ysk-server-core 1.0.0

package/dist/hosting/vpn/monitor.js

@@ -0,0 +1,537 @@
+/**
+ * VPN live monitor — parse WireGuard dump / OpenVPN status; build snapshot.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/** Handshake within this many seconds ⇒ online */
+export const WG_ONLINE_HANDSHAKE_SEC = 180;
+/** Parse `wg show all dump` (tab-separated). */
+export function parseWgDump(text) {
+    const interfaces = [];
+    const peers = [];
+    for (const line of text.split('\n')) {
+        const t = line.trim();
+        if (!t)
+            continue;
+        const cols = t.split('\t');
+        if (cols.length < 5)
+            continue;
+        const name = cols[0] ?? '';
+        // Interface line: name private public listenPort fwmark  (5 fields)
+        // Peer line: name public psk endpoint allowed handshake rx tx keepalive (9 fields)
+        if (cols.length >= 9) {
+            const handshake = Number(cols[5] ?? 0);
+            const rx = Number(cols[6] ?? 0);
+            const tx = Number(cols[7] ?? 0);
+            peers.push({
+                iface: name,
+                publicKey: cols[1] ?? '',
+                endpoint: cols[3] === '(none)' ? '' : (cols[3] ?? ''),
+                allowedIps: cols[4] === '(none)' ? '' : (cols[4] ?? ''),
+                latestHandshake: Number.isFinite(handshake) ? handshake : 0,
+                transferRx: Number.isFinite(rx) ? rx : 0,
+                transferTx: Number.isFinite(tx) ? tx : 0,
+            });
+        }
+        else if (cols.length >= 5) {
+            const port = Number(cols[3] ?? 0);
+            interfaces.push({
+                name,
+                publicKey: cols[2] === '(none)' ? '' : (cols[2] ?? ''),
+                listenPort: Number.isFinite(port) ? port : 0,
+            });
+        }
+    }
+    return { interfaces, peers };
+}
+export function presenceFromHandshake(latestHandshakeUnix, nowSec = Math.floor(Date.now() / 1000)) {
+    if (!latestHandshakeUnix || latestHandshakeUnix <= 0)
+        return 'never';
+    const age = nowSec - latestHandshakeUnix;
+    if (age <= WG_ONLINE_HANDSHAKE_SEC)
+        return 'online';
+    if (age > 0)
+        return 'idle';
+    return 'never';
+}
+/** Parse OpenVPN status-version 2/3 CLIENT_LIST and legacy status-version 1 client table. */
+export function parseOvpnStatus(text) {
+    const out = [];
+    const lines = text.split('\n');
+    let inV1Clients = false;
+    for (const line of lines) {
+        const t = line.trim();
+        if (!t)
+            continue;
+        // —— status-version 2/3 ——
+        if (t.startsWith('CLIENT_LIST,')) {
+            // CLIENT_LIST,Common Name,Real Address,Virtual Address,Virtual IPv6,Bytes Received,Bytes Sent,Connected Since,Connected Since (time_t),...
