whale-code 6.5.5 → 6.5.6

package/dist/node/portal/forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.js","names":["createServer","connect","startForward","session","localPort","remotePort","description","connections","server","socket","stream","openStream","channel","pipe","on","destroyed","destroy","end","Promise","resolve","reject","listen","handleForward","meta","err","Error","message","stopForward","info","close"],"sources":["../../../src/node/portal/forward.ts"],"sourcesContent":["/**\n * ForwardChannel — TCP port forwarding over portal streams.\n *\n * Local forward: net.createServer on local port → pipe to portal stream → remote net.connect\n * Remote expose: reverse of above\n */\n\nimport { createServer, connect, type Server, type Socket } from \"node:net\";\nimport type { PortalStream } from \"./stream.js\";\nimport type { SynForward } from \"./protocol.js\";\nimport type { PortalSession } from \"./session.js\";\n\nexport interface ForwardInfo {\n  localPort: number;\n  remotePort: number;\n  connections: number;\n  server: Server;\n}\n\n// ============================================================================\n// INITIATOR SIDE — local port → remote port\n// ============================================================================\n\n/**\n * Forward a local port to a remote port on the target node.\n * Returns a ForwardInfo with the local server.\n */\nexport async function startForward(\n  session: PortalSession,\n  localPort: number,\n  remotePort: number,\n  description?: string,\n): Promise<ForwardInfo> {\n  let connections = 0;\n\n  const server = createServer((socket: Socket) => {\n    connections++;\n\n    // Open a new stream for each TCP connection\n    const stream = session.openStream({\n      channel: \"forward\",\n      remotePort,\n      description,\n    });\n\n    // Pipe bidirectionally\n    socket.pipe(stream);\n    stream.pipe(socket);\n\n    socket.on(\"error\", () => {\n      if (!stream.destroyed) stream.destroy();\n    });\n    stream.on(\"error\", () => {\n      if (!socket.destroyed) socket.destroy();\n    });\n    socket.on(\"close\", () => {\n      if (!stream.destroyed) stream.end();\n      connections--;\n    });\n    stream.on(\"close\", () => {\n      if (!socket.destroyed) socket.end();\n    });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    server.listen(localPort, \"127.0.0.1\", () => resolve());\n    server.on(\"error\", reject);\n  });\n\n  return { localPort, remotePort, connections, server };\n}\n\n// ============================================================================\n// TARGET SIDE — handle incoming forward stream\n// ============================================================================\n\n/**\n * Handle an incoming port forward stream on the target node.\n * Connects to the local port and pipes data.\n */\nexport function handleForward(stream: PortalStream, meta: SynForward): void {\n  const socket = connect(meta.remotePort, \"127.0.0.1\");\n\n  socket.on(\"connect\", () => {\n    socket.pipe(stream);\n    stream.pipe(socket);\n  });\n\n  socket.on(\"error\", (err) => {\n    if (!stream.destroyed) {\n      stream.destroy(new Error(`Connection to port ${meta.remotePort} failed: ${err.message}`));\n    }\n  });\n\n  stream.on(\"error\", () => {\n    if (!socket.destroyed) socket.destroy();\n  });\n\n  socket.on(\"close\", () => {\n    if (!stream.destroyed) stream.end();\n  });\n\n  stream.on(\"close\", () => {\n    if (!socket.destroyed) socket.end();\n  });\n}\n\n/**\n * Stop a port forward.\n */\nexport function stopForward(info: ForwardInfo): Promise<void> {\n  return new Promise((resolve) => {\n    info.server.close(() => resolve());\n  });\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,YAAY,EAAEC,OAAO,QAAkC,UAAU;AAY1E;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,eAAeC,YAAYA,CAChCC,OAAsB,EACtBC,SAAiB,EACjBC,UAAkB,EAClBC,WAAoB,EACE;EACtB,IAAIC,WAAW,GAAG,CAAC;EAEnB,MAAMC,MAAM,GAAGR,YAAY,CAAES,MAAc,IAAK;IAC9CF,WAAW,EAAE;;IAEb;IACA,MAAMG,MAAM,GAAGP,OAAO,CAACQ,UAAU,CAAC;MAChCC,OAAO,EAAE,SAAS;MAClBP,UAAU;MACVC;IACF,CAAC,CAAC;;IAEF;IACAG,MAAM,CAACI,IAAI,CAACH,MAAM,CAAC;IACnBA,MAAM,CAACG,IAAI,CAACJ,MAAM,CAAC;IAEnBA,MAAM,CAACK,EAAE,CAAC,OAAO,EAAE,MAAM;MACvB,IAAI,CAACJ,MAAM,CAACK,SAAS,EAAEL,MAAM,CAACM,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC;IACFN,MAAM,CAACI,EAAE,CAAC,OAAO,EAAE,MAAM;MACvB,IAAI,CAACL,MAAM,CAACM,SAAS,EAAEN,MAAM,CAACO,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC;IACFP,MAAM,CAACK,EAAE,CAAC,OAAO,EAAE,MAAM;MACvB,IAAI,CAACJ,MAAM,CAACK,SAAS,EAAEL,MAAM,CAACO,GAAG,CAAC,CAAC;MACnCV,WAAW,EAAE;IACf,CAAC,CAAC;IACFG,MAAM,CAACI,EAAE,CAAC,OAAO,EAAE,MAAM;MACvB,IAAI,CAACL,MAAM,CAACM,SAAS,EAAEN,MAAM,CAACQ,GAAG,CAAC,CAAC;IACrC,CAAC,CAAC;EACJ,CAAC,CAAC;EAEF,MAAM,IAAIC,OAAO,CAAO,CAACC,OAAO,EAAEC,MAAM,KAAK;IAC3CZ,MAAM,CAACa,MAAM,CAACjB,SAAS,EAAE,WAAW,EAAE,MAAMe,OAAO,CAAC,CAAC,CAAC;IACtDX,MAAM,CAACM,EAAE,CAAC,OAAO,EAAEM,MAAM,CAAC;EAC5B,CAAC,CAAC;EAEF,OAAO;IAAEhB,SAAS;IAAEC,UAAU;IAAEE,WAAW;IAAEC;EAAO,CAAC;AACvD;;AAEA;AACA;AACA;;AAEA;AACA;AACA;AACA;AACA,OAAO,SAASc,aAAaA,CAACZ,MAAoB,EAAEa,IAAgB,EAAQ;EAC1E,MAAMd,MAAM,GAAGR,OAAO,CAACsB,IAAI,CAAClB,UAAU,EAAE,WAAW,CAAC;EAEpDI,MAAM,CAACK,EAAE,CAAC,SAAS,EAAE,MAAM;IACzBL,MAAM,CAACI,IAAI,CAACH,MAAM,CAAC;IACnBA,MAAM,CAACG,IAAI,CAACJ,MAAM,CAAC;EACrB,CAAC,CAAC;EAEFA,MAAM,CAACK,EAAE,CAAC,OAAO,EAAGU,GAAG,IAAK;IAC1B,IAAI,CAACd,MAAM,CAACK,SAAS,EAAE;MACrBL,MAAM,CAACM,OAAO,CAAC,IAAIS,KAAK,CAAC,sBAAsBF,IAAI,CAAClB,UAAU,YAAYmB,GAAG,CAACE,OAAO,EAAE,CAAC,CAAC;IAC3F;EACF,CAAC,CAAC;EAEFhB,MAAM,CAACI,EAAE,CAAC,OAAO,EAAE,MAAM;IACvB,IAAI,CAACL,MAAM,CAACM,SAAS,EAAEN,MAAM,CAACO,OAAO,CAAC,CAAC;EACzC,CAAC,CAAC;EAEFP,MAAM,CAACK,EAAE,CAAC,OAAO,EAAE,MAAM;IACvB,IAAI,CAACJ,MAAM,CAACK,SAAS,EAAEL,MAAM,CAACO,GAAG,CAAC,CAAC;EACrC,CAAC,CAAC;EAEFP,MAAM,CAACI,EAAE,CAAC,OAAO,EAAE,MAAM;IACvB,IAAI,CAACL,MAAM,CAACM,SAAS,EAAEN,MAAM,CAACQ,GAAG,CAAC,CAAC;EACrC,CAAC,CAAC;AACJ;;AAEA;AACA;AACA;AACA,OAAO,SAASU,WAAWA,CAACC,IAAiB,EAAiB;EAC5D,OAAO,IAAIV,OAAO,CAAEC,OAAO,IAAK;IAC9BS,IAAI,CAACpB,MAAM,CAACqB,KAAK,CAAC,MAAMV,OAAO,CAAC,CAAC,CAAC;EACpC,CAAC,CAAC;AACJ","ignoreList":[]}

