localant 1.0.1 → 1.1.0

package/packages/gateway/dist/managers/tunnel-manager.js

@@ -8,15 +8,23 @@ const log = createLogger("tunnel");
  */
 export class TunnelManager {
     config;
+    updateConfig;
     child;
     info = { provider: "none", status: "stopped" };
-    constructor(config) {
+    timeoutId;
+    /** Set by stop() so an intentional shutdown is never auto-reconnected. */
+    stopped = false;
+    /** Pending serveo reconnect attempt, cleared on stop(). */
+    reconnectTimer;
+    constructor(config, updateConfig) {
         this.config = config;
+        this.updateConfig = updateConfig;
     }
     current() {
         return this.info;
     }
     async start(port) {
+        this.stopped = false;
         const cfg = this.config().tunnel;
         if (cfg.publicUrl) {
             this.info = { provider: "user-provided", url: cfg.publicUrl, status: "running" };
@@ -28,11 +36,19 @@ export class TunnelManager {
         if (cfg.provider === "ngrok" && (await commandExists("ngrok"))) {
             return this.startNgrok(port);
         }
+        if (cfg.provider === "localtunnel") {
+            return this.startLocaltunnel(port);
+        }
+        if (cfg.provider === "serveo" && (await commandExists("ssh"))) {
+            return this.startServeo(port);
+        }
         // Fallbacks
         if (await commandExists("cloudflared"))
             return this.startCloudflared(port);
         if (await commandExists("ngrok"))
             return this.startNgrok(port);
+        if (await commandExists("ssh"))
+            return this.startServeo(port);
         this.info = {
             provider: "none",
             status: "error",
@@ -43,8 +59,21 @@ export class TunnelManager {
     startCloudflared(port) {
         return new Promise((resolve) => {
             this.info = { provider: "cloudflared", status: "starting" };
-            const child = spawn("cloudflared", ["tunnel", "--url", `http://127.0.0.1:${port}`], { shell: false });
+            const cfg = this.config().tunnel;
+            let args;
+            if (cfg.token) {
+                args = ["tunnel", "run", "--token", cfg.token];
+            }
+            else {
+                args = ["tunnel", "--url", `http://127.0.0.1:${port}`];
+            }
+            const child = spawn("cloudflared", args, { shell: false });
             this.child = child;
+            if (cfg.token) {
+                this.info = { provider: "cloudflared", url: cfg.publicUrl || "Zero Trust Tunnel", status: "running" };
+                resolve(this.info);
+                return;
+            }
             const onData = (buf) => {
                 const text = buf.toString("utf8");
                 const m = text.match(/https:\/\/[a-z0-9-]+\.trycloudflare\.com/i);
@@ -59,7 +88,7 @@ export class TunnelManager {
                 this.info = { provider: "cloudflared", status: "error", error: e.message };
                 resolve(this.info);
             });
-            setTimeout(() => {
+            this.timeoutId = setTimeout(() => {
                 if (this.info.status !== "running") {
                     this.info = { provider: "cloudflared", status: "error", error: "Timed out waiting for tunnel URL." };
                     resolve(this.info);
@@ -70,7 +99,15 @@ export class TunnelManager {
     startNgrok(port) {
         return new Promise((resolve) => {
             this.info = { provider: "ngrok", status: "starting" };
-            const child = spawn("ngrok", ["http", String(port), "--log", "stdout"], { shell: false });
+            const cfg = this.config().tunnel;
+            const args = ["http", String(port), "--log", "stdout"];
+            if (cfg.domain) {
+                args.push("--domain", cfg.domain);
+            }
+            if (cfg.token) {
+                args.push("--authtoken", cfg.token);
+            }
+            const child = spawn("ngrok", args, { shell: false });
             this.child = child;
             const onData = (buf) => {
                 const text = buf.toString("utf8");
@@ -86,19 +123,263 @@ export class TunnelManager {
                 this.info = { provider: "ngrok", status: "error", error: e.message };
                 resolve(this.info);
             });
-            setTimeout(() => {
+            this.timeoutId = setTimeout(() => {
                 if (this.info.status !== "running") {
-                    this.info = { provider: "ngrok", status: "error", error: "Timed out waiting for ngrok URL." };
+                    if (cfg.domain) {
+                        this.info = { provider: "ngrok", url: cfg.publicUrl || `https://${cfg.domain}`, status: "running" };
+                        resolve(this.info);
+                    }
+                    else {
+                        this.info = { provider: "ngrok", status: "error", error: "Timed out waiting for ngrok URL." };
+                        resolve(this.info);
+                    }
+                }
+            }, 20_000);
+        });
+    }
+    async startLocaltunnel(port) {
+        const maxDurationMs = 5 * 60 * 1000; // 5 minutes
+        const intervalMs = 10000; // 10 seconds
+        const startTime = Date.now();
+        let attempt = 0;
+        while (true) {
+            attempt++;
+            log.info(`Starting localtunnel attempt ${attempt}...`);
+            try {
+                const tunnelInfo = await this.tryStartLocaltunnelOnce(port);
+                if (tunnelInfo.status === "running" && tunnelInfo.url) {
