mindwire 0.1.24 → 0.1.26

package/dist/controller-CGSJZZZD.js

@@ -0,0 +1,496 @@
+import { readJSON, processStateAlive, currentProcessIdentity, ensureDaemonBinary, SDK_VERSION, computerClient, processIdentity, adoptProcess, writeJSON, directRoutes, ownChild } from './chunk-L3USUTZZ.js';
+import { binaryCacheDirectory, cachedExecutable, verifyReleaseBytes, cacheExecutable, executableChecksum } from './chunk-3FR7BFAW.js';
+import './chunk-T6TD76UA.js';
+import { execFile, execFileSync, spawn } from 'child_process';
+import { randomBytes } from 'crypto';
+import * as fs from 'fs/promises';
+import { readFile, mkdtemp, writeFile, rm } from 'fs/promises';
+import * as path2 from 'path';
+import { setTimeout as setTimeout$1 } from 'timers/promises';
+import { tmpdir } from 'os';
+import { promisify } from 'util';
+
+var CLOUDFLARED_VERSION = "2026.9.3";
+var execute = promisify(execFile);
+async function ensureCloudflareBinary(options = {}) {
+  const platform = options.platform ?? process.platform, arch = options.arch ?? process.arch;
+  const cpu = arch === "x64" ? "amd64" : arch === "arm64" ? "arm64" : "";
+  if (!cpu || !["darwin", "linux", "win32"].includes(platform) || platform === "win32" && cpu !== "amd64") {
+    throw new Error("Install cloudflared for this computer, or select another connection provider.");
+  }
+  const asset = `cloudflared-${platform === "win32" ? "windows" : platform}-${cpu}${platform === "darwin" ? ".tgz" : platform === "win32" ? ".exe" : ""}`;
+  const bin = path2.join(
+    options.cacheDir ?? await binaryCacheDirectory(),
+    "cloudflared",
+    CLOUDFLARED_VERSION,
+    `${platform}-${arch}`,
+    platform === "win32" ? "cloudflared.exe" : "cloudflared"
+  );
+  const cached = await cachedExecutable(bin);
+  if (cached) return cached;
+  await options.onProgress?.("Downloading the secure connection helper\u2026");
+  const request = options.fetch ?? fetch;
+  const release = await request(
+    `https://api.github.com/repos/cloudflare/cloudflared/releases/tags/${CLOUDFLARED_VERSION}`,
+    { headers: { Accept: "application/vnd.github+json" }, signal: AbortSignal.timeout(2e4) }
+  );
+  if (!release.ok) throw new Error("Couldn't download the connection helper. Retry, install cloudflared yourself, or choose another provider.");
+  const metadata = await release.json();
+  const item = metadata.assets?.find((value) => value.name === asset);
+  const checksum = item?.digest?.match(/^sha256:([a-f0-9]{64})$/i)?.[1];
+  const expectedURL = `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/${asset}`;
+  if (!checksum || item?.browser_download_url !== expectedURL) throw new Error("The connection helper has no verified release asset for this computer.");
+  const downloaded = await request(expectedURL, { signal: AbortSignal.timeout(12e4) });
+  if (!downloaded.ok) throw new Error("Couldn't download the connection helper. Check your internet connection and retry.");
+  const archive = new Uint8Array(await downloaded.arrayBuffer());
+  await verifyReleaseBytes(archive, checksum, asset);
+  let executable = archive;
+  if (platform === "darwin") {
+    const temporary = await mkdtemp(path2.join(tmpdir(), "mindwire-cloudflared-"));
+    try {
+      const archivePath = path2.join(temporary, asset);
+      await writeFile(archivePath, archive, { mode: 384 });
+      const result = await execute(
+        "/usr/bin/tar",
+        ["-xzOf", archivePath, "cloudflared"],
+        { encoding: "buffer", maxBuffer: 128 * 1024 * 1024, timeout: 3e4 }
+      );
+      executable = new Uint8Array(result.stdout);
+    } finally {
+      await rm(temporary, { recursive: true, force: true });
+    }
+  }
+  return cacheExecutable(bin, executable, await executableChecksum(executable));
+}
+async function cloudflareCommand(options) {
+  try {
+    await execute("cloudflared", ["--version"], { timeout: 3e3, windowsHide: true });
+    return "cloudflared";
+  } catch (error) {
+    if (error.code !== "ENOENT") throw new Error("The installed cloudflared could not start. Repair it or choose another connection provider.");
+    return ensureCloudflareBinary(options);
+  }
+}
+
+// src/computer/relay.ts
+function websocketURL(value) {
+  const url = new URL(value);
+  if (url.protocol === "https:") url.protocol = "wss:";
+  if (url.protocol !== "wss:" || !url.hostname || url.username || url.password || url.hash) {
+    throw new Error("Relay URLs must use wss:// with no embedded credentials or fragment.");
+  }
+  if (!url.pathname || url.pathname === "/") url.pathname = "/ssh";
+  return url.toString();
+}
+async function startRelay(options, port, runtime = {}) {
+  runtime.signal?.throwIfAborted();
+  if (options.kind === "none") return { close() {
+  } };
+  if (options.kind === "custom") {
+    if (!options.url) throw new Error("A custom relay needs --relay-url wss://your-host/ssh.");
+    return { route: { kind: "websocket", url: websocketURL(options.url) }, close() {
+    } };
+  }
+  const origin = `http://127.0.0.1:${port}`;
+  const env = { ...process.env };
+  let command, args;
+  if (options.kind === "cloudflare") {
+    command = await cloudflareCommand(runtime);
+    await runtime.onProgress?.("Connecting through Cloudflare\u2026");
+    if (options.cloudflareTokenFile) {
+      if (!options.url) throw new Error("A named Cloudflare tunnel needs --relay-url for its configured hostname.");
+      env.TUNNEL_TOKEN = (await readFile(options.cloudflareTokenFile, "utf8")).trim();
+      args = ["tunnel", "--no-autoupdate", "run"];
+    } else {
+      if (options.url) throw new Error("Use --cloudflare-token-file with a named tunnel, or --relay custom for an existing tunnel.");
+      args = ["tunnel", "--no-autoupdate", "--url", origin];
+    }
+  } else {
+    command = "ngrok";
+    args = ["http", origin, "--log", "stdout", "--log-format", "json"];
+    if (options.url) {
+      const url = new URL(websocketURL(options.url));
+      args.push("--url", `https://${url.host}`);
+    }
+  }
+  runtime.signal?.throwIfAborted();
+  const child = spawn(command, args, { env, stdio: ["ignore", "pipe", "pipe"], windowsHide: true });
+  let buffer = "";
+  try {
+    const address = new Promise((resolve2, reject) => {
+      const timer = setTimeout(() => {
+        cleanup();
+        reject(new Error(`${command} did not establish its tunnel. Check its account and tunnel configuration.`));
+      }, 45e3);
+      const cleanup = () => {
+        clearTimeout(timer);
+        child.off("error", fail);
+        child.off("exit", exited);
+        runtime.signal?.removeEventListener("abort", aborted);
+      };
+      const fail = (error) => {
+        cleanup();
+        reject(new Error(`Could not run ${command}. Install it on the computer first.`, { cause: error }));
+      };
+      const exited = () => {
+        cleanup();
+        reject(new Error(`${command} exited before the tunnel connected. Check its account configuration.`));
+      };
+      const aborted = () => {
+        cleanup();
+        child.kill();
+        reject(runtime.signal?.reason ?? new Error("Tunnel startup cancelled."));
+      };
+      let cloudflareAddress = options.url;
+      let cloudflareConnected = false;
+      const receive = (chunk) => {
+        const received = buffer + chunk.toString();
+        buffer = received.slice(-16384);
+        let found;
+        if (options.kind === "cloudflare") {
+          cloudflareAddress ??= received.match(/https:\/\/[a-z0-9-]+\.trycloudflare\.com/)?.[0];
+          cloudflareConnected ||= /Registered tunnel connection/.test(received);
+          if (cloudflareConnected) found = cloudflareAddress;
+        } else {
+          for (const line of received.split(/\r?\n/)) {
+            try {
+              const event = JSON.parse(line);
+              if (event.msg === "started tunnel" && event.url?.startsWith("https://")) found = event.url;
+            } catch {
+            }
+          }
+        }
+        if (found) {
+          cleanup();
+          resolve2(websocketURL(found));
+        }
+      };
+      child.once("error", fail);
+      child.once("exit", exited);
+      child.stdout.on("data", receive);
+      child.stderr.on("data", receive);
+      runtime.signal?.addEventListener("abort", aborted, { once: true });
+      if (runtime.signal?.aborted) aborted();
+    });
+    void address.catch(() => {
+    });
+    const owner = await ownChild(child);
+    await runtime.onSpawn?.(owner);
+    const url = await address;
+    runtime.signal?.throwIfAborted();
+    child.stdout.removeAllListeners("data");
+    child.stderr.removeAllListeners("data");
+    child.stdout.resume();
