@allanoricil/nrg-sentinel 1.0.4 → 1.0.5

package/README.md

@@ -52,7 +52,9 @@ The table below is updated automatically after each CI run on `main`.
 | 32 | Flows Inject | ✅ | `4.1.7` |
 | 33 | Node Event Hijack | ✅ | `4.1.7` |
 | 34 | Config Node Credentials | ✅ | `4.1.7` |
-_Last updated: 2026-03-18T03:37:28Z_
+| 35 | Process Binding Bypass | ✅ | `4.1.7` |
+| 36 | ChildProcess Proto Bypass | ✅ | `4.1.7` |
+_Last updated: 2026-03-23T07:25:21Z_
 <!-- DEMO-TEST-RESULTS:END -->
 
 ## Demos
@@ -95,6 +97,8 @@ Each demo is a self-contained scenario that shows an attack against Node-RED and
 | 32  | Flows Inject                           | Injects a malicious node into the running flow via the flows API                 |
 | 33  | Node Event Hijack                 | Spies on or silences another node's input handler via EventEmitter APIs          |
 | 34  | Config Node Credentials    | Interactive: explores open / restricted / locked config-node credential access   |
+| 35  | Process Binding Bypass              | Uses `process.binding('spawn_sync')` to spawn processes, bypassing JS-level guards |
+| 36  | ChildProcess Proto Bypass        | Calls `ChildProcess.prototype.spawn()` directly, bypassing module-export guards  |
 
 ## Capability grants
 

package/bin/node-red.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 /**
- * @nrg/sentinel v1.0.4
+ * @nrg/sentinel v1.0.5
  * Copyright (c) 2026 NRG. All rights reserved.
  * Licensed under AGPL-3.0-or-later. Commercial license required for use beyond 14-day trial.
  * https://allanoricil.github.io/nrg-sentinel-public/
  */
-'use strict';const _0x4e2bbf=_0x3dc0;(function(stringArrayFunction,_0x5116c8){const _0x133a05=_0x3dc0,stringArray=stringArrayFunction();while(!![]){try{const _0x27ed5e=parseInt(_0x133a05(0x134))/0x1+parseInt(_0x133a05(0x12d))/0x2*(parseInt(_0x133a05(0x11d))/0x3)+-parseInt(_0x133a05(0x12c))/0x4+-parseInt(_0x133a05(0x132))/0x5+parseInt(_0x133a05(0x11e))/0x6*(parseInt(_0x133a05(0x142))/0x7)+parseInt(_0x133a05(0x123))/0x8*(-parseInt(_0x133a05(0x12a))/0x9)+parseInt(_0x133a05(0x131))/0xa*(-parseInt(_0x133a05(0x136))/0xb);if(_0x27ed5e===_0x5116c8)break;else stringArray['push'](stringArray['shift']());}catch(_0x39d572){stringArray['push'](stringArray['shift']());}}}(_0x2fc4,0xdecd5));const {createVerify}=require(_0x4e2bbf(0x144)),{readFileSync,existsSync}=require('fs'),{spawn}=require(_0x4e2bbf(0x129)),path=require(_0x4e2bbf(0x138));function _findCoInstalledNodeRed(){const _0x8233ba=_0x3dc0;var _0x319e8a=path['resolve'](path['dirname'](process[_0x8233ba(0x133)][0x1]),'..'),_0x474866=_0x319e8a;while(!![]){if('NsiGK'!