+                    const cfg = this.config().tunnel;
+                    const assignedUrl = tunnelInfo.url;
+                    const assignedSubdomain = assignedUrl.match(/https:\/\/([a-z0-9-]+)\./i)?.[1];
+                    const requestedSubdomain = cfg.subdomain;
+                    if (requestedSubdomain && assignedSubdomain && assignedSubdomain !== requestedSubdomain) {
+                        // We asked for our fixed subdomain but localtunnel handed back a
+                        // different one — the requested name is still held, almost always by
+                        // our own just-killed previous session (a quick restart). The public
+                        // URL must stay stable so the ChatGPT connector keeps working across
+                        // restarts, so we never regenerate: drop this throwaway tunnel and
+                        // keep retrying the SAME subdomain until the server releases it.
+                        log.warn(`Subdomain "${requestedSubdomain}" not yet available (got "${assignedSubdomain}"). ` +
+                            `Waiting for the previous session to release it, retrying in ${intervalMs / 1000}s...`);
+                        this.stop();
+                        if (Date.now() - startTime >= maxDurationMs) {
+                            return {
+                                provider: "localtunnel",
+                                status: "error",
+                                error: `Subdomain "${requestedSubdomain}" did not become available within ${maxDurationMs / 1000}s.`,
+                            };
+                        }
+                        await new Promise((r) => setTimeout(r, intervalMs));
+                        continue;
+                    }
+                    return tunnelInfo;
+                }
+                throw new Error(tunnelInfo.error || "Unknown error starting tunnel");
+            }
+            catch (err) {
+                log.warn(`Localtunnel start failed: ${err.message}. Retrying in 10s...`);
+                this.stop();
+                if (Date.now() - startTime >= maxDurationMs) {
+                    this.info = { provider: "localtunnel", status: "error", error: `Timed out trying to start tunnel: ${err.message}` };
+                    return this.info;
+                }
+                await new Promise((r) => setTimeout(r, intervalMs));
+            }
+        }
+    }
+    tryStartLocaltunnelOnce(port) {
+        return new Promise((resolve) => {
+            this.info = { provider: "localtunnel", status: "starting" };
+            const cfg = this.config().tunnel;
+            const args = ["localtunnel", "--port", String(port)];
+            if (cfg.subdomain) {
+                args.push("--subdomain", cfg.subdomain);
+            }
+            const child = spawn("npx", args, { shell: true });
+            this.child = child;
+            const onData = (buf) => {
+                const text = buf.toString("utf8");
+                const m = text.match(/https:\/\/[a-z0-9-]+\.(localtunnel\.me|loca\.lt)/i);
+                if (m && this.info.status !== "running") {
+                    this.info = { provider: "localtunnel", url: m[0], status: "running" };
                     resolve(this.info);
                 }
+            };
+            child.stdout.on("data", onData);
+            child.stderr.on("data", onData);
+            child.on("error", (e) => {
+                this.info = { provider: "localtunnel", status: "error", error: e.message };
+                resolve(this.info);
+            });
+            this.timeoutId = setTimeout(() => {
+                if (this.info.status !== "running") {
+                    if (cfg.subdomain) {
+                        this.info = { provider: "localtunnel", url: cfg.publicUrl || `https://${cfg.subdomain}.loca.lt`, status: "running" };
+                        resolve(this.info);
+                    }
+                    else {
+                        this.info = { provider: "localtunnel", status: "error", error: "Timed out waiting for localtunnel URL." };
+                        resolve(this.info);
+                    }
+                }
             }, 20_000);
         });
     }
+    startServeo(port) {
+        // Resolve the caller's promise exactly once on first outcome, then keep the
+        // tunnel alive in the background by reconnecting if the ssh process dies.
+        return new Promise((resolve) => {
+            let settled = false;
+            const settle = () => {
+                if (settled)
+                    return;
+                settled = true;
+                resolve(this.info);
+            };
+            this.spawnServeo(port, settle);
+        });
+    }
+    /**
+     * Spawn the serveo ssh tunnel and wire up its handlers. On unexpected exit
+     * (network drop, serveo restart, idle timeout) it schedules a reconnect so a
+     * long-running gateway never ends up alive-but-unreachable. `settle` is
+     * invoked once the first connection result is known.
+     */
+    spawnServeo(port, settle) {
+        if (this.stopped)
+            return;
+        this.info = { provider: "serveo", status: "starting" };
+        const cfg = this.config().tunnel;
+        const subdomain = cfg.subdomain ? `${cfg.subdomain}:` : "";
+        const args = [
+            "-R",
+            `${subdomain}80:127.0.0.1:${port}`,
+            "-o",
+            "StrictHostKeyChecking=no",