+    child.stderr.resume();
+    child.on("error", () => {
+    });
+    return { route: { kind: "websocket", url }, process: child, owner, close: () => owner.close() };
+  } catch (error) {
+    child.on("error", () => {
+    });
+    if (child.pid) await (await ownChild(child)).close();
+    throw error;
+  }
+}
+
+// src/computer/controller.ts
+function recoveryDelay(failures) {
+  return Math.min(6e4, 1e3 * 2 ** Math.min(6, Math.max(0, failures - 1)));
+}
+async function superviseComputer(directory) {
+  if ((await readJSON(path2.join(directory, "computer-stopped.json")))?.stopped) return;
+  let config = await readJSON(path2.join(directory, "computer-config.json"));
+  if (!config) throw new Error("Computer configuration is missing.");
+  const controllerPath = path2.join(directory, "computer-controller.json");
+  const relayPath = path2.join(directory, "computer-relay.json");
+  const previous = await readJSON(controllerPath);
+  if (await processStateAlive(previous)) throw new Error("The computer already has a service controller.");
+  const owner = await currentProcessIdentity();
+  const phase = (message) => writeJSON(controllerPath, { ...owner, ready: false, phase: message, recovering: true });
+  await phase("Preparing Mindwire\u2026");
+  let child, relay, stopping = false;
+  let relayTask, updateTask;
+  let relayResult;
+  const abort = new AbortController();
+  const stop = () => {
+    stopping = true;
+    abort.abort();
+  };
+  process.on("SIGTERM", stop);
+  process.on("SIGINT", stop);
+  let token;
+  try {
+    token = (await fs.readFile(path2.join(directory, "daemon.token"), "utf8")).trim();
+  } catch (error) {
+    if (error.code !== "ENOENT") throw error;
+    token = randomBytes(32).toString("hex");
+    await fs.writeFile(path2.join(directory, "daemon.token"), token, { mode: 384, flag: "wx" });
+  }
+  const daemonEnv = { ...process.env };
+  if (process.platform === "win32") {
+    try {
+      const git = execFileSync("where.exe", ["git"], { encoding: "utf8", timeout: 3e3, windowsHide: true }).split(/\r?\n/)[0];
+      if (git) {
+        const shellDirectory = path2.resolve(path2.dirname(git), "..", "bin");
+        await fs.access(path2.join(shellDirectory, "bash.exe"));
+        const pathKey = Object.keys(daemonEnv).find((key) => key.toLowerCase() === "path") ?? "PATH";
+        daemonEnv[pathKey] = `${shellDirectory}${path2.delimiter}${daemonEnv[pathKey] ?? ""}`;
+      }
+    } catch {
+    }
+  }
+  const oldRuntime = await readJSON(path2.join(directory, "computer-runtime.json"));
+  let sshPort = config.sshPort || oldRuntime?.sshPort || 0;
+  let websocketPort = config.websocketPort || oldRuntime?.websocketPort || 0;
+  const launch = async (binary) => {
+    await fs.rm(path2.join(directory, "computer-runtime.json"), { force: true });
+    const process2 = spawn(binary, ["--computer"], {
+      cwd: config.directory,
+      stdio: ["ignore", "inherit", "inherit"],
+      windowsHide: true,
+      env: {
+        ...daemonEnv,
+        DAEMON_TOKEN: token,
+        ADDR: "127.0.0.1:0",
+        STATE_PATH: path2.join(directory, "agent-state.json"),
+        WORKSPACE_DB_PATH: path2.join(directory, "workspace.db"),
+        AGENT_CWD: config.directory,
+        COMPUTER_SSH_ADDR: `${config.bind.includes(":") ? `[${config.bind}]` : config.bind}:${sshPort}`,
+        COMPUTER_WS_ADDR: `127.0.0.1:${websocketPort}`,
+        MINDWIRE_COMPUTER_MANAGED: "1"
+      }
+    });
+    let failure;
+    process2.on("error", (error) => {
+      failure = error;
+    });
+    await new Promise((resolve2, reject) => {
+      process2.once("spawn", resolve2);
+      process2.once("error", reject);
+    });
+    child = await ownChild(process2);
+    for (let attempt = 0; attempt < 100; attempt++) {
+      if (stopping) throw new Error("Mindwire is stopping.");
+      if (failure) throw failure;
+      if (!child.alive()) throw new Error("Mindwire exited during startup. Check computer.log and the installed release.");
+      try {
+        const client2 = await computerClient(directory);
+        const info = await client2.computer.info();
+        if (info.pid !== child.pid) throw new Error("Another service owns this computer's state.");
+        const health = await client2.health();
+        if (health.computerConnectionVersion !== 1) throw new Error("Update Mindwire to a release that supports computer connections.");
+        sshPort = info.sshPort;
+        websocketPort = info.websocketPort;
+        return client2;
+      } catch (error) {
+        if (attempt === 99) throw error;
+      }
+      await setTimeout$1(100);
+    }
+    throw new Error("Mindwire startup timed out.");
+  };
+  let routes = [], published = "";
+  let client;
+  let relayMessage = "Preparing your internet connection\u2026", relayError;
+  let daemonError, nextDaemonAt = 0, daemonFailures = 0;
+  let nextRelayAt = 0, relayFailures = 0, changingDaemon = false;
+  let daemonReadyAt = Date.now(), relayReadyAt = Date.now();
+  try {
+    await phase("Checking the Mindwire service\u2026");
+    let binary = config.daemonBin ?? await ensureDaemonBinary({ version: config.version ?? SDK_VERSION, cacheDir: process.env.MINDWIRE_RELEASE_CACHE_DIR });
+    try {
+      client = await computerClient(directory);
+    } catch {
+    }
+    if (client) {
+      const info = await client.computer.info();
+      const identity = await processIdentity(info.pid);
+      child = identity ? await adoptProcess(identity) : void 0;
+      if (!child) throw new Error("Couldn't verify the existing Mindwire process. Leave it running and retry.");
+      sshPort = info.sshPort;
+      websocketPort = info.websocketPort;
+    } else {
+      await phase("Starting the Mindwire service\u2026");
+      client = await launch(binary);
+    }
+    const saved = await readJSON(relayPath);
+    if (saved) {
+      const owner2 = await adoptProcess(saved.owner);
+      if (owner2) {
+        if (saved.route && saved.port === websocketPort && saved.options === JSON.stringify(config.relay)) {
+          relay = { route: saved.route, owner: owner2, close: () => owner2.close() };
+        } else {
+          await owner2.close();
+        }
+      }
+    }
+    let lastController = "";
+    while (!stopping) {
+      if (!changingDaemon && child && !child.alive()) {
+        child = void 0;
+        client = void 0;
+        daemonError = "The service stopped. Restarting it\u2026";
+        nextDaemonAt = Date.now() + recoveryDelay(++daemonFailures);
+      }
+      if (child?.alive() && Date.now() - daemonReadyAt > 6e4) daemonFailures = 0;
+      if (relay?.owner?.alive() && Date.now() - relayReadyAt > 6e4) relayFailures = 0;
+      if (!changingDaemon && !child?.alive() && Date.now() >= nextDaemonAt) {
+        daemonError = "The service stopped. Restarting it\u2026";
+        await phase(daemonError);
+        try {
+          client = await launch(binary);
+          published = "";
+          daemonError = void 0;
+          daemonReadyAt = Date.now();
+        } catch (error) {
+          if (child) await child.close();
+          child = void 0;
+          client = void 0;
+          daemonError = error instanceof Error ? error.message : "Service restart failed.";
+          nextDaemonAt = Date.now() + recoveryDelay(++daemonFailures);
+        }
+      }
+      if (relay?.owner && !relay.owner.alive()) {
+        relay = void 0;
+        relayError = "The internet tunnel disconnected. Reconnecting\u2026";
+        nextRelayAt = Date.now() + recoveryDelay(++relayFailures);
+      }
+      if (relayResult) {
+        const result = relayResult;
+        relayResult = void 0;
+        relayTask = void 0;
+        if (result.handle) {
+          relay = result.handle;
+          relayError = void 0;
+          relayReadyAt = Date.now();
+          if (relay.owner?.identity) await writeJSON(relayPath, {
+            owner: relay.owner.identity,
+            port: websocketPort,
+            options: JSON.stringify(config.relay),
+            route: relay.route
+          });
+        } else {
+          relayError = result.error instanceof Error ? result.error.message : "The internet tunnel couldn't connect.";
+          nextRelayAt = Date.now() + recoveryDelay(++relayFailures);
+        }
+      }
+      if (!relay && !relayTask && Date.now() >= nextRelayAt) {
+        relayMessage = "Reconnecting your internet tunnel\u2026";
+        relayTask = startRelay(config.relay, websocketPort, {
+          cacheDir: path2.join(directory, "tools"),
+          signal: abort.signal,
+          onProgress: (message) => {
+            relayMessage = message;
+          },