+            const parts = t.split(',');
+            if (parts.length < 9)
+                continue;
+            const cn = parts[1] ?? '';
+            if (!cn || cn === 'UNDEF' || cn === 'Common Name')
+                continue;
+            const bytesRecv = Number(parts[5] ?? 0);
+            const bytesSent = Number(parts[6] ?? 0);
+            const sinceStr = parts[7] ?? '';
+            const sinceUnix = Number(parts[8] ?? 0);
+            out.push({
+                commonName: cn,
+                realAddress: parts[2] ?? '',
+                virtualAddress: parts[3] ?? '',
+                bytesReceived: Number.isFinite(bytesRecv) ? bytesRecv : 0,
+                bytesSent: Number.isFinite(bytesSent) ? bytesSent : 0,
+                connectedSinceUnix: Number.isFinite(sinceUnix) ? sinceUnix : 0,
+                connectedSince: Number.isFinite(sinceUnix) && sinceUnix > 0
+                    ? new Date(sinceUnix * 1000).toISOString()
+                    : sinceStr || null,
+            });
+            continue;
+        }
+        // —— status-version 1 ——
+        if (/^OpenVPN CLIENT LIST/i.test(t)) {
+            inV1Clients = true;
+            continue;
+        }
+        if (inV1Clients) {
+            if (/^ROUTING TABLE/i.test(t) || /^GLOBAL STATS/i.test(t) || t === 'END') {
+                inV1Clients = false;
+                continue;
+            }
+            if (/^Updated,/i.test(t) || /^Common Name,/i.test(t))
+                continue;
+            // Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
+            const parts = t.split(',');
+            if (parts.length < 5)
+                continue;
+            const cn = parts[0] ?? '';
+            if (!cn || cn === 'UNDEF')
+                continue;
+            const bytesRecv = Number(parts[2] ?? 0);
+            const bytesSent = Number(parts[3] ?? 0);
+            const sinceStr = parts.slice(4).join(',');
+            out.push({
+                commonName: cn,
+                realAddress: parts[1] ?? '',
+                virtualAddress: '',
+                bytesReceived: Number.isFinite(bytesRecv) ? bytesRecv : 0,
+                bytesSent: Number.isFinite(bytesSent) ? bytesSent : 0,
+                connectedSinceUnix: 0,
+                connectedSince: sinceStr || null,
+            });
+        }
+    }
+    return out;
+}
+/** Primary status path written by openvpn (RuntimeDirectory is writable by the unit). */
+export function openVpnStatusPath(_dataDir) {
+    return '/run/openvpn-server/ysk-status.log';
+}
+/** Fallbacks when unit layout differs (openvpn@ / daemon). */
+export function openVpnStatusCandidates(dataDir) {
+    return [
+        '/run/openvpn-server/ysk-status.log',
+        '/run/openvpn-server/status-ysk.log',
+        '/run/openvpn-server/status.log',
+        '/var/log/openvpn/ysk-status.log',
+        '/var/run/openvpn-server/ysk-status.log',
+        join(dataDir, 'vpn', 'openvpn', 'status.log'),
+    ];
+}
+/** dataDir mirror path (optional read fallback) */
+export function openVpnStatusPathLocal(dataDir) {
+    return join(dataDir, 'vpn', 'openvpn', 'status.log');
+}
+/** Normalize tunnel IP for matching (strip /32, spaces). */
+export function normalizeTunnelIp(addr) {
+    if (!addr)
+        return '';
+    return String(addr)
+        .trim()
+        .split('/')[0]
+        ?.split(' ')[0]
+        ?.toLowerCase() ?? '';
+}
+export function rateFromPrev(key, rx, tx, nowMs, prev) {