+            // Detect dead connections quickly and exit so we can reconnect.
+            "-o",
+            "ServerAliveInterval=30",
+            "-o",
+            "ServerAliveCountMax=3",
+            "-o",
+            "ExitOnForwardFailure=yes",
+            "serveo.net",
+        ];
+        const child = spawn("ssh", args, { shell: false });
+        this.child = child;
+        // A fatal config error (subdomain taken / key not registered) must not be
+        // retried in a tight loop — only transient drops should reconnect.
+        let fatal = false;
+        const onData = (buf) => {
+            const text = buf.toString("utf8");
+            // ポートフォワーディング失敗を検出
+            if (text.includes("remote port forwarding failed") && this.info.status !== "error") {
+                log.warn("Serveo port forwarding failed. Subdomain might be in use.");
+                fatal = true;
+                this.info = {
+                    provider: "serveo",
+                    status: "error",
+                    error: "Serveo port forwarding failed. Subdomain might be in use. Please try restarting the tunnel in a few seconds.",
+                };
+                this.clearTunnelTimeout();
+                this.killChild();
+                settle();
+                return;
+            }
+            // 固定サブドメインの利用には SSH 公開鍵の登録が必要。未登録だと毎回ランダムな
+            // ホストが割り当てられ、再起動のたびに URL が変わってしまう（ChatGPT コネクタが壊れる）。
+            // 登録用 URL を添えてエラーにし、ユーザーに一度きりの登録を促す。
+            if (cfg.subdomain &&
+                /register your SSH public key/i.test(text) &&
+                this.info.status !== "running" &&
+                this.info.status !== "error") {
+                const consoleUrl = text.match(/https:\/\/console\.serveo\.net\/ssh\/keys\?add=\S+/i)?.[0];
+                fatal = true;
+                this.info = {
+                    provider: "serveo",
+                    status: "error",
+                    error: `Serveo requires a one-time SSH key registration to reserve the fixed subdomain "${cfg.subdomain}". ` +
+                        (consoleUrl
+                            ? `Open ${consoleUrl} and sign in with Google/GitHub, then restart the tunnel.`
+                            : "Visit https://console.serveo.net/ssh/keys and register your SSH public key, then restart the tunnel."),
+                };
+                this.clearTunnelTimeout();
+                settle();
+                return;
+            }
+            // Serveo が出力する転送 URL をそのまま使う。実際の公開ホストは
+            // <subdomain>.serveousercontent.com で、ここを .serveo.net に書き換えると
+            // 警告ページ (302) に飛んでしまい /healthz が到達不能になる。
+            const m = text.match(/Forwarding HTTP traffic from (https:\/\/\S+)/i);
+            if (m && this.info.status !== "running" && this.info.status !== "error") {
+                this.info = { provider: "serveo", url: m[1], status: "running" };
+                this.clearTunnelTimeout();
+                settle();
+            }
+        };
+        child.stdout.on("data", onData);
+        child.stderr.on("data", onData);
+        child.on("error", (e) => {
+            this.info = { provider: "serveo", status: "error", error: e.message };
+            settle();
+        });
+        child.on("close", () => {
+            if (this.stopped || fatal)
+                return;
+            // The ssh process exited unexpectedly while we should be serving — the
+            // gateway is still up, so reconnect to restore the public URL.
+            log.warn("Serveo tunnel dropped; reconnecting in 3s…");
+            this.child = undefined;
+            this.reconnectTimer = setTimeout(() => this.spawnServeo(port, settle), 3000);
+        });
+        this.clearTunnelTimeout();
+        this.timeoutId = setTimeout(() => {
+            if (this.info.status !== "running" && this.info.status !== "error") {
+                if (cfg.subdomain) {
+                    this.info = {
+                        provider: "serveo",
+                        url: cfg.publicUrl || `https://${cfg.subdomain}.serveousercontent.com`,
+                        status: "running",
+                    };
+                    settle();
+                }
+                else {
+                    this.info = { provider: "serveo", status: "error", error: "Timed out waiting for serveo URL." };
+                    settle();
+                }
+            }
+        }, 20_000);
+    }
+    clearTunnelTimeout() {
+        if (this.timeoutId) {
+            clearTimeout(this.timeoutId);
+            this.timeoutId = undefined;
+        }
+    }
+    killChild() {
+        if (!this.child)
+            return;
+        try {
+            this.child.stdout?.removeAllListeners();
+            this.child.stderr?.removeAllListeners();
+            this.child.removeAllListeners();
+            this.child.kill("SIGTERM");
+        }
+        catch {
+            // ignore
+        }
+        this.child = undefined;
+    }
     stop() {
+        this.stopped = true;
+        if (this.reconnectTimer) {
+            clearTimeout(this.reconnectTimer);
+            this.reconnectTimer = undefined;
+        }
+        this.clearTunnelTimeout();
         if (this.child) {
             log.info("stopping tunnel");
-            this.child.kill("SIGTERM");
-            this.child = undefined;
+            this.killChild();
         }
         this.info = { provider: this.info.provider, status: "stopped" };
     }

