@atlascrew/apparatus 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/apparatus.mjs +2 -0
- package/certs/server.crt +17 -0
- package/certs/server.key +28 -0
- package/dist/ai/client.js +104 -0
- package/dist/ai/client.js.map +1 -0
- package/dist/ai/personas.js +104 -0
- package/dist/ai/personas.js.map +1 -0
- package/dist/ai/redteam.js +1404 -0
- package/dist/ai/redteam.js.map +1 -0
- package/dist/ai/report-store.js +309 -0
- package/dist/ai/report-store.js.map +1 -0
- package/dist/app.js +525 -0
- package/dist/app.js.map +1 -0
- package/dist/attack-sim.js +69 -0
- package/dist/attack-sim.js.map +1 -0
- package/dist/attacker-tracker.js +276 -0
- package/dist/attacker-tracker.js.map +1 -0
- package/dist/blackhole.js +95 -0
- package/dist/blackhole.js.map +1 -0
- package/dist/chaos.js +88 -0
- package/dist/chaos.js.map +1 -0
- package/dist/cluster.js +462 -0
- package/dist/cluster.js.map +1 -0
- package/dist/config.js +61 -0
- package/dist/config.js.map +1 -0
- package/dist/deception.js +205 -0
- package/dist/deception.js.map +1 -0
- package/dist/demo-mode.js +109 -0
- package/dist/demo-mode.js.map +1 -0
- package/dist/dist-dashboard/assets/index-BsMhEnGu.js +648 -0
- package/dist/dist-dashboard/assets/index-CNOkYC_Q.css +10 -0
- package/dist/dist-dashboard/assets/index-CW2grvPC.js +648 -0
- package/dist/dist-dashboard/assets/logo/apparatus-favicon.svg +15 -0
- package/dist/dist-dashboard/assets/logo/apparatus-icon-dark.svg +24 -0
- package/dist/dist-dashboard/assets/logo/apparatus-icon-light.svg +24 -0
- package/dist/dist-dashboard/assets/logo/apparatus-logo-512.png +0 -0
- package/dist/dist-dashboard/assets/logo/apparatus-logo-dark.svg +18 -0
- package/dist/dist-dashboard/assets/logo/apparatus-logo.svg +17 -0
- package/dist/dist-dashboard/assets/logo/apple-touch-icon.png +0 -0
- package/dist/dist-dashboard/assets/logo/favicon-192.png +0 -0
- package/dist/dist-dashboard/assets/logo/favicon-32.png +0 -0
- package/dist/dist-dashboard/assets/logo/favicon.ico +0 -0
- package/dist/dist-dashboard/assets/logo/icon-192.png +0 -0
- package/dist/dist-dashboard/assets/logo/icon-512.png +0 -0
- package/dist/dist-dashboard/assets/logo/icon-light-512.png +0 -0
- package/dist/dist-dashboard/assets/react-vendor-DpRMSntD.js +1 -0
- package/dist/dist-dashboard/assets/router-DSc5pRwN.js +59 -0
- package/dist/dist-dashboard/docs-index.json +1577 -0
- package/dist/dist-dashboard/index.html +21 -0
- package/dist/dlp.js +40 -0
- package/dist/dlp.js.map +1 -0
- package/dist/drills.js +770 -0
- package/dist/drills.js.map +1 -0
- package/dist/echoHandler.js +113 -0
- package/dist/echoHandler.js.map +1 -0
- package/dist/escape/index.js +225 -0
- package/dist/escape/index.js.map +1 -0
- package/dist/escape/methods/dns.js +74 -0
- package/dist/escape/methods/dns.js.map +1 -0
- package/dist/escape/methods/http.js +81 -0
- package/dist/escape/methods/http.js.map +1 -0
- package/dist/escape/methods/icmp.js +36 -0
- package/dist/escape/methods/icmp.js.map +1 -0
- package/dist/escape/methods/tcp.js +38 -0
- package/dist/escape/methods/tcp.js.map +1 -0
- package/dist/escape/methods/udp.js +27 -0
- package/dist/escape/methods/udp.js.map +1 -0
- package/dist/escape/methods/websocket.js +37 -0
- package/dist/escape/methods/websocket.js.map +1 -0
- package/dist/forensics.js +111 -0
- package/dist/forensics.js.map +1 -0
- package/dist/generator.js +67 -0
- package/dist/generator.js.map +1 -0
- package/dist/ghosting.js +414 -0
- package/dist/ghosting.js.map +1 -0
- package/dist/graphql.js +44 -0
- package/dist/graphql.js.map +1 -0
- package/dist/history.js +40 -0
- package/dist/history.js.map +1 -0
- package/dist/imposter/creds.js +16 -0
- package/dist/imposter/creds.js.map +1 -0
- package/dist/imposter/index.js +44 -0
- package/dist/imposter/index.js.map +1 -0
- package/dist/imposter/providers/aws.js +103 -0
- package/dist/imposter/providers/aws.js.map +1 -0
- package/dist/imposter/providers/gcp.js +26 -0
- package/dist/imposter/providers/gcp.js.map +1 -0
- package/dist/index.js +53 -0
- package/dist/index.js.map +1 -0
- package/dist/infra-debug.js +68 -0
- package/dist/infra-debug.js.map +1 -0
- package/dist/jwt-debug.js +272 -0
- package/dist/jwt-debug.js.map +1 -0
- package/dist/kv.js +22 -0
- package/dist/kv.js.map +1 -0
- package/dist/lib/generators.js +43 -0
- package/dist/lib/generators.js.map +1 -0
- package/dist/lib/json.js +26 -0
- package/dist/lib/json.js.map +1 -0
- package/dist/logger.js +9 -0
- package/dist/logger.js.map +1 -0
- package/dist/metrics.js +20 -0
- package/dist/metrics.js.map +1 -0
- package/dist/mtd.js +30 -0
- package/dist/mtd.js.map +1 -0
- package/dist/oidc.js +69 -0
- package/dist/oidc.js.map +1 -0
- package/dist/persistence/cluster-state.js +47 -0
- package/dist/persistence/cluster-state.js.map +1 -0
- package/dist/persistence/deception-history.js +65 -0
- package/dist/persistence/deception-history.js.map +1 -0
- package/dist/persistence/drill-runs.js +138 -0
- package/dist/persistence/drill-runs.js.map +1 -0
- package/dist/persistence/request-history.js +41 -0
- package/dist/persistence/request-history.js.map +1 -0
- package/dist/persistence/scenario-catalog.js +73 -0
- package/dist/persistence/scenario-catalog.js.map +1 -0
- package/dist/persistence/status.js +51 -0
- package/dist/persistence/status.js.map +1 -0
- package/dist/persistence/tarpit-state.js +47 -0
- package/dist/persistence/tarpit-state.js.map +1 -0
- package/dist/persistence/webhook-store.js +69 -0
- package/dist/persistence/webhook-store.js.map +1 -0
- package/dist/proxy.js +28 -0
- package/dist/proxy.js.map +1 -0
- package/dist/ratelimit.js +32 -0
- package/dist/ratelimit.js.map +1 -0
- package/dist/redteam.js +442 -0
- package/dist/redteam.js.map +1 -0
- package/dist/scenarios.js +229 -0
- package/dist/scenarios.js.map +1 -0
- package/dist/scripting.js +30 -0
- package/dist/scripting.js.map +1 -0
- package/dist/self-healing.js +42 -0
- package/dist/self-healing.js.map +1 -0
- package/dist/sentinel.js +50 -0
- package/dist/sentinel.js.map +1 -0
- package/dist/server-bad-ssl.js +47 -0
- package/dist/server-bad-ssl.js.map +1 -0
- package/dist/server-grpc.js +66 -0
- package/dist/server-grpc.js.map +1 -0
- package/dist/server-http1.js +5 -0
- package/dist/server-http1.js.map +1 -0
- package/dist/server-http2.js +27 -0
- package/dist/server-http2.js.map +1 -0
- package/dist/server-icap.js +46 -0
- package/dist/server-icap.js.map +1 -0
- package/dist/server-l4.js +30 -0
- package/dist/server-l4.js.map +1 -0
- package/dist/server-mqtt.js +29 -0
- package/dist/server-mqtt.js.map +1 -0
- package/dist/server-protocols.js +18 -0
- package/dist/server-protocols.js.map +1 -0
- package/dist/server-redis.js +112 -0
- package/dist/server-redis.js.map +1 -0
- package/dist/server-smtp.js +66 -0
- package/dist/server-smtp.js.map +1 -0
- package/dist/server-syslog.js +23 -0
- package/dist/server-syslog.js.map +1 -0
- package/dist/server-ws.js +18 -0
- package/dist/server-ws.js.map +1 -0
- package/dist/sidecar/chaos/engine.js +41 -0
- package/dist/sidecar/chaos/engine.js.map +1 -0
- package/dist/sidecar/index.js +98 -0
- package/dist/sidecar/index.js.map +1 -0
- package/dist/simulator/dependency-graph.js +102 -0
- package/dist/simulator/dependency-graph.js.map +1 -0
- package/dist/simulator/supply-chain.js +67 -0
- package/dist/simulator/supply-chain.js.map +1 -0
- package/dist/sink.js +24 -0
