true, GitHub Release URLs through mainland
+ *   mirrors come first, followed by direct GitHub Release URL, and finally
+ *   (for Caddy) the upstream `caddyserver.com/api/download` fallback.
+ * - When `preferCnMirror` is false, direct GitHub Release comes first, then
+ *   mainland mirrors, then the upstream build API fallback. */
+export declare function binaryDownloadCandidates(tool: IngressBinary, platform?: BinaryPlatform, preferCnMirror?: boolean): Array<{
+    url: string;
+    archive: BinaryArchive;
+}>;
+//# sourceMappingURL=binary.d.ts.map

package/lib/types/wizard/binary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binary.d.ts","sourceRoot":"","sources":["../../../src/wizard/binary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH,sDAAsD;AACtD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,aAAa,CAAA;AAEnD;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GACtB;IAAE,EAAE,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAA;AAEpC;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,CAAA;AAE1D,wEAAwE;AACxE,wBAAgB,eAAe,IAAI,cAAc,CAKhD;AAED;uEACuE;AACvE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAE/F;AAED;;0CAE0C;AAC1C,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAKrG;AAED;;4CAE4C;AAC5C,wBAAgB,UAAU,CACxB,QAAQ,GAAE,cAAkC,GAC3C;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,aAAa,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,aAAa,CAAA;CAAE,CAIxG;AAED,+EAA+E;AAC/E,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAGxE,CAAA;AAED,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,uBAAuB,CAAA;AAEpD,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAE3E;AAED,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wEAAwE;AACxE,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9C;AAED;qCACqC;AACrC,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;4DAC4D;AAC5D,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED;6DAC6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,GAAE,cAAkC,GAAG,MAAM,CAGxG;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,GAAE,cAAkC,GAAG,MAAM,CAE5H;AAED;;;;;wEAKwE;AACxE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,cAAc,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAIvG;AAED;;+BAE+B;AAC/B,eAAO,MAAM,sBAAsB,2DAGzB,CAAA;AAEV;;;;;+DAK+D;AAC/D,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,aAAa,EACnB,QAAQ,GAAE,cAAkC,EAC5C,cAAc,UAAQ,GACrB,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC,CAWhD"}

package/lib/types/wizard/caddy-process.d.ts

@@ -0,0 +1,101 @@
+/**
+ * Managed-Caddy process lifecycle (GW-3). The Caddyfile's content is
+ * caddy.ts's job; this module owns everything with a heartbeat:
+ *
+ *   start: ensureBinary (GW-2, cached after the first download) →
+ *          generateCaddyfile (typed refusals) → write the Caddyfile as a
+ *          `.part` sibling → `caddy validate --config <part> --adapter
+ *          caddyfile` → only on a clean validate rename it to the real
+ *          path → `caddy run --config <Caddyfile>`. The ticket's "validate
+ *          before write" is honored as validate-before-PUBLISH: the final
+ *          Caddyfile on disk only ever holds bytes Caddy accepted, and a
+ *          failed validate leaves neither a start nor a published file.
+ *
+ *   The Cloudflare API token travels in the child's ENVIRONMENT
+ *   (`CF_API_TOKEN`, what the generated `{env.CF_API_TOKEN}` placeholder
+ *   reads) — never in argv, which other processes on the machine can see.
+ *
+ *   Idempotency: start with a live process refuses (`already-running`) —
+ *   switching configuration stops first (design: 切换路时先停旧进程再启新的).
+ *   stop is idempotent; an exited child clears its own slot so a later
+ *   start works. The host wiring hands stop to ctx.effect, so the row's
+ *   disposal kills Caddy too.
+ *
+ * The subprocess service is structural (the tests feed a recorder), and
+ * `fetch` is injectable for the ensureBinary step.
+ */
+import { type DownloadProgress } from './binary-io.js';
+import { caddyDataDir, caddyfilePath, ingressDir, type BinaryPlatform } from './binary.js';
+import { type CaddyfileInput } from './caddy.js';
+/** The slice of DSH's subprocess service the manager drives (structural so
+ * tests record instead of exec). */
+export interface SubprocessHandleLike {
+    terminate(): unknown;
+    done: Promise<{
+        exitCode?: number | null;
+        signal?: string | null;
+    }>;
+}
+export interface SubprocessServiceLike {
+    spawn(options: {
+        argv: string[];
+        cwd?: string;
+        env?: NodeJS.ProcessEnv;
+        stdio?: unknown;
+        graceMs?: number;
+    }): SubprocessHandleLike;
+}
+export interface CaddyManagerOptions {
+    /** The host's subprocess service (ctx.subprocess). */
+    subprocess: SubprocessServiceLike;
+    /** `<DSH_HOME>` — binaries, Caddyfile and caddy-data all live under it. */
+    dshHome: string;
+    /** Injected transport for the one-time binary download (tests point it
+     * at a mock server). */
+    fetchImpl?: typeof fetch;
+    /** Forced platform mapping (tests). */
+    platform?: BinaryPlatform;
+    /** Download progress relay (bytes, declared total or null). */
+    onProgress?: DownloadProgress;
+    /** Stdio byte caps for the child, both streams. Default 64 KiB — enough
+     * for the startup banner and an error or two. */
+    maxLogBytes?: number;
+}
+export type CaddyStartResult = {
+    ok: true;
+    binaryPath: string;
+    caddyfile: string;
+    alreadyRunning: false;
+} | {
+    ok: false;
+    error: 'already-running' | 'missing-token' | 'bad-config' | 'download-failed' | 'validate-failed' | 'spawn-failed';
+    /** The generateCaddyfile error code for `bad-config`, or a short
+     * human-readable line for the transport/spawn failures. */
+    detail?: string;
+    /** Official manual-install link, present for `download-failed`. */
+    installUrl?: string;
+};
+export interface CaddyManager {
+    /**
+     * Idempotent front door: a live Caddy refuses a second start (stop
+     * first to switch configuration). Throws nothing — every failure is a
+     * value. The storage directory is this manager's own (under dshHome) —
+     * callers supply only the user-facing fields.
+     */
+    start(input: Omit<CaddyfileInput, 'storageDir'> & {
+        cfToken: unknown;
+    }): Promise<CaddyStartResult>;
+    /** Idempotent terminate; safe before any start. */
+    stop(): void;
+    /** Whether a child is currently held (true between spawn and exit). */
+    isRunning(): boolean;
+    /** The live child's Caddyfile path, or undefined. */
+    runningCaddyfile(): string | undefined;
+    /** Whether any start has succeeded in this manager's lifetime. */
+    hasStarted(): boolean;
+}
+export declare function createCaddyManager(options: CaddyManagerOptions): CaddyManager;
+/** Re-exported so the wiring (and later the routes) need one import for
+ * the whole ingress-directory layout. */
+export { caddyDataDir, caddyfilePath, ingressDir };
+//# sourceMappingURL=caddy-process.d.ts.map