+          onSpawn: async (owner2) => {
+            if (owner2.identity) await writeJSON(relayPath, {
+              owner: owner2.identity,
+              port: websocketPort,
+              options: JSON.stringify(config.relay)
+            });
+          }
+        }).then((handle) => {
+          relayResult = { handle };
+        }, (error) => {
+          relayResult = { error };
+        });
+      }
+      routes = directRoutes(config, sshPort);
+      if (relay?.route) routes.push(relay.route);
+      const routeJSON = JSON.stringify(routes);
+      if (!changingDaemon && client && child?.alive() && routeJSON !== published) {
+        try {
+          await client.computer.setRoutes(routes);
+          published = routeJSON;
+        } catch {
+        }
+      }
+      const ready = !!client && !!child?.alive() && !changingDaemon && routes.length > 0 && published === routeJSON && (config.relay.kind === "none" || !!relay?.route);
+      const state = {
+        ...owner,
+        ready,
+        routes,
+        phase: ready ? void 0 : daemonError ?? relayMessage,
+        error: daemonError ?? relayError,
+        recovering: !ready
+      };
+      const serialized = JSON.stringify(state);
+      if (serialized !== lastController) {
+        await writeJSON(controllerPath, state);
+        lastController = serialized;
+      }
+      const updatePath = path2.join(directory, "computer-update.json");
+      const update = !updateTask && client && child?.alive() ? await readJSON(updatePath) : void 0;
+      if (update && ["queued", "downloading", "waiting", "restarting"].includes(update.status)) {
+        updateTask = (async () => {
+          const status = async (state2, error) => writeJSON(
+            updatePath,
+            { ...update, status: state2, error, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }
+          );
+          try {
+            await status("downloading");
+            const replacement = await ensureDaemonBinary({ version: update.version, cacheDir: process.env.MINDWIRE_RELEASE_CACHE_DIR });
+            await status("waiting");
+            let lease;
+            while (!stopping && !lease) {
+              try {
+                lease = await client.service.acquireUpdate();
+              } catch (error) {
+                if (error.status !== 409) throw error;
+                await setTimeout$1(2e3);
+              }
+            }
+            if (stopping || !lease) return;
+            if (lease.pid !== child?.pid) {
+              await client.service.releaseUpdate(lease.id);
+              throw new Error("The leased service process changed.");
+            }
+            changingDaemon = true;
+            await status("restarting");
+            await child.close();
+            try {
+              client = await launch(replacement);
+              const health = await client.health();
+              if (health.version.replace(/^v/, "") !== update.version) throw new Error("The replacement service reports a different release version.");
+            } catch (error) {
+              if (child) await child.close();
+              if (!stopping) client = await launch(binary);
+              throw error;
+            }
+            binary = replacement;
+            config = { ...config, daemonBin: void 0, version: update.version };
+            await writeJSON(path2.join(directory, "computer-config.json"), config);
+            await client.computer.setRoutes(routes);
+            published = JSON.stringify(routes);
+            await status("complete");
+          } catch (error) {
+            await status("failed", error instanceof Error ? error.message : "Service update failed.");
+          } finally {
+            changingDaemon = false;
+            published = "";
+          }
+        })().finally(() => {
+          updateTask = void 0;
+        });
+      }
+      await setTimeout$1(500);
+    }
+  } catch (error) {
+    await writeJSON(controllerPath, { ...owner, ready: false, error: error instanceof Error ? error.message : "Computer service failed." });
+    throw error;
+  } finally {
+    abort.abort();
+    await relayTask;
+    await updateTask;
+    if (relayResult?.handle && relayResult.handle !== relay) await relayResult.handle.close();
+    await relay?.close();
+    if (child) await child.close();
+    process.off("SIGTERM", stop);
+    process.off("SIGINT", stop);
+    if (stopping) await writeJSON(controllerPath, { pid: 0, ready: false });
+  }
+}
+
+export { recoveryDelay, superviseComputer };
+//# sourceMappingURL=controller-CGSJZZZD.js.map
+//# sourceMappingURL=controller-CGSJZZZD.js.map

package/dist/controller-CGSJZZZD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/computer/cloudflare-binary.ts","../src/computer/relay.ts","../src/computer/controller.ts"],"names":["path","resolve","process","spawn","client","delay","owner","state"],"mappings":";;;;;;;;;;;;AASO,IAAM,mBAAA,GAAsB,UAAA;AACnC,IAAM,OAAA,GAAU,UAAU,QAAQ,CAAA;AAElC,eAAsB,sBAAA,CAAuB,OAAA,GAGzC,EAAC,EAAoB;AACvB,EAAA,MAAM,QAAA,GAAW,QAAQ,QAAA,IAAY,OAAA,CAAQ,UAAU,IAAA,GAAO,OAAA,CAAQ,QAAQ,OAAA,CAAQ,IAAA;AACtF,EAAA,MAAM,MAAM,IAAA,KAAS,KAAA,GAAQ,OAAA,GAAU,IAAA,KAAS,UAAU,OAAA,GAAU,EAAA;AACpE,EAAA,IAAI,CAAC,GAAA,IAAO,CAAC,CAAC,UAAU,OAAA,EAAS,OAAO,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,IAAK,QAAA,KAAa,OAAA,IAAW,QAAQ,OAAA,EAAS;AACvG,IAAA,MAAM,IAAI,MAAM,+EAA+E,CAAA;AAAA,EACjG;AACA,EAAA,MAAM,KAAA,GAAQ,CAAA,YAAA,EAAe,QAAA,KAAa,OAAA,GAAU,YAAY,QAAQ,CAAA,CAAA,EAAI,GAAG,CAAA,EAAG,aAAa,QAAA,GAAW,MAAA,GAAS,QAAA,KAAa,OAAA,GAAU,SAAS,EAAE,CAAA,CAAA;AACrJ,EAAA,MAAM,GAAA,GAAWA,KAAA,CAAA,IAAA;AAAA,IAAK,OAAA,CAAQ,QAAA,IAAY,MAAM,oBAAA,EAAqB;AAAA,IAAG,aAAA;AAAA,IAAe,mBAAA;AAAA,IACrF,CAAA,EAAG,QAAQ,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA;AAAA,IAAI,QAAA,KAAa,UAAU,iBAAA,GAAoB;AAAA,GAAa;AACjF,EAAA,MAAM,MAAA,GAAS,MAAM,gBAAA,CAAiB,GAAG,CAAA;AACzC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,OAAA,CAAQ,aAAa,gDAA2C,CAAA;AACtE,EAAA,MAAM,OAAA,GAAU,QAAQ,KAAA,IAAS,KAAA;AACjC,EAAA,MAAM,UAAU,MAAM,OAAA;AAAA,IAAQ,qEAAqE,mBAAmB,CAAA,CAAA;AAAA,IACpH,EAAE,OAAA,EAAS,EAAE,MAAA,EAAQ,6BAAA,IAAiC,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAM,CAAA;AAAE,GAAC;AAC7F,EAAA,IAAI,CAAC,OAAA,CAAQ,EAAA,EAAI,MAAM,IAAI,MAAM,2GAA2G,CAAA;AAC5I,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,IAAA,EAAK;AACpC,EAAA,MAAM,OAAO,QAAA,CAAS,MAAA,EAAQ,KAAK,CAAA,KAAA,KAAS,KAAA,CAAM,SAAS,KAAK,CAAA;AAChE,EAAA,MAAM,WAAW,IAAA,EAAM,MAAA,EAAQ,KAAA,CAAM,0BAA0B,IAAI,CAAC,CAAA;AACpE,EAAA,MAAM,WAAA,GAAc,CAAA,4DAAA,EAA+D,mBAAmB,CAAA,CAAA,EAAI,KAAK,CAAA,CAAA;AAC/G,EAAA,IAAI,CAAC,YAAY,IAAA,EAAM,oBAAA,KAAyB,aAAa,MAAM,IAAI,MAAM,wEAAwE,CAAA;AACrJ,EAAA,MAAM,UAAA,GAAa,MAAM,OAAA,CAAQ,WAAA,EAAa,EAAE,QAAQ,WAAA,CAAY,OAAA,CAAQ,IAAO,CAAA,EAAG,CAAA;AACtF,EAAA,IAAI,CAAC,UAAA,CAAW,EAAA,EAAI,MAAM,IAAI,MAAM,oFAAoF,CAAA;AACxH,EAAA,MAAM,UAAU,IAAI,UAAA,CAAW,MAAM,UAAA,CAAW,aAAa,CAAA;AAC7D,EAAA,MAAM,kBAAA,CAAmB,OAAA,EAAS,QAAA,EAAU,KAAK,CAAA;AACjD,EAAA,IAAI,UAAA,GAAa,OAAA;AACjB,EAAA,IAAI,aAAa,QAAA,EAAU;AACzB,IAAA,MAAM,YAAY,MAAM,OAAA,CAAaA,WAAK,MAAA,EAAO,EAAG,uBAAuB,CAAC,CAAA;AAC5E,IAAA,IAAI;AACF,MAAA,MAAM,WAAA,GAAmBA,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AAC9C,MAAA,MAAM,UAAU,WAAA,EAAa,OAAA,EAAS,EAAE,IAAA,EAAM,KAAO,CAAA;AAGrD,MAAA,MAAM,SAAS,MAAM,OAAA;AAAA,QAAQ,cAAA;AAAA,QAAgB,CAAC,OAAA,EAAS,WAAA,EAAa,aAAa,CAAA;AAAA,QAC/E,EAAE,UAAU,QAAA,EAAU,SAAA,EAAW,MAAM,IAAA,GAAO,IAAA,EAAM,SAAS,GAAA;AAAO,OAAC;AACvE,MAAA,UAAA,GAAa,IAAI,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA;AAAA,IAC3C,CAAA,SAAE;AAAU,MAAA,MAAM,GAAG,SAAA,EAAW,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,IAAG;AAAA,EACrE;AACA,EAAA,OAAO,gBAAgB,GAAA,EAAK,UAAA,EAAY,MAAM,kBAAA,CAAmB,UAAU,CAAC,CAAA;AAC9E;AAEA,eAAsB,kBAAkB,OAAA,EAAwE;AAC9G,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,CAAQ,aAAA,EAAe,CAAC,WAAW,CAAA,EAAG,EAAE,OAAA,EAAS,GAAA,EAAM,WAAA,EAAa,IAAA,EAAM,CAAA;AAChF,IAAA,OAAO,aAAA;AAAA,EACT,SAAS,KAAA,EAAO;AACd,IAAA,IAAK,MAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,IAAI,MAAM,6FAA6F,CAAA;AACrK,IAAA,OAAO,uBAAuB,OAAO,CAAA;AAAA,EACvC;AACF;;;AClDO,SAAS,aAAa,KAAA,EAAuB;AAClD,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,KAAK,CAAA;AACzB,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,QAAA,EAAU,GAAA,CAAI,QAAA,GAAW,MAAA;AAC9C,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,MAAA,IAAU,CAAC,GAAA,CAAI,QAAA,IAAY,GAAA,CAAI,QAAA,IAAY,GAAA,CAAI,QAAA,IAAY,GAAA,CAAI,IAAA,EAAM;AACxF,IAAA,MAAM,IAAI,MAAM,sEAAsE,CAAA;AAAA,EACxF;AACA,EAAA,IAAI,CAAC,GAAA,CAAI,QAAA,IAAY,IAAI,QAAA,KAAa,GAAA,MAAS,QAAA,GAAW,MAAA;AAC1D,EAAA,OAAO,IAAI,QAAA,EAAS;AACtB;AAGA,eAAsB,UAAA,CAAW,OAAA,EAAuB,IAAA,EAAc,OAAA,GAGlE,EAAC,EAAyB;AAC5B,EAAA,OAAA,CAAQ,QAAQ,cAAA,EAAe;AAC/B,EAAA,IAAI,OAAA,CAAQ,IAAA,KAAS,MAAA,EAAQ,OAAO,EAAE,KAAA,GAAQ;AAAA,EAAC,CAAA,EAAE;AACjD,EAAA,IAAI,OAAA,CAAQ,SAAS,QAAA,EAAU;AAC7B,IAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,EAAK,MAAM,IAAI,MAAM,uDAAuD,CAAA;AACzF,IAAA,OAAO,EAAE,KAAA,EAAO,EAAE,IAAA,EAAM,WAAA,EAAa,GAAA,EAAK,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAA,EAAE,EAAG,KAAA,GAAQ;AAAA,IAAC,CAAA,EAAE;AAAA,EACpF;AACA,EAAA,MAAM,MAAA,GAAS,oBAAoB,IAAI,CAAA,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAI;AAC7B,EAAA,IAAI,OAAA,EAAiB,IAAA;AACrB,EAAA,IAAI,OAAA,CAAQ,SAAS,YAAA,EAAc;AACjC,IAAA,OAAA,GAAU,MAAM,kBAAkB,OAAO,CAAA;AACzC,IAAA,MAAM,OAAA,CAAQ,aAAa,qCAAgC,CAAA;AAC3D,IAAA,IAAI,QAAQ,mBAAA,EAAqB;AAC/B,MAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,EAAK,MAAM,IAAI,MAAM,0EAA0E,CAAA;AAC5G,MAAA,GAAA,CAAI,gBAAgB,MAAM,QAAA,CAAS,QAAQ,mBAAA,EAAqB,MAAM,GAAG,IAAA,EAAK;AAC9E,MAAA,IAAA,GAAO,CAAC,QAAA,EAAU,iBAAA,EAAmB,KAAK,CAAA;AAAA,IAC5C,CAAA,MAAO;AACL,MAAA,IAAI,OAAA,CAAQ,GAAA,EAAK,MAAM,IAAI,MAAM,4FAA4F,CAAA;AAC7H,MAAA,IAAA,GAAO,CAAC,QAAA,EAAU,iBAAA,EAAmB,OAAA,EAAS,MAAM,CAAA;AAAA,IACtD;AAAA,EACF,CAAA,MAAO;AACL,IAAA,OAAA,GAAU,OAAA;AACV,IAAA,IAAA,GAAO,CAAC,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,QAAA,EAAU,gBAAgB,MAAM,CAAA;AACjE,IAAA,IAAI,QAAQ,GAAA,EAAK;AACf,MAAA,MAAM,MAAM,IAAI,GAAA,CAAI,YAAA,CAAa,OAAA,CAAQ,GAAG,CAAC,CAAA;AAC7C,MAAA,IAAA,CAAK,IAAA,CAAK,OAAA,EAAS,CAAA,QAAA,EAAW,GAAA,CAAI,IAAI,CAAA,CAAE,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,QAAQ,cAAA,EAAe;AAC/B,EAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,KAAA,EAAO,CAAC,QAAA,EAAU,MAAA,EAAQ,MAAM,CAAA,EAAG,WAAA,EAAa,MAAM,CAAA;AAChG,EAAA,IAAI,MAAA,GAAS,EAAA;AACb,EAAA,IAAI;AACF,IAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAgB,CAACC,UAAS,MAAA,KAAW;AACvD,MAAA,MAAM,KAAA,GAAQ,WAAW,MAAM;AAAE,QAAA,OAAA,EAAQ;AAAG,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,OAAO,4EAA4E,CAAC,CAAA;AAAA,MAAG,GAAG,IAAM,CAAA;AAChK,MAAA,MAAM,UAAU,MAAM;AAAE,QAAA,YAAA,CAAa,KAAK,CAAA;AAAG,QAAA,KAAA,CAAM,GAAA,CAAI,SAAS,IAAI,CAAA;AAAG,QAAA,KAAA,CAAM,GAAA,CAAI,QAAQ,MAAM,CAAA;AAAG,QAAA,OAAA,CAAQ,MAAA,EAAQ,mBAAA,CAAoB,OAAA,EAAS,OAAO,CAAA;AAAA,MAAG,CAAA;AACzJ,MAAA,MAAM,IAAA,GAAO,CAAC,KAAA,KAAiB;AAAE,QAAA,OAAA,EAAQ;AAAG,QAAA,MAAA,CAAO,IAAI,MAAM,CAAA,cAAA,EAAiB,OAAO,uCAAuC,EAAE,KAAA,EAAO,KAAA,EAAO,CAAC,CAAA;AAAA,MAAG,CAAA;AAChJ,MAAA,MAAM,SAAS,MAAM;AAAE,QAAA,OAAA,EAAQ;AAAG,QAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,EAAG,OAAO,uEAAuE,CAAC,CAAA;AAAA,MAAG,CAAA;AACxI,MAAA,MAAM,UAAU,MAAM;AAAE,QAAA,OAAA,EAAQ;AAAG,QAAA,KAAA,CAAM,IAAA,EAAK;AAAG,QAAA,MAAA,CAAO,QAAQ,MAAA,EAAQ,MAAA,IAAU,IAAI,KAAA,CAAM,2BAA2B,CAAC,CAAA;AAAA,MAAG,CAAA;AAC3H,MAAA,IAAI,oBAAoB,OAAA,CAAQ,GAAA;AAChC,MAAA,IAAI,mBAAA,GAAsB,KAAA;AAC1B,MAAA,MAAM,OAAA,GAAU,CAAC,KAAA,KAAkB;AACjC,QAAA,MAAM,QAAA,GAAW,MAAA,GAAS,KAAA,CAAM,QAAA,EAAS;AACzC,QAAA,MAAA,GAAS,QAAA,CAAS,MAAM,CAAA,KAAO,CAAA;AAC/B,QAAA,IAAI,KAAA;AACJ,QAAA,IAAI,OAAA,CAAQ,SAAS,YAAA,EAAc;AACjC,UAAA,iBAAA,KAAsB,QAAA,CAAS,KAAA,CAAM,0CAA0C,CAAA,GAAI,CAAC,CAAA;AACpF,UAAA,mBAAA,KAAwB,8BAAA,CAA+B,KAAK,QAAQ,CAAA;AAGpE,UAAA,IAAI,qBAAqB,KAAA,GAAQ,iBAAA;AAAA,QACnC,CAAA,MAAO;AACL,UAAA,KAAA,MAAW,IAAA,IAAQ,QAAA,CAAS,KAAA,CAAM,OAAO,CAAA,EAAG;AAC1C,YAAA,IAAI;AACF,cAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,cAAA,IAAI,KAAA,CAAM,QAAQ,gBAAA,IAAoB,KAAA,CAAM,KAAK,UAAA,CAAW,UAAU,CAAA,EAAG,KAAA,GAAQ,KAAA,CAAM,GAAA;AAAA,YACzF,CAAA,CAAA,MAAQ;AAAA,YAA6C;AAAA,UACvD;AAAA,QACF;AACA,QAAA,IAAI,KAAA,EAAO;AAAE,UAAA,OAAA,EAAQ;AAAG,UAAAA,QAAAA,CAAQ,YAAA,CAAa,KAAK,CAAC,CAAA;AAAA,QAAG;AAAA,MACxD,CAAA;AACA,MAAA,KAAA,CAAM,IAAA,CAAK,SAAS,IAAI,CAAA;AAAG,MAAA,KAAA,CAAM,IAAA,CAAK,QAAQ,MAAM,CAAA;AACpD,MAAA,KAAA,CAAM,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAA;AAAG,MAAA,KAAA,CAAM,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,OAAO,CAAA;AACnE,MAAA,OAAA,CAAQ,QAAQ,gBAAA,CAAiB,OAAA,EAAS,SAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AACjE,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,EAAS,OAAA,EAAQ;AAAA,IACvC,CAAC,CAAA;AAGD,IAAA,KAAK,OAAA,CAAQ,MAAM,MAAM;AAAA,IAAC,CAAC,CAAA;AAC3B,IAAA,MAAM,KAAA,GAAQ,MAAM,QAAA,CAAS,KAAK,CAAA;AAClC,IAAA,MAAM,OAAA,CAAQ,UAAU,KAAK,CAAA;AAC7B,IAAA,MAAM,MAAM,MAAM,OAAA;AAClB,IAAA,OAAA,CAAQ,QAAQ,cAAA,EAAe;AAE/B,IAAA,KAAA,CAAM,MAAA,CAAQ,mBAAmB,MAAM,CAAA;AAAG,IAAA,KAAA,CAAM,MAAA,CAAQ,mBAAmB,MAAM,CAAA;AACjF,IAAA,KAAA,CAAM,OAAQ,MAAA,EAAO;AAAG,IAAA,KAAA,CAAM,OAAQ,MAAA,EAAO;AAC7C,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM;AAAA,IAAC,CAAC,CAAA;AAC1B,IAAA,OAAO,EAAE,KAAA,EAAO,EAAE,IAAA,EAAM,aAAa,GAAA,EAAI,EAAG,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,MAAM,KAAA,CAAM,OAAM,EAAE;AAAA,EAChG,SAAS,KAAA,EAAO;AACd,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM;AAAA,IAAC,CAAC,CAAA;AAC1B,IAAA,IAAI,MAAM,GAAA,EAAK,MAAA,CAAO,MAAM,QAAA,CAAS,KAAK,GAAG,KAAA,EAAM;AACnD,IAAA,MAAM,KAAA;AAAA,EACR;AACF;;;ACjGO,SAAS,cAAc,QAAA,EAA0B;AAAE,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,GAAA,EAAQ,GAAA,GAAO,KAAK,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,QAAA,GAAW,CAAC,CAAC,CAAC,CAAA;AAAG;AAGvI,eAAsB,kBAAkB,SAAA,EAAkC;AACxE,EAAA,IAAA,CAAK,MAAM,QAAA,CAAoC,KAAA,CAAA,IAAA,CAAK,WAAW,uBAAuB,CAAC,IAAI,OAAA,EAAS;AACpG,EAAA,IAAI,SAAS,MAAM,QAAA,CAA8B,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,sBAAsB,CAAC,CAAA;AACxF,EAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,oCAAoC,CAAA;AACjE,EAAA,MAAM,cAAA,GAAsB,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,0BAA0B,CAAA;AACtE,EAAA,MAAM,SAAA,GAAiB,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,qBAAqB,CAAA;AAC5D,EAAA,MAAM,QAAA,GAAW,MAAM,QAAA,CAA0B,cAAc,CAAA;AAC/D,EAAA,IAAI,MAAM,iBAAA,CAAkB,QAAQ,GAAG,MAAM,IAAI,MAAM,gDAAgD,CAAA;AACvG,EAAA,MAAM,KAAA,GAAQ,MAAM,sBAAA,EAAuB;AAC3C,EAAA,MAAM,KAAA,GAAQ,CAAC,OAAA,KAAoB,SAAA,CAAU,gBAAgB,EAAE,GAAG,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,OAAA,EAAS,UAAA,EAAY,MAAM,CAAA;AACzH,EAAA,MAAM,MAAM,0BAAqB,CAAA;AACjC,EAAA,IAAI,KAAA,EAAiC,OAAgC,QAAA,GAAW,KAAA;AAChF,EAAA,IAAI,SAAA,EAAsC,UAAA;AAC1C,EAAA,IAAI,WAAA;AACJ,EAAA,MAAM,KAAA,GAAQ,IAAI,eAAA,EAAgB;AAClC,EAAA,MAAM,OAAO,MAAM;AAAE,IAAA,QAAA,GAAW,IAAA;AAAM,IAAA,KAAA,CAAM,KAAA,EAAM;AAAA,EAAG,CAAA;AACrD,EAAA,OAAA,CAAQ,EAAA,CAAG,WAAW,IAAI,CAAA;AAAG,EAAA,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AAEtD,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI;AAAE,IAAA,KAAA,GAAA,CAAS,MAAS,YAAc,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,cAAc,CAAA,EAAG,MAAM,GAAG,IAAA,EAAK;AAAA,EAAG,SACjF,KAAA,EAAO;AACZ,IAAA,IAAK,KAAA,CAAgC,IAAA,KAAS,QAAA,EAAU,MAAM,KAAA;AAC9D,IAAA,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AACtC,IAAA,MAAS,EAAA,CAAA,SAAA,CAAe,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,cAAc,CAAA,EAAG,KAAA,EAAO,EAAE,IAAA,EAAM,GAAA,EAAO,IAAA,EAAM,IAAA,EAAM,CAAA;AAAA,EAC7F;AACA,EAAA,MAAM,SAAA,GAAY,EAAE,GAAG,OAAA,CAAQ,GAAA,EAAI;AACnC,EAAA,IAAI,OAAA,CAAQ,aAAa,OAAA,EAAS;AAChC,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,YAAA,CAAa,WAAA,EAAa,CAAC,KAAK,CAAA,EAAG,EAAE,QAAA,EAAU,MAAA,EAAQ,OAAA,EAAS,GAAA,EAAM,aAAa,IAAA,EAAM,EAAE,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AACvH,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,MAAM,iBAAsB,KAAA,CAAA,OAAA,CAAa,KAAA,CAAA,OAAA,CAAQ,GAAG,CAAA,EAAG,MAAM,KAAK,CAAA;AAClE,QAAA,MAAS,EAAA,CAAA,MAAA,CAAY,KAAA,CAAA,IAAA,CAAK,cAAA,EAAgB,UAAU,CAAC,CAAA;AACrD,QAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,IAAA,CAAK,CAAA,GAAA,KAAO,GAAA,CAAI,WAAA,EAAY,KAAM,MAAM,CAAA,IAAK,MAAA;AACpF,QAAA,SAAA,CAAU,OAAO,CAAA,GAAI,CAAA,EAAG,cAAc,CAAA,EAAQ,eAAS,CAAA,EAAG,SAAA,CAAU,OAAO,CAAA,IAAK,EAAE,CAAA,CAAA;AAAA,MACpF;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAAoE;AAAA,EAC9E;AACA,EAAA,MAAM,aAAa,MAAM,QAAA,CAA4B,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,uBAAuB,CAAC,CAAA;AAE7F,EAAA,IAAI,OAAA,GAAU,MAAA,CAAO,OAAA,IAAW,UAAA,EAAY,OAAA,IAAW,CAAA;AACvD,EAAA,IAAI,aAAA,GAAgB,MAAA,CAAO,aAAA,IAAiB,UAAA,EAAY,aAAA,IAAiB,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,KAAsC;AAC1D,IAAA,MAAS,EAAA,CAAA,EAAA,CAAQ,WAAK,SAAA,EAAW,uBAAuB,GAAG,EAAE,KAAA,EAAO,MAAM,CAAA;AAC1E,IAAA,MAAMC,QAAAA,GAAUC,KAAAA,CAAM,MAAA,EAAQ,CAAC,YAAY,CAAA,EAAG;AAAA,MAC5C,KAAK,MAAA,CAAQ,SAAA;AAAA,MAAW,KAAA,EAAO,CAAC,QAAA,EAAU,SAAA,EAAW,SAAS,CAAA;AAAA,MAAG,WAAA,EAAa,IAAA;AAAA,MAC9E,GAAA,EAAK;AAAA,QAAE,GAAG,SAAA;AAAA,QAAW,YAAA,EAAc,KAAA;AAAA,QAAO,IAAA,EAAM,aAAA;AAAA,QAAe,UAAA,EAAiB,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,kBAAkB,CAAA;AAAA,QAChH,iBAAA,EAAwB,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,cAAc,CAAA;AAAA,QAAG,WAAW,MAAA,CAAQ,SAAA;AAAA,QAC5E,iBAAA,EAAmB,CAAA,EAAG,MAAA,CAAQ,IAAA,CAAK,SAAS,GAAG,CAAA,GAAI,CAAA,CAAA,EAAI,MAAA,CAAQ,IAAI,CAAA,CAAA,CAAA,GAAM,MAAA,CAAQ,IAAI,IAAI,OAAO,CAAA,CAAA;AAAA,QAChG,gBAAA,EAAkB,aAAa,aAAa,CAAA,CAAA;AAAA,QAAI,yBAAA,EAA2B;AAAA;AAAI,KAClF,CAAA;AACD,IAAA,IAAI,OAAA;AACJ,IAAAD,QAAAA,CAAQ,EAAA,CAAG,OAAA,EAAS,CAAA,KAAA,KAAS;AAAE,MAAA,OAAA,GAAU,KAAA;AAAA,IAAO,CAAC,CAAA;AACjD,IAAA,MAAM,IAAI,OAAA,CAAc,CAACD,QAAAA,EAAS,MAAA,KAAW;AAAE,MAAAC,QAAAA,CAAQ,IAAA,CAAK,OAAA,EAASD,QAAO,CAAA;AAAG,MAAAC,QAAAA,CAAQ,IAAA,CAAK,OAAA,EAAS,MAAM,CAAA;AAAA,IAAG,CAAC,CAAA;AAC/G,IAAA,KAAA,GAAQ,MAAM,SAASA,QAAO,CAAA;AAC9B,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,GAAA,EAAK,OAAA,EAAA,EAAW;AAC9C,MAAA,IAAI,QAAA,EAAU,MAAM,IAAI,KAAA,CAAM,uBAAuB,CAAA;AACrD,MAAA,IAAI,SAAS,MAAM,OAAA;AACnB,MAAA,IAAI,CAAC,KAAA,CAAM,KAAA,IAAS,MAAM,IAAI,MAAM,+EAA+E,CAAA;AACnH,MAAA,IAAI;AACF,QAAA,MAAME,OAAAA,GAAS,MAAM,cAAA,CAAe,SAAS,CAAA;AAC7C,QAAA,MAAM,IAAA,GAAO,MAAMA,OAAAA,CAAO,QAAA,CAAS,IAAA,EAAK;AACxC,QAAA,IAAI,KAAK,GAAA,KAAQ,KAAA,CAAM,KAAK,MAAM,IAAI,MAAM,6CAA6C,CAAA;AACzF,QAAA,MAAM,MAAA,GAAS,MAAMA,OAAAA,CAAO,MAAA,EAAO;AACnC,QAAA,IAAK,OAAkD,yBAAA,KAA8B,CAAA,EAAG,MAAM,IAAI,MAAM,kEAAkE,CAAA;AAC1K,QAAA,OAAA,GAAU,IAAA,CAAK,OAAA;AAAS,QAAA,aAAA,GAAgB,IAAA,CAAK,aAAA;AAC7C,QAAA,OAAOA,OAAAA;AAAA,MACT,SAAS,KAAA,EAAO;AAAE,QAAA,IAAI,OAAA,KAAY,IAAI,MAAM,KAAA;AAAA,MAAO;AACnD,MAAA,MAAMC,aAAM,GAAG,CAAA;AAAA,IACjB;AACA,IAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,EAC/C,CAAA;AAEA,EAAA,IAAI,MAAA,GAA0B,EAAC,EAAG,SAAA,GAAY,EAAA;AAC9C,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI,eAAe,0CAAA,EAAuC,UAAA;AAC1D,EAAA,IAAI,WAAA,EAAiC,YAAA,GAAe,CAAA,EAAG,cAAA,GAAiB,CAAA;AACxE,EAAA,IAAI,WAAA,GAAc,CAAA,EAAG,aAAA,GAAgB,CAAA,EAAG,cAAA,GAAiB,KAAA;AACzD,EAAA,IAAI,gBAAgB,IAAA,CAAK,GAAA,EAAI,EAAG,YAAA,GAAe,KAAK,GAAA,EAAI;AACxD,EAAA,IAAI;AACF,IAAA,MAAM,MAAM,qCAAgC,CAAA;AAC5C,IAAA,IAAI,MAAA,GAAS,MAAA,CAAO,SAAA,IAAa,MAAM,mBAAmB,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,IAAW,WAAA,EAAa,QAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,4BAA4B,CAAA;AAEtJ,IAAA,IAAI;AAAE,MAAA,MAAA,GAAS,MAAM,eAAe,SAAS,CAAA;AAAA,IAAG,CAAA,CAAA,MAAQ;AAAA,IAAoB;AAC5E,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,QAAA,CAAS,IAAA,EAAK;AACxC,MAAA,MAAM,QAAA,GAAW,MAAM,eAAA,CAAgB,IAAA,CAAK,GAAG,CAAA;AAC/C,MAAA,KAAA,GAAQ,QAAA,GAAW,MAAM,YAAA,CAAa,QAAQ,CAAA,GAAI,KAAA,CAAA;AAClD,MAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,MAAM,4EAA4E,CAAA;AACxG,MAAA,OAAA,GAAU,IAAA,CAAK,OAAA;AAAS,MAAA,aAAA,GAAgB,IAAA,CAAK,aAAA;AAAA,IAC/C,CAAA,MAAO;AACL,MAAA,MAAM,MAAM,qCAAgC,CAAA;AAC5C,MAAA,MAAA,GAAS,MAAM,OAAO,MAAM,CAAA;AAAA,IAC9B;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,QAAA,CAAqB,SAAS,CAAA;AAClD,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAMC,MAAAA,GAAQ,MAAM,YAAA,CAAa,KAAA,CAAM,KAAK,CAAA;AAC5C,MAAA,IAAIA,MAAAA,EAAO;AACT,QAAA,IAAI,KAAA,CAAM,KAAA,IAAS,KAAA,CAAM,IAAA,KAAS,aAAA,IAAiB,KAAA,CAAM,OAAA,KAAY,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,KAAK,CAAA,EAAG;AACjG,UAAA,KAAA,GAAQ,EAAE,KAAA,EAAO,KAAA,CAAM,KAAA,EAAO,KAAA,EAAAA,QAAO,KAAA,EAAO,MAAMA,MAAAA,CAAM,KAAA,EAAM,EAAE;AAAA,QAClE,CAAA,MAAO;AAAE,UAAA,MAAMA,OAAM,KAAA,EAAM;AAAA,QAAG;AAAA,MAChC;AAAA,IACF;AAEA,IAAA,IAAI,cAAA,GAAiB,EAAA;AACrB,IAAA,OAAO,CAAC,QAAA,EAAU;AAChB,MAAA,IAAI,CAAC,cAAA,IAAkB,KAAA,IAAS,CAAC,KAAA,CAAM,OAAM,EAAG;AAC9C,QAAA,KAAA,GAAQ,KAAA,CAAA;AAAW,QAAA,MAAA,GAAS,KAAA,CAAA;AAC5B,QAAA,WAAA,GAAc,0CAAA;AACd,QAAA,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI,GAAI,aAAA,CAAc,EAAE,cAAc,CAAA;AAAA,MAC5D;AACA,MAAA,IAAI,KAAA,EAAO,OAAM,IAAK,IAAA,CAAK,KAAI,GAAI,aAAA,GAAgB,KAAQ,cAAA,GAAiB,CAAA;AAC5E,MAAA,IAAI,KAAA,EAAO,OAAO,KAAA,EAAM,IAAK,KAAK,GAAA,EAAI,GAAI,YAAA,GAAe,GAAA,EAAQ,aAAA,GAAgB,CAAA;AACjF,MAAA,IAAI,CAAC,kBAAkB,CAAC,KAAA,EAAO,OAAM,IAAK,IAAA,CAAK,GAAA,EAAI,IAAK,YAAA,EAAc;AACpE,QAAA,WAAA,GAAc,0CAAA;AACd,QAAA,MAAM,MAAM,WAAW,CAAA;AACvB,QAAA,IAAI;AACF,UAAA,MAAA,GAAS,MAAM,OAAO,MAAM,CAAA;AAAG,UAAA,SAAA,GAAY,EAAA;AAAI,UAAA,WAAA,GAAc,KAAA,CAAA;AAAW,UAAA,aAAA,GAAgB,KAAK,GAAA,EAAI;AAAA,QACnG,SAAS,KAAA,EAAO;AACd,UAAA,IAAI,KAAA,EAAO,MAAM,KAAA,CAAM,KAAA,EAAM;AAC7B,UAAA,KAAA,GAAQ,KAAA,CAAA;AAAW,UAAA,MAAA,GAAS,KAAA,CAAA;AAC5B,UAAA,WAAA,GAAc,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,yBAAA;AACvD,UAAA,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI,GAAI,aAAA,CAAc,EAAE,cAAc,CAAA;AAAA,QAC5D;AAAA,MACF;AAEA,MAAA,IAAI,OAAO,KAAA,IAAS,CAAC,KAAA,CAAM,KAAA,CAAM,OAAM,EAAG;AACxC,QAAA,KAAA,GAAQ,KAAA,CAAA;AACR,QAAA,UAAA,GAAa,sDAAA;AACb,QAAA,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,aAAA,CAAc,EAAE,aAAa,CAAA;AAAA,MAC1D;AACA,MAAA,IAAI,WAAA,EAAa;AACf,QAAA,MAAM,MAAA,GAAS,WAAA;AAAa,QAAA,WAAA,GAAc,KAAA,CAAA;AAAW,QAAA,SAAA,GAAY,KAAA,CAAA;AACjE,QAAA,IAAI,OAAO,MAAA,EAAQ;AACjB,UAAA,KAAA,GAAQ,MAAA,CAAO,MAAA;AAAQ,UAAA,UAAA,GAAa,KAAA,CAAA;AAAW,UAAA,YAAA,GAAe,KAAK,GAAA,EAAI;AACvE,UAAA,IAAI,KAAA,CAAM,KAAA,EAAO,QAAA,EAAU,MAAM,UAAU,SAAA,EAAW;AAAA,YACpD,KAAA,EAAO,MAAM,KAAA,CAAM,QAAA;AAAA,YAAU,IAAA,EAAM,aAAA;AAAA,YAAe,OAAA,EAAS,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,KAAK,CAAA;AAAA,YAAG,OAAO,KAAA,CAAM;AAAA,WAClF,CAAA;AAAA,QACxB,CAAA,MAAO;AACL,UAAA,UAAA,GAAa,MAAA,CAAO,KAAA,YAAiB,KAAA,GAAQ,MAAA,CAAO,MAAM,OAAA,GAAU,uCAAA;AACpE,UAAA,WAAA,GAAc,IAAA,CAAK,GAAA,EAAI,GAAI,aAAA,CAAc,EAAE,aAAa,CAAA;AAAA,QAC1D;AAAA,MACF;AACA,MAAA,IAAI,CAAC,KAAA,IAAS,CAAC,aAAa,IAAA,CAAK,GAAA,MAAS,WAAA,EAAa;AACrD,QAAA,YAAA,GAAe,yCAAA;AACf,QAAA,SAAA,GAAY,UAAA,CAAW,MAAA,CAAO,KAAA,EAAO,aAAA,EAAe;AAAA,UAClD,QAAA,EAAe,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,OAAO,CAAA;AAAA,UAAG,QAAQ,KAAA,CAAM,MAAA;AAAA,UACvD,YAAY,CAAA,OAAA,KAAW;AAAE,YAAA,YAAA,GAAe,OAAA;AAAA,UAAS,CAAA;AAAA,UACjD,OAAA,EAAS,OAAMA,MAAAA,KAAS;AACtB,YAAA,IAAIA,MAAAA,CAAM,QAAA,EAAU,MAAM,SAAA,CAAU,SAAA,EAAW;AAAA,cAC7C,OAAOA,MAAAA,CAAM,QAAA;AAAA,cAAU,IAAA,EAAM,aAAA;AAAA,cAAe,OAAA,EAAS,IAAA,CAAK,SAAA,CAAU,MAAA,CAAQ,KAAK;AAAA,aAC7D,CAAA;AAAA,UACxB;AAAA,SACD,CAAA,CAAE,IAAA,CAAK,CAAA,MAAA,KAAU;AAAE,UAAA,WAAA,GAAc,EAAE,MAAA,EAAO;AAAA,QAAG,GAAG,CAAA,KAAA,KAAS;AAAE,UAAA,WAAA,GAAc,EAAE,KAAA,EAAM;AAAA,QAAG,CAAC,CAAA;AAAA,MACxF;AAEA,MAAA,MAAA,GAAS,YAAA,CAAa,QAAQ,OAAO,CAAA;AACrC,MAAA,IAAI,KAAA,EAAO,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,MAAM,KAAK,CAAA;AACzC,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,CAAU,MAAM,CAAA;AACvC,MAAA,IAAI,CAAC,cAAA,IAAkB,MAAA,IAAU,OAAO,KAAA,EAAM,IAAK,cAAc,SAAA,EAAW;AAC1E,QAAA,IAAI;AAAE,UAAA,MAAM,MAAA,CAAO,QAAA,CAAS,SAAA,CAAU,MAAM,CAAA;AAAG,UAAA,SAAA,GAAY,SAAA;AAAA,QAAW,CAAA,CAAA,MAChE;AAAA,QAAqE;AAAA,MAC7E;AACA,MAAA,MAAM,KAAA,GAAQ,CAAC,CAAC,MAAA,IAAU,CAAC,CAAC,KAAA,EAAO,KAAA,EAAM,IAAK,CAAC,cAAA,IAAkB,OAAO,MAAA,GAAS,CAAA,IAAK,cAAc,SAAA,KAC9F,MAAA,CAAO,MAAM,IAAA,KAAS,MAAA,IAAU,CAAC,CAAC,KAAA,EAAO,KAAA,CAAA;AAC/C,MAAA,MAAM,KAAA,GAAyB;AAAA,QAAE,GAAG,KAAA;AAAA,QAAO,KAAA;AAAA,QAAO,MAAA;AAAA,QAChD,KAAA,EAAO,KAAA,GAAQ,KAAA,CAAA,GAAY,WAAA,IAAe,YAAA;AAAA,QAAc,OAAO,WAAA,IAAe,UAAA;AAAA,QAAY,YAAY,CAAC;AAAA,OAAM;AAC/G,MAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACvC,MAAA,IAAI,eAAe,cAAA,EAAgB;AAAE,QAAA,MAAM,SAAA,CAAU,gBAAgB,KAAK,CAAA;AAAG,QAAA,cAAA,GAAiB,UAAA;AAAA,MAAY;AAE1G,MAAA,MAAM,UAAA,GAAkB,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,sBAAsB,CAAA;AAC9D,MAAA,MAAM,MAAA,GAAS,CAAC,UAAA,IAAc,MAAA,IAAU,KAAA,EAAO,OAAM,GAAI,MAAM,QAAA,CAAyB,UAAU,CAAA,GAAI,KAAA,CAAA;AACtG,MAAA,IAAI,MAAA,IAAU,CAAC,QAAA,EAAU,aAAA,EAAe,SAAA,EAAW,YAAY,CAAA,CAAE,QAAA,CAAS,MAAA,CAAO,MAAM,CAAA,EAAG;AAExF,QAAA,UAAA,GAAA,CAAc,YAAY;AACxB,UAAA,MAAM,MAAA,GAAS,OAAOC,MAAAA,EAAiC,KAAA,KAAmB,SAAA;AAAA,YAAU,UAAA;AAAA,YAClF,EAAE,GAAG,MAAA,EAAQ,MAAA,EAAQA,MAAAA,EAAO,KAAA,EAAO,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAE,WAAC;AAC1E,UAAA,IAAI;AACF,YAAA,MAAM,OAAO,aAAa,CAAA;AAC1B,YAAA,MAAM,WAAA,GAAc,MAAM,kBAAA,CAAmB,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,QAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,0BAAA,EAA4B,CAAA;AAC1H,YAAA,MAAM,OAAO,SAAS,CAAA;AACtB,YAAA,IAAI,KAAA;AACJ,YAAA,OAAO,CAAC,QAAA,IAAY,CAAC,KAAA,EAAO;AAC1B,cAAA,IAAI;AAAE,gBAAA,KAAA,GAAQ,MAAM,MAAA,CAAQ,OAAA,CAAQ,aAAA,EAAc;AAAA,cAAG,SAC9C,KAAA,EAAO;AAAE,gBAAA,IAAK,KAAA,CAA8B,MAAA,KAAW,GAAA,EAAK,MAAM,KAAA;AAAO,gBAAA,MAAMF,aAAM,GAAI,CAAA;AAAA,cAAG;AAAA,YACrG;AACA,YAAA,IAAI,QAAA,IAAY,CAAC,KAAA,EAAO;AACxB,YAAA,IAAI,KAAA,CAAM,GAAA,KAAQ,KAAA,EAAO,GAAA,EAAK;AAAE,cAAA,MAAM,MAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,KAAA,CAAM,EAAE,CAAA;AAAG,cAAA,MAAM,IAAI,MAAM,qCAAqC,CAAA;AAAA,YAAG;AACvI,YAAA,cAAA,GAAiB,IAAA;AACjB,YAAA,MAAM,OAAO,YAAY,CAAA;AACzB,YAAA,MAAM,MAAO,KAAA,EAAM;AACnB,YAAA,IAAI;AACF,cAAA,MAAA,GAAS,MAAM,OAAO,WAAW,CAAA;AACjC,cAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA,EAAO;AACnC,cAAA,IAAI,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA,KAAM,MAAA,CAAO,OAAA,EAAS,MAAM,IAAI,KAAA,CAAM,8DAA8D,CAAA;AAAA,YACzI,SAAS,KAAA,EAAO;AACd,cAAA,IAAI,KAAA,EAAO,MAAM,KAAA,CAAM,KAAA,EAAM;AAC7B,cAAA,IAAI,CAAC,QAAA,EAAU,MAAA,GAAS,MAAM,OAAO,MAAM,CAAA;AAC3C,cAAA,MAAM,KAAA;AAAA,YACR;AACA,YAAA,MAAA,GAAS,WAAA;AACT,YAAA,MAAA,GAAS,EAAE,GAAG,MAAA,EAAS,WAAW,KAAA,CAAA,EAAW,OAAA,EAAS,OAAO,OAAA,EAAQ;AACrE,YAAA,MAAM,SAAA,CAAe,KAAA,CAAA,IAAA,CAAK,SAAA,EAAW,sBAAsB,GAAG,MAAM,CAAA;AACpE,YAAA,MAAM,MAAA,CAAO,QAAA,CAAS,SAAA,CAAU,MAAM,CAAA;AAAG,YAAA,SAAA,GAAY,IAAA,CAAK,UAAU,MAAM,CAAA;AAC1E,YAAA,MAAM,OAAO,UAAU,CAAA;AAAA,UACzB,SAAS,KAAA,EAAO;AAAE,YAAA,MAAM,OAAO,QAAA,EAAU,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,wBAAwB,CAAA;AAAA,UAAG,CAAA,SAC7G;AAAU,YAAA,cAAA,GAAiB,KAAA;AAAO,YAAA,SAAA,GAAY,EAAA;AAAA,UAAI;AAAA,QACpD,CAAA,GAAG,CAAE,OAAA,CAAQ,MAAM;AAAE,UAAA,UAAA,GAAa,KAAA,CAAA;AAAA,QAAW,CAAC,CAAA;AAAA,MAChD;AACA,MAAA,MAAMA,aAAM,GAAG,CAAA;AAAA,IACjB;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,SAAA,CAAU,cAAA,EAAgB,EAAE,GAAG,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,4BAA4B,CAAA;AACtI,IAAA,MAAM,KAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,MAAM,SAAA;AAAW,IAAA,MAAM,UAAA;AACvB,IAAA,IAAI,WAAA,EAAa,UAAU,WAAA,CAAY,MAAA,KAAW,OAAO,MAAM,WAAA,CAAY,OAAO,KAAA,EAAM;AACxF,IAAA,MAAM,OAAO,KAAA,EAAM;AACnB,IAAA,IAAI,KAAA,EAAO,MAAM,KAAA,CAAM,KAAA,EAAM;AAC7B,IAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,IAAI,CAAA;AAAG,IAAA,OAAA,CAAQ,GAAA,CAAI,UAAU,IAAI,CAAA;AACxD,IAAA,IAAI,QAAA,QAAgB,SAAA,CAAU,cAAA,EAAgB,EAAE,GAAA,EAAK,CAAA,EAAG,KAAA,EAAO,KAAA,EAAO,CAAA;AAAA,EACxE;AACF","file":"controller-CGSJZZZD.js","sourcesContent":["import { execFile } from \"node:child_process\";\nimport { mkdtemp, writeFile, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport * as path from \"node:path\";\nimport { promisify } from \"node:util\";\nimport { binaryCacheDirectory, cachedExecutable, cacheExecutable, executableChecksum, verifyReleaseBytes } from \"../binary-cache.js\";\n\n// The bridge was tested against this release. The helper never updates itself or\n// changes a system installation; a newer Mindwire release can advance this pin.\nexport const CLOUDFLARED_VERSION = \"2026.9.3\";\nconst execute = promisify(execFile);\n\nexport async function ensureCloudflareBinary(options: {\n  cacheDir?: string; platform?: string; arch?: string; fetch?: typeof fetch;\n  onProgress?: (message: string) => void | Promise<void>;\n} = {}): Promise<string> {\n  const platform = options.platform ?? process.platform, arch = options.arch ?? process.arch;\n  const cpu = arch === \"x64\" ? \"amd64\" : arch === \"arm64\" ? \"arm64\" : \"\";\n  if (!cpu || ![\"darwin\", \"linux\", \"win32\"].includes(platform) || platform === \"win32\" && cpu !== \"amd64\") {\n    throw new Error(\"Install cloudflared for this computer, or select another connection provider.\");\n  }\n  const asset = `cloudflared-${platform === \"win32\" ? \"windows\" : platform}-${cpu}${platform === \"darwin\" ? \".tgz\" : platform === \"win32\" ? \".exe\" : \"\"}`;\n  const bin = path.join(options.cacheDir ?? await binaryCacheDirectory(), \"cloudflared\", CLOUDFLARED_VERSION,\n    `${platform}-${arch}`, platform === \"win32\" ? \"cloudflared.exe\" : \"cloudflared\");\n  const cached = await cachedExecutable(bin);\n  if (cached) return cached;\n  await options.onProgress?.(\"Downloading the secure connection helper…\");\n  const request = options.fetch ?? fetch;\n  const release = await request(`https://api.github.com/repos/cloudflare/cloudflared/releases/tags/${CLOUDFLARED_VERSION}`,\n    { headers: { Accept: \"application/vnd.github+json\" }, signal: AbortSignal.timeout(20_000) });\n  if (!release.ok) throw new Error(\"Couldn't download the connection helper. Retry, install cloudflared yourself, or choose another provider.\");\n  const metadata = await release.json() as { assets?: { name: string; digest?: string; browser_download_url: string }[] };\n  const item = metadata.assets?.find(value => value.name === asset);\n  const checksum = item?.digest?.match(/^sha256:([a-f0-9]{64})$/i)?.[1];\n  const expectedURL = `https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/${asset}`;\n  if (!checksum || item?.browser_download_url !== expectedURL) throw new Error(\"The connection helper has no verified release asset for this computer.\");\n  const downloaded = await request(expectedURL, { signal: AbortSignal.timeout(120_000) });\n  if (!downloaded.ok) throw new Error(\"Couldn't download the connection helper. Check your internet connection and retry.\");\n  const archive = new Uint8Array(await downloaded.arrayBuffer());\n  await verifyReleaseBytes(archive, checksum, asset);\n  let executable = archive;\n  if (platform === \"darwin\") {\n    const temporary = await mkdtemp(path.join(tmpdir(), \"mindwire-cloudflared-\"));\n    try {\n      const archivePath = path.join(temporary, asset);\n      await writeFile(archivePath, archive, { mode: 0o600 });\n      // Read only this exact archive member to stdout. No archive paths are\n      // extracted into the filesystem and no downloaded script is executed.\n      const result = await execute(\"/usr/bin/tar\", [\"-xzOf\", archivePath, \"cloudflared\"],\n        { encoding: \"buffer\", maxBuffer: 128 * 1024 * 1024, timeout: 30_000 });\n      executable = new Uint8Array(result.stdout);\n    } finally { await rm(temporary, { recursive: true, force: true }); }\n  }\n  return cacheExecutable(bin, executable, await executableChecksum(executable));\n}\n\nexport async function cloudflareCommand(options: Parameters<typeof ensureCloudflareBinary>[0]): Promise<string> {\n  try {\n    await execute(\"cloudflared\", [\"--version\"], { timeout: 3000, windowsHide: true });\n    return \"cloudflared\";\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw new Error(\"The installed cloudflared could not start. Repair it or choose another connection provider.\");\n    return ensureCloudflareBinary(options);\n  }\n}\n","import { spawn, type ChildProcess } from \"node:child_process\";\nimport { readFile } from \"node:fs/promises\";\nimport type { ComputerRoute } from \"../computer.js\";\nimport { cloudflareCommand } from \"./cloudflare-binary.js\";\nimport { ownChild, type OwnedProcess } from \"./process.js\";\n\nexport interface RelayOptions {\n  kind: \"none\" | \"cloudflare\" | \"ngrok\" | \"custom\";\n  /** A stable, already configured hostname; custom relays must forward WebSocket upgrades. */\n  url?: string;\n  cloudflareTokenFile?: string;\n}\nexport interface RelayHandle { route?: ComputerRoute; process?: ChildProcess; owner?: OwnedProcess; close(): void | Promise<void> }\n\nexport function websocketURL(value: string): string {\n  const url = new URL(value);\n  if (url.protocol === \"https:\") url.protocol = \"wss:\";\n  if (url.protocol !== \"wss:\" || !url.hostname || url.username || url.password || url.hash) {\n    throw new Error(\"Relay URLs must use wss:// with no embedded credentials or fragment.\");\n  }\n  if (!url.pathname || url.pathname === \"/\") url.pathname = \"/ssh\";\n  return url.toString();\n}\n\n/** Both providers forward encrypted SSH bytes to one loopback WebSocket bridge. */\nexport async function startRelay(options: RelayOptions, port: number, runtime: {\n  cacheDir?: string; onProgress?: (message: string) => void | Promise<void>;\n  signal?: AbortSignal; onSpawn?: (owner: OwnedProcess) => Promise<void>;\n} = {}): Promise<RelayHandle> {\n  runtime.signal?.throwIfAborted();\n  if (options.kind === \"none\") return { close() {} };\n  if (options.kind === \"custom\") {\n    if (!options.url) throw new Error(\"A custom relay needs --relay-url wss://your-host/ssh.\");\n    return { route: { kind: \"websocket\", url: websocketURL(options.url) }, close() {} };\n  }\n  const origin = `http://127.0.0.1:${port}`;\n  const env = { ...process.env };\n  let command: string, args: string[];\n  if (options.kind === \"cloudflare\") {\n    command = await cloudflareCommand(runtime);\n    await runtime.onProgress?.(\"Connecting through Cloudflare…\");\n    if (options.cloudflareTokenFile) {\n      if (!options.url) throw new Error(\"A named Cloudflare tunnel needs --relay-url for its configured hostname.\");\n      env.TUNNEL_TOKEN = (await readFile(options.cloudflareTokenFile, \"utf8\")).trim();\n      args = [\"tunnel\", \"--no-autoupdate\", \"run\"];\n    } else {\n      if (options.url) throw new Error(\"Use --cloudflare-token-file with a named tunnel, or --relay custom for an existing tunnel.\");\n      args = [\"tunnel\", \"--no-autoupdate\", \"--url\", origin];\n    }\n  } else {\n    command = \"ngrok\";\n    args = [\"http\", origin, \"--log\", \"stdout\", \"--log-format\", \"json\"];\n    if (options.url) {\n      const url = new URL(websocketURL(options.url));\n      args.push(\"--url\", `https://${url.host}`);\n    }\n  }\n  runtime.signal?.throwIfAborted();\n  const child = spawn(command, args, { env, stdio: [\"ignore\", \"pipe\", \"pipe\"], windowsHide: true });\n  let buffer = \"\";\n  try {\n    const address = new Promise<string>((resolve, reject) => {\n      const timer = setTimeout(() => { cleanup(); reject(new Error(`${command} did not establish its tunnel. Check its account and tunnel configuration.