- package/dist/sink.js.map +1 -0
- package/dist/sse-broadcast.js +105 -0
- package/dist/sse-broadcast.js.map +1 -0
- package/dist/swagger.js +309 -0
- package/dist/swagger.js.map +1 -0
- package/dist/sysinfo.js +36 -0
- package/dist/sysinfo.js.map +1 -0
- package/dist/tarpit.js +126 -0
- package/dist/tarpit.js.map +1 -0
- package/dist/tool-executor.js +315 -0
- package/dist/tool-executor.js.map +1 -0
- package/dist/tui/api-client.js +341 -0
- package/dist/tui/api-client.js.map +1 -0
- package/dist/tui/core/action-handler.js +302 -0
- package/dist/tui/core/action-handler.js.map +1 -0
- package/dist/tui/core/index.js +18 -0
- package/dist/tui/core/index.js.map +1 -0
- package/dist/tui/core/keyboard.js +329 -0
- package/dist/tui/core/keyboard.js.map +1 -0
- package/dist/tui/core/modal.js +397 -0
- package/dist/tui/core/modal.js.map +1 -0
- package/dist/tui/core/screen-manager.js +262 -0
- package/dist/tui/core/screen-manager.js.map +1 -0
- package/dist/tui/core/store.js +254 -0
- package/dist/tui/core/store.js.map +1 -0
- package/dist/tui/core/widget.js +167 -0
- package/dist/tui/core/widget.js.map +1 -0
- package/dist/tui/dashboard.js +649 -0
- package/dist/tui/dashboard.js.map +1 -0
- package/dist/tui/index.js +118 -0
- package/dist/tui/index.js.map +1 -0
- package/dist/tui/modals/add-rule-modal.js +190 -0
- package/dist/tui/modals/add-rule-modal.js.map +1 -0
- package/dist/tui/modals/dlp-output-modal.js +102 -0
- package/dist/tui/modals/dlp-output-modal.js.map +1 -0
- package/dist/tui/modals/dns-form-modal.js +26 -0
- package/dist/tui/modals/dns-form-modal.js.map +1 -0
- package/dist/tui/modals/ghost-config-modal.js +35 -0
- package/dist/tui/modals/ghost-config-modal.js.map +1 -0
- package/dist/tui/modals/har-results-modal.js +41 -0
- package/dist/tui/modals/har-results-modal.js.map +1 -0
- package/dist/tui/modals/index.js +15 -0
- package/dist/tui/modals/index.js.map +1 -0
- package/dist/tui/modals/jwt-decode-modal.js +45 -0
- package/dist/tui/modals/jwt-decode-modal.js.map +1 -0
- package/dist/tui/modals/jwt-mint-modal.js +70 -0
- package/dist/tui/modals/jwt-mint-modal.js.map +1 -0
- package/dist/tui/modals/ping-form-modal.js +19 -0
- package/dist/tui/modals/ping-form-modal.js.map +1 -0
- package/dist/tui/modals/redteam-results-modal.js +43 -0
- package/dist/tui/modals/redteam-results-modal.js.map +1 -0
- package/dist/tui/modals/scan-form-modal.js +26 -0
- package/dist/tui/modals/scan-form-modal.js.map +1 -0
- package/dist/tui/screens/defense-screen.js +281 -0
- package/dist/tui/screens/defense-screen.js.map +1 -0
- package/dist/tui/screens/forensics-screen.js +81 -0
- package/dist/tui/screens/forensics-screen.js.map +1 -0
- package/dist/tui/screens/index.js +140 -0
- package/dist/tui/screens/index.js.map +1 -0
- package/dist/tui/screens/system-screen.js +81 -0
- package/dist/tui/screens/system-screen.js.map +1 -0
- package/dist/tui/screens/testing-screen.js +429 -0
- package/dist/tui/screens/testing-screen.js.map +1 -0
- package/dist/tui/screens/traffic-screen.js +76 -0
- package/dist/tui/screens/traffic-screen.js.map +1 -0
- package/dist/tui/sse-client.js +130 -0
- package/dist/tui/sse-client.js.map +1 -0
- package/dist/tui/state/metrics-buffer.js +195 -0
- package/dist/tui/state/metrics-buffer.js.map +1 -0
- package/dist/tui/state/metrics-buffer.test.js +102 -0
- package/dist/tui/state/metrics-buffer.test.js.map +1 -0
- package/dist/tui/theme.js +136 -0
- package/dist/tui/theme.js.map +1 -0
- package/dist/tui/types.js +6 -0
- package/dist/tui/types.js.map +1 -0
- package/dist/tui/widgets/chaos-widget.js +152 -0
- package/dist/tui/widgets/chaos-widget.js.map +1 -0
- package/dist/tui/widgets/cluster-widget.js +156 -0
- package/dist/tui/widgets/cluster-widget.js.map +1 -0
- package/dist/tui/widgets/dlp-widget.js +161 -0
- package/dist/tui/widgets/dlp-widget.js.map +1 -0
- package/dist/tui/widgets/ghost-widget.js +169 -0
- package/dist/tui/widgets/ghost-widget.js.map +1 -0
- package/dist/tui/widgets/har-widget.js +173 -0
- package/dist/tui/widgets/har-widget.js.map +1 -0
- package/dist/tui/widgets/index.js +122 -0
- package/dist/tui/widgets/index.js.map +1 -0
- package/dist/tui/widgets/jwt-widget.js +177 -0
- package/dist/tui/widgets/jwt-widget.js.map +1 -0
- package/dist/tui/widgets/kv-widget.js +261 -0
- package/dist/tui/widgets/kv-widget.js.map +1 -0
- package/dist/tui/widgets/mtd-widget.js +181 -0
- package/dist/tui/widgets/mtd-widget.js.map +1 -0
- package/dist/tui/widgets/netdiag-widget.js +155 -0
- package/dist/tui/widgets/netdiag-widget.js.map +1 -0
- package/dist/tui/widgets/oidc-widget.js +162 -0
- package/dist/tui/widgets/oidc-widget.js.map +1 -0
- package/dist/tui/widgets/pcap-widget.js +239 -0
- package/dist/tui/widgets/pcap-widget.js.map +1 -0
- package/dist/tui/widgets/redteam-widget.js +155 -0
- package/dist/tui/widgets/redteam-widget.js.map +1 -0
- package/dist/tui/widgets/rps-gauge-widget.js +124 -0
- package/dist/tui/widgets/rps-gauge-widget.js.map +1 -0
- package/dist/tui/widgets/sentinel-widget.js +171 -0
- package/dist/tui/widgets/sentinel-widget.js.map +1 -0
- package/dist/tui/widgets/sparklines-widget.js +127 -0
- package/dist/tui/widgets/sparklines-widget.js.map +1 -0
- package/dist/tui/widgets/sysinfo-widget.js +197 -0
- package/dist/tui/widgets/sysinfo-widget.js.map +1 -0
- package/dist/tui/widgets/traffic-chart-widget.js +170 -0
- package/dist/tui/widgets/traffic-chart-widget.js.map +1 -0
- package/dist/tui/widgets/webhook-widget.js +259 -0
- package/dist/tui/widgets/webhook-widget.js.map +1 -0
- package/dist/utils/ip.js +18 -0
- package/dist/utils/ip.js.map +1 -0
- package/dist/victim/index.js +71 -0
- package/dist/victim/index.js.map +1 -0
- package/dist/webhook.js +88 -0
- package/dist/webhook.js.map +1 -0
- package/package.json +90 -0
- package/proto/echo.proto +19 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"redteam.js","sourceRoot":"","sources":["../src/redteam.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAEjC,MAAM,QAAQ,GAAG;IACb,GAAG,EAAE;QACD,2BAA2B;QAC3B,qBAAqB;QACrB,8BAA8B;QAC9B,uBAAuB;QACvB,4BAA4B;QAC5B,sCAAsC;QACtC,iEAAiE;KACpE;IACD,IAAI,EAAE;QACF,aAAa;QACb,sBAAsB;QACtB,WAAW;QACX,cAAc;QACd,oDAAoD;QACpD,mBAAmB;QACnB,sBAAsB;QACtB,mCAAmC;QACnC,mBAAmB;QACnB,aAAa;QACb,UAAU;KACb;IACD,aAAa,EAAE;QACX,kBAAkB;QAClB,sBAAsB;QACtB,gCAAgC;QAChC,8BAA8B;QAC9B,yBAAyB;KAC5B;IACD,YAAY,EAAE;QACV,mBAAmB;QACnB,UAAU;QACV,WAAW;QACX,UAAU;QACV,UAAU;QACV,MAAM;QACN,UAAU;QACV,oBAAoB;QACpB,WAAW;QACX,UAAU;QACV,OAAO;QACP,oBAAoB;QACpB,SAAS;QACT,WAAW;QACX,eAAe;KAClB;IACD,MAAM,EAAE;QACJ,cAAc;QACd,gBAAgB;QAChB,qDAAqD;KACxD;IACD,cAAc,EAAE;QACZ,wCAAwC;QACxC,+BAA+B;QAC/B,mBAAmB;QACnB,mDAAmD;KACtD;IACD,SAAS,EAAE;QACP,gHAAgH;QAChH,0CAA0C;QAC1C,sDAAsD;QACtD,0DAA0D;KAC7D;CACJ,CAAC;AAEF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC5E,MAAM,6BAA6B,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,8CAA8C;AAC9G,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAChG,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACjE,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC3C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACjC,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;AAchF,SAAS,aAAa,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,CAAC;IAChG,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,eAAe,CAAC,MAAe;IACpC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAkB;IACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,OAAO,kBAAkB,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAc;IAC/C,OAAO,2BAA2B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,6BAA6B,CAAC,MAAc;IACjD,OAAO,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IAClC,IAAI,QAAQ,CAAC,MAAM,IAAI,sBAAsB;QAAE,OAAO,QAAQ,CAAC;IAC/D,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC,kBAAkB,CAAC;AAC1E,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAsD;IACpF,MAAM,UAAU,GAAiB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtE,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;IACjE,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,4BAA4B;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAEzD,IAAI,CAAC,GAAG;QAAE,OAAO,OAAO,CAAC;IACzB,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IAC/C,MAAM,UAAU,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,kBAAkB,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,OAAO,4BAA4B,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACpC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACzC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY;IACpC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,GAAG,CAAC,QAAQ,gBAAgB,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,GAAG,CAAC,QAAQ,cAAc,CAAC;AACzC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAqB;IAC/C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,cAAc,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAsC;IAKrE,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,0BAA0B,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,0BAA0B,CAAC,CAAC;QAChG,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC;QAED,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,UAAU,IAAI,0BAA0B,EAAE,CAAC;YAC3C,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM;QACV,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAE9C,MAAM,YAAY,GAAG,IAAqE,CAAC;IAC3F,IAAI,SAAS,IAAI,OAAO,YAAY,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3D,YAAY,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACH,WAAW;QACX,SAAS,EAAE,UAAU;QACrB,SAAS;KACZ,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC1C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzF,IAAI,OAAO,KAAK,yBAAyB,IAAI,OAAO,KAAK,sBAAsB,EAAE,CAAC;QAC9E,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAa;IACrE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,IAAsB,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjC,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAE5D,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACD,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,KAAK,EAAE,wGAAwG;SAClH,CAAC,CAAC;IACP,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4DAA4D,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,OAAO,GAAiB,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAExC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,CAAC;IACL,CAAC;IAED,IAAI,YAAgC,CAAC;IACrC,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzD,IAAI,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACnC,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACjC,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACjD,CAAC;QACL,CAAC;IACL,CAAC;IACD,IAAI,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,uBAAuB,EAAE,CAAC;QACpF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,uBAAuB,SAAS,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE;YAC9C,MAAM;YACN,OAAO;YACP,IAAI,EAAE,YAAY;YAClB,cAAc,EAAE,SAAS;YACzB,WAAW,EAAE,SAAS;SACzB,CAAC,CAAC;QACH,IAAI,OAAO,GAAG;YACV,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,KAAK;SACnB,CAAC;QACF,IAAI,CAAC;YACD,OAAO,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACL,kEAAkE;YAClE,OAAO,GAAG;gBACN,WAAW,EAAE,EAAE;gBACf,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,KAAK;aACnB,CAAC;QACN,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC;QAEnC,OAAO,GAAG,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE;gBACL,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACtB,SAAS;gBACT,OAAO,EAAE,YAAY,KAAK,SAAS;aACtC;YACD,QAAQ,EAAE;gBACN,MAAM;gBACN,OAAO,EAAE,2BAA2B,CAAC,MAAM,CAAC;gBAC5C,UAAU;gBACV,OAAO,EAAE,wBAAwB,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACnD,iGAAiG;gBACjG,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,aAAa,EAAE,OAAO,CAAC,SAAS;aACnC;SACJ,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAC1C,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAEtD,OAAO,GAAG,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE;gBACL,MAAM;gBACN,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACtB,SAAS;gBACT,OAAO,EAAE,YAAY,KAAK,SAAS;aACtC;YACD,QAAQ,EAAE;gBACN,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,IAAI;gBACb,UAAU;gBACV,KAAK,EAAE,eAAe,CAAC,OAAO;gBAC9B,SAAS,EAAE,eAAe,CAAC,IAAI;gBAC/B,OAAO,EAAE,EAAE;gBACX,SAAS,EAAE,CAAC;gBACZ,WAAW,EAAE,EAAE;gBACf,aAAa,EAAE,KAAK;aACvB;SACJ,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa;IACpE,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;IACrC,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,EAAE,IAAI,EAAE,IAAI,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAElE,IAAI,aAAkB,CAAC;IACvB,IAAI,CAAC;QACD,aAAa,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,aAAa,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,KAAK,EAAE,wGAAwG;SAClH,CAAC,CAAC;IACP,CAAC;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IACjC,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mEAAmE,EAAE,CAAC,CAAC;IAChH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC;IAED,MAAM,OAAO,GAAU,EAAE,CAAC;IAE1B,2BAA2B;IAC3B,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAE,OAAe,EAAE,EAAE;QAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAE/C,8BAA8B;QAC9B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEnC,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACjD,MAAM;gBACN,4CAA4C;gBAC5C,OAAO,EAAE;oBACL,WAAW,EAAE,OAAO;oBACpB,YAAY,EAAE,gBAAgB,QAAQ,GAAG;iBAC5C;aACJ,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAEpC,OAAO;gBACH,QAAQ;gBACR,OAAO;gBACP,MAAM,EAAE,UAAU;gBAClB,OAAO,EAAE,6BAA6B,CAAC,UAAU,CAAC,EAAE,sCAAsC;gBAC1F,QAAQ;aACX,CAAC;QACN,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,OAAO;gBACH,QAAQ;gBACR,OAAO;gBACP,KAAK,EAAE,CAAC,CAAC,OAAO;gBAChB,OAAO,EAAE,IAAI,CAAC,sEAAsE;aACvF,CAAC;QACN,CAAC;IACL,CAAC,CAAC;IAEF,YAAY;IACZ,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC;IACL,CAAC;IAED,GAAG,CAAC,IAAI,CAAC;QACL,MAAM,EAAE,UAAU,GAAG,UAAU;QAC/B,OAAO,EAAE;YACL,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;YAC9C,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM;SACjD;QACD,OAAO,EAAE,OAAO;KACnB,CAAC,CAAC;AACP,CAAC"}
|
|
@@ -0,0 +1,229 @@
|
|
|
1
|
+
import { logger } from "./logger.js";
|
|
2
|
+
import { cfg } from "./config.js";
|
|
3
|
+
import { executeToolStep, sanitizeToolParams, TOOL_ACTIONS } from "./tool-executor.js";
|
|
4
|
+
import { loadScenarioCatalog, writeScenarioCatalog } from "./persistence/scenario-catalog.js";
|
|
5
|
+
import { markPersistenceHydrated, markPersistenceWrite, registerPersistenceStore } from "./persistence/status.js";
|
|
6
|
+
const SCENARIO_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
|
|
7
|
+
const VALID_SCENARIO_ACTIONS = TOOL_ACTIONS.filter((action) => action !== "chaos.crash");
|
|
8
|
+
const MAX_SCENARIOS = 200;
|
|
9
|
+
const MAX_SCENARIO_RUNS = 1000;
|
|
10
|
+
const scenarioStore = new Map();
|
|
11
|
+
const scenarioRuns = new Map();