package/lib/types/wizard/caddy-process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy-process.d.ts","sourceRoot":"","sources":["../../../src/wizard/caddy-process.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAGH,OAAO,EAAqC,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAA;AACzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAA;AAC1F,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,YAAY,CAAA;AAEnE;oCACoC;AACpC,MAAM,WAAW,oBAAoB;IACnC,SAAS,IAAI,OAAO,CAAA;IACpB,IAAI,EAAE,OAAO,CAAC;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;CACpE;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,OAAO,EAAE;QACb,IAAI,EAAE,MAAM,EAAE,CAAA;QACd,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;QACvB,KAAK,CAAC,EAAE,OAAO,CAAA;QACf,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,GAAG,oBAAoB,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,sDAAsD;IACtD,UAAU,EAAE,qBAAqB,CAAA;IACjC,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAA;IACf;4BACwB;IACxB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,gBAAgB,CAAA;IAC7B;qDACiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,KAAK,CAAA;CAAE,GAC1E;IACA,EAAE,EAAE,KAAK,CAAA;IACT,KAAK,EAAE,iBAAiB,GAAG,eAAe,GAAG,YAAY,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IAClH;+DAC2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB,CAAA;AAEH,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,CAAC,GAAG;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAClG,mDAAmD;IACnD,IAAI,IAAI,IAAI,CAAA;IACZ,uEAAuE;IACvE,SAAS,IAAI,OAAO,CAAA;IACpB,qDAAqD;IACrD,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAAA;IACtC,kEAAkE;IAClE,UAAU,IAAI,OAAO,CAAA;CACtB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CA+H7E;AAED;yCACyC;AACzC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,CAAA"}