package/dist/node/portal/index.js

@@ -4,6 +4,7 @@
  * Manages portal sessions, handles incoming requests on the target side,
  * and provides the public API used by the CLI and runtime.
  */
+
 import { randomUUID } from "node:crypto";
 import { EventEmitter } from "node:events";
 import { PORTAL_MARKER } from "./protocol.js";
@@ -15,236 +16,260 @@ import { handleScreen } from "./screen.js";
 import { handleClipboard } from "./clipboard.js";
 import { checkPermission } from "./permissions.js";
 export class PortalManager extends EventEmitter {
-    config;
-    sessions = new Map();
-    gateway;
-    constructor(config) {
-        super();
-        this.config = config;
-        this.gateway = config.gateway;
-        this.setupHandlers();
-    }
-    // ============================================================================
-    // PUBLIC API — used by CLI commands (initiator side)
-    // ============================================================================
-    /**
-     * Open a portal to a target node.
-     * Returns a PortalSession that can be used to open streams.
-     */
-    async connect(targetNodeId, capabilities) {
-        const sessionId = randomUUID();
-        const session = new PortalSession({
-            sessionId,
-            isInitiator: true,
-            targetNodeId,
-            sendBinary: (data) => this.gateway.sendBinary(data),
-            sendJson: (msg) => this.sendJson(msg),
-        });
-        this.sessions.set(sessionId, session);
-        // Send portal request via JSON
-        this.sendJson({
-            type: "portal_request",
-            session_id: sessionId,
-            target_node_id: targetNodeId,
-            capabilities,
-            requester_node_id: this.config.nodeConfig.node_id,
-            requester_hostname: (await import("node:os")).hostname(),
-            requester_role: "admin", // role determined by server/target
-        });
-        // Wait for accept/reject
-        return new Promise((resolve, reject) => {
-            const timeout = setTimeout(() => {
-                this.sessions.delete(sessionId);
-                session.close("timeout");
-                reject(new Error("Portal request timed out"));
-            }, 30_000);
-            session.once("accepted", () => {
-                clearTimeout(timeout);
-                resolve(session);
-            });
-            session.once("close", (reason) => {
-                clearTimeout(timeout);
-                this.sessions.delete(sessionId);
-                reject(new Error(`Portal rejected: ${reason}`));
-            });
-        });
-    }
-    /**
-     * Get all active sessions.
-     */
-    getSessions() {
-        return Array.from(this.sessions.values()).map(s => s.getInfo());
-    }
-    /**
-     * Close a session by ID.
-     */
-    closeSession(sessionId) {
-        const session = this.sessions.get(sessionId);
-        if (!session)
-            return false;
-        session.close();
+  sessions = new Map();
+  constructor(config) {
+    super();
+    this.config = config;
+    this.gateway = config.gateway;
+    this.setupHandlers();
+  }
+
+  // ============================================================================
+  // PUBLIC API — used by CLI commands (initiator side)
+  // ============================================================================
+
+  /**
+   * Open a portal to a target node.
+   * Returns a PortalSession that can be used to open streams.
+   */
+  async connect(targetNodeId, capabilities) {
+    const sessionId = randomUUID();
+    const session = new PortalSession({
+      sessionId,
+      isInitiator: true,
+      targetNodeId,
+      sendBinary: data => this.gateway.sendBinary(data),
+      sendJson: msg => this.sendJson(msg)
+    });
+    this.sessions.set(sessionId, session);
+
+    // Send portal request via JSON
+    this.sendJson({
+      type: "portal_request",
+      session_id: sessionId,
+      target_node_id: targetNodeId,
+      capabilities,
+      requester_node_id: this.config.nodeConfig.node_id,
+      requester_hostname: (await import("node:os")).hostname(),
+      requester_role: "admin" // role determined by server/target
+    });
+
+    // Wait for accept/reject
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.sessions.delete(sessionId);
+        session.close("timeout");
+        reject(new Error("Portal request timed out"));
+      }, 30_000);
+      session.once("accepted", () => {
+        clearTimeout(timeout);
+        resolve(session);
+      });
+      session.once("close", reason => {
+        clearTimeout(timeout);
         this.sessions.delete(sessionId);
-        return true;
+        reject(new Error(`Portal rejected: ${reason}`));
+      });
+    });
+  }
+
+  /**
+   * Get all active sessions.