|
|
12
|
+
const latestRunByScenario = new Map();
|
|
13
|
+
let scenarioCatalogHydrationPromise = null;
|
|
14
|
+
let scenarioCatalogPersistQueue = Promise.resolve(true);
|
|
15
|
+
const SCENARIO_STORE_KEY = "scenarioCatalog";
|
|
16
|
+
registerPersistenceStore(SCENARIO_STORE_KEY, cfg.scenarioCatalogPath);
|
|
17
|
+
function isAllowedScenarioAction(action) {
|
|
18
|
+
return VALID_SCENARIO_ACTIONS.includes(action);
|
|
19
|
+
}
|
|
20
|
+
function normalizePersistedScenario(scenario) {
|
|
21
|
+
if (!SCENARIO_ID_PATTERN.test(scenario.id))
|
|
22
|
+
return null;
|
|
23
|
+
if (!Array.isArray(scenario.steps) || scenario.steps.length > 50)
|
|
24
|
+
return null;
|
|
25
|
+
const sanitizedSteps = [];
|
|
26
|
+
for (const step of scenario.steps) {
|
|
27
|
+
if (!isAllowedScenarioAction(step.action))
|
|
28
|
+
return null;
|
|
29
|
+
if (!step.params || typeof step.params !== "object" || Array.isArray(step.params))
|
|
30
|
+
return null;
|
|
31
|
+
if (typeof step.delayMs !== "undefined" && typeof step.delayMs !== "number")
|
|
32
|
+
return null;
|
|
33
|
+
try {
|
|
34
|
+
const action = step.action;
|
|
35
|
+
const sanitizedParams = sanitizeToolParams(action, step.params);
|
|
36
|
+
sanitizedSteps.push({
|
|
37
|
+
id: step.id,
|
|
38
|
+
action,
|
|
39
|
+
delayMs: step.delayMs,
|
|
40
|
+
params: sanitizedParams,
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
catch {
|
|
44
|
+
return null;
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
return {
|
|
48
|
+
...scenario,
|
|
49
|
+
steps: sanitizedSteps,
|
|
50
|
+
};
|
|
51
|
+
}
|
|
52
|
+
async function hydrateScenarioCatalog() {
|
|
53
|
+
const persistedCatalog = await loadScenarioCatalog(cfg.scenarioCatalogPath);
|
|
54
|
+
if (persistedCatalog.size === 0) {
|
|
55
|
+
markPersistenceHydrated(SCENARIO_STORE_KEY);
|
|
56
|
+
return;
|
|
57
|
+
}
|
|
58
|
+
let restoredCount = 0;
|
|
59
|
+
for (const scenario of persistedCatalog.values()) {
|
|
60
|
+
const normalized = normalizePersistedScenario(scenario);
|
|
61
|
+
if (!normalized)
|
|
62
|
+
continue;
|
|
63
|
+
scenarioStore.set(normalized.id, normalized);
|
|
64
|
+
restoredCount += 1;
|
|
65
|
+
}
|
|
66
|
+
logger.info({ catalogPath: cfg.scenarioCatalogPath, restoredCount }, "Scenario catalog hydrated from persistence layer");
|
|
67
|
+
markPersistenceHydrated(SCENARIO_STORE_KEY);
|
|
68
|
+
}
|
|
69
|
+
async function ensureScenarioCatalogHydrated() {
|
|
70
|
+
if (!scenarioCatalogHydrationPromise) {
|
|
71
|
+
scenarioCatalogHydrationPromise = hydrateScenarioCatalog();
|
|
72
|
+
}
|
|
73
|
+
await scenarioCatalogHydrationPromise;
|
|
74
|
+
}
|
|
75
|
+
async function persistScenarioCatalogQueued() {
|
|
76
|
+
scenarioCatalogPersistQueue = scenarioCatalogPersistQueue.then(() => writeScenarioCatalog(cfg.scenarioCatalogPath, scenarioStore.values()), () => writeScenarioCatalog(cfg.scenarioCatalogPath, scenarioStore.values()));
|
|
77
|
+
const persisted = await scenarioCatalogPersistQueue;
|
|
78
|
+
markPersistenceWrite(SCENARIO_STORE_KEY, persisted);
|
|
79
|
+
return persisted;
|
|
80
|
+
}
|
|
81
|
+
// Helper to execute a single step (detached from request lifecycle)
|
|
82
|
+
async function executeStep(step) {
|
|
83
|
+
logger.info({ step: step.id, action: step.action }, "Scenario: Executing Step");
|
|
84
|
+
// Post-action step delay is applied centrally inside executeToolStep.
|
|
85
|
+
const result = await executeToolStep(step);
|
|
86
|
+
if (!result.ok) {
|
|
87
|
+
throw new Error(result.error || result.message);
|
|
88
|
+
}
|
|
89
|
+
}
|
|
90
|
+
export async function scenarioListHandler(req, res) {
|
|
91
|
+
await ensureScenarioCatalogHydrated();
|
|
92
|
+
res.json(Array.from(scenarioStore.values()));
|
|
93
|
+
}
|
|
94
|
+
export async function scenarioSaveHandler(req, res) {
|
|
95
|
+
await ensureScenarioCatalogHydrated();
|
|
96
|
+
const scenario = req.body;
|
|
97
|
+
// VALIDATION
|
|
98
|
+
if (!scenario.name || typeof scenario.name !== 'string')
|
|
99
|
+
return res.status(400).json({ error: "Missing name" });
|
|
100
|
+
if (!Array.isArray(scenario.steps))
|
|
101
|
+
return res.status(400).json({ error: "Invalid steps array" });
|
|
102
|
+
if (scenario.steps.length > 50)
|
|
103
|
+
return res.status(400).json({ error: "Too many steps" });
|
|
104
|
+
// Validate each step
|
|
105
|
+
const sanitizedSteps = [];
|
|
106
|
+
for (const step of scenario.steps) {
|
|
107
|
+
if (!isAllowedScenarioAction(step.action))
|
|
108
|
+
return res.status(400).json({ error: `Invalid action: ${step.action}` });
|
|
109
|
+
if (typeof step.delayMs !== "undefined" && typeof step.delayMs !== "number") {
|
|
110
|
+
return res.status(400).json({ error: "Invalid delayMs" });
|
|
111
|
+
}
|
|
112
|
+
if (!step.params || typeof step.params !== "object" || Array.isArray(step.params)) {
|
|
113
|
+
return res.status(400).json({ error: `Invalid params for action: ${step.action}` });
|
|
114
|
+
}
|
|
115
|
+
try {
|
|
116
|
+
const sanitizedParams = sanitizeToolParams(step.action, step.params);
|
|
117
|
+
sanitizedSteps.push({
|
|
118
|
+
...step,
|
|
119
|
+
params: sanitizedParams,
|
|
120
|
+
});
|
|
121
|
+
}
|
|
122
|
+
catch (error) {
|
|
123
|
+
return res.status(400).json({ error: error?.message || `Invalid params for action: ${step.action}` });
|
|
124
|
+
}
|
|
125
|
+
}
|
|
126
|
+
const id = (scenario.id && typeof scenario.id === 'string') ? scenario.id : `sc-${Date.now()}`;
|
|
127
|
+
if (!SCENARIO_ID_PATTERN.test(id)) {
|
|
128
|
+
return res.status(400).json({ error: "Scenario id must match [a-zA-Z0-9_-]+" });
|
|
129
|
+
}
|
|
130
|
+
const existing = scenarioStore.get(id);
|
|
131
|
+
if (!existing && scenarioStore.size >= MAX_SCENARIOS) {
|
|
132
|
+
return res.status(429).json({ error: "Scenario store limit reached" });
|
|
133
|
+
}
|
|
134
|
+
const saved = {
|
|
135
|
+
...scenario,
|
|
136
|
+
id,
|
|
137
|
+
steps: sanitizedSteps,
|
|
138
|
+
createdAt: existing?.createdAt || new Date().toISOString()
|
|
139
|
+
};
|
|
140
|
+
scenarioStore.set(id, saved);
|
|
141
|
+
const persisted = await persistScenarioCatalogQueued();
|
|
142
|
+
if (!persisted) {
|
|
143
|
+
logger.warn({ scenarioId: id }, "Scenario saved to memory but persistence write failed");
|
|
144
|
+
}
|
|
145
|
+
res.json(saved);
|
|
146
|
+
}
|
|
147
|
+
export async function scenarioRunHandler(req, res) {
|
|
148
|
+
await ensureScenarioCatalogHydrated();
|
|
149
|
+
const id = req.params.id;
|
|
150
|
+
const scenario = scenarioStore.get(id);
|
|
151
|
+
if (!scenario)
|
|
152
|
+
return res.status(404).json({ error: "Scenario not found" });
|
|
153
|
+
const executionId = `run-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
|
|
154
|
+
const initialRun = {
|
|
155
|
+
executionId,
|
|
156
|
+
scenarioId: scenario.id,
|
|
157
|
+
scenarioName: scenario.name,
|
|
158
|
+
status: "running",
|
|
159
|
+
startedAt: new Date().toISOString(),
|
|
160
|
+
};
|
|
161
|
+
scenarioRuns.set(executionId, initialRun);
|
|
162
|
+
if (scenarioRuns.size > MAX_SCENARIO_RUNS) {
|
|
163
|
+
const firstKey = scenarioRuns.keys().next().value;
|
|
164
|
+
if (firstKey) {
|
|
165
|
+
scenarioRuns.delete(firstKey);
|
|
166
|
+
}
|
|
167
|
+
}
|
|
168
|
+
latestRunByScenario.set(scenario.id, executionId);
|
|
169
|
+
res.status(202).json({
|
|
170
|
+
status: "started",
|
|
171
|
+
executionId,
|
|