==_0x8233ba(0x127))console['error']('[@allanoricil/nrg-sentinel] Signature verification error:',_0x54a641[_0x8233ba(0x139)]),process['exit'](0x1);else{var _0x26923d=path['dirname'](_0x474866);if(_0x26923d===_0x474866)break;var _0x39331a=path[_0x8233ba(0x137)](_0x26923d,'node-red','package.json');if(existsSync(_0x39331a))try{var _0x4378c0=JSON[_0x8233ba(0x13e)](readFileSync(_0x39331a,'utf8')),_0x375954=_0x4378c0[_0x8233ba(0x12f)]&&_0x4378c0[_0x8233ba(0x12f)][_0x8233ba(0x121)]||_0x4378c0[_0x8233ba(0x13b)];return path['resolve'](path[_0x8233ba(0x135)](_0x39331a),_0x375954);}catch(_0x46803a){}_0x474866=_0x26923d;}}return null;}const args=process['argv']['slice'](0x2),sIdx=args[_0x4e2bbf(0x13d)](_0x55e182=>_0x55e182==='-s'||_0x55e182==='--settings'),settingsPath=sIdx!==-0x1?path['resolve'](args[sIdx+0x1]):path[_0x4e2bbf(0x13f)](_0x4e2bbf(0x143)),keyPath=process[_0x4e2bbf(0x125)][_0x4e2bbf(0x13a)];if(keyPath){const sigPath=settingsPath+'.sig';!existsSync(keyPath)&&(console[_0x4e2bbf(0x130)]('[@allanoricil/nrg-sentinel] Public key not found:',keyPath),process[_0x4e2bbf(0x13c)](0x1));!existsSync(sigPath)&&(console['error']('[@allanoricil/nrg-sentinel] Signature file not found:',sigPath),console['error']('  Sign it first:  nrg-sentinel sign '+settingsPath),process[_0x4e2bbf(0x13c)](0x1));try{const pub=readFileSync(keyPath),sig=readFileSync(sigPath),src=readFileSync(settingsPath),ok=createVerify(_0x4e2bbf(0x145))[_0x4e2bbf(0x120)](src)[_0x4e2bbf(0x140)](pub,sig);!ok&&(console['error']('[@allanoricil/nrg-sentinel] settings.js signature INVALID \u2014 aborting.'),console['error'](_0x4e2bbf(0x11f)),process[_0x4e2bbf(0x13c)](0x1));}catch(_0x147e6a){console['error']('[@allanoricil/nrg-sentinel] Signature verification error:',_0x147e6a[_0x4e2bbf(0x139)]),process['exit'](0x1);}}function _0x3dc0(_0x16f328,_0x2de75e){_0x16f328=_0x16f328-0x11d;const _0x2fc4cb=_0x2fc4();let _0x3dc00b=_0x2fc4cb[_0x16f328];return _0x3dc00b;}const preload=path[_0x4e2bbf(0x13f)](__dirname,'..','preload.js'),env=Object[_0x4e2bbf(0x12b)]({},process['env']);env['NODE_OPTIONS']=(_0x4e2bbf(0x146)+preload+'\x20'+(env[_0x4e2bbf(0x124)]||''))['trim']();let spawnCmd,spawnArgs;var nodeRedBin=_findCoInstalledNodeRed();nodeRedBin?(spawnCmd=process[_0x4e2bbf(0x126)],spawnArgs=[nodeRedBin,...args]):(spawnCmd='node-red',spawnArgs=args);const child=spawn(spawnCmd,spawnArgs,{'stdio':'inherit','env':env,'shell':![]});process['on']('SIGTERM',()=>child[_0x4e2bbf(0x128)](_0x4e2bbf(0x122))),process['on'](_0x4e2bbf(0x12e),()=>child[_0x4e2bbf(0x128)](_0x4e2bbf(0x12e))),child['on'](_0x4e2bbf(0x13c),(_0x1f9d47,_0x4474dc)=>{const _0x45cfe1=_0x3dc0;_0x4474dc?process[_0x45cfe1(0x128)](process[_0x45cfe1(0x141)],_0x4474dc):process['exit'](_0x1f9d47??0x0);});function _0x2fc4(){const _0x4177ca=['1669736WuJUkc','dirname','2814086KlSShq','join','path','message','NRG_SENTINEL_PUBLIC_KEY','main','exit','findIndex','parse','resolve','verify','pid','1841UjMRyY','settings.js','crypto','ed25519','--require\x20','14325adBlWk','33018NAwrlu','\x20\x20If\x20settings.js\x20was\x20intentionally\x20changed,\x20re-sign\x20it.','update','node-red','SIGTERM','4648WvDEfN','NODE_OPTIONS','env','execPath','NsiGK','kill','child_process','2817nPcgke','assign','6605448BrAwhD','454WwEEmH','SIGINT','bin','error','50RcvglR','880040KSYvUI','argv'];_0x2fc4=function(){return _0x4177ca;};return _0x2fc4();}
+'use strict';const _0x1eb6c7=_0x5347;(function(stringArrayFunction,_0x41ca1f){const _0x3b9d=_0x5347,stringArray=stringArrayFunction();while(!![]){try{const _0x513a72=-parseInt(_0x3b9d(0xe6))/0x1*(parseInt(_0x3b9d(0xd7))/0x2)+-parseInt(_0x3b9d(0xdf))/0x3+-parseInt(_0x3b9d(0xf2))/0x4*(-parseInt(_0x3b9d(0xe5))/0x5)+parseInt(_0x3b9d(0xf8))/0x6+parseInt(_0x3b9d(0xee))/0x7+parseInt(_0x3b9d(0xf0))/0x8*(-parseInt(_0x3b9d(0xf7))/0x9)+parseInt(_0x3b9d(0xdb))/0xa*(parseInt(_0x3b9d(0xe0))/0xb);if(_0x513a72===_0x41ca1f)break;else stringArray['push'](stringArray['shift']());}catch(_0xb44558){stringArray['push'](stringArray['shift']());}}}(_0x29d9,0x7e101));function _0x29d9(){const _0x500e05=['11920XBsVHB','resolve','crypto','ed25519','2578290mANlEG','4664bZncbW','settings.js','node-red','NODE_OPTIONS','env','385aCghEU','1CBiJry','assign','findIndex','join','kill','trim','path','dirname','3911859GbToOk','argv','8NuRVKI','exit','28412IUpOmD','inherit','child_process','error','--require\x20','5429889lzRelw','3254994SsZUQA','349142suesIN','SIGINT','bin','SIGTERM'];_0x29d9=function(){return _0x500e05;};return _0x29d9();}function _0x5347(_0x2f00e0,_0x16e9a8){_0x2f00e0=_0x2f00e0-0xd7;const _0x29d935=_0x29d9();let _0x534711=_0x29d935[_0x2f00e0];return _0x534711;}const {createVerify}=require(_0x1eb6c7(0xdd)),{readFileSync,existsSync}=require('fs'),{spawn}=require(_0x1eb6c7(0xf4)),path=require(_0x1eb6c7(0xec));function _findCoInstalledNodeRed(){const _0x41c2b8=_0x5347;var _0x153754=path[_0x41c2b8(0xdc)](path[_0x41c2b8(0xed)](process[_0x41c2b8(0xef)][0x1]),'..'),_0x3bfa8a=_0x153754;while(!![]){var _0x437f29=path['dirname'](_0x3bfa8a);if(_0x437f29===_0x3bfa8a)break;var _0x3d1eaa=path[_0x41c2b8(0xe9)](_0x437f29,'node-red','package.json');if(existsSync(_0x3d1eaa))try{var _0x3f153f=JSON['parse'](readFileSync(_0x3d1eaa,'utf8')),_0x1b6701=_0x3f153f[_0x41c2b8(0xd9)]&&_0x3f153f['bin'][_0x41c2b8(0xe2)]||_0x3f153f['main'];return path[_0x41c2b8(0xdc)](path[_0x41c2b8(0xed)](_0x3d1eaa),_0x1b6701);}catch(_0x580386){}_0x3bfa8a=_0x437f29;}return null;}const args=process['argv']['slice'](0x2),sIdx=args[_0x1eb6c7(0xe8)](_0x1452c7=>_0x1452c7==='-s'||_0x1452c7==='--settings'),settingsPath=sIdx!