opentunnel-cli 1.0.0

package/dist/server/CertManager.js

@@ -0,0 +1,414 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CertManager = void 0;
+const acme = __importStar(require("acme-client"));
+const crypto = __importStar(require("crypto"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const http = __importStar(require("http"));
+const forge = __importStar(require("node-forge"));
+const cloudflare_1 = __importDefault(require("cloudflare"));
+const utils_1 = require("../shared/utils");
+class CertManager {
+    constructor(options) {
+        this.accountKey = null;
+        this.client = null;
+        this.pendingChallenges = new Map();
+        this.pendingDnsChallenges = new Map();
+        this.cloudflare = null;
+        this.cloudflareZoneId = null;
+        this.certsDir = options.certsDir || path.join(process.cwd(), ".certs");
+        this.email = options.email || "admin@localhost";
+        this.isProduction = options.production ?? false;
+        this.logger = new utils_1.Logger("CertManager");
+        // Ensure certs directory exists
+        if (!fs.existsSync(this.certsDir)) {
+            fs.mkdirSync(this.certsDir, { recursive: true });
+        }
+        // Initialize Cloudflare if token provided
+        if (options.cloudflareToken) {
+            this.cloudflare = new cloudflare_1.default({
+                apiToken: options.cloudflareToken,
+            });
+        }
+    }
+    async initialize() {
+        // Load or create account key
+        const accountKeyPath = path.join(this.certsDir, "account.key");
+        if (fs.existsSync(accountKeyPath)) {
+            const keyPem = fs.readFileSync(accountKeyPath, "utf-8");
+            this.accountKey = crypto.createPrivateKey(keyPem);
+            this.logger.info("Loaded existing ACME account key");
+        }
+        else {
+            const { privateKey } = crypto.generateKeyPairSync("rsa", {
+                modulusLength: 4096,
+            });
+            this.accountKey = privateKey;
+            fs.writeFileSync(accountKeyPath, privateKey.export({ type: "pkcs8", format: "pem" }));
+            this.logger.info("Generated new ACME account key");
+        }
+        // Create ACME client
+        const directoryUrl = this.isProduction
+            ? acme.directory.letsencrypt.production
+            : acme.directory.letsencrypt.staging;
+        this.client = new acme.Client({
+            directoryUrl,
+            accountKey: this.accountKey.export({ type: "pkcs8", format: "pem" }),
+        });
+        this.logger.info(`ACME initialized (${this.isProduction ? "production" : "staging"})`);
+    }
+    async findCloudflareZone(domain) {
+        if (!this.cloudflare)
+            return null;
+        try {
+            // Extract root domain (e.g., "example.com" from "sub.example.com")
+            const parts = domain.split(".");
+            const rootDomain = parts.slice(-2).join(".");
+            const zones = await this.cloudflare.zones.list({ name: rootDomain });
+            if (zones.result && zones.result.length > 0) {
+                this.cloudflareZoneId = zones.result[0].id;
+                this.logger.info(`Found Cloudflare zone: ${rootDomain} (${this.cloudflareZoneId})`);
+                return this.cloudflareZoneId;
+            }
+        }
+        catch (err) {
+            this.logger.error(`Cloudflare zone lookup failed: ${err.message}`);
+        }
+        return null;
+    }
+    async getCertificate(domains) {
+        const primaryDomain = domains[0].replace("*.", "wildcard.");
+        const certPath = path.join(this.certsDir, `${primaryDomain}.crt`);
+        const keyPath = path.join(this.certsDir, `${primaryDomain}.key`);
+        const metaPath = path.join(this.certsDir, `${primaryDomain}.json`);
+        // Check if we have a valid cached certificate
+        if (fs.existsSync(certPath) && fs.existsSync(keyPath) && fs.existsSync(metaPath)) {
+            const meta = JSON.parse(fs.readFileSync(metaPath, "utf-8"));
+            const expiresAt = new Date(meta.expiresAt);
+            // If certificate is still valid (with 7 day buffer), return it
+            const sevenDaysMs = 7 * 24 * 60 * 60 * 1000;
+            if (expiresAt.getTime() - Date.now() > sevenDaysMs) {
+                this.logger.info(`Using cached certificate for ${domains[0]}`);
+                return {
+                    cert: fs.readFileSync(certPath, "utf-8"),
+                    key: fs.readFileSync(keyPath, "utf-8"),
+                    expiresAt,
+                    domains: meta.domains,
+                };
+            }
+            this.logger.info(`Certificate expiring soon, renewing...`);
+        }
+        return null;
+    }