172
|
+
message: `Executing scenario: ${scenario.name}`
|
|
173
|
+
});
|
|
174
|
+
// Execute detached from request
|
|
175
|
+
const runScenario = async () => {
|
|
176
|
+
for (const step of scenario.steps) {
|
|
177
|
+
const currentRun = scenarioRuns.get(executionId);
|
|
178
|
+
if (!currentRun)
|
|
179
|
+
return;
|
|
180
|
+
scenarioRuns.set(executionId, {
|
|
181
|
+
...currentRun,
|
|
182
|
+
currentStepId: step.id,
|
|
183
|
+
});
|
|
184
|
+
await executeStep(step);
|
|
185
|
+
}
|
|
186
|
+
const finishedRun = scenarioRuns.get(executionId);
|
|
187
|
+
if (!finishedRun)
|
|
188
|
+
return;
|
|
189
|
+
scenarioRuns.set(executionId, {
|
|
190
|
+
...finishedRun,
|
|
191
|
+
status: "completed",
|
|
192
|
+
finishedAt: new Date().toISOString(),
|
|
193
|
+
});
|
|
194
|
+
logger.info({ scenario: scenario.name }, "Scenario: Completed Successfully");
|
|
195
|
+
};
|
|
196
|
+
setImmediate(() => {
|
|
197
|
+
void runScenario().catch((error) => {
|
|
198
|
+
const failedRun = scenarioRuns.get(executionId);
|
|
199
|
+
if (!failedRun)
|
|
200
|
+
return;
|
|
201
|
+
scenarioRuns.set(executionId, {
|
|
202
|
+
...failedRun,
|
|
203
|
+
status: "failed",
|
|
204
|
+
finishedAt: new Date().toISOString(),
|
|
205
|
+
error: error.message,
|
|
206
|
+
});
|
|
207
|
+
logger.error({ scenario: scenario.name, error: error.message }, "Scenario: Failed");
|
|
208
|
+
});
|
|
209
|
+
});
|
|
210
|
+
}
|
|
211
|
+
export async function scenarioRunStatusHandler(req, res) {
|
|
212
|
+
await ensureScenarioCatalogHydrated();
|
|
213
|
+
const scenarioId = req.params.id;
|
|
214
|
+
const scenario = scenarioStore.get(scenarioId);
|
|
215
|
+
if (!scenario)
|
|
216
|
+
return res.status(404).json({ error: "Scenario not found" });
|
|
217
|
+
const executionId = typeof req.query.executionId === "string"
|
|
218
|
+
? req.query.executionId
|
|
219
|
+
: latestRunByScenario.get(scenarioId);
|
|
220
|
+
if (!executionId) {
|
|
221
|
+
return res.status(404).json({ error: "No execution found for scenario" });
|
|
222
|
+
}
|
|
223
|
+
const run = scenarioRuns.get(executionId);
|
|
224
|
+
if (!run) {
|
|
225
|
+
return res.status(404).json({ error: "Execution not found" });
|
|
226
|
+
}
|
|
227
|
+
res.json(run);
|
|
228
|
+
}
|
|
229
|
+
//# sourceMappingURL=scenarios.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scenarios.js","sourceRoot":"","sources":["../src/scenarios.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,YAAY,EAAc,MAAM,oBAAoB,CAAC;AACnG,OAAO,EAAE,mBAAmB,EAAqB,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACjH,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AA4BlH,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAE/C,MAAM,sBAAsB,GAA4B,YAAY,CAAC,MAAM,CACvE,CAAC,MAAM,EAAmC,EAAE,CAAC,MAAM,KAAK,aAAa,CACxE,CAAC;AACF,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;AAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA6B,CAAC;AAC1D,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;AACtD,IAAI,+BAA+B,GAAyB,IAAI,CAAC;AACjE,IAAI,2BAA2B,GAAqB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC1E,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAE7C,wBAAwB,CAAC,kBAAkB,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAEtE,SAAS,uBAAuB,CAAC,MAAc;IAC3C,OAAO,sBAAsB,CAAC,QAAQ,CAAC,MAA+B,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,0BAA0B,CAAC,QAA2B;IAC3D,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAE9E,MAAM,cAAc,GAAmB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACzF,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAiC,CAAC,CAAC;YAC3F,cAAc,CAAC,IAAI,CAAC;gBAChB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,eAAe;aAC1B,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO;QACH,GAAG,QAAQ;QACX,KAAK,EAAE,cAAc;KACxB,CAAC;AACN,CAAC;AAED,KAAK,UAAU,sBAAsB;IACjC,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC5E,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC9B,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;QAC5C,OAAO;IACX,CAAC;IAED,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,aAAa,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CACP,EAAE,WAAW,EAAE,GAAG,CAAC,mBAAmB,EAAE,aAAa,EAAE,EACvD,kDAAkD,CACrD,CAAC;IACF,uBAAuB,CAAC,kBAAkB,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,6BAA6B;IACxC,IAAI,CAAC,+BAA+B,EAAE,CAAC;QACnC,+BAA+B,GAAG,sBAAsB,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,+BAA+B,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,4BAA4B;IACvC,2BAA2B,GAAG,2BAA2B,CAAC,IAAI,CAC1D,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,EAC3E,GAAG,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,mBAAmB,EAAE,aAAa,CAAC,MAAM,EAAE,CAAC,CAC9E,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC;IACpD,oBAAoB,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC;IACpD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,oEAAoE;AACpE,KAAK,UAAU,WAAW,CAAC,IAAkB;IACzC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IAChF,sEAAsE;IACtE,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,GAAa;IACjE,MAAM,6BAA6B,EAAE,CAAC;IACtC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAY,EAAE,GAAa;IACjE,MAAM,6BAA6B,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAgB,CAAC;IAEtC,aAAa;IACb,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAEzF,qBAAqB;IACrB,MAAM,cAAc,GAAmB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpH,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC;YACD,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAiC,CAAC,CAAC;YAChG,cAAc,CAAC,IAAI,CAAC;gBAChB,GAAG,IAAI;gBACP,MAAM,EAAE,eAAe;aAC1B,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YAClB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,8BAA8B,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/F,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAChC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,KAAK,GAAa;QACpB,GAAG,QAAQ;QACX,EAAE;QACF,KAAK,EAAE,cAAc;QACrB,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7D,CAAC;IACF,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAE7B,MAAM,SAAS,GAAG,MAAM,4BAA4B,EAAE,CAAC;IACvD,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAa;IAChE,MAAM,6BAA6B,EAAE,CAAC;IACtC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEvC,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,UAAU,GAAsB;QAClC,WAAW;QACX,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,YAAY,EAAE,QAAQ,CAAC,IAAI;QAC3B,MAAM,EAAE,SAAS;QACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,IAAI,GAAG,iBAAiB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAClD,IAAI,QAAQ,EAAE,CAAC;YACX,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACL,CAAC;IACD,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAElD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACjB,MAAM,EAAE,SAAS;QACjB,WAAW;QACX,OAAO,EAAE,uBAAuB,QAAQ,CAAC,IAAI,EAAE;KAClD,CAAC,CAAC;IAEH,gCAAgC;IAChC,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC3B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACjD,IAAI,CAAC,UAAU;gBAAE,OAAO;YACxB,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC1B,GAAG,UAAU;gBACb,aAAa,EAAE,IAAI,CAAC,EAAE;aACzB,CAAC,CAAC;YACH,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE;YAC1B,GAAG,WAAW;YACd,MAAM,EAAE,WAAW;YACnB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,kCAAkC,CAAC,CAAC;IACjF,CAAC,CAAC;IAEF,YAAY,CAAC,GAAG,EAAE;QACd,KAAK,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,KAAU,EAAE,EAAE;YACpC,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChD,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE;gBAC1B,GAAG,SAAS;gBACZ,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACpC,KAAK,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,GAAY,EAAE,GAAa;IACtE,MAAM,6BAA6B,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAE5E,MAAM,WAAW,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,QAAQ;QACzD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW;QACvB,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import vm from "vm";