`)); }, 45_000);\n      const cleanup = () => { clearTimeout(timer); child.off(\"error\", fail); child.off(\"exit\", exited); runtime.signal?.removeEventListener(\"abort\", aborted); };\n      const fail = (error: Error) => { cleanup(); reject(new Error(`Could not run ${command}. Install it on the computer first.`, { cause: error })); };\n      const exited = () => { cleanup(); reject(new Error(`${command} exited before the tunnel connected. Check its account configuration.`)); };\n      const aborted = () => { cleanup(); child.kill(); reject(runtime.signal?.reason ?? new Error(\"Tunnel startup cancelled.\")); };\n      let cloudflareAddress = options.url;\n      let cloudflareConnected = false;\n      const receive = (chunk: Buffer) => {\n        const received = buffer + chunk.toString();\n        buffer = received.slice(-16_384);\n        let found: string | undefined;\n        if (options.kind === \"cloudflare\") {\n          cloudflareAddress ??= received.match(/https:\\/\\/[a-z0-9-]+\\.trycloudflare\\.com/)?.[0];\n          cloudflareConnected ||= /Registered tunnel connection/.test(received);\n          // Quick tunnels print a reserved hostname before their outbound\n          // connection succeeds. Do not invite a phone until that path is open.\n          if (cloudflareConnected) found = cloudflareAddress;\n        } else {\n          for (const line of received.split(/\\r?\\n/)) {\n            try {\n              const event = JSON.parse(line) as { msg?: string; url?: string };\n              if (event.msg === \"started tunnel\" && event.url?.startsWith(\"https://\")) found = event.url;\n            } catch { /* Wait for a complete JSON log record. */ }\n          }\n        }\n        if (found) { cleanup(); resolve(websocketURL(found)); }\n      };\n      child.once(\"error\", fail); child.once(\"exit\", exited);\n      child.stdout!.on(\"data\", receive); child.stderr!.on(\"data\", receive);\n      runtime.signal?.addEventListener(\"abort\", aborted, { once: true });\n      if (runtime.signal?.aborted) aborted();\n    });\n    // Install the readiness listeners before recording process ownership. A fast\n    // helper can print its hostname while its process identity is being read.\n    void address.catch(() => {});\n    const owner = await ownChild(child);\n    await runtime.onSpawn?.(owner);\n    const url = await address;\n    runtime.signal?.throwIfAborted();\n    // Drain provider output without copying potentially sensitive provider logs into ours.\n    child.stdout!.removeAllListeners(\"data\"); child.stderr!.removeAllListeners(\"data\");\n    child.stdout!.resume(); child.stderr!.resume();\n    child.on(\"error\", () => {});\n    return { route: { kind: \"websocket\", url }, process: child, owner, close: () => owner.close() };\n  } catch (error) {\n    child.on(\"error\", () => {});\n    if (child.pid) await (await ownChild(child)).close();\n    throw error;\n  }\n}\n","import { spawn, execFileSync } from \"node:child_process\";\nimport { randomBytes } from \"node:crypto\";\nimport * as fs from \"node:fs/promises\";\nimport * as path from \"node:path\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport type { Mindwire } from \"../client.js\";\nimport { ensureDaemonBinary } from \"../daemon-binary.js\";\nimport { SDK_VERSION } from \"../version.js\";\nimport type { ComputerInfo, ComputerRoute, ComputerUpdate } from \"../computer.js\";\nimport { computerClient, directRoutes, readJSON, writeJSON, type ComputerConfig, type ControllerState } from \"./lifecycle.js\";\nimport { startRelay, type RelayHandle } from \"./relay.js\";\nimport { adoptProcess, ownChild, currentProcessIdentity, processStateAlive, processIdentity, type OwnedProcess, type ProcessIdentity } from \"./process.js\";\n\ninterface SavedRelay { owner: ProcessIdentity; port: number; options: string; route?: ComputerRoute }\nexport function recoveryDelay(failures: number): number { return Math.min(60_000, 1000 * 2 ** Math.min(6, Math.max(0, failures - 1))); }\n\n/** Own process lifecycle separately from any mobile view or pairing command. */\nexport async function superviseComputer(directory: string): Promise<void> {\n  if ((await readJSON<{ stopped: boolean }>(path.join(directory, \"computer-stopped.json\")))?.stopped) return;\n  let config = await readJSON<ComputerConfig>(path.join(directory, \"computer-config.json\"));\n  if (!config) throw new Error(\"Computer configuration is missing.\");\n  const controllerPath = path.join(directory, \"computer-controller.json\");\n  const relayPath = path.join(directory, \"computer-relay.json\");\n  const previous = await readJSON<ControllerState>(controllerPath);\n  if (await processStateAlive(previous)) throw new Error(\"The computer already has a service controller.\");\n  const owner = await currentProcessIdentity();\n  const phase = (message: string) => writeJSON(controllerPath, { ...owner, ready: false, phase: message, recovering: true });\n  await phase(\"Preparing Mindwire…\");\n  let child: OwnedProcess | undefined, relay: RelayHandle | undefined, stopping = false;\n  let relayTask: Promise<void> | undefined, updateTask: Promise<void> | undefined;\n  let relayResult: { handle?: RelayHandle; error?: unknown } | undefined;\n  const abort = new AbortController();\n  const stop = () => { stopping = true; abort.abort(); };\n  process.on(\"SIGTERM\", stop); process.on(\"SIGINT\", stop);\n\n  let token: string;\n  try { token = (await fs.readFile(path.join(directory, \"daemon.token\"), \"utf8\")).trim(); }\n  catch (error) {\n    if ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n    token = randomBytes(32).toString(\"hex\");\n    await fs.writeFile(path.join(directory, \"daemon.token\"), token, { mode: 0o600, flag: \"wx\" });\n  }\n  const daemonEnv = { ...process.env };\n  if (process.platform === \"win32\") {\n    try {\n      const git = execFileSync(\"where.exe\", [\"git\"], { encoding: \"utf8\", timeout: 3000, windowsHide: true }).split(/\\r?\\n/)[0];\n      if (git) {\n        const shellDirectory = path.resolve(path.dirname(git), \"..\", \"bin\");\n        await fs.access(path.join(shellDirectory, \"bash.exe\"));\n        const pathKey = Object.keys(daemonEnv).find(key => key.toLowerCase() === \"path\") ?? \"PATH\";\n        daemonEnv[pathKey] = `${shellDirectory}${path.delimiter}${daemonEnv[pathKey] ?? \"\"}`;\n      }\n    } catch { /* Git/Bash are checked only when their capabilities are used. */ }\n  }\n  const oldRuntime = await readJSON<ComputerInfo>(path.join(directory, \"computer-runtime.json\"));\n  // An automatically selected port remains stable across controller/release restarts.\n  let sshPort = config.sshPort || oldRuntime?.sshPort || 0;\n  let websocketPort = config.websocketPort || oldRuntime?.websocketPort || 0;\n  const launch = async (binary: string): Promise<Mindwire> => {\n    await fs.rm(path.join(directory, \"computer-runtime.json\"), { force: true });\n    const process = spawn(binary, [\"--computer\"], {\n      cwd: config!.directory, stdio: [\"ignore\", \"inherit\", \"inherit\"], windowsHide: true,\n      env: { ...daemonEnv, DAEMON_TOKEN: token, ADDR: \"127.0.0.1:0\", STATE_PATH: path.join(directory, \"agent-state.json\"),\n        WORKSPACE_DB_PATH: path.join(directory, \"workspace.db\"), AGENT_CWD: config!.directory,\n        COMPUTER_SSH_ADDR: `${config!.bind.includes(\":\") ? `[${config!.bind}]` : config!.bind}:${sshPort}`,\n        COMPUTER_WS_ADDR: `127.0.0.1:${websocketPort}`, MINDWIRE_COMPUTER_MANAGED: \"1\" },\n    });\n    let failure: Error | undefined;\n    process.on(\"error\", error => { failure = error; });\n    await new Promise<void>((resolve, reject) => { process.once(\"spawn\", resolve); process.once(\"error\", reject); });\n    child = await ownChild(process);\n    for (let attempt = 0; attempt < 100; attempt++) {\n      if (stopping) throw new Error(\"Mindwire is stopping.\");\n      if (failure) throw failure;\n      if (!child.alive()) throw new Error(\"Mindwire exited during startup. Check computer.log and the installed release.\");\n      try {\n        const client = await computerClient(directory);\n        const info = await client.computer.info();\n        if (info.pid !== child.pid) throw new Error(\"Another service owns this computer's state.\");\n        const health = await client.health();\n        if ((health as { computerConnectionVersion?: number }).computerConnectionVersion !== 1) throw new Error(\"Update Mindwire to a release that supports computer connections.