+   */
+  getSessions() {
+    return Array.from(this.sessions.values()).map(s => s.getInfo());
+  }
+
+  /**
+   * Close a session by ID.
+   */
+  closeSession(sessionId) {
+    const session = this.sessions.get(sessionId);
+    if (!session) return false;
+    session.close();
+    this.sessions.delete(sessionId);
+    return true;
+  }
+
+  /**
+   * Close all sessions.
+   */
+  closeAll() {
+    for (const [id, session] of this.sessions) {
+      session.close();
+      this.sessions.delete(id);
     }
-    /**
-     * Close all sessions.
-     */
-    closeAll() {
-        for (const [id, session] of this.sessions) {
-            session.close();
-            this.sessions.delete(id);
+  }
+
+  // ============================================================================
+  // SETUP — wire gateway handlers
+  // ============================================================================
+
+  setupHandlers() {
+    // Handle incoming JSON messages (portal_request, portal_accept, etc.)
+    this.gateway.onCommand("portal_request", async msg => {
+      await this.handlePortalRequest(msg);
+      return null;
+    });
+
+    // Handle binary frames — route to correct session
+    this.gateway.onBinary(data => {
+      if (data.length > 17 && data[0] === PORTAL_MARKER) {
+        this.routeBinaryFrame(data);
+      }
+    });
+
+    // Also handle portal_accept, portal_reject, portal_close as regular messages
+    this.gateway.onCommand("portal_accept", async msg => {
+      const session = this.sessions.get(msg.session_id);
+      if (session) {
+        session.accept();
+        if (msg.hostname) {
+          session.targetHostname = msg.hostname;
         }
+      }
+      return null;
+    });
+    this.gateway.onCommand("portal_reject", async msg => {
+      const session = this.sessions.get(msg.session_id);
+      if (session) {
+        this.sessions.delete(msg.session_id);
+        session.close(msg.reason || "rejected");
+      }
+      return null;
+    });
+    this.gateway.onCommand("portal_close", async msg => {
+      const session = this.sessions.get(msg.session_id);
+      if (session) {
+        this.sessions.delete(msg.session_id);
+        session.close("remote closed");
+      }
+      return null;
+    });
+  }
+
+  // ============================================================================
+  // TARGET SIDE — handle incoming portal requests
+  // ============================================================================
+
+  async handlePortalRequest(request) {
+    const maxSessions = this.config.maxSessions || 5;
+    if (this.sessions.size >= maxSessions) {
+      this.sendJson({
+        type: "portal_reject",
+        session_id: request.session_id,
+        reason: `Max sessions reached (${maxSessions})`
+      });
+      return;
     }
-    // ============================================================================
-    // SETUP — wire gateway handlers
-    // ============================================================================
-    setupHandlers() {
-        // Handle incoming JSON messages (portal_request, portal_accept, etc.)
-        this.gateway.onCommand("portal_request", async (msg) => {
-            await this.handlePortalRequest(msg);
-            return null;
-        });
-        // Handle binary frames — route to correct session
-        this.gateway.onBinary((data) => {
-            if (data.length > 17 && data[0] === PORTAL_MARKER) {
-                this.routeBinaryFrame(data);
-            }
-        });
-        // Also handle portal_accept, portal_reject, portal_close as regular messages
-        this.gateway.onCommand("portal_accept", async (msg) => {
-            const session = this.sessions.get(msg.session_id);
-            if (session) {
-                session.accept();
-                if (msg.hostname) {
-                    session.targetHostname = msg.hostname;
-                }
-            }
-            return null;
-        });
-        this.gateway.onCommand("portal_reject", async (msg) => {
-            const session = this.sessions.get(msg.session_id);
-            if (session) {
-                this.sessions.delete(msg.session_id);
-                session.close(msg.reason || "rejected");
-            }
-            return null;
-        });
-        this.gateway.onCommand("portal_close", async (msg) => {
-            const session = this.sessions.get(msg.session_id);
-            if (session) {
-                this.sessions.delete(msg.session_id);
-                session.close("remote closed");
-            }
-            return null;
-        });
+
+    // Check permissions
+    const autoAccept = this.config.autoAcceptAdmins !== false;
+    const {
+      accepted,
+      reason
+    } = await checkPermission(request, this.config.nodeConfig.store_id, autoAccept);
+    if (!accepted) {
+      this.sendJson({
+        type: "portal_reject",
+        session_id: request.session_id,
+        reason: reason || "Permission denied"
+      });
+      return;
     }
-    // ============================================================================
-    // TARGET SIDE — handle incoming portal requests
-    // ============================================================================
-    async handlePortalRequest(request) {
-        const maxSessions = this.config.maxSessions || 5;
-        if (this.sessions.size >= maxSessions) {
-            this.sendJson({
-                type: "portal_reject",
-                session_id: request.session_id,
-                reason: `Max sessions reached (${maxSessions})`,
+
+    // Create session (responder side)
+    const os = await import("node:os");
+    const session = new PortalSession({
+      sessionId: request.session_id,
+      isInitiator: false,
+      targetNodeId: request.requester_node_id,
+      targetHostname: request.requester_hostname,
+      sendBinary: data => this.gateway.sendBinary(data),
+      sendJson: msg => this.sendJson(msg)
+    });
+    this.sessions.set(request.session_id, session);
+
+    // Handle incoming streams (shell, file, etc.)