|
|
2
|
+
export function scriptHandler(req, res) {
|
|
3
|
+
const code = req.body.code || req.query.code;
|
|
4
|
+
if (!code || typeof code !== 'string') {
|
|
5
|
+
return res.status(400).json({ error: "Missing 'code' parameter (string)" });
|
|
6
|
+
}
|
|
7
|
+
const sandbox = {
|
|
8
|
+
console: { log: (...args) => logs.push(args) },
|
|
9
|
+
input: req.body.input || {},
|
|
10
|
+
result: null
|
|
11
|
+
};
|
|
12
|
+
const logs = [];
|
|
13
|
+
try {
|
|
14
|
+
vm.createContext(sandbox);
|
|
15
|
+
// Timeout 100ms to prevent infinite loops
|
|
16
|
+
vm.runInContext(code, sandbox, { timeout: 100 });
|
|
17
|
+
res.json({
|
|
18
|
+
status: "success",
|
|
19
|
+
result: sandbox.result,
|
|
20
|
+
logs
|
|
21
|
+
});
|
|
22
|
+
}
|
|
23
|
+
catch (e) {
|
|
24
|
+
res.status(400).json({
|
|
25
|
+
status: "error",
|
|
26
|
+
error: e.message
|
|
27
|
+
});
|
|
28
|
+
}
|
|
29
|
+
}
|
|
30
|
+
//# sourceMappingURL=scripting.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scripting.js","sourceRoot":"","sources":["../src/scripting.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,GAAa;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;IAE7C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,OAAO,GAAG;QACZ,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrD,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;QAC3B,MAAM,EAAE,IAAI;KACf,CAAC;IAEF,MAAM,IAAI,GAAU,EAAE,CAAC;IAEvB,IAAI,CAAC;QACD,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1B,0CAA0C;QAC1C,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAEjD,GAAG,CAAC,IAAI,CAAC;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI;SACP,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACjB,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAC;IACP,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import { monitorEventLoopDelay } from "perf_hooks";
|
|
2
|
+
import { logger } from "./logger.js";
|
|
3
|
+
const histogram = monitorEventLoopDelay();
|
|
4
|
+
histogram.enable();
|
|
5
|
+
let currentLag = 0;
|
|
6
|
+
const LAG_THRESHOLD_MS = 50; // Threshold for "Heavy" traffic shedding
|
|
7
|
+
const CRITICAL_LAG_MS = 200; // Threshold for critical health
|
|
8
|
+
// Update lag every second
|
|
9
|
+
setInterval(() => {
|
|
10
|
+
currentLag = histogram.mean / 1e6; // Convert ns to ms
|
|
11
|
+
histogram.reset();
|
|
12
|
+
}, 1000);
|
|
13
|
+
export function selfHealingMiddleware(req, res, next) {
|
|
14
|
+
// 1. Check for Critical Health
|
|
15
|
+
if (currentLag > CRITICAL_LAG_MS) {
|
|
16
|
+
logger.error({ lag: currentLag }, "CRITICAL HEALTH: Shedding all traffic");
|
|
17
|
+
res.setHeader("Retry-After", "5");
|
|
18
|
+
return res.status(503).json({
|
|
19
|
+
error: "Service Overloaded",
|
|
20
|
+
message: "Autonomous self-healing active. Load shedding in progress.",
|
|
21
|
+
current_lag_ms: Number(currentLag.toFixed(2))
|
|
22
|
+
});
|
|
23
|
+
}
|
|
24
|
+
// 2. Check for Heavy Traffic (QoS)
|
|
25
|
+
const isHeavyRoute = req.path.startsWith("/generate") || req.path.startsWith("/chaos");
|
|
26
|
+
if (currentLag > LAG_THRESHOLD_MS && isHeavyRoute) {
|
|
27
|
+
logger.warn({ lag: currentLag, path: req.path }, "HIGH LOAD: Shedding heavy traffic");
|
|
28
|
+
return res.status(429).json({
|
|
29
|
+
error: "Too Busy",
|
|
30
|
+
message: "QoS active. Heavy features temporarily disabled due to load.",
|
|
31
|
+
current_lag_ms: Number(currentLag.toFixed(2))
|
|
32
|
+
});
|
|
33
|
+
}
|
|
34
|
+
next();
|
|
35
|
+
}
|
|
36
|
+
export function getHealthStatus() {
|
|
37
|
+
return {
|
|
38
|
+
status: currentLag > CRITICAL_LAG_MS ? "critical" : (currentLag > LAG_THRESHOLD_MS ? "degraded" : "healthy"),
|
|
39
|
+
lag_ms: Number(currentLag.toFixed(2))
|
|
40
|
+
};
|
|
41
|
+
}
|
|
42
|
+
//# sourceMappingURL=self-healing.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"self-healing.js","sourceRoot":"","sources":["../src/self-healing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;AAC1C,SAAS,CAAC,MAAM,EAAE,CAAC;AAEnB,IAAI,UAAU,GAAG,CAAC,CAAC;AACnB,MAAM,gBAAgB,GAAG,EAAE,CAAC,CAAC,yCAAyC;AACtE,MAAM,eAAe,GAAG,GAAG,CAAC,CAAC,gCAAgC;AAE7D,0BAA0B;AAC1B,WAAW,CAAC,GAAG,EAAE;IACb,UAAU,GAAG,SAAS,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,mBAAmB;IACtD,SAAS,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC,EAAE,IAAI,CAAC,CAAC;AAET,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACjF,+BAA+B;IAC/B,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,uCAAuC,CAAC,CAAC;QAC3E,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,4DAA4D;YACrE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAChD,CAAC,CAAC;IACP,CAAC;IAED,mCAAmC;IACnC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvF,IAAI,UAAU,GAAG,gBAAgB,IAAI,YAAY,EAAE,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;QACtF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACxB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE,8DAA8D;YACvE,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SAChD,CAAC,CAAC;IACP,CAAC;IAED,IAAI,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,OAAO;QACH,MAAM,EAAE,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5G,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;KACxC,CAAC;AACN,CAAC"}
|
package/dist/sentinel.js
ADDED
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
import { logger } from "./logger.js";
|
|
2
|
+
const rules = [];
|
|
3
|
+
export function activeShieldMiddleware(req, res, next) {
|
|
4
|
+
const rawUrl = req.url;
|
|
5
|
+
// req.body is already parsed by express.json() if placed correctly
|
|
6
|
+
const body = JSON.stringify(req.body);
|
|
7
|
+
for (const rule of rules) {
|
|
8
|
+
if (rule.pattern.test(rawUrl) || rule.pattern.test(body)) {
|
|
9
|
+
logger.warn({ ruleId: rule.id, action: rule.action, ip: req.ip }, "Active Shield Triggered");
|
|
10
|
+
if (rule.action === "block") {
|
|
11
|
+
return res.status(403).json({ error: "Request blocked by Active Shield", rule_id: rule.id });
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
}
|
|
15
|
+
next();
|
|
16
|
+
}
|
|
17
|
+
export function sentinelHandler(req, res) {
|
|
18
|
+
if (req.method === "POST") {
|
|
19
|
+
const { pattern, action } = req.body;
|
|
20
|
+
if (!pattern)
|
|
21
|
+
return res.status(400).json({ error: "Missing pattern" });
|
|
22
|
+
try {
|
|
23
|
+
const regex = new RegExp(pattern); // Validate regex
|
|
24
|
+
const rule = {
|
|
25
|
+
id: `rule-${Date.now()}`,
|
|
26
|
+
pattern: regex,
|
|
27
|
+
action: action || "block",
|
|
28
|
+
source: "manual"
|
|
29
|
+
};
|
|
30
|
+
rules.push(rule);
|
|
31
|
+
return res.json({ status: "added", rule: { ...rule, pattern: rule.pattern.toString() } });
|
|
32
|
+
}
|
|
33
|
+
catch (e) {
|
|
34
|
+
return res.status(400).json({ error: "Invalid Regex", details: e.message });
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