==-0x1?path[_0x1eb6c7(0xdc)](args[sIdx+0x1]):path[_0x1eb6c7(0xdc)](_0x1eb6c7(0xe1)),keyPath=process[_0x1eb6c7(0xe4)]['NRG_SENTINEL_PUBLIC_KEY'];if(keyPath){const sigPath=settingsPath+'.sig';!existsSync(keyPath)&&(console['error']('[@allanoricil/nrg-sentinel] Public key not found:',keyPath),process[_0x1eb6c7(0xf1)](0x1));!existsSync(sigPath)&&(console[_0x1eb6c7(0xf5)]('[@allanoricil/nrg-sentinel] Signature file not found:',sigPath),console['error']('  Sign it first:  nrg-sentinel sign '+settingsPath),process['exit'](0x1));try{const pub=readFileSync(keyPath),sig=readFileSync(sigPath),src=readFileSync(settingsPath),ok=createVerify(_0x1eb6c7(0xde))['update'](src)['verify'](pub,sig);!ok&&(console['error']('[@allanoricil/nrg-sentinel] settings.js signature INVALID \u2014 aborting.'),console['error']('\x20\x20If\x20settings.js\x20was\x20intentionally\x20changed,\x20re-sign\x20it.'),process['exit'](0x1));}catch(_0x5e968c){console['error']('[@allanoricil/nrg-sentinel] Signature verification error:',_0x5e968c['message']),process['exit'](0x1);}}const preload=path[_0x1eb6c7(0xdc)](__dirname,'..','preload.js'),env=Object[_0x1eb6c7(0xe7)]({},process['env']);env['NODE_OPTIONS']=(_0x1eb6c7(0xf6)+preload+'\x20'+(env[_0x1eb6c7(0xe3)]||''))[_0x1eb6c7(0xeb)]();let spawnCmd,spawnArgs;var nodeRedBin=_findCoInstalledNodeRed();nodeRedBin?(spawnCmd=process['execPath'],spawnArgs=[nodeRedBin,...args]):(spawnCmd=_0x1eb6c7(0xe2),spawnArgs=args);const child=spawn(spawnCmd,spawnArgs,{'stdio':_0x1eb6c7(0xf3),'env':env,'shell':![]});process['on'](_0x1eb6c7(0xda),()=>child['kill'](_0x1eb6c7(0xda))),process['on'](_0x1eb6c7(0xd8),()=>child[_0x1eb6c7(0xea)](_0x1eb6c7(0xd8))),child['on'](_0x1eb6c7(0xf1),(_0x2e1cc4,_0x19f087)=>{_0x19f087?process['kill'](process['pid'],_0x19f087):'jGXaL'!=='jGXaL'?(_0x391a35=process['execPath'],_0x1d8e54=[_0x5d694b,..._0x48cf28]):process['exit'](_0x2e1cc4??0x0);});

package/flow-diff.js

@@ -1,7 +1,7 @@
 /**
- * @nrg/sentinel v1.0.4
+ * @nrg/sentinel v1.0.5
  * Copyright (c) 2026 NRG. All rights reserved.
  * Licensed under AGPL-3.0-or-later. Commercial license required for use beyond 14-day trial.
  * https://allanoricil.github.io/nrg-sentinel-public/
  */