+    session.on("stream", (stream, meta) => {
+      this.handleIncomingStream(stream, meta);
+    });
+
+    // Accept
+    session.accept();
+    this.sendJson({
+      type: "portal_accept",
+      session_id: request.session_id,
+      hostname: os.hostname()
+    });
+
+    // Cleanup on close
+    session.on("close", () => {
+      this.sessions.delete(request.session_id);
+    });
+    console.log(`[portal] Accepted session ${request.session_id.slice(0, 8)} from ${request.requester_hostname}`);
+  }
+
+  // ============================================================================
+  // STREAM ROUTING
+  // ============================================================================
+
+  handleIncomingStream(stream, meta) {
+    switch (meta.channel) {
+      case "shell":
+        handleShell(stream, meta).catch(err => {
+          console.error("[portal:shell]", err.message);
+        });
+        break;
+      case "file":
+        if ("direction" in meta) {
+          if (meta.direction === "push") {
+            handleFilePush(stream, meta, this.config.receiveDir).catch(err => {
+              console.error("[portal:file:push]", err.message);
             });
-            return;
-        }
-        // Check permissions
-        const autoAccept = this.config.autoAcceptAdmins !== false;
-        const { accepted, reason } = await checkPermission(request, this.config.nodeConfig.store_id, autoAccept);
-        if (!accepted) {
-            this.sendJson({
-                type: "portal_reject",
-                session_id: request.session_id,
-                reason: reason || "Permission denied",
+          } else {
+            handleFilePull(stream, meta).catch(err => {
+              console.error("[portal:file:pull]", err.message);
             });
-            return;
-        }
-        // Create session (responder side)
-        const os = await import("node:os");
-        const session = new PortalSession({
-            sessionId: request.session_id,
-            isInitiator: false,
-            targetNodeId: request.requester_node_id,
-            targetHostname: request.requester_hostname,
-            sendBinary: (data) => this.gateway.sendBinary(data),
-            sendJson: (msg) => this.sendJson(msg),
-        });
-        this.sessions.set(request.session_id, session);
-        // Handle incoming streams (shell, file, etc.)
-        session.on("stream", (stream, meta) => {
-            this.handleIncomingStream(stream, meta);
-        });
-        // Accept
-        session.accept();
-        this.sendJson({
-            type: "portal_accept",
-            session_id: request.session_id,
-            hostname: os.hostname(),
-        });
-        // Cleanup on close
-        session.on("close", () => {
-            this.sessions.delete(request.session_id);
-        });
-        console.log(`[portal] Accepted session ${request.session_id.slice(0, 8)} from ${request.requester_hostname}`);
-    }
-    // ============================================================================
-    // STREAM ROUTING
-    // ============================================================================
-    handleIncomingStream(stream, meta) {
-        switch (meta.channel) {
-            case "shell":
-                handleShell(stream, meta).catch(err => {
-                    console.error("[portal:shell]", err.message);
-                });
-                break;
-            case "file":
-                if ("direction" in meta) {
-                    if (meta.direction === "push") {
-                        handleFilePush(stream, meta, this.config.receiveDir).catch(err => {
-                            console.error("[portal:file:push]", err.message);
-                        });
-                    }
-                    else {
-                        handleFilePull(stream, meta).catch(err => {
-                            console.error("[portal:file:pull]", err.message);
-                        });
-                    }
-                }
-                break;
-            case "forward":
-                handleForward(stream, meta);
-                break;
-            case "screen":
-                handleScreen(stream, meta, this.config.screenCapture || null);
-                break;
-            case "clipboard":
-                handleClipboard(stream, meta);
-                break;
-            default:
-                stream.destroy(new Error(`Unknown channel type: ${meta.channel}`));
+          }
         }
+        break;
+      case "forward":
+        handleForward(stream, meta);
+        break;
+      case "screen":
+        handleScreen(stream, meta, this.config.screenCapture || null);
+        break;
+      case "clipboard":
+        handleClipboard(stream, meta);
+        break;
+      default:
+        stream.destroy(new Error(`Unknown channel type: ${meta.channel}`));
     }
-    // ============================================================================
-    // BINARY ROUTING
-    // ============================================================================