package/lib/types/wizard/caddy.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Caddyfile generation (GW-3), pure logic — every byte the managed Caddy
+ * will run comes out of {@link generateCaddyfile}, so the validation and
+ * the injection guards live HERE and the process half (caddy-process.ts)
+ * only writes, validates and spawns what this answered.
+ *
+ * Shape (design.md 路 A), with one deliberate correction to the design
+ * sketch: the global DNS-01 option in a real Caddyfile is `acme_dns
+ * <provider> <token-placeholder>` — the sketch's bare `dns cloudflare`
+ * line is site-block `tls` syntax and is not valid as a global option.
+ * The DNS-01 challenge itself is the point: the certificate is ordered
+ * through Cloudflare's API (the token rides the `CF_API_TOKEN`
+ * environment variable, never the file), so neither 80 nor 443 needs to
+ * be reachable from outside for issuance; only the HTTPS service port
+ * must be.
+ *
+ * Injection posture: every interpolated value passes a charset gate —
+ * the domain through config.ts's `hostOf` (the exact validator the row
+ * layer applies), the storage path free of control characters, quotes and
+ * braces (Caddyfile's block delimiters), the env-var name as a legal
+ * POSIX name. Nothing else from the outside world reaches the output.
+ */
+/** The default environment variable the Cloudflare token rides in on. */
+export declare const CF_TOKEN_ENV_DEFAULT = "CF_API_TOKEN";
+export interface CaddyfileInput {
+    /** Public ingress domain, bare hostname (validated like the row field). */
+    domain: unknown;
+    /** HTTPS port the managed Caddy listens on. [1, 65535]. */
+    httpsPort: unknown;
+    /** The gateway's ACTUAL listening port — the caller reads it from the
+     * running gateway, never the configured one (it may have retried). */
+    gatewayPort: unknown;
+    /** Caddy storage directory (certificates + ACME account). */
+    storageDir: unknown;
+    /** Environment variable name the Cloudflare token arrives in. */
+    cfTokenEnvName?: unknown;
+}
+export type CaddyfileResult = {
+    ok: true;
+    caddyfile: string;
+    domain: string;
+    httpsPort: number;
+    gatewayPort: number;
+} | {
+    ok: false;
+    error: 'bad-domain' | 'bad-https-port' | 'bad-gateway-port' | 'bad-storage' | 'bad-token-env';
+};
+/**
+ * Build the complete Caddyfile for the managed Caddy. Refuses (typed)
+ * instead of throwing so the caller can map each refusal to a form error.
+ */
+export declare function generateCaddyfile(input: CaddyfileInput): CaddyfileResult;
+//# sourceMappingURL=caddy.d.ts.map

package/lib/types/wizard/caddy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caddy.d.ts","sourceRoot":"","sources":["../../../src/wizard/caddy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,iBAAiB,CAAA;AAElD,MAAM,WAAW,cAAc;IAC7B,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAA;IACf,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAA;IAClB;0EACsE;IACtE,WAAW,EAAE,OAAO,CAAA;IACpB,6DAA6D;IAC7D,UAAU,EAAE,OAAO,CAAA;IACnB,iEAAiE;IACjE,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,YAAY,GAAG,gBAAgB,GAAG,kBAAkB,GAAG,aAAa,GAAG,eAAe,CAAA;CAAE,CAAA;AAoBhH;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CA4BxE"}