-'use strict';var _0x426c14=_0x7169;(function(stringArrayFunction,_0x41f9ca){var _0x1b7ac5=_0x7169,stringArray=stringArrayFunction();while(!![]){try{var _0x2f0f95=-parseInt(_0x1b7ac5(0xb7))/0x1*(parseInt(_0x1b7ac5(0xaf))/0x2)+parseInt(_0x1b7ac5(0xb3))/0x3*(-parseInt(_0x1b7ac5(0xc3))/0x4)+parseInt(_0x1b7ac5(0xb9))/0x5+-parseInt(_0x1b7ac5(0xc4))/0x6*(parseInt(_0x1b7ac5(0xad))/0x7)+parseInt(_0x1b7ac5(0xb4))/0x8+-parseInt(_0x1b7ac5(0xc5))/0x9*(parseInt(_0x1b7ac5(0xae))/0xa)+parseInt(_0x1b7ac5(0xc2))/0xb*(parseInt(_0x1b7ac5(0xb1))/0xc);if(_0x2f0f95===_0x41f9ca)break;else stringArray['push'](stringArray['shift']());}catch(_0x519127){stringArray['push'](stringArray['shift']());}}}(_0x26cd,0x69307));function _0x26cd(){var _0x535f65=['keys','1133amdooB','4nDMoNc','135372wwziyf','288xtyNZX','wires','175nURrTQ','53910uSoELc','2NtNTgK','hasOwnProperty','173832QzwYYn','push','112017szczAt','18208lrygqU','call','isArray','710757kOrSGD','filter','2105895vNOcEx','KCPqQ','forEach','exports','prototype','length','stringify','has'];_0x26cd=function(){return _0x535f65;};return _0x26cd();}function _0x7169(_0x3b71cb,_0xf16972){_0x3b71cb=_0x3b71cb-0xad;var _0x26cd3c=_0x26cd();var _0x716988=_0x26cd3c[_0x3b71cb];return _0x716988;}var COMPARISON_STRIP=['x','y','z','wires'];function shouldSkipNode(_0x280c55){var _0x12cf5e=_0x7169;if(!_0x280c55||!_0x280c55['id'])return!![];if(!Object['prototype']['hasOwnProperty']['call'](_0x280c55,'x')||!Object[_0x12cf5e(0xbd)][_0x12cf5e(0xb0)][_0x12cf5e(0xb5)](_0x280c55,'y'))return!![];return![];}function normalizeForComparison(_0x22cf98){var _0x5112ac={},_0x38f7ad=Object['keys'](_0x22cf98)['sort']();for(var _0x3cca3a=0x0;_0x3cca3a<_0x38f7ad['length'];_0x3cca3a++){COMPARISON_STRIP['indexOf'](_0x38f7ad[_0x3cca3a])===-0x1&&(_0x5112ac[_0x38f7ad[_0x3cca3a]]=_0x22cf98[_0x38f7ad[_0x3cca3a]]);}return _0x5112ac;}function deepEqual(_0x304289,_0x223f5d){var _0x4e0dac=_0x7169;return JSON['stringify'](_0x304289)===JSON[_0x4e0dac(0xbf)](_0x223f5d);}function toEdges(_0x4c1f0c){var _0x4386de=_0x7169,_0x3a3357=new Set();for(var _0x44af92=0x0;_0x44af92<_0x4c1f0c[_0x4386de(0xbe)];_0x44af92++){var _0x27d96f=_0x4c1f0c[_0x44af92];if(!_0x27d96f[_0x4386de(0xc6)]||!Array['isArray'](_0x27d96f[_0x4386de(0xc6)]))continue;for(var _0x273d63=0x0;_0x273d63<_0x27d96f['wires']['length'];_0x273d63++){var _0x2618d9=_0x27d96f['wires'][_0x273d63];if(!Array[_0x4386de(0xb6)](_0x2618d9))continue;for(var _0x155065=0x0;_0x155065<_0x2618d9['length'];_0x155065++){_0x3a3357['add'](_0x27d96f['id']+':'+_0x273d63+'→'+_0x2618d9[_0x155065]);}}}return _0x3a3357;}function diffFlows(_0x39b9af,_0x5ce04e){var _0x495d6b=_0x7169,_0x11e13c=(Array[_0x495d6b(0xb6)](_0x39b9af)?_0x39b9af:[])['filter'](function(_0x2a7505){var _0x166816=_0x7169;return'NiJbt'!