else if (req.method === "GET") {
|
|
38
|
+
return res.json(rules.map(r => ({ ...r, pattern: r.pattern.toString() })));
|
|
39
|
+
}
|
|
40
|
+
else if (req.method === "DELETE") {
|
|
41
|
+
const id = req.query.id;
|
|
42
|
+
const idx = rules.findIndex(r => r.id === id);
|
|
43
|
+
if (idx !== -1) {
|
|
44
|
+
rules.splice(idx, 1);
|
|
45
|
+
return res.json({ status: "deleted", id });
|
|
46
|
+
}
|
|
47
|
+
return res.status(404).json({ error: "Rule not found" });
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
//# sourceMappingURL=sentinel.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../src/sentinel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AASrC,MAAM,KAAK,GAAW,EAAE,CAAC;AAEzB,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAClF,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC;IACvB,mEAAmE;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAE7F,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1B,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACjG,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,EAAE,CAAC;AACX,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY,EAAE,GAAa;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACrC,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAExE,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB;YACpD,MAAM,IAAI,GAAS;gBACf,EAAE,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;gBACxB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,MAAM,IAAI,OAAO;gBACzB,MAAM,EAAE,QAAQ;aACnB,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC;IACL,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;SAAM,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,EAAY,CAAC;QAClC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC7D,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,47 @@
|
|
|
1
|
+
import https from "https";
|
|
2
|
+
import express from "express";
|
|
3
|
+
import fs from "fs";
|
|
4
|
+
import * as jose from "jose";
|
|
5
|
+
import { logger } from "./logger.js";
|
|
6
|
+
import { echoHandler } from "./echoHandler.js";
|
|
7
|
+
import { cfg } from "./config.js";
|
|
8
|
+
// Generate a fresh, untrusted self-signed cert on startup
|
|
9
|
+
async function generateBadCert() {
|
|
10
|
+
const { publicKey, privateKey } = await jose.generateKeyPair("RS256");
|
|
11
|
+
const pkcs8Pem = await jose.exportPKCS8(privateKey);
|
|
12
|
+
const spkiPem = await jose.exportSPKI(publicKey);
|
|
13
|
+
// Note: real self-signed cert generation in Node usually requires 'forge' or 'openssl' CLI.
|
|
14
|
+
// 'jose' creates keys but not X.509 certificates directly easily without other deps.
|
|
15
|
+
// To keep deps low, we'll use a "fake" approach or rely on the existing certs
|
|
16
|
+
// but serve them on a different port where they are NOT expected (Wrong CN).
|
|
17
|
+
// If the main cert is for "localhost", serving it here is fine, it's still "Bad"
|
|
18
|
+
// if the client expects a valid root CA.
|
|
19
|
+
// BUT to be "extra bad", let's just reuse the main certs.
|
|
20
|
+
// Most clients will fail anyway because it's self-signed.
|
|
21
|
+
// For a "Wrong CN" test, we'd need a cert with CN=example.com.
|
|
22
|
+
// Since we don't have 'node-forge', we will skip explicit generation and
|
|
23
|
+
// reuse the existing config certs but serve on a port meant for "bad" traffic.
|
|
24
|
+
return { key: cfg.tlsKeyPath, cert: cfg.tlsCertPath };
|
|
25
|
+
}
|
|
26
|
+
// Actually, to make it distinct, let's just start another HTTPS server.
|
|
27
|
+
// The "Badness" usually comes from the client not trusting the CA.
|
|
28
|
+
export function startBadSslServer() {
|
|
29
|
+
// If certs don't exist (e.g. running without make certs), this might fail.
|
|
30
|
+
// We assume they exist as per main server.
|
|
31
|
+
const app = express();
|
|
32
|
+
app.get("*", echoHandler);
|
|
33
|
+
try {
|
|
34
|
+
const options = {
|
|
35
|
+
key: fs.readFileSync(cfg.tlsKeyPath),
|
|
36
|
+
cert: fs.readFileSync(cfg.tlsCertPath)
|
|
37
|
+
};
|
|
38
|
+
const port = cfg.portBadSsl;
|
|
39
|
+
https.createServer(options, app).listen(port, cfg.host, () => {
|
|
40
|
+
logger.info({ port }, "Bad SSL Server listening (Self-signed/Untrusted)");
|
|
41
|
+
});
|
|
42
|
+
}
|
|
43
|
+
catch (e) {
|
|
44
|
+
logger.warn({ err: e.message }, "Skipping Bad SSL Server (Certs missing?)");
|
|
45
|
+
}
|
|
46
|
+
}
|
|
47
|
+
//# sourceMappingURL=server-bad-ssl.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-bad-ssl.js","sourceRoot":"","sources":["../src/server-bad-ssl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,0DAA0D;AAC1D,KAAK,UAAU,eAAe;IAC1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;IAEjD,4FAA4F;IAC5F,qFAAqF;IACrF,+EAA+E;IAC/E,6EAA6E;IAC7E,kFAAkF;IAClF,0CAA0C;IAC1C,2DAA2D;IAC3D,0DAA0D;IAE1D,+DAA+D;IAC/D,0EAA0E;IAC1E,+EAA+E;IAC/E,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;AAC1D,CAAC;AAED,wEAAwE;AACxE,mEAAmE;AACnE,MAAM,UAAU,iBAAiB;IAC7B,2EAA2E;IAC3E,2CAA2C;IAE3C,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAE1B,IAAI,CAAC;QACD,MAAM,OAAO,GAAG;YACZ,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YACpC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;SACzC,CAAC;QAEF,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC;QAC5B,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE;YACzD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,kDAAkD,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAC;IAChF,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,66 @@
|
|
|
1
|
+
import * as grpc from "@grpc/grpc-js";
|
|
2
|
+
import * as protoLoader from "@grpc/proto-loader";
|
|
3
|
+
import path from "path";
|
|
4
|
+
import { fileURLToPath } from "url";
|
|
5
|
+
import { logger } from "./logger.js";
|
|
6
|
+
import { cfg } from "./config.js";
|
|
7
|
+
const __filename = fileURLToPath(import.meta.url);
|
|
8
|
+
const __dirname = path.dirname(__filename);
|
|
9
|
+
const PROTO_PATH = path.join(__dirname, "../proto/echo.proto");
|
|
10
|
+
const packageDefinition = protoLoader.loadSync(PROTO_PATH, {
|
|
11
|
+
keepCase: true,
|
|
12
|
+
longs: String,
|
|
13
|
+
enums: String,
|
|
14
|
+
defaults: true,
|
|
15
|
+
oneofs: true,
|
|
16
|
+
});
|
|
17
|
+
const echoProto = grpc.loadPackageDefinition(packageDefinition).echo;
|
|
18
|
+
function unaryEcho(call, callback) {
|
|
19
|
+
logger.info({ method: "UnaryEcho", msg: call.request.message }, "gRPC Request");
|
|
20
|
+
callback(null, { message: call.request.message, timestamp: new Date().toISOString() });
|
|
21
|
+
}
|
|
22
|
+
function serverStreamingEcho(call) {
|
|
23
|
+
logger.info({ method: "ServerStreamingEcho", msg: call.request.message }, "gRPC Request");
|
|
24
|
+
for (let i = 0; i < 5; i++) {
|
|
25
|
+
call.write({ message: `${call.request.message} [${i}]`, timestamp: new Date().toISOString() });
|
|
26
|
+
}
|
|
27
|
+
call.end();
|
|
28
|
+
}
|
|
29
|
+
function clientStreamingEcho(call, callback) {
|
|
30
|
+
let lastMessage = "";
|
|
31
|
+
call.on("data", (request) => {
|
|
32
|
+
logger.info({ method: "ClientStreamingEcho", msg: request.message }, "gRPC Stream Data");
|
|
33
|
+
lastMessage = request.message;
|
|
34
|
+
});
|
|
35
|
+
call.on("end", () => {
|
|
36
|
+
callback(null, { message: `Last: ${lastMessage}`, timestamp: new Date().toISOString() });
|
|
37
|
+
});
|
|
38
|
+
}
|
|
39
|
+