+    if (!prev?.byKey[key] || !prev.atMs || nowMs <= prev.atMs) {
+        return { rxRateBps: null, txRateBps: null };
+    }
+    const dt = (nowMs - prev.atMs) / 1000;
+    if (dt < 0.5)
+        return { rxRateBps: null, txRateBps: null };
+    const pr = prev.byKey[key];
+    const dRx = rx - pr.rx;
+    const dTx = tx - pr.tx;
+    // counters can reset
+    if (dRx < 0 || dTx < 0)
+        return { rxRateBps: null, txRateBps: null };
+    return {
+        rxRateBps: Math.round(dRx / dt),
+        txRateBps: Math.round(dTx / dt),
+    };
+}
+export async function runWgShowDump(host, iface) {
+    const cmd = iface
+        ? `wg show ${JSON.stringify(iface)} dump 2>/dev/null || true`
+        : `wg show all dump 2>/dev/null || true`;
+    const r = await host.runCommand(['bash', '-c', cmd], { timeoutMs: 10_000 });
+    return r.stdout || '';
+}
+export async function readOvpnStatusFile(host, dataDir) {
+    const paths = openVpnStatusCandidates(dataDir);
+    if (host.executeEnabled()) {
+        // First non-empty readable status file
+        const script = paths
+            .map((p) => `if [ -s ${JSON.stringify(p)} ]; then cat ${JSON.stringify(p)}; exit 0; fi`)
+            .join('\n');
+        const r = await host.runCommand(['bash', '-c', `${script}\ntrue`], {
+            timeoutMs: 8_000,
+        });
+        if (r.stdout?.trim())
+            return r.stdout;
+    }
+    for (const p of paths) {
+        if (!existsSync(p))
+            continue;
+        try {
+            const t = readFileSync(p, 'utf8');
+            if (t.trim())
+                return t;
+        }
+        catch {
+            /* */
+        }
+    }
+    return '';
+}
+/** Match control-plane peer to OpenVPN status client by CN or virtual IP. */
+export function matchOvpnControlPeer(client, controlPeers) {
+    const cn = client.commonName.trim().toLowerCase();
+    const vip = normalizeTunnelIp(client.virtualAddress);
+    const byCn = controlPeers.find((p) => p.name.trim().toLowerCase() === cn);
+    if (byCn)
+        return byCn;
+    if (vip) {
+        const byIp = controlPeers.find((p) => normalizeTunnelIp(p.address) === vip);
+        if (byIp)
+            return byIp;
+    }
+    return undefined;
+}
+export async function probeServerActive(host, engine) {
+    if (!host.executeEnabled())
+        return false;
+    if (engine === 'wireguard') {
+        const r = await host.runCommand([
+            'bash',
+            '-c',
+            'wg show wg0 >/dev/null 2>&1 || systemctl is-active --quiet wg-quick@wg0',
+        ], { timeoutMs: 8_000 });
+        return r.exitCode === 0;
+    }
+    if (engine === 'openvpn') {
+        const r = await host.runCommand([
+            'bash',
+            '-c',
+            'systemctl is-active --quiet openvpn-server@ysk || systemctl is-active --quiet openvpn@ysk || pgrep -x openvpn >/dev/null',
+        ], { timeoutMs: 8_000 });
+        return r.exitCode === 0;
+    }
+    const r = await host.runCommand([
+        'bash',
+        '-c',
+        // YSK unit = healthy. Do NOT treat package shadowsocks-libev (often localhost-only) as up.
+        "systemctl is-active --quiet ysk-ss-server.service 2>/dev/null || systemctl is-active --quiet ysk-ss-server 2>/dev/null || { pgrep -x ss-server >/dev/null 2>&1 && ss -lntup 2>/dev/null | grep -F ss-server | grep -vqE '127\\.0\\.0\\.1|\\[::1\\]'; }",
+    ], { timeoutMs: 8_000 });
+    return r.exitCode === 0;
+}
+/**
+ * Build full monitor snapshot from control plane + live probes.