+    async requestCertificate(domains) {
+        if (!this.client) {
+            throw new Error("CertManager not initialized");
+        }
+        const hasWildcard = domains.some(d => d.startsWith("*."));
+        const primaryDomain = domains[0].replace("*.", "wildcard.");
+        this.logger.info(`Requesting certificate for: ${domains.join(", ")}`);
+        // Create CSR
+        const [key, csr] = await acme.crypto.createCsr({
+            commonName: domains[0],
+            altNames: domains.length > 1 ? domains.slice(1) : undefined,
+        });
+        // Determine challenge type based on whether we have wildcard and Cloudflare
+        const usesDns01 = hasWildcard && this.cloudflare;
+        if (hasWildcard && !this.cloudflare) {
+            throw new Error("Wildcard certificates require DNS-01 challenge. " +
+                "Please provide --cloudflare-token or use non-wildcard domain.");
+        }
+        // Request certificate
+        const cert = await this.client.auto({
+            csr,
+            email: this.email,
+            termsOfServiceAgreed: true,
+            challengeCreateFn: async (authz, challenge, keyAuthorization) => {
+                if (challenge.type === "dns-01" && this.cloudflare) {
+                    await this.createDnsChallenge(authz.identifier.value, keyAuthorization);
+                }
+                else if (challenge.type === "http-01") {
+                    this.pendingChallenges.set(challenge.token, {
+                        token: challenge.token,
+                        keyAuthorization,
+                    });
+                    this.logger.info(`HTTP-01 challenge ready for ${authz.identifier.value}`);
+                }
+            },
+            challengeRemoveFn: async (authz, challenge) => {
+                if (challenge.type === "dns-01" && this.cloudflare) {
+                    await this.removeDnsChallenge(authz.identifier.value);
+                }
+                else if (challenge.type === "http-01") {
+                    this.pendingChallenges.delete(challenge.token);
+                }
+            },
+            challengePriority: usesDns01 ? ["dns-01"] : ["http-01"],
+        });
+        // Parse certificate to get expiry
+        const certInfo = await acme.crypto.readCertificateInfo(cert);
+        const expiresAt = certInfo.notAfter;
+        // Save certificate and key
+        const certPath = path.join(this.certsDir, `${primaryDomain}.crt`);
+        const keyPath = path.join(this.certsDir, `${primaryDomain}.key`);
+        const metaPath = path.join(this.certsDir, `${primaryDomain}.json`);
+        fs.writeFileSync(certPath, cert);
+        fs.writeFileSync(keyPath, key.toString());
+        fs.writeFileSync(metaPath, JSON.stringify({
+            domains,
+            expiresAt: expiresAt.toISOString(),
+            issuedAt: new Date().toISOString(),
+        }, null, 2));
+        this.logger.info(`Certificate saved, expires: ${expiresAt.toISOString()}`);
+        return {
+            cert,
+            key: key.toString(),
+            expiresAt,
+            domains,
+        };
+    }
+    async createDnsChallenge(domain, keyAuthorization) {
+        if (!this.cloudflare || !this.cloudflareZoneId) {
+            throw new Error("Cloudflare not configured");
+        }
+        // Create DNS TXT record for ACME challenge
+        const recordName = `_acme-challenge.${domain.replace("*.", "")}`;
+        const digestValue = crypto
+            .createHash("sha256")
+            .update(keyAuthorization)
+            .digest("base64url");
+        this.logger.info(`Creating DNS-01 challenge: ${recordName}`);
+        try {
+            const record = await this.cloudflare.dns.records.create({
+                zone_id: this.cloudflareZoneId,
+                type: "TXT",
+                name: recordName,
+                content: digestValue,
+                ttl: 120,
+            });
+            this.pendingDnsChallenges.set(domain, {
+                recordId: record.id,
+                zoneId: this.cloudflareZoneId,
+            });
+            // Wait for DNS propagation
+            this.logger.info("Waiting for DNS propagation (30s)...");
+            await new Promise(resolve => setTimeout(resolve, 30000));
+        }
+        catch (err) {
+            this.logger.error(`DNS challenge creation failed: ${err.message}`);
+            throw err;
+        }
+    }
+    async removeDnsChallenge(domain) {
+        const challenge = this.pendingDnsChallenges.get(domain);
+        if (!challenge || !this.cloudflare)
+            return;
+        try {
+            await this.cloudflare.dns.records.delete(challenge.recordId, {
+                zone_id: challenge.zoneId,