\");\n        sshPort = info.sshPort; websocketPort = info.websocketPort;\n        return client;\n      } catch (error) { if (attempt === 99) throw error; }\n      await delay(100);\n    }\n    throw new Error(\"Mindwire startup timed out.\");\n  };\n\n  let routes: ComputerRoute[] = [], published = \"\";\n  let client: Mindwire | undefined;\n  let relayMessage = \"Preparing your internet connection…\", relayError: string | undefined;\n  let daemonError: string | undefined, nextDaemonAt = 0, daemonFailures = 0;\n  let nextRelayAt = 0, relayFailures = 0, changingDaemon = false;\n  let daemonReadyAt = Date.now(), relayReadyAt = Date.now();\n  try {\n    await phase(\"Checking the Mindwire service…\");\n    let binary = config.daemonBin ?? await ensureDaemonBinary({ version: config.version ?? SDK_VERSION, cacheDir: process.env.MINDWIRE_RELEASE_CACHE_DIR });\n    // A killed controller must not restart a healthy daemon or lose its PTYs.\n    try { client = await computerClient(directory); } catch { /* Cold start. */ }\n    if (client) {\n      const info = await client.computer.info();\n      const identity = await processIdentity(info.pid);\n      child = identity ? await adoptProcess(identity) : undefined;\n      if (!child) throw new Error(\"Couldn't verify the existing Mindwire process. Leave it running and retry.\");\n      sshPort = info.sshPort; websocketPort = info.websocketPort;\n    } else {\n      await phase(\"Starting the Mindwire service…\");\n      client = await launch(binary);\n    }\n\n    const saved = await readJSON<SavedRelay>(relayPath);\n    if (saved) {\n      const owner = await adoptProcess(saved.owner);\n      if (owner) {\n        if (saved.route && saved.port === websocketPort && saved.options === JSON.stringify(config.relay)) {\n          relay = { route: saved.route, owner, close: () => owner.close() };\n        } else { await owner.close(); }\n      }\n    }\n\n    let lastController = \"\";\n    while (!stopping) {\n      if (!changingDaemon && child && !child.alive()) {\n        child = undefined; client = undefined;\n        daemonError = \"The service stopped. Restarting it…\";\n        nextDaemonAt = Date.now() + recoveryDelay(++daemonFailures);\n      }\n      if (child?.alive() && Date.now() - daemonReadyAt > 60_000) daemonFailures = 0;\n      if (relay?.owner?.alive() && Date.now() - relayReadyAt > 60_000) relayFailures = 0;\n      if (!changingDaemon && !child?.alive() && Date.now() >= nextDaemonAt) {\n        daemonError = \"The service stopped. Restarting it…\";\n        await phase(daemonError);\n        try {\n          client = await launch(binary); published = \"\"; daemonError = undefined; daemonReadyAt = Date.now();\n        } catch (error) {\n          if (child) await child.close();\n          child = undefined; client = undefined;\n          daemonError = error instanceof Error ? error.message : \"Service restart failed.\";\n          nextDaemonAt = Date.now() + recoveryDelay(++daemonFailures);\n        }\n      }\n\n      if (relay?.owner && !relay.owner.alive()) {\n        relay = undefined;\n        relayError = \"The internet tunnel disconnected. Reconnecting…\";\n        nextRelayAt = Date.now() + recoveryDelay(++relayFailures);\n      }\n      if (relayResult) {\n        const result = relayResult; relayResult = undefined; relayTask = undefined;\n        if (result.handle) {\n          relay = result.handle; relayError = undefined; relayReadyAt = Date.now();\n          if (relay.owner?.identity) await writeJSON(relayPath, {\n            owner: relay.owner.identity, port: websocketPort, options: JSON.stringify(config.relay), route: relay.route,\n          } satisfies SavedRelay);\n        } else {\n          relayError = result.error instanceof Error ? result.error.message : \"The internet tunnel couldn't connect.\";\n          nextRelayAt = Date.now() + recoveryDelay(++relayFailures);\n        }\n      }\n      if (!relay && !relayTask && Date.now() >= nextRelayAt) {\n        relayMessage = \"Reconnecting your internet tunnel…\";\n        relayTask = startRelay(config.relay, websocketPort, {\n          cacheDir: path.join(directory, \"tools\"), signal: abort.signal,\n          onProgress: message => { relayMessage = message; },\n          onSpawn: async owner => {\n            if (owner.identity) await writeJSON(relayPath, {\n              owner: owner.identity, port: websocketPort, options: JSON.stringify(config!.relay),\n            } satisfies SavedRelay);\n          },\n        }).then(handle => { relayResult = { handle }; }, error => { relayResult = { error }; });\n      }\n\n      routes = directRoutes(config, sshPort);\n      if (relay?.route) routes.push(relay.route);\n      const routeJSON = JSON.stringify(routes);\n      if (!changingDaemon && client && child?.alive() && routeJSON !== published) {\n        try { await client.computer.setRoutes(routes); published = routeJSON; }\n        catch { /* Retry publication; never claim the new routes are ready yet. */ }\n      }\n      const ready = !!client && !!child?.alive() && !changingDaemon && routes.length > 0 && published === routeJSON\n        && (config.relay.kind === \"none\" || !!relay?.route);\n      const state: ControllerState = { ...owner, ready, routes,\n        phase: ready ? undefined : daemonError ?? relayMessage, error: daemonError ?? relayError, recovering: !ready };\n      const serialized = JSON.stringify(state);\n      if (serialized !== lastController) { await writeJSON(controllerPath, state); lastController = serialized; }\n\n      const updatePath = path.join(directory, \"computer-update.json\");\n      const update = !updateTask && client && child?.alive() ? await readJSON<ComputerUpdate>(updatePath) : undefined;\n      if (update && [\"queued\", \"downloading\", \"waiting\", \"restarting\"].includes(update.status)) {\n        // Waiting for idle does not block relay recovery or address publication.\n        updateTask = (async () => {\n          const status = async (state: ComputerUpdate[\"status\"], error?: string) => writeJSON(updatePath,\n            { ...update, status: state, error, updatedAt: new Date().toISOString() });\n          try {\n            await status(\"downloading\");\n            const replacement = await ensureDaemonBinary({ version: update.version, cacheDir: process.env.MINDWIRE_RELEASE_CACHE_DIR });\n            await status(\"waiting\");\n            let lease: Awaited<ReturnType<Mindwire[\"service\"][\"acquireUpdate\"]>> | undefined;\n            while (!stopping && !lease) {\n              try { lease = await client!.service.acquireUpdate(); }\n              catch (error) { if ((error as { status?: number }).status !== 409) throw error; await delay(2000); }\n            }\n            if (stopping || !lease) return;\n            if (lease.pid !== child?.pid) { await client!.service.releaseUpdate(lease.id); throw new Error(\"The leased service process changed.\"); }\n            changingDaemon = true;\n            await status(\"restarting\");\n            await child!.close();\n            try {\n              client = await launch(replacement);\n              const health = await client.health();\n              if (health.version.replace(/^v/, \"\") !== update.version) throw new Error(\"The replacement service reports a different release version.\");\n            } catch (error) {\n              if (child) await child.close();\n              if (!stopping) client = await launch(binary);\n              throw error;\n            }\n            binary = replacement;\n            config = { ...config!, daemonBin: undefined, version: update.version };\n            await writeJSON(path.join(directory, \"computer-config.json\"), config);\n            await client.computer.setRoutes(routes); published = JSON.stringify(routes);\n            await status(\"complete\");\n          } catch (error) { await status(\"failed\", error instanceof Error ? error.message : \"Service update failed.\"); }\n          finally { changingDaemon = false; published = \"\"; }\n        })().finally(() => { updateTask = undefined; });\n      }\n      await delay(500);\n    }\n  } catch (error) {\n    await writeJSON(controllerPath, { ...owner, ready: false, error: error instanceof Error ? error.message : \"Computer service failed.\" });\n    throw error;\n  } finally {\n    abort.abort();\n    await relayTask; await updateTask;\n    if (relayResult?.handle && relayResult.handle !== relay) await relayResult.handle.close();\n    await relay?.close();\n    if (child) await child.close();\n    process.off(\"SIGTERM\", stop); process.off(\"SIGINT\", stop);\n    if (stopping) await writeJSON(controllerPath, { pid: 0, ready: false });\n  }\n}\n"]}