+ */
+export async function buildMonitorSnapshot(input) {
+    const nowMs = input.nowMs ?? Date.now();
+    const nowSec = Math.floor(nowMs / 1000);
+    const sampledAt = new Date(nowMs).toISOString();
+    const notes = [];
+    const canLive = input.host.executeEnabled() && input.host.isRoot();
+    const blocked = !canLive;
+    if (blocked) {
+        notes.push('Live metrics need root + YSK_EXECUTE');
+    }
+    const byKey = {};
+    const peers = [];
+    // —— WireGuard live ——
+    let wgDumpPeers = [];
+    let wgActive = false;
+    if (canLive) {
+        wgActive = await probeServerActive(input.host, 'wireguard');
+        const dump = await runWgShowDump(input.host);
+        const parsed = parseWgDump(dump);
+        wgDumpPeers = parsed.peers.filter((p) => p.iface === 'wg0' || p.iface.startsWith('wg'));
+    }
+    const wgCp = input.controlPeers.filter((p) => p.engine === 'wireguard');
+    const wgByPub = new Map(wgCp.map((p) => [p.publicKey, p]));
+    const matchedWgPubs = new Set();
+    let wgRx = 0;
+    let wgTx = 0;
+    let wgOnline = 0;
+    for (const live of wgDumpPeers) {
+        // Only server iface peers (wg0); client ifaces handled under localClients
+        if (live.iface !== 'wg0')
+            continue;
+        const cp = wgByPub.get(live.publicKey);
+        matchedWgPubs.add(live.publicKey);
+        const presence = presenceFromHandshake(live.latestHandshake, nowSec);
+        if (presence === 'online')
+            wgOnline += 1;
+        wgRx += live.transferRx;
+        wgTx += live.transferTx;
+        const id = cp?.id ?? `wg-live:${live.publicKey.slice(0, 12)}`;
+        const key = `peer:${id}`;
+        byKey[key] = { rx: live.transferRx, tx: live.transferTx };
+        const rates = rateFromPrev(key, live.transferRx, live.transferTx, nowMs, input.prev);
+        peers.push({
+            id,
+            name: cp?.name ?? `unknown ${live.publicKey.slice(0, 8)}…`,
+            engine: 'wireguard',
+            address: cp?.address || live.allowedIps || '—',
+            publicKey: live.publicKey,
+            endpoint: live.endpoint || null,
+            online: presence === 'online',
+            presence,
+            lastHandshakeAt: live.latestHandshake > 0
+                ? new Date(live.latestHandshake * 1000).toISOString()
+                : null,
+            transferRx: live.transferRx,
+            transferTx: live.transferTx,
+            rxRateBps: rates.rxRateBps,
+            txRateBps: rates.txRateBps,
+            connectedSince: null,
+        });
+    }
+    // Control-plane WG peers with no live row
+    for (const cp of wgCp) {
+        if (matchedWgPubs.has(cp.publicKey))
+            continue;
+        peers.push({
+            id: cp.id,
+            name: cp.name,
+            engine: 'wireguard',
+            address: cp.address,
+            publicKey: cp.publicKey,
+            endpoint: null,
+            online: false,
+            presence: canLive ? 'never' : 'unknown',
+            lastHandshakeAt: null,
+            transferRx: canLive ? 0 : null,
+            transferTx: canLive ? 0 : null,
+            rxRateBps: null,
+            txRateBps: null,
+            connectedSince: null,
+        });
+    }
+    // —— OpenVPN ——
+    let ovpnActive = false;
+    let ovpnClients = [];
+    if (canLive) {
+        ovpnActive = await probeServerActive(input.host, 'openvpn');
+        const st = await readOvpnStatusFile(input.host, input.dataDir);
+        if (st.trim()) {
+            ovpnClients = parseOvpnStatus(st);
+        }
+        else if (ovpnActive) {
+            notes.push('OpenVPN status file missing — re-apply server for live sessions');
+        }
+    }
+    const ovpnCp = input.controlPeers.filter((p) => p.engine === 'openvpn');
+    const matchedOvpnIds = new Set();
+    let ovpnRx = 0;
+    let ovpnTx = 0;
+    let ovpnOnline = 0;
+    for (const c of ovpnClients) {
+        ovpnOnline += 1;
+        ovpnRx += c.bytesReceived;
+        ovpnTx += c.bytesSent;
+        const cp = matchOvpnControlPeer(c, ovpnCp);
+        if (cp)
+            matchedOvpnIds.add(cp.id);
+        const id = cp?.id ?? `ovpn-live:${c.commonName}`;
+        const key = `peer:${id}`;
+        byKey[key] = { rx: c.bytesReceived, tx: c.bytesSent };
+        const rates = rateFromPrev(key, c.bytesReceived, c.bytesSent, nowMs, input.prev);
+        peers.push({
+            id,
+            name: cp?.name ?? c.commonName,
+            engine: 'openvpn',
+            address: cp?.address || c.virtualAddress || '—',
+            publicKey: '',