package/packages/gateway/dist/managers/tunnel-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel-manager.js","sourceRoot":"","sources":["../../src/managers/tunnel-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAe,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AASnC;;;GAGG;AACH,MAAM,OAAO,aAAa;IAIK;IAHrB,KAAK,CAAgB;IACrB,IAAI,GAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAEnE,YAA6B,MAAoB;QAApB,WAAM,GAAN,MAAM,CAAc;IAAG,CAAC;IAErD,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,YAAY;QACZ,IAAI,MAAM,aAAa,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,CAAC,IAAI,GAAG;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,KAAK,EACH,kHAAkH;SACrH,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,gBAAgB,CAAC,IAAY;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACtG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAClE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBACtE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACrG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACtD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1F,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;oBAC9F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC;CACF"}
+{"version":3,"file":"tunnel-manager.js","sourceRoot":"","sources":["../../src/managers/tunnel-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAe,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;AASnC;;;GAGG;AACH,MAAM,OAAO,aAAa;IAUL;IACA;IAVX,KAAK,CAAgB;IACrB,IAAI,GAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC3D,SAAS,CAAkB;IACnC,0EAA0E;IAClE,OAAO,GAAG,KAAK,CAAC;IACxB,2DAA2D;IACnD,cAAc,CAAkB;IAExC,YACmB,MAAoB,EACpB,YAA+C;QAD/C,WAAM,GAAN,MAAM,CAAc;QACpB,iBAAY,GAAZ,YAAY,CAAmC;IAC/D,CAAC;IAEJ,OAAO;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QACjC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YACnC,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,YAAY;QACZ,IAAI,MAAM,aAAa,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,MAAM,aAAa,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAE9D,IAAI,CAAC,IAAI,GAAG;YACV,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,OAAO;YACf,KAAK,EACH,kHAAkH;SACrH,CAAC;QACF,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAEO,gBAAgB,CAAC,IAAY;QACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;YACjC,IAAI,IAAc,CAAC;YACnB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YAEnB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,mBAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACtG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAClE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBACtE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBACrG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YACvD,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;YACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;wBACf,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,WAAW,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;wBACpG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;wBAC9F,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,IAAY;QACzC,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,IAAI,EAAE,CAAC;YACZ,OAAO,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,gCAAgC,OAAO,KAAK,CAAC,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;gBAE5D,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,EAAE,CAAC;oBACtD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;oBACjC,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAAC;oBACnC,MAAM,iBAAiB,GAAG,WAAW,CAAC,KAAK,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC9E,MAAM,kBAAkB,GAAG,GAAG,CAAC,SAAS,CAAC;oBAEzC,IAAI,kBAAkB,IAAI,iBAAiB,IAAI,iBAAiB,KAAK,kBAAkB,EAAE,CAAC;wBACxF,iEAAiE;wBACjE,qEAAqE;wBACrE,qEAAqE;wBACrE,qEAAqE;wBACrE,mEAAmE;wBACnE,iEAAiE;wBACjE,GAAG,CAAC,IAAI,CACN,cAAc,kBAAkB,6BAA6B,iBAAiB,MAAM;4BAClF,+DAA+D,UAAU,GAAG,IAAI,MAAM,CACzF,CAAC;wBACF,IAAI,CAAC,IAAI,EAAE,CAAC;wBACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;4BAC5C,OAAO;gCACL,QAAQ,EAAE,aAAa;gCACvB,MAAM,EAAE,OAAO;gCACf,KAAK,EAAE,cAAc,kBAAkB,qCAAqC,aAAa,GAAG,IAAI,IAAI;6BACrG,