function bidirectionalStreamingEcho(call) {
|
|
40
|
+
call.on("data", (request) => {
|
|
41
|
+
logger.info({ method: "BidirectionalStreamingEcho", msg: request.message }, "gRPC Stream Data");
|
|
42
|
+
call.write({ message: `Echo: ${request.message}`, timestamp: new Date().toISOString() });
|
|
43
|
+
});
|
|
44
|
+
call.on("end", () => {
|
|
45
|
+
call.end();
|
|
46
|
+
});
|
|
47
|
+
}
|
|
48
|
+
export function startGrpcServer() {
|
|
49
|
+
const server = new grpc.Server();
|
|
50
|
+
server.addService(echoProto.EchoService.service, {
|
|
51
|
+
UnaryEcho: unaryEcho,
|
|
52
|
+
ServerStreamingEcho: serverStreamingEcho,
|
|
53
|
+
ClientStreamingEcho: clientStreamingEcho,
|
|
54
|
+
BidirectionalStreamingEcho: bidirectionalStreamingEcho,
|
|
55
|
+
});
|
|
56
|
+
const bindAddr = `${cfg.host}:${cfg.portGrpc}`;
|
|
57
|
+
server.bindAsync(bindAddr, grpc.ServerCredentials.createInsecure(), (err, port) => {
|
|
58
|
+
if (err) {
|
|
59
|
+
logger.error({ err }, "Failed to bind gRPC server");
|
|
60
|
+
return;
|
|
61
|
+
}
|
|
62
|
+
logger.info({ port }, "gRPC server listening");
|
|
63
|
+
// server.start(); // Not needed in newer grpc-js versions, it starts automatically or lacks this method
|
|
64
|
+
});
|
|
65
|
+
}
|
|
66
|
+
//# sourceMappingURL=server-grpc.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-grpc.js","sourceRoot":"","sources":["../src/server-grpc.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,WAAW,MAAM,oBAAoB,CAAC;AAClD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAElC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAE3C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;AAE/D,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE;IACvD,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,MAAM;IACb,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;CACf,CAAC,CAAC;AAEH,MAAM,SAAS,GAAG,IAAI,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC,IAAW,CAAC;AAE5E,SAAS,SAAS,CAAC,IAAS,EAAE,QAAa;IACvC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAChF,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAS;IAClC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IAC1F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAS,EAAE,QAAa;IACjD,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,OAAY,EAAE,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACzF,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAS;IACzC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,OAAY,EAAE,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,4BAA4B,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAChG,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QAChB,IAAI,CAAC,GAAG,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;IACjC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,EAAE;QAC7C,SAAS,EAAE,SAAS;QACpB,mBAAmB,EAAE,mBAAmB;QACxC,mBAAmB,EAAE,mBAAmB;QACxC,0BAA0B,EAAE,0BAA0B;KACzD,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC/C,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9E,IAAI,GAAG,EAAE,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC;YACpD,OAAO;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC/C,wGAAwG;IAC5G,CAAC,CAAC,CAAC;AACP,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-http1.js","sourceRoot":"","sources":["../src/server-http1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,UAAU,iBAAiB;IAC7B,OAAO,SAAS,EAAE,CAAC;AACvB,CAAC"}
|
|
@@ -0,0 +1,27 @@
|
|
|
1
|
+
import fs from "fs";
|
|
2
|
+
import http2 from "http2";
|
|
3
|
+
import { cfg } from "./config.js";
|
|
4
|
+
import { logger } from "./logger.js";
|
|
5
|
+
import { createApp } from "./app.js";
|
|
6
|
+
export function createHttp2Server() {
|
|
7
|
+
const app = createApp();
|
|
8
|
+
const server = http2.createSecureServer({
|
|
9
|
+
key: fs.readFileSync(cfg.tlsKeyPath),
|
|
10
|
+
cert: fs.readFileSync(cfg.tlsCertPath),
|
|
11
|
+
allowHTTP1: true,
|
|
12
|
+
requestCert: true,
|
|
13
|
+
rejectUnauthorized: false
|
|
14
|
+
}, app);
|
|
15
|
+
server.on("session", (session) => {
|
|
16
|
+
logger.debug({ type: "http2-session", alpnProtocol: session.alpnProtocol }, "HTTP/2 session started");
|
|
17
|
+
});
|
|
18
|
+
return server;
|
|
19
|
+
}
|
|
20
|
+
export function createH2CServerIfEnabled() {
|
|
21
|
+
if (!cfg.enableH2C)
|
|
22
|
+
return null;
|
|
23
|
+
const app = createApp();
|
|
24
|
+
const server = http2.createServer({}, app);
|
|
25
|
+
return server;
|
|
26
|
+
}
|
|
27
|
+
//# sourceMappingURL=server-http2.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"server-http2.js","sourceRoot":"","sources":["../src/server-http2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAErC,MAAM,UAAU,iBAAiB;IAC7B,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IAExB,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CACnC;QACI,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;QACpC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;QACtC,UAAU,EAAE,IAAI;QAChB,WAAW,EAAE,IAAI;QACjB,kBAAkB,EAAE,KAAK;KAC5B,EACD,GAAU,CACb,CAAC;IAEF,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,YAAY,EAAG,OAAe,CAAC,YAAY,EAAE,EAAE,wBAAwB,CAAC,CAAC;IACnH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACpC,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAEhC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,GAAU,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC;AAClB,CAAC"}
|
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
import net from "net";
|
|
2
|
+
import { logger } from "./logger.js";
|
|
3
|
+
import { cfg } from "./config.js";
|
|
4
|
+
const EICAR_SIG = "X5O!P%@AP[4\\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*";
|
|
5
|
+
export function startIcapServer(options = {}) {
|
|
6
|
+
const port = options.port ?? cfg.portIcap;
|
|
7
|
+
const host = options.host ?? cfg.host;
|
|
8
|
+
const server = net.createServer((socket) => {
|
|
9
|
+
logger.info("ICAP connection established");
|
|
10
|
+
socket.on("data", (data) => {
|
|
11
|
+
const raw = data.toString();
|
|
12
|
+
// Simple parsing to detect EICAR in body (very naive ICAP implementation)
|
|
13
|
+
// Real ICAP is complex, this is a mock to test connectivity and basic RESPMOD
|
|
14
|
+
if (raw.includes("OPTIONS")) {
|
|
15
|
+
// Return capabilities
|
|
16
|
+
const response = "ICAP/1.0 200 OK\r\n" +
|
|
17
|
+
"Methods: RESPMOD, REQMOD\r\n" +
|
|
18
|
+
"Service: Apparatus-ICAP/1.0\r\n" +
|
|
19
|
+
"ISTag: \"12345\"\r\n" +
|
|
20
|
+
"\r\n";
|
|
21
|
+
socket.write(response);
|
|
22
|
+
}
|
|
23
|
+
else if (raw.includes(EICAR_SIG)) {
|
|
24
|
+
// BLOCK IT
|
|
25
|
+
const response = "ICAP/1.0 200 OK\r\n" +
|
|
26
|
+
"ISTag: \"12345\"\r\n" +
|
|
27
|
+
"X-Infection-Found: Type=Virus; Resolution=Block; Threat=EICAR-Test-File\r\n" +
|
|
28
|
+
"\r\n"; // In real ICAP, we'd modify the body to show a block page
|
|
29
|
+
socket.write(response);
|
|
30
|
+
logger.warn("ICAP: Blocked EICAR signature");
|
|
31
|
+
}
|
|
32
|
+
else {
|
|
33
|
+
// ALLOW (204 No Content means "Not Modified")
|
|
34
|
+
const response = "ICAP/1.0 204 No Content\r\n" +
|
|
35
|
+
"ISTag: \"12345\"\r\n" +
|
|
36
|
+
"\r\n";
|
|
37
|
+
socket.write(response);
|
|
38
|
+
}
|
|
39
|
+
});
|
|
40
|
+
});
|
|
41
|
+
server.listen(port, host, () => {
|
|
42
|
+
logger.info({ port }, "ICAP Server listening");
|
|
43
|
+
});
|
|
44
|
+
return server;
|
|
45
|
+
}
|
|
46
|
+
//# sourceMappingURL=server-icap.js.map
|