+            endpoint: c.realAddress || null,
+            online: true,
+            presence: 'online',
+            lastHandshakeAt: c.connectedSince,
+            transferRx: c.bytesReceived,
+            transferTx: c.bytesSent,
+            rxRateBps: rates.rxRateBps,
+            txRateBps: rates.txRateBps,
+            connectedSince: c.connectedSince,
+        });
+    }
+    for (const cp of ovpnCp) {
+        if (matchedOvpnIds.has(cp.id))
+            continue;
+        peers.push({
+            id: cp.id,
+            name: cp.name,
+            engine: 'openvpn',
+            address: cp.address,
+            publicKey: '',
+            endpoint: null,
+            online: false,
+            presence: canLive ? 'offline' : 'unknown',
+            lastHandshakeAt: null,
+            transferRx: canLive ? 0 : null,
+            transferTx: canLive ? 0 : null,
+            rxRateBps: null,
+            txRateBps: null,
+            connectedSince: null,
+        });
+    }
+    // —— Shadowsocks (server KPI only; no per-key live) ——
+    let ssActive = false;
+    if (canLive) {
+        ssActive = await probeServerActive(input.host, 'outline');
+    }
+    const ssCp = input.controlPeers.filter((p) => p.engine === 'outline');
+    for (const cp of ssCp) {
+        peers.push({
+            id: cp.id,
+            name: cp.name,
+            engine: 'outline',
+            address: cp.address || '—',
+            publicKey: '',
+            endpoint: null,
+            online: false,
+            presence: 'unknown',
+            lastHandshakeAt: null,
+            transferRx: null,
+            transferTx: null,
+            rxRateBps: null,
+            txRateBps: null,
+            connectedSince: null,
+        });
+    }
+    // —— Local clients ——
+    const localClients = [];
+    for (const c of input.controlClients) {
+        let transferRx = null;
+        let transferTx = null;
+        let status = c.status === 'up' || c.status === 'down' ? c.status : 'unknown';
+        if (canLive && c.engine === 'wireguard' && c.iface) {
+            const dump = await runWgShowDump(input.host, c.iface);
+            const parsed = parseWgDump(dump);
+            // For client iface, interface is up if dump non-empty; sum peer transfer on that iface
+            if (parsed.interfaces.length || parsed.peers.length) {
+                status = 'up';
+                transferRx = 0;
+                transferTx = 0;
+                for (const p of parsed.peers) {
+                    transferRx += p.transferRx;
+                    transferTx += p.transferTx;
+                }
+            }
+            else {
+                status = 'down';
+                transferRx = 0;
+                transferTx = 0;
+            }
+        }
+        else if (canLive && c.engine === 'openvpn') {
+            // best-effort unit
+            const r = await input.host.runCommand([
+                'bash',
+                '-c',
+                `systemctl is-active --quiet openvpn-client@${c.iface} || systemctl is-active --quiet openvpn@${c.iface}`,
+            ], { timeoutMs: 5_000 });
+            status = r.exitCode === 0 ? 'up' : 'down';
+        }
+        const key = `client:${c.id}`;
+        if (transferRx != null && transferTx != null) {
+            byKey[key] = { rx: transferRx, tx: transferTx };
+        }
+        const rates = transferRx != null && transferTx != null
+            ? rateFromPrev(key, transferRx, transferTx, nowMs, input.prev)
+            : { rxRateBps: null, txRateBps: null };
+        localClients.push({
+            id: c.id,
+            name: c.name,
+            engine: c.engine,
+            iface: c.iface,
+            status,
+            transferRx,
+            transferTx,
+            rxRateBps: rates.rxRateBps,
+            txRateBps: rates.txRateBps,
+        });
+    }
+    const engKey = (e) => `engine:${e}`;
+    byKey[engKey('wireguard')] = { rx: wgRx, tx: wgTx };
+    byKey[engKey('openvpn')] = { rx: ovpnRx, tx: ovpnTx };
+    const wgRates = rateFromPrev(engKey('wireguard'), wgRx, wgTx, nowMs, input.prev);
+    const ovpnRates = rateFromPrev(engKey('openvpn'), ovpnRx, ovpnTx, nowMs, input.prev);
+    const engines = [
+        {
+            engine: 'wireguard',
+            serverActive: wgActive,
+            onlineCount: wgOnline,
+            peerCount: wgCp.length,
+            transferRx: canLive ? wgRx : null,
+            transferTx: canLive ? wgTx : null,
+            rxRateBps: wgRates.rxRateBps,
+            txRateBps: wgRates.txRateBps,