==_0x166816(0xba)?!shouldSkipNode(_0x2a7505):!_0x4bf59b(_0x4c8aed);}),_0x435f20=(Array[_0x495d6b(0xb6)](_0x5ce04e)?_0x5ce04e:[])[_0x495d6b(0xb8)](function(_0x5cd506){return!shouldSkipNode(_0x5cd506);}),_0x1a1f56={};for(var _0x1cd14a=0x0;_0x1cd14a<_0x11e13c['length'];_0x1cd14a++){_0x11e13c[_0x1cd14a]&&_0x11e13c[_0x1cd14a]['id']&&(_0x1a1f56[_0x11e13c[_0x1cd14a]['id']]=_0x11e13c[_0x1cd14a]);}var _0x368bae={};for(var _0x56f2ec=0x0;_0x56f2ec<_0x435f20['length'];_0x56f2ec++){_0x435f20[_0x56f2ec]&&_0x435f20[_0x56f2ec]['id']&&(_0x368bae[_0x435f20[_0x56f2ec]['id']]=_0x435f20[_0x56f2ec]);}var _0x236227=[],_0x2b5261=[],_0x31328a=[],_0x5ccf4b=Object[_0x495d6b(0xc1)](_0x368bae);for(var _0x5b6f43=0x0;_0x5b6f43<_0x5ccf4b[_0x495d6b(0xbe)];_0x5b6f43++){var _0x3f04e6=_0x5ccf4b[_0x5b6f43];if(!_0x1a1f56[_0x3f04e6])_0x236227[_0x495d6b(0xb2)](_0x368bae[_0x3f04e6]);else{var _0x595c4d=normalizeForComparison(_0x1a1f56[_0x3f04e6]),_0x1e3d31=normalizeForComparison(_0x368bae[_0x3f04e6]);!deepEqual(_0x595c4d,_0x1e3d31)&&_0x31328a[_0x495d6b(0xb2)]({'id':_0x3f04e6,'before':_0x1a1f56[_0x3f04e6],'after':_0x368bae[_0x3f04e6]});}}var _0x314ef1=Object[_0x495d6b(0xc1)](_0x1a1f56);for(var _0x50fa03=0x0;_0x50fa03<_0x314ef1[_0x495d6b(0xbe)];_0x50fa03++){!_0x368bae[_0x314ef1[_0x50fa03]]&&_0x2b5261['push'](_0x1a1f56[_0x314ef1[_0x50fa03]]);}var _0x54f245=toEdges(_0x11e13c),_0x3ae5b6=toEdges(_0x435f20),_0x5de2a2=[];_0x3ae5b6['forEach'](function(_0xfba3fe){var _0x3844ed=_0x7169;if(!_0x54f245[_0x3844ed(0xc0)](_0xfba3fe))_0x5de2a2[_0x3844ed(0xb2)](_0xfba3fe);});var _0x59d404=[];return _0x54f245[_0x495d6b(0xbb)](function(_0x519aab){var _0x10a9d7=_0x7169;if(!_0x3ae5b6[_0x10a9d7(0xc0)](_0x519aab))_0x59d404['push'](_0x519aab);}),{'nodesAdded':_0x236227,'nodesRemoved':_0x2b5261,'nodesModified':_0x31328a,'connectionsAdded':_0x5de2a2,'connectionsRemoved':_0x59d404};}module[_0x426c14(0xbc)]={'diffFlows':diffFlows};
+'use strict';var _0x2e7feb=_0x28f8;(function(stringArrayFunction,_0x3e5b99){var _0x954ae=_0x28f8,stringArray=stringArrayFunction();while(!![]){try{var _0x1cb612=parseInt(_0x954ae(0xfb))/0x1+parseInt(_0x954ae(0xf4))/0x2*(parseInt(_0x954ae(0xe3))/0x3)+-parseInt(_0x954ae(0xec))/0x4+parseInt(_0x954ae(0xf8))/0x5+-parseInt(_0x954ae(0xe1))/0x6+-parseInt(_0x954ae(0xf9))/0x7*(parseInt(_0x954ae(0xf3))/0x8)+-parseInt(_0x954ae(0xfa))/0x9;if(_0x1cb612===_0x3e5b99)break;else stringArray['push'](stringArray['shift']());}catch(_0xe358d4){stringArray['push'](stringArray['shift']());}}}(_0x7cea,0x2d0d8));function _0x7cea(){var _0x262c6c=['1611288kNQcIw','283456ITpqNb','hasOwnProperty','200448INpOon','length','6ShIUMO','keys','VQLki','TdxJH','sort','stringify','has','push','exports','1083820YFNzpx','UcMWZ','prototype','jaJyY','forEach','vWMLx','wires','8136nxvrYH','255972ozuynx','isArray','call','filter','1481540gbBwaV','1155IftNUH'];_0x7cea=function(){return _0x262c6c;};return _0x7cea();}var COMPARISON_STRIP=['x','y','z',_0x2e7feb(0xf2)];function shouldSkipNode(_0x340db0){var _0x55103b=_0x28f8;if(!