CAAC;wBACJ,CAAC;wBACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;wBACpD,SAAS;oBACX,CAAC;oBAED,OAAO,UAAU,CAAC;gBACpB,CAAC;gBAED,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI,+BAA+B,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC;gBACzE,IAAI,CAAC,IAAI,EAAE,CAAC;gBACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,aAAa,EAAE,CAAC;oBAC5C,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,qCAAqC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;oBACpH,OAAO,IAAI,CAAC,IAAI,CAAC;gBACnB,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;YACjC,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;YACnB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAClC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBAC1E,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;oBACtE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC3E,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACnC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;wBAClB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,WAAW,GAAG,CAAC,SAAS,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;wBACrH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC;wBAC1G,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,MAAM,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CAAC,IAAY;QAC9B,4EAA4E;QAC5E,0EAA0E;QAC1E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACK,WAAW,CAAC,IAAY,EAAE,MAAkB;QAClD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,GAAG;YACX,IAAI;YACJ,GAAG,SAAS,gBAAgB,IAAI,EAAE;YAClC,IAAI;YACJ,0BAA0B;YAC1B,gEAAgE;YAChE,IAAI;YACJ,wBAAwB;YACxB,IAAI;YACJ,uBAAuB;YACvB,IAAI;YACJ,0BAA0B;YAC1B,YAAY;SACb,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,KAAK,GAAG,KAAK,CAAC;QAElB,MAAM,MAAM,GAAG,CAAC,GAAW,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAElC,mBAAmB;YACnB,IAAI,IAAI,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACnF,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;gBACtE,KAAK,GAAG,IAAI,CAAC;gBACb,IAAI,CAAC,IAAI,GAAG;oBACV,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,8GAA8G;iBACtH,CAAC;gBACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;gBACjB,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,qDAAqD;YACrD,qCAAqC;YACrC,IACE,GAAG,CAAC,SAAS;gBACb,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1C,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS;gBAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAC5B,CAAC;gBACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,qDAAqD,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1F,KAAK,GAAG,IAAI,CAAC;gBACb,IAAI,CAAC,IAAI,GAAG;oBACV,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,OAAO;oBACf,KAAK,EACH,mFAAmF,GAAG,CAAC,SAAS,KAAK;wBACrG,CAAC,UAAU;4BACT,CAAC,CAAC,QAAQ,UAAU,2DAA2D;4BAC/E,CAAC,CAAC,sGAAsG,CAAC;iBAC9G,CAAC;gBACF,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,MAAM,EAAE,CAAC;gBACT,OAAO;YACT,CAAC;YAED,uCAAuC;YACvC,8DAA8D;YAC9D,yCAAyC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACtE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACxE,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBACjE,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC1B,MAAM,EAAE,CAAC;YACX,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;YACtE,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,IAAI,CAAC,OAAO,IAAI,KAAK;gBAAE,OAAO;YAClC,uEAAuE;YACvE,+DAA+D;YAC/D,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;YACvD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACnE,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,IAAI,CAAC,IAAI,GAAG;wBACV,QAAQ,EAAE,QAAQ;wBAClB,GAAG,EAAE,GAAG,CAAC,SAAS,IAAI,WAAW,GAAG,CAAC,SAAS,wBAAwB;wBACtE,MAAM,EAAE,SAAS;qBAClB,CAAC;oBACF,MAAM,EAAE,CAAC;gBACX,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;oBAChG,MAAM,EAAE,CAAC;gBACX,CAAC;YACH,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAEO,kBAAkB;QACxB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC;YACxC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;IACzB,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC5B,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC;CACF"}