+            notes: [],
+        },
+        {
+            engine: 'openvpn',
+            serverActive: ovpnActive,
+            onlineCount: ovpnOnline,
+            peerCount: ovpnCp.length,
+            transferRx: canLive ? ovpnRx : null,
+            transferTx: canLive ? ovpnTx : null,
+            rxRateBps: ovpnRates.rxRateBps,
+            txRateBps: ovpnRates.txRateBps,
+            notes: [],
+        },
+        {
+            engine: 'outline',
+            serverActive: ssActive,
+            onlineCount: 0,
+            peerCount: ssCp.length,
+            transferRx: null,
+            transferTx: null,
+            rxRateBps: null,
+            txRateBps: null,
+            notes: ['Per-key live sessions not available (shared password ss-server)'],
+        },
+    ];
+    // Sort: online first, then name
+    peers.sort((a, b) => {
+        if (a.online !== b.online)
+            return a.online ? -1 : 1;
+        return a.name.localeCompare(b.name, undefined, { sensitivity: 'base' });
+    });
+    return {
+        snapshot: {
+            sampledAt,
+            engines,
+            peers,
+            localClients,
+            blocked: blocked || undefined,
+            requiresExecute: !input.host.executeEnabled() || undefined,
+            requiresRoot: !input.host.isRoot() || undefined,
+            notes,
+        },
+        nextPrev: { atMs: nowMs, byKey },
+    };
+}
+//# sourceMappingURL=monitor.js.map

package/dist/hosting/vpn/monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"monitor.js","sourceRoot":"","sources":["../../../src/hosting/vpn/monitor.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAIjC,kDAAkD;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAwE3C,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,IAAY;IAItC,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,oEAAoE;QACpE,mFAAmF;QACnF,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACvC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC;gBACT,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;gBACxB,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrD,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACvD,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC3D,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBACxC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACtD,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,mBAA2B,EAC3B,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEtC,IAAI,CAAC,mBAAmB,IAAI,mBAAmB,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,GAAG,mBAAmB,CAAC;IACzC,IAAI,GAAG,IAAI,uBAAuB;QAAE,OAAO,QAAQ,CAAC;IACpD,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,OAAO,CAAC;AACjB,CAAC;AAYD,6FAA6F;AAC7F,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QAEjB,2BAA2B;QAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACjC,2IAA2I;YAC3I,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,aAAa;gBAAE,SAAS;YAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC;gBACP,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC3B,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC9B,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACrD,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBAC9D,cAAc,EACZ,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC;oBACzC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;oBAC1C,CAAC,CAAC,QAAQ,IAAI,IAAI;aACvB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;gBACzE,WAAW,GAAG,KAAK,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC/D,qEAAqE;YACrE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAC/B,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,OAAO;gBAAE,SAAS;YACpC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC;gBACP,UAAU,EAAE,EAAE;gBACd,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC3B,cAAc,EAAE,EAAE;gBAClB,aAAa,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACzD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACrD,kBAAkB,EAAE,CAAC;gBACrB,cAAc,EAAE,QAAQ,IAAI,IAAI;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,oCAAoC,CAAC;AAC9C,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,OAAO;QACL,oCAAoC;QACpC,oCAAoC;QACpC,gCAAgC;QAChC,iCAAiC;QACjC,wCAAwC;QACxC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACvD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,OAAO,MAAM,CAAC,IAAI,CAAC;SAChB,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACd,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAOD,MAAM,UAAU,YAAY,CAC1B,GAAW,EACX,EAAU,EACV,EAAU,EACV,KAAa,EACb,IAAuC;IAEvC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACtC,IAAI,EAAE,GAAG,GAAG;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACvB,qBAAqB;IACrB,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACpE,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAmBD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAkB,EAClB,KAAc;IAEd,MAAM,GAAG,GAAG,KAAK;QACf,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,2BAA2B;QAC7D,CAAC,CAAC,sCAAsC,CAAC;IAC3C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAkB,EAClB,OAAe;IAEf,MAAM,KAAK,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QAC1B,uCAAuC;QACvC,MAAM,MAAM,GAAG,KAAK;aACjB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,WAAW,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAC9E;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,QAAQ,CAAC,EAAE;YACjE,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IACxC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,IAAI,EAAE;gBAAE,OAAO,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,KAAK;QACP,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,oBAAoB,CAClC,MAAwB,EACxB,YAAgC;IAEhC,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAC5C,CAAC;QACF,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAkB,EAClB,MAAmB;IAEnB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;YACE,MAAM;YACN,IAAI;YACJ,yEAAyE;SAC1E,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;YACE,MAAM;YACN,IAAI;YACJ,0HAA0H;SAC3H,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;QACF,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,UAAU,CAC7B;QACE,MAAM;QACN,IAAI;QACJ,2FAA2F;QAC3F,wPAAwP;KACzP,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;IACF,OAAO,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAO1C;IACC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC;IACzB,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,KAAK,GAA+C,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAwB,EAAE,CAAC;IAEtC,uBAAuB;IACvB,IAAI,WAAW,GAAiB,EAAE,CAAC;IACnC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAExC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,0EAA0E;QAC1E,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;YAAE,SAAS;QACnC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrE,IAAI,QAAQ,KAAK,QAAQ;YAAE,QAAQ,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC;QACxB,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC;QACxB,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,QAAQ,EAAE,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACrF,KAAK,CAAC,IAAI,CAAC;YACT,EAAE;YACF,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;YAC1D,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC,UAAU,IAAI,GAAG;YAC9C,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;YAC/B,MAAM,EAAE,QAAQ,KAAK,QAAQ;YAC7B,QAAQ;YACR,eAAe,EACb,IAAI,CAAC,eAAe,GAAG,CAAC;gBACtB,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;gBACrD,CAAC,CAAC,IAAI;YACV,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC;YAAE,SAAS;QAC9C,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACvC,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB;IAChB,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,WAAW,GAAuB,EAAE,CAAC;IACzC,IAAI,OAAO,EAAE,CAAC;QACZ,UAAU,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACd,WAAW,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACxE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,UAAU,IAAI,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,CAAC,aAAa,CAAC;QAC1B,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC;QACtB,MAAM,EAAE,GAAG,oBAAoB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,EAAE;YAAE,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,aAAa,CAAC,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,EAAE,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC;YACT,EAAE;YACF,IAAI,EAAE,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,UAAU;YAC9B,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,EAAE,OAAO,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG;YAC/C,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;YAC/B,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ;YAClB,eAAe,EAAE,CAAC,CAAC,cAAc;YACjC,UAAU,EAAE,CAAC,CAAC,aAAa;YAC3B,UAAU,EAAE,CAAC,CAAC,SAAS;YACvB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;SACjC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAAE,SAAS;QACxC,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,CAAC,OAAO;YACnB,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACzC,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9B,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAED,uDAAuD;IACvD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACtE,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,EAAE,CAAC,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,GAAG;YAC1B,SAAS,EAAE,EAAE;YACb,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS;YACnB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,cAAc,EAAE,IAAI;SACrB,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,MAAM,GAA8B,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxG,IAAI,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACjC,uFAAuF;YACvF,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpD,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,GAAG,CAAC,CAAC;gBACf,UAAU,GAAG,CAAC,CAAC;gBACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;oBAC7B,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;oBAC3B,UAAU,IAAI,CAAC,CAAC,UAAU,CAAC;gBAC7B,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,MAAM,CAAC;gBAChB,UAAU,GAAG,CAAC,CAAC;gBACf,UAAU,GAAG,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7C,mBAAmB;YACnB,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CACnC;gBACE,MAAM;gBACN,IAAI;gBACJ,8CAA8C,CAAC,CAAC,KAAK,2CAA2C,CAAC,CAAC,KAAK,EAAE;aAC1G,EACD,EAAE,SAAS,EAAE,KAAK,EAAE,CACrB,CAAC;YACF,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC5C,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,UAAU,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,EAAE,CAAC;YAC7C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,GACT,UAAU,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI;YACtC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;YAC9D,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC3C,YAAY,CAAC,IAAI,CAAC;YAChB,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM;YACN,UAAU;YACV,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;IACjD,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACpD,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAErF,MAAM,OAAO,GAA0B;QACrC;YACE,MAAM,EAAE,WAAW;YACnB,YAAY,EAAE,QAAQ;YACtB,WAAW,EAAE,QAAQ;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACjC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACjC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,KAAK,EAAE,EAAE;SACV;QACD;YACE,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,UAAU;YACxB,WAAW,EAAE,UAAU;YACvB,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACnC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACnC,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,KAAK,EAAE,EAAE;SACV;QACD;YACE,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,QAAQ;YACtB,WAAW,EAAE,CAAC;YACd,SAAS,EAAE,IAAI,CAAC,MAAM;YACtB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,KAAK,EAAE,CAAC,iEAAiE,CAAC;SAC3E;KACF,CAAC;IAEF,gCAAgC;IAChC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE;YACR,SAAS;YACT,OAAO;YACP,KAAK;YACL,YAAY;YACZ,OAAO,EAAE,OAAO,IAAI,SAAS;YAC7B,eAAe,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,SAAS;YAC1D,YAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,SAAS;YAC/C,KAAK;SACN;QACD,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;KACjC,CAAC;AACJ,CAAC"}

package/dist/hosting/vpn/openvpn-conf.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Pure OpenVPN conf builders (no host I/O).
+ */
+import type { VpnAccessMode } from './types.js';
+export declare function buildOpenVpnServerConf(input: {
+    port: number;
+    proto: 'udp' | 'tcp';
+    serverNet?: string;
+    dns?: string;
+    caPath: string;
+    certPath: string;
+    keyPath: string;
+    dhPath: string;
+    taPath: string;
+    ccdDir: string;
+    /** status file for live CLIENT_LIST monitor (status-version 2) */
+    statusPath?: string;
+    accessMode?: VpnAccessMode;
+    lanCidrs?: string[];
+    customCidrs?: string[];
+}): string;
+export declare function buildOpenVpnClientOvpn(input: {
+    remote: string;
+    port: number;
+    proto: 'udp' | 'tcp';
+    caCrt: string;
+    clientCrt: string;
+    clientKey: string;
+    taKey: string;
+}): string;
+/** Next client IP in 10.8.0.0/24 (server .1). Returns dotted IP for ifconfig-push. */
+export declare function nextOpenVpnClientIp(used: string[]): string;
+export declare function openVpnClientUnitName(id: string): string;
+//# sourceMappingURL=openvpn-conf.d.ts.map

package/dist/hosting/vpn/openvpn-conf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openvpn-conf.d.ts","sourceRoot":"","sources":["../../../src/hosting/vpn/openvpn-conf.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB,GAAG,MAAM,CAwCT;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CA2BT;AAED,sFAAsF;AACtF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAW1D;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGxD"}