+            });
+            this.pendingDnsChallenges.delete(domain);
+            this.logger.info(`Removed DNS challenge for ${domain}`);
+        }
+        catch (err) {
+            this.logger.error(`DNS challenge removal failed: ${err.message}`);
+        }
+    }
+    // Handle HTTP-01 challenge requests
+    handleChallengeRequest(token) {
+        const challenge = this.pendingChallenges.get(token);
+        if (challenge) {
+            return challenge.keyAuthorization;
+        }
+        return null;
+    }
+    // Create HTTP server for ACME challenges (port 80)
+    createChallengeServer() {
+        const server = http.createServer((req, res) => {
+            const url = req.url || "";
+            // Handle ACME HTTP-01 challenge
+            if (url.startsWith("/.well-known/acme-challenge/")) {
+                const token = url.split("/").pop() || "";
+                const keyAuth = this.handleChallengeRequest(token);
+                if (keyAuth) {
+                    this.logger.info(`Serving ACME challenge for token: ${token.substring(0, 10)}...`);
+                    res.writeHead(200, { "Content-Type": "text/plain" });
+                    res.end(keyAuth);
+                    return;
+                }
+            }
+            // Redirect all other HTTP to HTTPS
+            const host = req.headers.host || "";
+            res.writeHead(301, { Location: `https://${host}${url}` });
+            res.end();
+        });
+        return server;
+    }
+    // Check if certificate exists
+    hasCertificate(domain) {
+        const safeDomain = domain.replace("*.", "wildcard.");
+        const certPath = path.join(this.certsDir, `${safeDomain}.crt`);
+        const keyPath = path.join(this.certsDir, `${safeDomain}.key`);
+        return fs.existsSync(certPath) && fs.existsSync(keyPath);
+    }
+    // Load certificate from disk
+    loadCertificate(domain) {
+        const safeDomain = domain.replace("*.", "wildcard.");
+        const certPath = path.join(this.certsDir, `${safeDomain}.crt`);
+        const keyPath = path.join(this.certsDir, `${safeDomain}.key`);
+        if (fs.existsSync(certPath) && fs.existsSync(keyPath)) {
+            return {
+                cert: fs.readFileSync(certPath, "utf-8"),
+                key: fs.readFileSync(keyPath, "utf-8"),
+            };
+        }
+        return null;
+    }
+    hasCloudflare() {
+        return this.cloudflare !== null;
+    }
+    /**
+     * Generate a self-signed certificate for local/development use.
+     * No external dependencies required.
+     */
+    generateSelfSignedCertificate(domain, options) {
+        const validDays = options?.validDays || 365;
+        const org = options?.organization || "OpenTunnel";
+        const safeDomain = domain.replace("*.", "wildcard.");
+        const certPath = path.join(this.certsDir, `${safeDomain}.crt`);
+        const keyPath = path.join(this.certsDir, `${safeDomain}.key`);
+        const metaPath = path.join(this.certsDir, `${safeDomain}.json`);
+        // Check if we already have a valid self-signed cert
+        if (fs.existsSync(certPath) && fs.existsSync(keyPath) && fs.existsSync(metaPath)) {
+            try {
+                const meta = JSON.parse(fs.readFileSync(metaPath, "utf-8"));
+                const expiresAt = new Date(meta.expiresAt);
+                // If still valid (with 7 day buffer), use it
+                const sevenDaysMs = 7 * 24 * 60 * 60 * 1000;
+                if (expiresAt.getTime() - Date.now() > sevenDaysMs) {
+                    this.logger.info(`Using existing self-signed certificate for ${domain}`);
+                    return {
+                        cert: fs.readFileSync(certPath, "utf-8"),
+                        key: fs.readFileSync(keyPath, "utf-8"),
+                        expiresAt,
+                        domains: meta.domains,
+                    };
+                }
+            }
+            catch {
+                // Regenerate if meta is corrupted
+            }
+        }
+        this.logger.info(`Generating self-signed certificate for ${domain}...`);
+        // Generate key pair using node-forge
+        const keys = forge.pki.rsa.generateKeyPair(2048);
+        // Create certificate
+        const cert = forge.pki.createCertificate();
+        cert.publicKey = keys.publicKey;
+        cert.serialNumber = Date.now().toString(16);
+        // Set validity
+        const now = new Date();
+        const expiresAt = new Date(now.getTime() + validDays * 24 * 60 * 60 * 1000);
+        cert.validity.notBefore = now;
+        cert.validity.notAfter = expiresAt;
+        // Set subject and issuer (self-signed, so they're the same)
+        const attrs = [