package/packages/gateway/dist/security/command-guard.d.ts

@@ -1,3 +1,4 @@
+import type { SecurityMode } from "@localant/shared";
 export declare class CommandRejectedError extends Error {
     constructor(message: string);
 }
@@ -16,7 +17,9 @@ export declare function parseCommand(input: string): ParsedCommand;
 export declare class CommandGuard {
     private allowedCommands;
     private blockedTokens;
+    private mode;
     constructor(allowedCommands: string[], blockedTokens: string[]);
+    setMode(mode: SecurityMode): void;
     setAllowed(commands: string[]): void;
     setBlocked(tokens: string[]): void;
     allowed(): string[];

package/packages/gateway/dist/security/command-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-guard.d.ts","sourceRoot":"","sources":["../../src/security/command-guard.ts"],"names":[],"mappings":"AAAA,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAWzD;AAQD,qBAAa,YAAY;IAErB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,aAAa;gBADb,eAAe,EAAE,MAAM,EAAE,EACzB,aAAa,EAAE,MAAM,EAAE;IAGjC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAGpC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAGlC,OAAO,IAAI,MAAM,EAAE;IAInB;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA0CpC,0FAA0F;IAC1F,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAaxC"}
+{"version":3,"file":"command-guard.d.ts","sourceRoot":"","sources":["../../src/security/command-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAWzD;AAQD,qBAAa,YAAY;IAMrB,OAAO,CAAC,eAAe;IACvB,OAAO,CAAC,aAAa;IAJvB,OAAO,CAAC,IAAI,CAA0B;gBAG5B,eAAe,EAAE,MAAM,EAAE,EACzB,aAAa,EAAE,MAAM,EAAE;IAGjC,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAIjC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI;IAGpC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAGlC,OAAO,IAAI,MAAM,EAAE;IAInB;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IA4CpC,0FAA0F;IAC1F,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAaxC"}

package/packages/gateway/dist/security/command-guard.js

@@ -30,10 +30,16 @@ function hasDangerousMetachars(input) {
 export class CommandGuard {
     allowedCommands;
     blockedTokens;
+    // Fail closed: a freshly constructed guard is strict until the gateway applies
+    // the configured mode. The product-level default (`open`) lives in the config.
+    mode = "strict";
     constructor(allowedCommands, blockedTokens) {
         this.allowedCommands = allowedCommands;
         this.blockedTokens = blockedTokens;
     }
+    setMode(mode) {
+        this.mode = mode;
+    }
     setAllowed(commands) {
         this.allowedCommands = commands;
     }
@@ -77,13 +83,15 @@ export class CommandGuard {
             throw new CommandRejectedError("Command rejected: 'chmod 777' is blocked.");
         }
         // Must match an allowlisted prefix.
-        const ok = this.allowedCommands.some((cmd) => {
-            const c = cmd.trim().replace(/\s+/g, " ").toLowerCase();
-            const n = normalized.toLowerCase();
-            return n === c || n.startsWith(c + " ");
-        });
-        if (!ok) {
-            throw new CommandRejectedError(`Command rejected: '${normalized}' is not in the allowed command list. Use shell_request_command_approval to request it.`);
+        if (this.mode === "strict") {
+            const ok = this.allowedCommands.some((cmd) => {
+                const c = cmd.trim().replace(/\s+/g, " ").toLowerCase();
+                const n = normalized.toLowerCase();
+                return n === c || n.startsWith(c + " ");
+            });
+            if (!ok) {
+                throw new CommandRejectedError(`Command rejected: '${normalized}' is not in the allowed command list. Use shell_request_command_approval to request it.`);
+            }
         }
         return normalized;
     }

package/packages/gateway/dist/security/command-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-guard.js","sourceRoot":"","sources":["../../src/security/command-guard.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AASD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,yDAAyD;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,KAAa;IAC1C,oEAAoE;IACpE,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,YAAY;IAEb;IACA;IAFV,YACU,eAAyB,EACzB,aAAuB;QADvB,oBAAe,GAAf,eAAe,CAAU;QACzB,kBAAa,GAAb,aAAa,CAAU;IAC9B,CAAC;IAEJ,UAAU,CAAC,QAAkB;QAC3B,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IACD,UAAU,CAAC,MAAgB;QACzB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IACD,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAElE,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAAC,+EAA+E,CAAC,CAAC;QAClH,CAAC;QAED,qEAAqE;QACrE,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAAC,wEAAwE,CAAC,CAAC;QAC3G,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,GAAG,yBAAyB,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QAC9E,CAAC;QAED,oCAAoC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YAC3C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;YACnC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,UAAU,yFAAyF,CAC1H,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0FAA0F;IAC1F,gBAAgB,CAAC,KAAa;QAC5B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,GAAG,6CAA6C,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,oBAAoB,CAAC,4DAA4D,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"command-guard.js","sourceRoot":"","sources":["../../src/security/command-guard.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AASD;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,yDAAyD;IACzD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,+EAA+E;AAC/E,SAAS,qBAAqB,CAAC,KAAa;IAC1C,oEAAoE;IACpE,OAAO,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,YAAY;IAMb;IACA;IANV,+EAA+E;IAC/E,+EAA+E;IACvE,IAAI,GAAiB,QAAQ,CAAC;IAEtC,YACU,eAAyB,EACzB,aAAuB;QADvB,oBAAe,GAAf,eAAe,CAAU;QACzB,kBAAa,GAAb,aAAa,CAAU;IAC9B,CAAC;IAEJ,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,UAAU,CAAC,QAAkB;QAC3B,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IACD,UAAU,CAAC,MAAgB;QACzB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;IAC9B,CAAC;IACD,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,KAAa;QACzB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAElE,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,oBAAoB,CAAC,+EAA+E,CAAC,CAAC;QAClH,CAAC;QAED,qEAAqE;QACrE,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAAC,wEAAwE,CAAC,CAAC;QAC3G,CAAC;QAED,2BAA2B;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,GAAG,yBAAyB,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;QACD,mEAAmE;QACnE,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,sDAAsD,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,oBAAoB,CAAC,qDAAqD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QAC9E,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC3C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBACxD,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,MAAM,IAAI,oBAAoB,CAC5B,sBAAsB,UAAU,yFAAyF,CAC1H,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,0FAA0F;IAC1F,gBAAgB,CAAC,KAAa;QAC5B,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,GAAG,6CAA6C,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,oBAAoB,CAAC,4DAA4D,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/packages/gateway/dist/security/path-guard.d.ts