package/lib/types/wizard/cloudflare.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Cloudflare API v4 client (GW-7) — the whole tunnel path (路 C) talks to
+ * this module: account lookup, zone lookup, tunnel create/list, ingress
+ * configuration, the CNAME that points the public hostname at the tunnel,
+ * and the composed "is this domain on Cloudflare already" check.
+ *
+ * Transport rules the ticket pins down:
+ *
+ *   - Plain `fetch`, no third-party dependency; the token rides the
+ *     `Authorization: Bearer` header and is NEVER logged, echoed into an
+ *     error, or written into any returned structure.
+ *   - Every failure is a typed {@link CloudflareError} whose `code` the UI
+ *     classifies on (`cf-auth-failed`, `cf-zone-not-found`,
+ *     `cf-tunnel-conflict`, `cf-dns-conflict`, `cf-network`, and the
+ *     catch-all `cf-api`). Raw response bodies never pass through — the
+ *     message carries only the API's short error summary, truncated,
+ *     which is what the design's 「兜底显示原始错误码」 wants.
+ *   - The client is stateless: a factory binds the token (plus injectable
+ *     `fetchImpl` / `baseUrl` for the mock-server tests); every method
+ *     takes the ids it needs. The module-level `cf*` wrappers are one-call
+ *     conveniences over the factory.
+ *
+ * Conflict classification matches the well-known numeric codes where they
+ * exist and falls back to the API's error text (`already exists`
+ * wordings), so an upstream renumber degrades to the generic envelope
+ * instead of a wrong verdict.
+ */
+export declare const CLOUDFLARE_API_BASE = "https://api.cloudflare.com/client/v4";
+export type CloudflareErrorCode = 'cf-auth-failed' | 'cf-zone-not-found' | 'cf-tunnel-conflict' | 'cf-dns-conflict' | 'cf-network' | 'cf-api';
+/**
+ * One refused API call. Fields are assigned in the constructor body (the
+ * check scripts' strip-only type stripping rejects parameter properties).
+ */
+export declare class CloudflareError extends Error {
+    readonly code: CloudflareErrorCode;
+    readonly status: number | null;
+    /** The API's own numeric error code(s), when the envelope carried any. */
+    readonly apiCodes: readonly number[];
+    constructor(code: CloudflareErrorCode, message: string, status?: number | null, apiCodes?: readonly number[], options?: {
+        cause?: unknown;
+    });
+}
+export interface CloudflareApiOptions {
+    token: string;
+    fetchImpl?: typeof fetch;
+    baseUrl?: string;
+}
+export interface CloudflareTunnelSummary {
+    id: string;
+    name: string;
+    status: string;
+}
+/** One DNS record summary (the id/content the tunnel setup compares). */
+export interface CloudflareDnsRecord {
+    id: string;
+    name: string;
+    content: string;
+}
+export interface CloudflareDomainCheck {
+    onCloudflare: boolean;
+    zoneId: string | null;
+    accountId: string | null;
+}
+export interface CloudflareApi {
+    /** Every account id the token can see. */
+    listAccounts(): Promise<string[]>;
+    /** The zone id whose name EXACTLY equals `domain`, within one account. */
+    getZone(accountId: string, domain: string): Promise<string>;
+    /** One new named tunnel; `token` is the connector secret cloudflared runs with. */
+    createTunnel(accountId: string, name: string): Promise<{
+        id: string;
+        token: string;
+    }>;
+    /** The account's live tunnels (deleted ones filtered server-side). */
+    listTunnels(accountId: string): Promise<CloudflareTunnelSummary[]>;
+    /** The connector token of an EXISTING tunnel (the re-use path of setup). */
+    getTunnelToken(accountId: string, tunnelId: string): Promise<string>;
+    /** Map `domain` → `serviceUrl` in the tunnel's ingress, 404 fallback last. */
+    configureIngress(accountId: string, tunnelId: string, domain: string, serviceUrl: string): Promise<void>;
+    /** One proxied CNAME `subdomain` → `target`; returns the record id. */
+    createDnsRecord(zoneId: string, subdomain: string, target: string): Promise<string>;
+    /** The CNAME records named `name` in one zone (id/name/content only). */
+    listDnsRecords(zoneId: string, name: string): Promise<CloudflareDnsRecord[]>;
+    /** Composed check: does any ancestor of `domain` name a zone on the
+     * token's accounts (zones are apexes — `dsh.example.com` lives in the
+     * `example.com` zone)? */
+    checkDomainOnCloudflare(domain: string): Promise<CloudflareDomainCheck>;
+}
+/**
+ * The ancestor chain of one hostname, itself first: `dsh.example.com` →
+ * `dsh.example.com`, `example.com`, `com`. Cloudflare zones are apex
+ * domains, so a wizard lookup for `dsh.example.com` must find the zone
+ * named `example.com` (GW-fix-2/H1) — exact-name matching walks this chain
+ * level by level.
+ */
+export declare function ancestorHosts(domain: string): string[];
+export declare function createCloudflareApi(options: CloudflareApiOptions): CloudflareApi;
+type CfCallOptions = Partial<Pick<CloudflareApiOptions, 'fetchImpl' | 'baseUrl'>>;
+export declare function cfListAccounts(token: string, opts?: CfCallOptions): Promise<string[]>;
+export declare function cfGetZone(token: string, accountId: string, domain: string, opts?: CfCallOptions): Promise<string>;
+export declare function cfCreateTunnel(token: string, accountId: string, name: string, opts?: CfCallOptions): Promise<{
+    id: string;
+    token: string;
+}>;
+export declare function cfListTunnels(token: string, accountId: string, opts?: CfCallOptions): Promise<CloudflareTunnelSummary[]>;
+export declare function cfGetTunnelToken(token: string, accountId: string, tunnelId: string, opts?: CfCallOptions): Promise<string>;
+export declare function cfConfigureIngress(token: string, accountId: string, tunnelId: string, domain: string, serviceUrl: string, opts?: CfCallOptions): Promise<void>;
+export declare function cfCreateDnsRecord(token: string, zoneId: string, subdomain: string, target: string, opts?: CfCallOptions): Promise<string>;
+export declare function cfListDnsRecords(token: string, zoneId: string, name: string, opts?: CfCallOptions): Promise<CloudflareDnsRecord[]>;
+export declare function cfCheckDomainOnCloudflare(token: string, domain: string, opts?: CfCallOptions): Promise<CloudflareDomainCheck>;
+export {};
+//# sourceMappingURL=cloudflare.d.ts.map