-    routeBinaryFrame(data) {
-        // Extract session UUID from bytes 1-16
-        const uuidHex = data.subarray(1, 17).toString("hex");
-        const sessionId = `${uuidHex.slice(0, 8)}-${uuidHex.slice(8, 12)}-${uuidHex.slice(12, 16)}-${uuidHex.slice(16, 20)}-${uuidHex.slice(20)}`;
-        const session = this.sessions.get(sessionId);
-        if (session) {
-            session.receiveRelay(data);
-        }
+  }
+
+  // ============================================================================
+  // BINARY ROUTING
+  // ============================================================================
+
+  routeBinaryFrame(data) {
+    // Extract session UUID from bytes 1-16
+    const uuidHex = data.subarray(1, 17).toString("hex");
+    const sessionId = `${uuidHex.slice(0, 8)}-${uuidHex.slice(8, 12)}-${uuidHex.slice(12, 16)}-${uuidHex.slice(16, 20)}-${uuidHex.slice(20)}`;
+    const session = this.sessions.get(sessionId);
+    if (session) {
+      session.receiveRelay(data);
     }
-    // ============================================================================
-    // HELPERS
-    // ============================================================================
-    sendJson(msg) {
-        if (this.gateway.isConnected) {
-            this.gateway.sendJson(msg);
-        }
+  }
+
+  // ============================================================================
+  // HELPERS
+  // ============================================================================
+
+  sendJson(msg) {
+    if (this.gateway.isConnected) {
+      this.gateway.sendJson(msg);
     }
+  }
 }
+//# sourceMappingURL=index.js.map

package/dist/node/portal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["randomUUID","EventEmitter","PORTAL_MARKER","PortalSession","handleShell","handleFilePush","handleFilePull","handleForward","handleScreen","handleClipboard","checkPermission","PortalManager","sessions","Map","constructor","config","gateway","setupHandlers","connect","targetNodeId","capabilities","sessionId","session","isInitiator","sendBinary","data","sendJson","msg","set","type","session_id","target_node_id","requester_node_id","nodeConfig","node_id","requester_hostname","hostname","requester_role","Promise","resolve","reject","timeout","setTimeout","delete","close","Error","once","clearTimeout","reason","getSessions","Array","from","values","map","s","getInfo","closeSession","get","closeAll","id","onCommand","handlePortalRequest","onBinary","length","routeBinaryFrame","accept","targetHostname","request","maxSessions","size","autoAccept","autoAcceptAdmins","accepted","store_id","os","on","stream","meta","handleIncomingStream","console","log","slice","channel","catch","err","error","message","direction","receiveDir","screenCapture","destroy","uuidHex","subarray","toString","receiveRelay","isConnected"],"sources":["../../../src/node/portal/index.ts"],"sourcesContent":["/**\n * PortalManager — coordinator for portal connections.\n *\n * Manages portal sessions, handles incoming requests on the target side,\n * and provides the public API used by the CLI and runtime.\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { EventEmitter } from \"node:events\";\nimport type { GatewayClient } from \"../gateway-client.js\";\nimport type { NodeConfig } from \"../config.js\";\nimport type { ScreenCaptureService } from \"../remote-desktop/index.js\";\nimport { PORTAL_MARKER } from \"./protocol.js\";\nimport { PortalSession } from \"./session.js\";\nimport { handleShell } from \"./shell.js\";\nimport { handleFilePush, handleFilePull } from \"./transfer.js\";\nimport { handleForward } from \"./forward.js\";\nimport { handleScreen } from \"./screen.js\";\nimport { handleClipboard } from \"./clipboard.js\";\nimport { checkPermission } from \"./permissions.js\";\nimport type { PortalStream } from \"./stream.js\";\nimport type { SynPayload, PortalRequest } from \"./protocol.js\";\n\nexport interface PortalManagerConfig {\n  nodeConfig: NodeConfig;\n  gateway: GatewayClient;\n  screenCapture?: ScreenCaptureService | null;\n  receiveDir?: string;\n  autoAcceptAdmins?: boolean;\n  maxSessions?: number;\n}\n\nexport class PortalManager extends EventEmitter {\n  private config: PortalManagerConfig;\n  private sessions = new Map<string, PortalSession>();\n  private gateway: GatewayClient;\n\n  constructor(config: PortalManagerConfig) {\n    super();\n    this.config = config;\n    this.gateway = config.gateway;\n    this.setupHandlers();\n  }\n\n  // ============================================================================\n  // PUBLIC API — used by CLI commands (initiator side)\n  // ============================================================================\n\n  /**\n   * Open a portal to a target node.\n   * Returns a PortalSession that can be used to open streams.