@@ -1,3 +1,4 @@
+import { type SecurityMode } from "@localant/shared";
 export declare class PathAccessError extends Error {
     constructor(message: string);
 }
@@ -11,7 +12,9 @@ export declare class PathAccessError extends Error {
 export declare class PathGuard {
     private allowedDirs;
     private readonly blocklist;
+    private mode;
     constructor(allowedDirs: string[]);
+    setMode(mode: SecurityMode): void;
     setAllowedDirectories(dirs: string[]): void;
     allowed(): string[];
     private inBlocklist;

package/packages/gateway/dist/security/path-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path-guard.d.ts","sourceRoot":"","sources":["../../src/security/path-guard.ts"],"names":[],"mappings":"AAKA,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAkBD;;;;;;GAMG;AACH,qBAAa,SAAS;IAGR,OAAO,CAAC,WAAW;IAF/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;gBAEjB,WAAW,EAAE,MAAM,EAAE;IAIzC,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI;IAI3C,OAAO,IAAI,MAAM,EAAE;IAInB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;IAInB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM;CAwBhE"}
+{"version":3,"file":"path-guard.d.ts","sourceRoot":"","sources":["../../src/security/path-guard.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEzE,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAkBD;;;;;;GAMG;AACH,qBAAa,SAAS;IAMR,OAAO,CAAC,WAAW;IAL/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAW;IAGrC,OAAO,CAAC,IAAI,CAA0B;gBAElB,WAAW,EAAE,MAAM,EAAE;IAIzC,OAAO,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAIjC,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI;IAI3C,OAAO,IAAI,MAAM,EAAE;IAInB,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,WAAW;IAInB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IAmB3B;;;OAGG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM;CAwBhE"}

package/packages/gateway/dist/security/path-guard.js

@@ -33,10 +33,16 @@ function isWithin(parent, child) {
 export class PathGuard {
     allowedDirs;
     blocklist;
+    // Fail closed: a freshly constructed guard is strict until the gateway applies
+    // the configured mode. The product-level default (`open`) lives in the config.
+    mode = "strict";
     constructor(allowedDirs) {
         this.allowedDirs = allowedDirs;
         this.blocklist = sensitiveBlocklist().map(normalizeAbs);
     }
+    setMode(mode) {
+        this.mode = mode;
+    }
     setAllowedDirectories(dirs) {
         this.allowedDirs = dirs;
     }
@@ -83,7 +89,7 @@ export class PathGuard {
         if (this.inBlocklist(resolved)) {
             throw new PathAccessError(`Access denied: '${requested}' is in the sensitive blocklist.`);
         }
-        if (!this.inAllowlist(resolved)) {
+        if (this.mode === "strict" && !this.inAllowlist(resolved)) {
             throw new PathAccessError(`Access denied: '${requested}' is outside the allowed directories. Add it with fs_add_allowed_directory.`);
         }
         // Re-check after resolving symlinks on existing ancestors.
@@ -91,7 +97,7 @@ export class PathGuard {
         if (this.inBlocklist(real)) {
             throw new PathAccessError(`Access denied: '${requested}' resolves (via symlink) into a sensitive path.`);
         }
-        if (!this.inAllowlist(real)) {
+        if (this.mode === "strict" && !this.inAllowlist(real)) {
             throw new PathAccessError(`Access denied: '${requested}' resolves (via symlink) outside allowed directories.`);
         }
         void mode; // mode-specific policy is enforced by callers / permission engine.