+            { name: "commonName", value: domain },
+            { name: "organizationName", value: org },
+        ];
+        cert.setSubject(attrs);
+        cert.setIssuer(attrs);
+        // Set extensions for proper SSL/TLS usage
+        cert.setExtensions([
+            {
+                name: "basicConstraints",
+                cA: false,
+            },
+            {
+                name: "keyUsage",
+                critical: true,
+                digitalSignature: true,
+                keyEncipherment: true,
+            },
+            {
+                name: "extKeyUsage",
+                serverAuth: true,
+            },
+            {
+                name: "subjectAltName",
+                altNames: [
+                    { type: 2, value: domain }, // DNS
+                    { type: 2, value: `*.${domain.replace("*.", "")}` }, // Wildcard DNS
+                ],
+            },
+        ]);
+        // Sign the certificate with SHA-256
+        cert.sign(keys.privateKey, forge.md.sha256.create());
+        // Convert to PEM format
+        const certPem = forge.pki.certificateToPem(cert);
+        const keyPem = forge.pki.privateKeyToPem(keys.privateKey);
+        // Save to files
+        fs.writeFileSync(certPath, certPem);
+        fs.writeFileSync(keyPath, keyPem);
+        // Save metadata
+        fs.writeFileSync(metaPath, JSON.stringify({
+            domains: [domain, `*.${domain.replace("*.", "")}`],
+            expiresAt: expiresAt.toISOString(),
+            issuedAt: now.toISOString(),
+            selfSigned: true,
+        }, null, 2));
+        this.logger.info(`Self-signed certificate generated, expires: ${expiresAt.toISOString()}`);
+        return {
+            cert: certPem,
+            key: keyPem,
+            expiresAt,
+            domains: [domain],
+        };
+    }
+    /**
+     * Get or generate a self-signed certificate for the given domain.
+     * This is the main entry point for automatic local HTTPS.
+     */
+    getOrCreateSelfSignedCert(domain) {
+        return this.generateSelfSignedCertificate(domain);
+    }
+}
+exports.CertManager = CertManager;
+//# sourceMappingURL=CertManager.js.map

package/dist/server/CertManager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CertManager.js","sourceRoot":"","sources":["../../src/server/CertManager.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,kDAAoC;AACpC,+CAAiC;AACjC,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA6B;AAC7B,kDAAoC;AACpC,4DAAoC;AACpC,2CAAyC;AAmBzC,MAAa,WAAW;IAYpB,YAAY,OAKX;QAdO,eAAU,GAA4B,IAAI,CAAC;QAC3C,WAAM,GAAuB,IAAI,CAAC;QAClC,sBAAiB,GAAkC,IAAI,GAAG,EAAE,CAAC;QAC7D,yBAAoB,GAA8B,IAAI,GAAG,EAAE,CAAC;QAG5D,eAAU,GAAsB,IAAI,CAAC;QACrC,qBAAgB,GAAkB,IAAI,CAAC;QAQ3C,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,cAAM,CAAC,aAAa,CAAC,CAAC;QAExC,gCAAgC;QAChC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAED,0CAA0C;QAC1C,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC1B,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAU,CAAC;gBAC7B,QAAQ,EAAE,OAAO,CAAC,eAAe;aACpC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU;QACZ,6BAA6B;QAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAE/D,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACJ,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;gBACrD,aAAa,EAAE,IAAI;aACtB,CAAC,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;YAC7B,EAAE,CAAC,aAAa,CACZ,cAAc,EACd,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACtD,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACvD,CAAC;QAED,qBAAqB;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY;YAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU;YACvC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC;QAEzC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;YAC1B,YAAY;YACZ,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW;SACjF,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACnC,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAElC,IAAI,CAAC;YACD,mEAAmE;YACnE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YAErE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1C,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0BAA0B,UAAU,KAAK,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;gBACpF,OAAO,IAAI,CAAC,gBAAgB,CAAC;YACjC,CAAC;QACL,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAiB;QAClC,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC;QAEnE,8CAA8C;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE3C,+DAA+D;YAC/D,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAC5C,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC/D,OAAO;oBACH,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;oBACxC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;oBACtC,SAAS;oBACT,OAAO,EAAE,IAAI,CAAC,OAAO;iBACxB,CAAC;YACN,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAiB;QACtC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACnD,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAE5D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEtE,aAAa;QACb,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAC3C,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;YACtB,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9D,CAAC,CAAC;QAEH,4EAA4E;QAC5E,MAAM,SAAS,GAAG,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC;QAEjD,IAAI,WAAW,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CACX,kDAAkD;gBAClD,+DAA+D,CAClE,CAAC;QACN,CAAC;QAED,sBAAsB;QACtB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAChC,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,IAAI;YAC1B,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE;gBAC5D,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACtC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE;wBACxC,KAAK,EAAE,SAAS,CAAC,KAAK;wBACtB,gBAAgB;qBACnB,CAAC,CAAC;oBACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACL,CAAC;YACD,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;gBAC1C,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACjD,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;YACD,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1D,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAEpC,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,MAAM,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,aAAa,OAAO,CAAC,CAAC;QAEnE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YACtC,OAAO;YACP,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3E,OAAO;YACH,IAAI;YACJ,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,SAAS;YACT,OAAO;SACV,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,gBAAwB;QACrE,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACjD,CAAC;QAED,2CAA2C;QAC3C,MAAM,UAAU,GAAG,mBAAmB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,gBAAgB,CAAC;aACxB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,UAAU,EAAE,CAAC,CAAC;QAE7D,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;gBACpD,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,WAAW;gBACpB,GAAG,EAAE,GAAG;aACX,CAAC,CAAC;YAEH,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,EAAE;gBAClC,QAAQ,EAAE,MAAM,CAAC,EAAG;gBACpB,MAAM,EAAE,IAAI,CAAC,gBAAgB;aAChC,CAAC,CAAC;YAEH,2BAA2B;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;YACzD,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAE7D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,MAAc;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QAE3C,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACzD,OAAO,EAAE,SAAS,CAAC,MAAM;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;IACL,CAAC;IAED,oCAAoC;IACpC,sBAAsB,CAAC,KAAa;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,SAAS,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC,gBAAgB,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,mDAAmD;IACnD,qBAAqB;QACjB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAE1B,gCAAgC;YAChC,IAAI,GAAG,CAAC,UAAU,CAAC,8BAA8B,CAAC,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;gBAEnD,IAAI,OAAO,EAAE,CAAC;oBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;oBACnF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;oBACrD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACjB,OAAO;gBACX,CAAC;YACL,CAAC;YAED,mCAAmC;YACnC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACpC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,WAAW,IAAI,GAAG,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,cAAc,CAAC,MAAc;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAC9D,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,6BAA6B;IAC7B,eAAe,CAAC,MAAc;QAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAE9D,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACpD,OAAO;gBACH,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;gBACxC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;aACzC,CAAC;QACN,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,aAAa;QACT,OAAO,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,6BAA6B,CAAC,MAAc,EAAE,OAG7C;QACG,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,GAAG,CAAC;QAC5C,MAAM,GAAG,GAAG,OAAO,EAAE,YAAY,IAAI,YAAY,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAErD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,MAAM,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;QAEhE,oDAAoD;QACpD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC5D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAE3C,6CAA6C;gBAC7C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;gBAC5C,IAAI,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;oBACzE,OAAO;wBACH,