\n   */\n  async connect(targetNodeId: string, capabilities: string[]): Promise<PortalSession> {\n    const sessionId = randomUUID();\n\n    const session = new PortalSession({\n      sessionId,\n      isInitiator: true,\n      targetNodeId,\n      sendBinary: (data) => this.gateway.sendBinary(data),\n      sendJson: (msg) => this.sendJson(msg),\n    });\n\n    this.sessions.set(sessionId, session);\n\n    // Send portal request via JSON\n    this.sendJson({\n      type: \"portal_request\",\n      session_id: sessionId,\n      target_node_id: targetNodeId,\n      capabilities,\n      requester_node_id: this.config.nodeConfig.node_id,\n      requester_hostname: (await import(\"node:os\")).hostname(),\n      requester_role: \"admin\", // role determined by server/target\n    });\n\n    // Wait for accept/reject\n    return new Promise<PortalSession>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this.sessions.delete(sessionId);\n        session.close(\"timeout\");\n        reject(new Error(\"Portal request timed out\"));\n      }, 30_000);\n\n      session.once(\"accepted\", () => {\n        clearTimeout(timeout);\n        resolve(session);\n      });\n\n      session.once(\"close\", (reason: string) => {\n        clearTimeout(timeout);\n        this.sessions.delete(sessionId);\n        reject(new Error(`Portal rejected: ${reason}`));\n      });\n    });\n  }\n\n  /**\n   * Get all active sessions.\n   */\n  getSessions(): Array<ReturnType<PortalSession[\"getInfo\"]>> {\n    return Array.from(this.sessions.values()).map(s => s.getInfo());\n  }\n\n  /**\n   * Close a session by ID.\n   */\n  closeSession(sessionId: string): boolean {\n    const session = this.sessions.get(sessionId);\n    if (!session) return false;\n    session.close();\n    this.sessions.delete(sessionId);\n    return true;\n  }\n\n  /**\n   * Close all sessions.\n   */\n  closeAll(): void {\n    for (const [id, session] of this.sessions) {\n      session.close();\n      this.sessions.delete(id);\n    }\n  }\n\n  // ============================================================================\n  // SETUP — wire gateway handlers\n  // ============================================================================\n\n  private setupHandlers(): void {\n    // Handle incoming JSON messages (portal_request, portal_accept, etc.)\n    this.gateway.onCommand(\"portal_request\", async (msg) => {\n      await this.handlePortalRequest(msg as PortalRequest);\n      return null;\n    });\n\n    // Handle binary frames — route to correct session\n    this.gateway.onBinary((data: Buffer) => {\n      if (data.length > 17 && data[0] === PORTAL_MARKER) {\n        this.routeBinaryFrame(data);\n      }\n    });\n\n    // Also handle portal_accept, portal_reject, portal_close as regular messages\n    this.gateway.onCommand(\"portal_accept\", async (msg) => {\n      const session = this.sessions.get(msg.session_id);\n      if (session) {\n        session.accept();\n        if (msg.hostname) {\n          (session as any).targetHostname = msg.hostname;\n        }\n      }\n      return null;\n    });\n\n    this.gateway.onCommand(\"portal_reject\", async (msg) => {\n      const session = this.sessions.get(msg.session_id);\n      if (session) {\n        this.sessions.delete(msg.session_id);\n        session.close(msg.reason || \"rejected\");\n      }\n      return null;\n    });\n\n    this.gateway.onCommand(\"portal_close\", async (msg) => {\n      const session = this.sessions.get(msg.session_id);\n      if (session) {\n        this.sessions.delete(msg.session_id);\n        session.close(\"remote closed\");\n      }\n      return null;\n    });\n  }\n\n  // ============================================================================\n  // TARGET SIDE — handle incoming portal requests\n  // ============================================================================\n\n  private async handlePortalRequest(request: PortalRequest): Promise<void> {\n    const maxSessions = this.config.maxSessions || 5;\n    if (this.sessions.size >= maxSessions) {\n      this.sendJson({\n        type: \"portal_reject\",\n        session_id: request.session_id,\n        reason: `Max sessions reached (${maxSessions})`,\n      });\n      return;\n    }\n\n    // Check permissions\n    const autoAccept = this.config.autoAcceptAdmins !== false;\n    const { accepted, reason } = await checkPermission(\n      request,\n      this.config.nodeConfig.store_id,\n      autoAccept,\n    );\n\n    if (!accepted) {\n      this.sendJson({\n        type: \"portal_reject\",\n        session_id: request.session_id,\n        reason: reason || \"Permission denied\",\n      });\n      return;\n    }\n\n    // Create session (responder side)\n    const os = await import(\"node:os\");\n    const session = new PortalSession({\n      sessionId: request.session_id,\n      isInitiator: false,\n      targetNodeId: request.requester_node_id,\n      targetHostname: request.requester_hostname,\n      sendBinary: (data) => this.gateway.sendBinary(data),\n      sendJson: (msg) => this.sendJson(msg),\n    });\n\n    this.sessions.set(request.session_id, session);\n\n    // Handle incoming streams (shell, file, etc.)