package/packages/gateway/dist/security/path-guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"path-guard.js","sourceRoot":"","sources":["../../src/security/path-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IAGA;IAFH,SAAS,CAAW;IAErC,YAAoB,WAAqB;QAArB,gBAAW,GAAX,WAAW,CAAU;QACvC,IAAI,CAAC,SAAS,GAAG,kBAAkB,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,qBAAqB,CAAC,IAAc;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,QAAgB;QAC1C,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,oDAAoD;QACpD,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM;YAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,SAAiB,EAAE,IAAsB;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,kCAAkC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,eAAe,CACvB,mBAAmB,SAAS,6EAA6E,CAC1G,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,iDAAiD,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,uDAAuD,CAAC,CAAC;QACjH,CAAC;QAED,KAAK,IAAI,CAAC,CAAC,mEAAmE;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}
+{"version":3,"file":"path-guard.js","sourceRoot":"","sources":["../../src/security/path-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAqB,MAAM,kBAAkB,CAAC;AAEzE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC,OAAO,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,MAAc,EAAE,KAAa;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAS;IAMA;IALH,SAAS,CAAW;IACrC,+EAA+E;IAC/E,+EAA+E;IACvE,IAAI,GAAiB,QAAQ,CAAC;IAEtC,YAAoB,WAAqB;QAArB,gBAAW,GAAX,WAAW,CAAU;QACvC,IAAI,CAAC,SAAS,GAAG,kBAAkB,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,IAAkB;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,IAAc;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,WAAW,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;;;OAIG;IACK,mBAAmB,CAAC,QAAgB;QAC1C,IAAI,OAAO,GAAG,QAAQ,CAAC;QACvB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,oDAAoD;QACpD,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,OAAO;gBAAE,MAAM;YAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YACrC,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QACD,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,SAAiB,EAAE,IAAsB;QACpD,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAEzC,IAAI,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,kCAAkC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,eAAe,CACvB,mBAAmB,SAAS,6EAA6E,CAC1G,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,iDAAiD,CAAC,CAAC;QAC3G,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,eAAe,CAAC,mBAAmB,SAAS,uDAAuD,CAAC,CAAC;QACjH,CAAC;QAED,KAAK,IAAI,CAAC,CAAC,mEAAmE;QAC9E,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/packages/gateway/dist/stores/config-store.d.ts

@@ -2,6 +2,8 @@ import { type Config, type AppPaths } from "@localant/shared";
 /** Loads, persists and initializes on-disk configuration and identity files. */
 export declare class ConfigStore {
     readonly paths: AppPaths;
+    /** True only when using the real default location (not an explicit test base). */
+    private readonly isDefaultLocation;
     constructor(base?: string);
     /** Create config dir tree and default files if missing. Idempotent. */
     ensureInitialized(): void;
@@ -10,5 +12,13 @@ export declare class ConfigStore {
     /** Immutably merge a partial patch into config and persist. */
     update(patch: Partial<Config>): Config;
     getToken(): string;
+    /** Read the dedicated vault key (base64). Independent of the auth token. */
+    getVaultKey(): Buffer;
+    /**
+     * Generate a fresh auth token and persist it. Returns the new token. Because
+     * the vault key is stored separately, rotating the token does NOT invalidate
+     * stored secrets.
+     */
+    rotateToken(): string;
 }
 //# sourceMappingURL=config-store.d.ts.map

package/packages/gateway/dist/stores/config-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/stores/config-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,MAAM,EAA2B,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAErG,gFAAgF;AAChF,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAEb,IAAI,CAAC,EAAE,MAAM;IAIzB,uEAAuE;IACvE,iBAAiB,IAAI,IAAI;IAuBzB,IAAI,IAAI,MAAM;IASd,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAM5B,+DAA+D;IAC/D,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAKtC,QAAQ,IAAI,MAAM;CAGnB"}
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/stores/config-store.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,MAAM,EAAmD,KAAK,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE7H,gFAAgF;AAChF,qBAAa,WAAW;IACtB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,kFAAkF;IAClF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAU;gBAEhC,IAAI,CAAC,EAAE,MAAM;IAKzB,uEAAuE;IACvE,iBAAiB,IAAI,IAAI;IAqCzB,IAAI,IAAI,MAAM;IAwBd,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAM5B,+DAA+D;IAC/D,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM;IAKtC,QAAQ,IAAI,MAAM;IAIlB,4EAA4E;IAC5E,WAAW,IAAI,MAAM;IAIrB;;;;OAIG;IACH,WAAW,IAAI,MAAM;CAKtB"}