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC;wBACxC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;wBACtC,SAAS;wBACT,OAAO,EAAE,IAAI,CAAC,OAAO;qBACxB,CAAC;gBACN,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,kCAAkC;YACtC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,KAAK,CAAC,CAAC;QAExE,qCAAqC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAEjD,qBAAqB;QACrB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAE5C,eAAe;QACf,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5E,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;QAEnC,4DAA4D;QAC5D,MAAM,KAAK,GAAG;YACV,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE;YACrC,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,EAAE;SAC3C,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAEtB,0CAA0C;QAC1C,IAAI,CAAC,aAAa,CAAC;YACf;gBACI,IAAI,EAAE,kBAAkB;gBACxB,EAAE,EAAE,KAAK;aACZ;YACD;gBACI,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,eAAe,EAAE,IAAI;aACxB;YACD;gBACI,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,IAAI;aACnB;YACD;gBACI,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE;oBACN,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,MAAM;oBAClC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe;iBACvE;aACJ;SACJ,CAAC,CAAC;QAEH,oCAAoC;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAErD,wBAAwB;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAE1D,gBAAgB;QAChB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAElC,gBAAgB;QAChB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;YACtC,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAClD,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,GAAG,CAAC,WAAW,EAAE;YAC3B,UAAU,EAAE,IAAI;SACnB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAEb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAE3F,OAAO;YACH,IAAI,EAAE,OAAO;YACb,GAAG,EAAE,MAAM;YACX,SAAS;YACT,OAAO,EAAE,CAAC,MAAM,CAAC;SACpB,CAAC;IACN,CAAC;IAED;;;OAGG;IACH,yBAAyB,CAAC,MAAc;QACpC,OAAO,IAAI,CAAC,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACtD,CAAC;CACJ;AAvbD,kCAubC"}

package/dist/server/TunnelServer.d.ts

@@ -0,0 +1,42 @@
+import { EventEmitter } from "events";
+import { ServerConfig } from "../shared/types";
+export declare class TunnelServer extends EventEmitter {
+    private config;
+    private httpServer;
+    private httpRedirectServer;
+    private wss;
+    private clients;
+    private tunnelsBySubdomain;
+    private tunnelsByPort;
+    private usedPorts;
+    private pendingRequests;
+    private logger;
+    private keepaliveInterval;
+    private certManager;
+    private isHttps;
+    private dnsProvider;
+    constructor(config: Partial<ServerConfig>);
+    private setupHttps;
+    start(): Promise<void>;
+    private setupAutoDns;
+    private detectDnsProvider;
+    stop(): Promise<void>;
+    private startKeepalive;
+    private stopKeepalive;
+    private handleConnection;
+    private handleMessage;
+    private handleAuth;
+    private handleTunnelRequest;
+    private handleTunnelClose;
+    private closeTunnel;
+    private handleHttpRequest;
+    private waitForResponse;
+    private handleHttpResponse;
+    private handleTcpConnection;
+    private handleTcpData;
+    private handleApiRequest;
+    private send;
+    private getTunnelCount;
+    private getAllTunnels;
+}
+//# sourceMappingURL=TunnelServer.d.ts.map

package/dist/server/TunnelServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TunnelServer.d.ts","sourceRoot":"","sources":["../../src/server/TunnelServer.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EACH,YAAY,EAUf,MAAM,iBAAiB,CAAC;AA+CzB,qBAAa,YAAa,SAAQ,YAAY;IAC1C,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,UAAU,CAA6B;IAC/C,OAAO,CAAC,kBAAkB,CAA4B;IACtD,OAAO,CAAC,GAAG,CAAkB;IAC7B,OAAO,CAAC,OAAO,CAAkC;IACjD,OAAO,CAAC,kBAAkB,CAAkC;IAC5D,OAAO,CAAC,aAAa,CAAkC;IACvD,OAAO,CAAC,SAAS,CAA0B;IAC3C,OAAO,CAAC,eAAe,CAA0C;IACjE,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,iBAAiB,CAA+B;IACxD,OAAO,CAAC,WAAW,CAA4B;IAC/C,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,WAAW,CAAwC;gBAE/C,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC;YAmC3B,UAAU;IAsIlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAuCd,YAAY;IA0D1B,OAAO,CAAC,iBAAiB;IAuBzB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA2BrB,OAAO,CAAC,cAAc;IAsBtB,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,gBAAgB;IA2DxB,OAAO,CAAC,aAAa;IAuBrB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,mBAAmB;IAuK3B,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,WAAW;YAuCL,iBAAiB;IAqF/B,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,kBAAkB;IAS1B,OAAO,CAAC,mBAAmB;IAmC3B,OAAO,CAAC,aAAa;IAgBrB,OAAO,CAAC,gBAAgB;IAsBxB,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,aAAa;CAkBxB"}