_0x340db0||!_0x340db0['id'])return!![];if(!Object['prototype']['hasOwnProperty'][_0x55103b(0xf6)](_0x340db0,'x')||!Object['prototype']['hasOwnProperty'][_0x55103b(0xf6)](_0x340db0,'y'))return!![];return![];}function normalizeForComparison(_0x6115da){var _0x144243=_0x28f8,_0x48bbb2={},_0x42eef3=Object[_0x144243(0xe4)](_0x6115da)['sort']();for(var _0x559ee3=0x0;_0x559ee3<_0x42eef3[_0x144243(0xe2)];_0x559ee3++){COMPARISON_STRIP['indexOf'](_0x42eef3[_0x559ee3])===-0x1&&(_0x48bbb2[_0x42eef3[_0x559ee3]]=_0x6115da[_0x42eef3[_0x559ee3]]);}return _0x48bbb2;}function deepEqual(_0x1ab5e0,_0x4b2e03){var _0xb10595=_0x28f8;return JSON[_0xb10595(0xe8)](_0x1ab5e0)===JSON[_0xb10595(0xe8)](_0x4b2e03);}function _0x28f8(_0x5511ad,_0x33517b){_0x5511ad=_0x5511ad-0xe0;var _0x7cea58=_0x7cea();var _0x28f8ec=_0x7cea58[_0x5511ad];return _0x28f8ec;}function toEdges(_0x2e1b88){var _0x3bab24=_0x28f8,_0x36edd5=new Set();for(var _0x9ecb9e=0x0;_0x9ecb9e<_0x2e1b88['length'];_0x9ecb9e++){var _0x282869=_0x2e1b88[_0x9ecb9e];if(!_0x282869[_0x3bab24(0xf2)]||!Array[_0x3bab24(0xf5)](_0x282869['wires']))continue;for(var _0x816234=0x0;_0x816234<_0x282869[_0x3bab24(0xf2)][_0x3bab24(0xe2)];_0x816234++){if(_0x3bab24(0xed)!=='UcMWZ')_0x4a8058[_0x286fce[_0x2ff0fe]['id']]=_0x283b2[_0x1b8532];else{var _0x5491d8=_0x282869['wires'][_0x816234];if(!Array[_0x3bab24(0xf5)](_0x5491d8))continue;for(var _0xdad3de=0x0;_0xdad3de<_0x5491d8[_0x3bab24(0xe2)];_0xdad3de++){_0x36edd5['add'](_0x282869['id']+':'+_0x816234+'→'+_0x5491d8[_0xdad3de]);}}}}return _0x36edd5;}function diffFlows(_0x58bea3,_0x18414b){var _0x267697=_0x28f8,_0xa92cda=(Array[_0x267697(0xf5)](_0x58bea3)?_0x58bea3:[])['filter'](function(_0x41448a){return!shouldSkipNode(_0x41448a);}),_0x5a23d0=(Array['isArray'](_0x18414b)?_0x18414b:[])[_0x267697(0xf7)](function(_0x16e409){var _0x508128=_0x28f8;if(_0x508128(0xe6)!==_0x508128(0xe5))return!shouldSkipNode(_0x16e409);else _0x5dc22b[_0x508128(0xea)](_0x360a3e[_0x5a924f[_0x1aad82]]);}),_0x4c43b7={};for(var _0x5794df=0x0;_0x5794df<_0xa92cda[_0x267697(0xe2)];_0x5794df++){_0xa92cda[_0x5794df]&&_0xa92cda[_0x5794df]['id']&&(_0x4c43b7[_0xa92cda[_0x5794df]['id']]=_0xa92cda[_0x5794df]);}var _0x257734={};for(var _0x3dc929=0x0;_0x3dc929<_0x5a23d0[_0x267697(0xe2)];_0x3dc929++){if('sFnBf'==='sFnBf')_0x5a23d0[_0x3dc929]&&_0x5a23d0[_0x3dc929]['id']&&(_0x257734[_0x5a23d0[_0x3dc929]['id']]=_0x5a23d0[_0x3dc929]);else{var _0x4e40db={},_0x31fc8b=Object['keys'](_0x3edf6a)[_0x267697(0xe7)]();for(var _0x2f9cfe=0x0;_0x2f9cfe<_0x31fc8b['length'];_0x2f9cfe++){_0x5d03a3['indexOf'](_0x31fc8b[_0x2f9cfe])===-0x1&&(_0x4e40db[_0x31fc8b[_0x2f9cfe]]=_0x5abd63[_0x31fc8b[_0x2f9cfe]]);}return _0x4e40db;}}var _0x2985d8=[],_0x509f74=[],_0x542508=[],_0x3f047d=Object[_0x267697(0xe4)](_0x257734);for(var _0x387e40=0x0;_0x387e40<_0x3f047d['length'];_0x387e40++){if('vWMLx'===_0x267697(0xf1)){var _0x3398f4=_0x3f047d[_0x387e40];if(!_0x4c43b7[_0x3398f4])_0x2985d8['push'](_0x257734[_0x3398f4]);else{var _0x16bf6b=normalizeForComparison(_0x4c43b7[_0x3398f4]),_0x232a4a=normalizeForComparison(_0x257734[_0x3398f4]);!deepEqual(_0x16bf6b,_0x232a4a)&&_0x542508[_0x267697(0xea)]({'id':_0x3398f4,'before':_0x4c43b7[_0x3398f4],'after':_0x257734[_0x3398f4]});}}else _0x55117c[_0x267697(0xea)](_0x339456[_0x4c1b5a]);}var _0xa550db=Object[_0x267697(0xe4)](_0x4c43b7);for(var _0x4e7b5b=0x0;_0x4e7b5b<_0xa550db['length'];_0x4e7b5b++){if(!_0x257734[_0xa550db[_0x4e7b5b]]){if('jaJyY'===_0x267697(0xef))_0x509f74['push'](_0x4c43b7[_0xa550db[_0x4e7b5b]]);else{var _0x4c47e5=_0x45af26[_0xadee65];if(!_0xfd08ba[_0x4c47e5])_0x4fc289[_0x267697(0xea)](_0x981dfb[_0x4c47e5]);else{var _0x3ac26e=_0x5cef55(_0x4223c5[_0x4c47e5]),_0x3fa2df=_0x2b7bc4(_0x4b56f0[_0x4c47e5]);!_0x52f771(_0x3ac26e,_0x3fa2df)&&_0x23f058['push']({'id':_0x4c47e5,'before':_0x3aaaa9[_0x4c47e5],'after':_0x1eab5c[_0x4c47e5]});}}}}var _0x337f4b=toEdges(_0xa92cda),_0x20b4b5=toEdges(_0x5a23d0),_0x47d210=[];_0x20b4b5[_0x267697(0xf0)](function(_0x49dd8a){var _0x4f7a53=_0x28f8;if('JjDCq'==='JjDCq'){if(!_0x337f4b[_0x4f7a53(0xe9)](_0x49dd8a))_0x47d210['push'](_0x49dd8a);}else{if(!_0x3769a3||!_0xc65f25['id'])return!![];if(!Object[_0x4f7a53(0xee)][_0x4f7a53(0xe0)][_0x4f7a53(0xf6)](_0x1846d9,'x')||!Object['prototype']['hasOwnProperty']['call'](_0x59954f,'y'))return!![];return![];}});var _0x1bb719=[];return _0x337f4b[_0x267697(0xf0)](function(_0x2257ec){var _0x5acbcc=_0x28f8;if(!_0x20b4b5['has'](_0x2257ec))_0x1bb719[_0x5acbcc(0xea)](_0x2257ec);}),{'nodesAdded':_0x2985d8,'nodesRemoved':_0x509f74,'nodesModified':_0x542508,'connectionsAdded':_0x47d210,'connectionsRemoved':_0x1bb719};}module[_0x2e7feb(0xeb)]={'diffFlows':diffFlows};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@allanoricil/nrg-sentinel",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Node-RED Runtime Security Hardening",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "AllanOricil",