\n    session.on(\"stream\", (stream: PortalStream, meta: SynPayload) => {\n      this.handleIncomingStream(stream, meta);\n    });\n\n    // Accept\n    session.accept();\n    this.sendJson({\n      type: \"portal_accept\",\n      session_id: request.session_id,\n      hostname: os.hostname(),\n    });\n\n    // Cleanup on close\n    session.on(\"close\", () => {\n      this.sessions.delete(request.session_id);\n    });\n\n    console.log(`[portal] Accepted session ${request.session_id.slice(0, 8)} from ${request.requester_hostname}`);\n  }\n\n  // ============================================================================\n  // STREAM ROUTING\n  // ============================================================================\n\n  private handleIncomingStream(stream: PortalStream, meta: SynPayload): void {\n    switch (meta.channel) {\n      case \"shell\":\n        handleShell(stream, meta).catch(err => {\n          console.error(\"[portal:shell]\", err.message);\n        });\n        break;\n\n      case \"file\":\n        if (\"direction\" in meta) {\n          if (meta.direction === \"push\") {\n            handleFilePush(stream, meta, this.config.receiveDir).catch(err => {\n              console.error(\"[portal:file:push]\", err.message);\n            });\n          } else {\n            handleFilePull(stream, meta).catch(err => {\n              console.error(\"[portal:file:pull]\", err.message);\n            });\n          }\n        }\n        break;\n\n      case \"forward\":\n        handleForward(stream, meta);\n        break;\n\n      case \"screen\":\n        handleScreen(stream, meta, this.config.screenCapture || null);\n        break;\n\n      case \"clipboard\":\n        handleClipboard(stream, meta);\n        break;\n\n      default:\n        stream.destroy(new Error(`Unknown channel type: ${(meta as any).channel}`));\n    }\n  }\n\n  // ============================================================================\n  // BINARY ROUTING\n  // ============================================================================\n\n  private routeBinaryFrame(data: Buffer): void {\n    // Extract session UUID from bytes 1-16\n    const uuidHex = data.subarray(1, 17).toString(\"hex\");\n    const sessionId = `${uuidHex.slice(0, 8)}-${uuidHex.slice(8, 12)}-${uuidHex.slice(12, 16)}-${uuidHex.slice(16, 20)}-${uuidHex.slice(20)}`;\n\n    const session = this.sessions.get(sessionId);\n    if (session) {\n      session.receiveRelay(data);\n    }\n  }\n\n  // ============================================================================\n  // HELPERS\n  // ============================================================================\n\n  private sendJson(msg: Record<string, unknown>): void {\n    if (this.gateway.isConnected) {\n      this.gateway.sendJson(msg);\n    }\n  }\n}\n"],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,UAAU,QAAQ,aAAa;AACxC,SAASC,YAAY,QAAQ,aAAa;AAI1C,SAASC,aAAa,QAAQ,eAAe;AAC7C,SAASC,aAAa,QAAQ,cAAc;AAC5C,SAASC,WAAW,QAAQ,YAAY;AACxC,SAASC,cAAc,EAAEC,cAAc,QAAQ,eAAe;AAC9D,SAASC,aAAa,QAAQ,cAAc;AAC5C,SAASC,YAAY,QAAQ,aAAa;AAC1C,SAASC,eAAe,QAAQ,gBAAgB;AAChD,SAASC,eAAe,QAAQ,kBAAkB;AAalD,OAAO,MAAMC,aAAa,SAASV,YAAY,CAAC;EAEtCW,QAAQ,GAAG,IAAIC,GAAG,CAAwB,CAAC;EAGnDC,WAAWA,CAACC,MAA2B,EAAE;IACvC,KAAK,CAAC,CAAC;IACP,IAAI,CAACA,MAAM,GAAGA,MAAM;IACpB,IAAI,CAACC,OAAO,GAAGD,MAAM,CAACC,OAAO;IAC7B,IAAI,CAACC,aAAa,CAAC,CAAC;EACtB;;EAEA;EACA;EACA;;EAEA;AACF;AACA;AACA;EACE,MAAMC,OAAOA,CAACC,YAAoB,EAAEC,YAAsB,EAA0B;IAClF,MAAMC,SAAS,GAAGrB,UAAU,CAAC,CAAC;IAE9B,MAAMsB,OAAO,GAAG,IAAInB,aAAa,CAAC;MAChCkB,SAAS;MACTE,WAAW,EAAE,IAAI;MACjBJ,YAAY;MACZK,UAAU,EAAGC,IAAI,IAAK,IAAI,CAACT,OAAO,CAACQ,UAAU,CAACC,IAAI,CAAC;MACnDC,QAAQ,EAAGC,GAAG,IAAK,IAAI,CAACD,QAAQ,CAACC,GAAG;IACtC,CAAC,CAAC;IAEF,IAAI,CAACf,QAAQ,CAACgB,GAAG,CAACP,SAAS,EAAEC,OAAO,CAAC;;IAErC;IACA,IAAI,CAACI,QAAQ,CAAC;MACZG,IAAI,EAAE,gBAAgB;MACtBC,UAAU,EAAET,SAAS;MACrBU,cAAc,EAAEZ,YAAY;MAC5BC,YAAY;MACZY,iBAAiB,EAAE,IAAI,CAACjB,MAAM,CAACkB,UAAU,CAACC,OAAO;MACjDC,kBAAkB,EAAE,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,EAAEC,QAAQ,CAAC,CAAC;MACxDC,cAAc,EAAE,OAAO,CAAE;IAC3B,CAAC,CAAC;;IAEF;IACA,OAAO,IAAIC,OAAO,CAAgB,CAACC,OAAO,EAAEC,MAAM,KAAK;MACrD,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAM;QAC/B,IAAI,CAAC9B,QAAQ,CAAC+B,MAAM,CAACtB,SAAS,CAAC;QAC/BC,OAAO,CAACsB,KAAK,CAAC,SAAS,CAAC;QACxBJ,MAAM,CAAC,IAAIK,KAAK,CAAC,0BAA0B,CAAC,CAAC;MAC/C,CAAC,EAAE,MAAM,CAAC;MAEVvB,OAAO,CAACwB,IAAI,CAAC,UAAU,EAAE,MAAM;QAC7BC,YAAY,CAACN,OAAO,CAAC;QACrBF,OAAO,CAACjB,OAAO,CAAC;MAClB,CAAC,CAAC;MAEFA,OAAO,CAACwB,IAAI,CAAC,OAAO,EAAGE,MAAc,IAAK;QACxCD,YAAY,CAACN,OAAO,CAAC;QACrB,IAAI,CAAC7B,QAAQ,CAAC+B,MAAM,CAACtB,SAAS,CAAC;QAC/BmB,MAAM,CAAC,IAAIK,KAAK,CAAC,oBAAoBG,MAAM,EAAE,CAAC,CAAC;MACjD,CAAC,CAAC;IACJ,CAAC,CAAC;EACJ;;EAEA;AACF;AACA;EACEC,WAAWA,CAAA,EAAgD;IACzD,OAAOC,KAAK,CAACC,IAAI,CAAC,IAAI,CAACvC,QAAQ,CAACwC,MAAM,CAAC,CAAC,CAAC,CAACC,GAAG,CAACC,CAAC,IAAIA,CAAC,CAACC,OAAO,CAAC,CAAC,CAAC;EACjE;;EAEA;AACF;AACA;EACEC,YAAYA,CAACnC,SAAiB,EAAW;IACvC,MAAMC,OAAO,GAAG,IAAI,CAACV,QAAQ,CAAC6C,GAAG,CAACpC,SAAS,CAAC;IAC5C,IAAI,CAACC,OAAO,EAAE,OAAO,KAAK;IAC1BA,OAAO,CAACsB,KAAK,CAAC,CAAC;IACf,IAAI,CAAChC,QAAQ,CAAC+B,MAAM,CAACtB,SAAS,CAAC;IAC/B,OAAO,IAAI;EACb;;EAEA;AACF;AACA;EACEqC,QAAQA,CAAA,EAAS;IACf,KAAK,MAAM,CAACC,EAAE,EAAErC,OAAO,CAAC,IAAI,IAAI,CAACV,QAAQ,EAAE;MACzCU,OAAO,CAACsB,KAAK,CAAC,CAAC;MACf,IAAI,CAAChC,QAAQ,CAAC+B,MAAM,CAACgB,EAAE,CAAC;IAC1B;EACF;;EAEA;EACA;EACA;;EAEQ1C,aAAaA,CAAA,EAAS;IAC5B;IACA,IAAI,CAACD,OAAO,CAAC4C,SAAS,CAAC,gBAAgB,EAAE,MAAOjC,GAAG,IAAK;MACtD,MAAM,IAAI,CAACkC,mBAAmB,CAAClC,GAAoB,CAAC;MACpD,OAAO,IAAI;IACb,CAAC,CAAC;;IAEF;IACA,IAAI,CAACX,OAAO,CAAC8C,QAAQ,CAAErC,IAAY,IAAK;MACtC,IAAIA,IAAI,CAACsC,MAAM,GAAG,EAAE,IAAItC,IAAI,CAAC,CAAC,CAAC,KAAKvB,aAAa,EAAE;QACjD,IAAI,CAAC8D,gBAAgB,CAACvC,IAAI,CAAC;MAC7B;IACF,CAAC,CAAC;;IAEF;IACA,IAAI,CAACT,OAAO,CAAC4C,SAAS,CAAC,eAAe,EAAE,MAAOjC,GAAG,IAAK;MACrD,MAAML,OAAO,GAAG,IAAI,CAACV,QAAQ,CAAC6C,GAAG,CAAC9B,GAAG,CAACG,UAAU,CAAC;MACjD,IAAIR,OAAO,EAAE;QACXA,OAAO,CAAC2C,MAAM,CAAC,CAAC;QAChB,IAAItC,GAAG,CAACS,QAAQ,EAAE;UACfd,OAAO,CAAS4C,cAAc,GAAGvC,GAAG,CAACS,QAAQ;QAChD;MACF;MACA,OAAO,IAAI;IACb,CAAC,CAAC;IAEF,IAAI,CAACpB,OAAO,CAAC4C,SAAS,CAAC,eAAe,EAAE,MAAOjC,GAAG,IAAK;MACrD,MAAML,OAAO,GAAG,IAAI,CAACV,QAAQ,CAAC6C,GAAG,CAAC9B,GAAG,CAACG,UAAU,CAAC;MACjD,IAAIR,OAAO,EAAE;QACX,IAAI,CAACV,QAAQ,CAAC+B,MAAM,CAAChB,GAAG,CAACG,UAAU,CAAC;QACpCR,OAAO,CAACsB,KAAK,CAACjB,GAAG,CAACqB,MAAM,IAAI,UAAU,CAAC;MACzC;MACA,OAAO,IAAI;IACb,CAAC,CAAC;IAEF,IAAI,CAAChC,OAAO,CAAC4C,SAAS,CAAC,cAAc,EAAE,MAAOjC,GAAG,IAAK;MACpD,MAAML,OAAO,GAAG,IAAI,CAACV,QAAQ,CAAC6C,GAAG,CAAC9B,GAAG,CAACG,UAAU,CAAC;MACjD,IAAIR,OAAO,EAAE;QACX,IAAI,CAACV,QAAQ,CAAC+B,MAAM,CAAChB,GAAG,CAACG,UAAU,CAAC;QACpCR,OAAO,CAACsB,KAAK,CAAC,eAAe,CAAC;MAChC;MACA,OAAO,IAAI;IACb,CAAC,CAAC;EACJ;;EAEA;EACA;EACA;;EAEA,MAAciB,mBAAmBA,CAACM,OAAsB,EAAiB;IACvE,MAAMC,WAAW,GAAG,IAAI,CAACrD,MAAM,CAACqD,WAAW,IAAI,CAAC;IAChD,IAAI,IAAI,CAACxD,QAAQ,CAACyD,IAAI,IAAID,WAAW,EAAE;MACrC,IAAI,CAAC1C,QAAQ,CAAC;QACZG,IAAI,EAAE,eAAe;QACrBC,UAAU,EAAEqC,OAAO,CAACrC,UAAU;QAC9BkB,MAAM,EAAE,yBAAyBoB,WAAW;MAC9C,CAAC,CAAC;MACF;IACF;;IAEA;IACA,MAAME,UAAU,GAAG,IAAI,CAACvD,MAAM,CAACwD,gBAAgB,KAAK,KAAK;IACzD,MAAM;MAAEC,QAAQ;MAAExB;IAAO,CAAC,GAAG,MAAMtC,eAAe,CAChDyD,OAAO,EACP,IAAI,CAACpD,MAAM,CAACkB,UAAU,CAACwC,QAAQ,EAC/BH,UACF,CAAC;IAED,IAAI,CAACE,QAAQ,EAAE;MACb,IAAI,CAAC9C,QAAQ,CAAC;QACZG,IAAI,EAAE,eAAe;QACrBC,UAAU,EAAEqC,OAAO,CAACrC,UAAU;QAC9BkB,MAAM,EAAEA,MAAM,IAAI;MACpB,CAAC,CAAC;MACF;IACF;;IAEA;IACA,MAAM0B,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC;IAClC,MAAMpD,OAAO,GAAG,IAAInB,aAAa,CAAC;MAChCkB,SAAS,EAAE8C,OAAO,CAACrC,UAAU;MAC7BP,WAAW,EAAE,KAAK;MAClBJ,YAAY,EAAEgD,OAAO,CAACnC,iBAAiB;MACvCkC,cAAc,EAAEC,OAAO,CAAChC,kBAAkB;MAC1CX,UAAU,EAAGC,IAAI,IAAK,IAAI,CAACT,OAAO,CAACQ,UAAU,CAACC,IAAI,CAAC;MACnDC,QAAQ,EAAGC,GAAG,IAAK,IAAI,CAACD,QAAQ,CAACC,GAAG;IACtC,CAAC,CAAC;IAEF,IAAI,CAACf,QAAQ,CAACgB,GAAG,CAACuC,OAAO,CAACrC,UAAU,EAAER,OAAO,CAAC;;IAE9C;IACAA,OAAO,CAACqD,EAAE,CAAC,QAAQ,EAAE,CAACC,MAAoB,EAAEC,IAAgB,KAAK;MAC/D,IAAI,CAACC,oBAAoB,CAACF,MAAM,EAAEC,IAAI,CAAC;IACzC,CAAC,CAAC;;IAEF;IACAvD,OAAO,CAAC2C,MAAM,CAAC,CAAC;IAChB,IAAI,CAACvC,QAAQ,CAAC;MACZG,IAAI,EAAE,eAAe;MACrBC,UAAU,EAAEqC,OAAO,CAACrC,UAAU;MAC9BM,QAAQ,EAAEsC,EAAE,CAACtC,QAAQ,CAAC;IACxB,CAAC,CAAC;;IAEF;IACAd,OAAO,CAACqD,EAAE,CAAC,OAAO,EAAE,MAAM;MACxB,IAAI,CAAC/D,QAAQ,CAAC+B,MAAM,CAACwB,OAAO,CAACrC,UAAU,CAAC;IAC1C,CAAC,CAAC;IAEFiD,OAAO,CAACC,GAAG,CAAC,6BAA6Bb,OAAO,CAACrC,UAAU,CAACmD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,SAASd,OAAO,CAAChC,kBAAkB,EAAE,CAAC;EAC/G;;EAEA;EACA;EACA;;EAEQ2C,oBAAoBA,CAACF,MAAoB,EAAEC,IAAgB,EAAQ;IACzE,QAAQA,IAAI,CAACK,OAAO;MAClB,KAAK,OAAO;QACV9E,WAAW,CAACwE,MAAM,EAAEC,IAAI,CAAC,CAACM,KAAK,CAACC,GAAG,IAAI;UACrCL,OAAO,CAACM,KAAK,CAAC,gBAAgB,EAAED,GAAG,CAACE,OAAO,CAAC;QAC9C,CAAC,CAAC;QACF;MAEF,KAAK,MAAM;QACT,IAAI,WAAW,IAAIT,IAAI,EAAE;UACvB,IAAIA,IAAI,CAACU,SAAS,KAAK,MAAM,EAAE;YAC7BlF,cAAc,CAACuE,MAAM,EAAEC,IAAI,EAAE,IAAI,CAAC9D,MAAM,CAACyE,UAAU,CAAC,CAACL,KAAK,CAACC,GAAG,IAAI;cAChEL,OAAO,CAACM,KAAK,CAAC,oBAAoB,EAAED,GAAG,CAACE,OAAO,CAAC;YAClD,CAAC,CAAC;UACJ,CAAC,MAAM;YACLhF,cAAc,CAACsE,MAAM,EAAEC,IAAI,CAAC,CAACM,KAAK,CAACC,GAAG,IAAI;cACxCL,OAAO,CAACM,KAAK,CAAC,oBAAoB,EAAED,GAAG,CAACE,OAAO,CAAC;YAClD,CAAC,CAAC;UACJ;QACF;QACA;MAEF,KAAK,SAAS;QACZ/E,aAAa,CAACqE,MAAM,EAAEC,IAAI,CAAC;QAC3B;MAEF,KAAK,QAAQ;QACXrE,YAAY,CAACoE,MAAM,EAAEC,IAAI,EAAE,IAAI,CAAC9D,MAAM,CAAC0E,aAAa,IAAI,IAAI,CAAC;QAC7D;MAEF,KAAK,WAAW;QACdhF,eAAe,CAACmE,MAAM,EAAEC,IAAI,CAAC;QAC7B;MAEF;QACED,MAAM,CAACc,OAAO,CAAC,IAAI7C,KAAK,CAAC,yBAA0BgC,IAAI,CAASK,OAAO,EAAE,CAAC,CAAC;IAC/E;EACF;;EAEA;EACA;EACA;;EAEQlB,gBAAgBA,CAACvC,IAAY,EAAQ;IAC3C;IACA,MAAMkE,OAAO,GAAGlE,IAAI,CAACmE,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAACC,QAAQ,CAAC,KAAK,CAAC;IACpD,MAAMxE,SAAS,GAAG,GAAGsE,OAAO,CAACV,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAIU,OAAO,CAACV,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAIU,OAAO,CAACV,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIU,OAAO,CAACV,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAIU,OAAO,CAACV,KAAK,CAAC,EAAE,CAAC,EAAE;IAEzI,MAAM3D,OAAO,GAAG,IAAI,CAACV,QAAQ,CAAC6C,GAAG,CAACpC,SAAS,CAAC;IAC5C,IAAIC,OAAO,EAAE;MACXA,OAAO,CAACwE,YAAY,CAACrE,IAAI,CAAC;IAC5B;EACF;;EAEA;EACA;EACA;;EAEQC,QAAQA,CAACC,GAA4B,EAAQ;IACnD,IAAI,IAAI,CAACX,OAAO,CAAC+E,WAAW,EAAE;MAC5B,IAAI,CAAC/E,OAAO,CAACU,QAAQ,CAACC,GAAG,CAAC;IAC5B;EACF;AACF","ignoreList":[]}